This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: ogX2Z1GPPA/ZnjpYS1DtUnhXvva6Ons0bo5EYdK0XQk= Subject key identifier: 9F:D6:07:29:98:E0:1D:B7:11:C2:01:79:45:5C:A3:E5:4D:C4:28:86 Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 30A4BBE0419E319A56380666314413A50137A3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 046F Signing time: Wed 03 Dec 2025 12:41:23 +0000 Manifest this update: Wed 03 Dec 2025 12:36:23 +0000 Manifest next update: Sat 06 Dec 2025 21:39:23 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: U9pH8jpRIf6Zoj5U8E4dc/ah6YZI2l+te767JRh9jz8=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a4:bb:e0:41:9e:31:9a:56:38:06:66:31:44:13:a5:01:37:a3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Dec 3 12:36:23 2025 GMT Not After : Dec 6 21:39:23 2025 GMT Subject: CN=9FD6072998E01DB711C20179455CA3E54DC42886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:9f:b3:c9:ef:5f:03:82:aa:88:1a:53:3c: e8:9a:4f:57:e2:03:3e:fc:6c:93:83:75:d4:8e:fb: 21:f8:89:4d:44:3a:f4:5d:e2:b4:4c:95:8a:23:e5: 56:24:da:47:19:72:e2:11:d5:c2:d6:36:3f:8f:81: 0d:44:d0:5c:51:1b:1c:a5:11:e9:12:5d:69:4a:5f: d9:16:18:e1:4b:ef:75:b8:94:0f:15:3a:aa:a7:14: 8d:d2:f2:89:09:2a:e9:ac:7c:d1:ce:52:a4:da:78: 5d:11:1e:f3:49:77:8b:46:29:72:f0:5c:31:85:5a: 5c:1f:4b:db:cb:c9:a3:46:68:ac:8e:95:0a:25:f2: 2f:f3:fa:24:47:d8:b9:25:98:4b:fe:4c:2a:f2:67: 30:72:05:ff:f7:fb:ee:d6:26:95:a4:c5:57:0a:b7: 37:26:fd:2a:06:25:d7:ac:83:60:99:d2:0d:b9:9d: 84:4a:cf:ba:be:f4:74:5e:57:c6:8c:e0:d1:4a:07: 9c:e2:d8:0e:9b:75:e0:59:c4:4c:19:9c:2c:7c:62: 49:3c:e4:92:10:77:46:df:57:53:c6:90:ec:db:3c: a1:1a:0c:f6:b2:c4:1f:16:f3:92:d6:42:ac:eb:ff: 82:6f:93:7b:90:68:e3:60:ac:2b:5a:30:90:fc:2b: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D6:07:29:98:E0:1D:B7:11:C2:01:79:45:5C:A3:E5:4D:C4:28:86 X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:73:4d:22:61:59:b9:9d:ce:8a:69:15:de:10:db:92:eb:4f: fc:8e:1a:96:cc:41:e4:c7:d6:0e:34:54:38:ee:68:1a:4e:5a: 4d:c8:af:c8:61:de:1d:b3:3c:20:3a:89:ee:e2:bb:31:ba:5b: 66:08:37:47:44:35:5c:f8:3c:0a:91:08:70:da:8f:6a:51:46: e3:fb:06:a2:a4:96:6e:7c:fe:cc:2f:67:55:97:91:44:4a:25: 1d:87:1d:19:7a:08:d5:f9:84:f8:b6:59:c3:e9:61:b9:4c:f7: 32:9d:1a:17:19:d7:e7:2c:43:65:e3:04:c2:88:86:9b:07:39: a0:4d:72:6c:f9:47:9f:bc:6c:52:ae:39:10:34:fc:f6:81:ec: 45:70:32:ce:ec:4d:9b:05:72:0e:c9:ca:e3:8f:63:4b:dd:61: 90:50:2d:f5:9b:df:c9:f4:e9:7a:fc:6b:a8:4e:04:52:b8:a1: 9c:64:a5:51:56:11:18:92:12:04:1e:14:b5:4e:20:ac:55:81: 4d:bb:61:5b:89:f3:86:5d:64:46:67:62:b0:e8:8f:d3:2b:db: 45:5d:3d:37:42:da:75:6d:57:cb:08:cc:c8:32:8e:cb:07:97: 1c:ea:52:68:a7:84:f2:d3:29:d7:71:c9:2b:65:e0:c5:45:e7: 8f:a4:f0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKS74EGeMZpWOAZmMUQTpQE3o7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTEyMDMxMjM2MjNaFw0yNTEyMDYyMTM5MjNaMDMxMTAvBgNV BAMTKDlGRDYwNzI5OThFMDFEQjcxMUMyMDE3OTQ1NUNBM0U1NERDNDI4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwJ+zye9fA4KqiBpTPOiaT1fi Az78bJODddSO+yH4iU1EOvRd4rRMlYoj5VYk2kcZcuIR1cLWNj+PgQ1E0FxRGxyl EekSXWlKX9kWGOFL73W4lA8VOqqnFI3S8okJKumsfNHOUqTaeF0RHvNJd4tGKXLw XDGFWlwfS9vLyaNGaKyOlQol8i/z+iRH2LklmEv+TCryZzByBf/3++7WJpWkxVcK tzcm/SoGJdesg2CZ0g25nYRKz7q+9HReV8aM4NFKB5zi2A6bdeBZxEwZnCx8Ykk8 5JIQd0bfV1PGkOzbPKEaDPayxB8W85LWQqzr/4Jvk3uQaONgrCtaMJD8Ky/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9YHKZjgHbcRwgF5RVyj5U3EKIYwHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdzTSJhWbmdzoppFd4Q25LrT/yOGpbMQeTH 1g40VDjuaBpOWk3Ir8hh3h2zPCA6ie7iuzG6W2YIN0dENVz4PAqRCHDaj2pRRuP7 BqKklm58/swvZ1WXkURKJR2HHRl6CNX5hPi2WcPpYblM9zKdGhcZ1+csQ2XjBMKI hpsHOaBNcmz5R5+8bFKuORA0/PaB7EVwMs7sTZsFcg7JyuOPY0vdYZBQLfWb38n0 6Xr8a6hOBFK4oZxkpVFWERiSEgQeFLVOIKxVgU27YVuJ84ZdZEZnYrDoj9Mr20Vd PTdC2nVtV8sIzMgyjssHlxzqUminhPLTKddxyStl4MVF54+k8Og= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:52 2025 by rpki-client