This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: j2yXsrgV5cl2/axIbX+CNQ8H3EINwqQe+Pt9tSeniIg= Subject key identifier: 2D:05:66:3B:D8:A9:16:26:47:C5:5F:A4:AB:6A:5A:56:5C:9A:D3:9B Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 04E3F2394B66D3D9A89BB71FB33174847A50F112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 01D2 Signing time: Wed 03 Dec 2025 03:21:30 +0000 Manifest this update: Wed 03 Dec 2025 03:16:30 +0000 Manifest next update: Sat 06 Dec 2025 08:20:30 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: ezzFeBhaAvNsKhxbFuThV49gvTqwygGDYXBHtWaw660=) 2: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: 6x7zIHybyxa9ihDUv80UZCjCRg6dwvP4iqipHvrYfzo=) 3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: NI+iV212mIRfD7qYmt5q7rBxlWutxZm2u6jypzvhX2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e3:f2:39:4b:66:d3:d9:a8:9b:b7:1f:b3:31:74:84:7a:50:f1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Dec 3 03:16:30 2025 GMT Not After : Dec 6 08:20:30 2025 GMT Subject: CN=2D05663BD8A9162647C55FA4AB6A5A565C9AD39B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:01:9e:08:3a:cd:78:d2:e9:f9:a1:30:85: 48:bd:8b:9a:7d:4c:a2:e6:81:a1:4c:39:2a:44:34: ff:f0:c5:a1:3a:8b:eb:c7:eb:f9:76:67:0c:4a:2e: e3:85:10:c8:c9:06:90:59:f3:7e:7c:bb:d5:28:dd: 08:7f:9e:86:31:72:eb:91:ba:f4:e9:8b:1c:10:9d: f0:3c:d0:5c:35:15:6c:55:0e:22:37:1c:a9:1f:bd: 1a:75:a9:3d:7d:4c:ea:a1:a8:7f:3e:28:de:af:05: f8:52:ea:a2:c7:54:28:87:03:fe:cf:37:f0:4c:f5: e0:8f:bb:f7:cd:df:9e:3a:15:09:82:0e:38:a6:64: 1d:ea:94:22:e7:26:3b:60:e9:c5:1d:4a:47:86:c3: a2:10:34:2f:f1:c1:c0:c1:bd:1a:25:82:4b:44:1d: 01:91:96:97:7c:bd:2a:90:cb:f7:23:46:b4:d2:b1: 2d:7d:12:37:4a:27:1a:e0:3d:3f:1f:63:cd:b6:d5: 7a:2f:52:1e:1d:60:49:15:95:b7:a1:10:f0:ae:57: 6f:96:04:a1:c0:cb:f0:04:26:11:e0:18:dc:3a:93: d5:b1:d2:97:53:64:86:f3:4a:e1:c2:dc:c8:f9:05: 49:a6:43:39:d0:ba:f6:1b:85:d4:3e:13:05:ce:0e: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:05:66:3B:D8:A9:16:26:47:C5:5F:A4:AB:6A:5A:56:5C:9A:D3:9B X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:43:93:68:f4:36:8b:4b:e4:f3:1e:c4:92:a0:99:ad:9b: cf:1b:57:d3:aa:05:4b:48:e9:30:0a:8e:6d:35:92:19:2d:75: da:a6:69:60:68:78:a6:d9:f7:ba:e5:2b:d4:f8:2f:39:d6:04: b7:a5:2c:7e:89:25:60:da:37:fc:12:ff:67:5e:36:10:bd:71: ab:c0:b3:85:ab:3d:89:d8:2f:cc:e5:d6:6f:09:1f:9d:1f:55: 99:0f:6f:75:87:d8:2c:9d:72:be:f4:3f:10:00:16:de:d3:da: 4c:f9:ed:18:21:89:39:b7:30:3a:65:80:95:0b:46:39:47:06: a0:79:e3:97:13:9d:df:ec:35:88:62:38:66:dc:b6:12:34:b3: 36:67:a0:b9:af:6f:d1:1c:03:aa:b1:9f:78:50:a4:45:94:b5: 29:9c:90:75:f9:82:c0:1d:3d:60:69:22:44:85:a7:8d:f3:b6: c5:a9:d9:6b:53:c9:33:e4:69:0e:2b:bc:7b:35:2d:64:27:e5: 7e:2e:ed:73:2f:95:03:80:67:41:63:1f:00:8f:50:80:e7:b1: e0:42:15:46:8e:fd:1f:ad:cc:27:4b:87:18:54:f2:4b:bc:b8: d3:1e:17:2a:4d:94:72:ba:fe:20:96:52:ad:d9:ec:2e:4f:81: 69:f9:60:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOPyOUtm09mom7cfszF0hHpQ8RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTEyMDMwMzE2MzBaFw0yNTEyMDYwODIwMzBaMDMxMTAvBgNV BAMTKDJEMDU2NjNCRDhBOTE2MjY0N0M1NUZBNEFCNkE1QTU2NUM5QUQzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNgGeCDrNeNLp+aEwhUi9i5p9 TKLmgaFMOSpENP/wxaE6i+vH6/l2ZwxKLuOFEMjJBpBZ8358u9Uo3Qh/noYxcuuR uvTpixwQnfA80Fw1FWxVDiI3HKkfvRp1qT19TOqhqH8+KN6vBfhS6qLHVCiHA/7P N/BM9eCPu/fN3546FQmCDjimZB3qlCLnJjtg6cUdSkeGw6IQNC/xwcDBvRolgktE HQGRlpd8vSqQy/cjRrTSsS19EjdKJxrgPT8fY8221XovUh4dYEkVlbehEPCuV2+W BKHAy/AEJhHgGNw6k9Wx0pdTZIbzSuHC3Mj5BUmmQznQuvYbhdQ+EwXODmPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQVmO9ipFiZHxV+kq2paVlya05swHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVtQ5No9DaLS+TzHsSSoJmtm88bV9OqBUtI 6TAKjm01khktddqmaWBoeKbZ97rlK9T4LznWBLelLH6JJWDaN/wS/2deNhC9cavA s4WrPYnYL8zl1m8JH50fVZkPb3WH2Cydcr70PxAAFt7T2kz57RghiTm3MDplgJUL RjlHBqB545cTnd/sNYhiOGbcthI0szZnoLmvb9EcA6qxn3hQpEWUtSmckHX5gsAd PWBpIkSFp43ztsWp2WtTyTPkaQ4rvHs1LWQn5X4u7XMvlQOAZ0FjHwCPUIDnseBC FUaO/R+tzCdLhxhU8ku8uNMeFypNlHK6/iCWUq3Z7C5PgWn5YFA= -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:04 2025 by rpki-client