This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: OAfscuDqPoj/gHRrbmliCT7oLeXjn599wfuiFuRj+cY= Subject key identifier: E4:31:44:39:E1:39:ED:FA:2F:E9:EC:3F:B0:2F:77:94:61:A3:31:B2 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 40B25CB07FC534ADBBD6D31B932B31D04575C57A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 0230 Signing time: Mon 15 Dec 2025 03:04:52 +0000 Manifest this update: Mon 15 Dec 2025 02:59:52 +0000 Manifest next update: Thu 18 Dec 2025 11:10:52 +0000 Files and hashes: 1: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: rX8jYg+EBjCS5+2EaMNjxR8FOc1gwRn29g/kIiBNGgw=) 2: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 4: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 11:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b2:5c:b0:7f:c5:34:ad:bb:d6:d3:1b:93:2b:31:d0:45:75:c5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Dec 15 02:59:52 2025 GMT Not After : Dec 18 11:10:52 2025 GMT Subject: CN=E4314439E139EDFA2FE9EC3FB02F779461A331B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:c5:ca:90:38:50:d6:23:97:4b:8c:01:29: 8d:bd:0b:21:e5:a1:be:1e:bd:09:41:59:a4:a3:ba: c0:2e:46:bc:bc:49:44:48:fe:cc:f4:bc:2a:07:15: 04:91:a0:bf:36:d2:7f:cf:7b:49:59:6b:2f:4f:90: 96:67:91:90:d8:4c:39:77:65:d3:df:25:7a:e2:1b: 96:b0:64:7c:05:14:6b:fb:9b:f0:fc:41:42:a7:5c: fc:cb:21:d8:de:ce:75:4e:9e:53:02:9c:8a:86:87: ce:f1:a8:d0:f8:8a:3e:f5:63:d8:63:2e:0a:54:a4: 86:8c:78:80:a4:3e:43:bf:7e:c5:ef:bc:fc:f6:0a: 6d:87:43:34:c5:11:d0:ec:1a:49:3b:a4:da:98:90: 8b:32:a8:6c:de:33:f3:dd:12:cd:f3:25:7c:85:43: fa:00:57:e8:16:6d:79:7a:b0:e8:74:81:03:4c:10: 87:5c:04:f7:0b:c2:59:41:b6:7f:59:3f:09:73:c7: 1b:ba:b2:9f:b6:75:1d:54:90:a7:80:88:eb:82:2f: 29:8b:a5:71:c4:12:9d:a2:dc:49:0f:9d:c7:0f:26: ca:e3:e6:3d:ef:6b:b4:80:3c:8f:ff:0e:c9:31:09: f0:9a:d7:7c:10:be:39:e8:10:e2:10:f3:bf:38:26: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:31:44:39:E1:39:ED:FA:2F:E9:EC:3F:B0:2F:77:94:61:A3:31:B2 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:aa:65:15:99:05:c8:c0:3e:69:f0:b6:7b:02:eb:d1:f1: 51:7a:8a:5a:21:39:30:04:10:8a:d2:17:42:de:fb:e2:7b:dc: 7d:49:49:b3:f1:78:01:8a:65:95:28:5b:a7:bd:07:8f:ac:60: 7a:5e:17:23:a6:91:1f:59:a6:89:05:06:32:a5:2c:a7:46:e9: 41:31:95:66:c6:15:1d:42:b2:70:04:52:6c:3b:a1:2b:d3:e2: d3:12:ba:0a:a4:f5:3d:b9:c5:51:69:88:5b:e0:7b:f9:12:32: 35:5b:8c:32:99:80:7f:4c:e8:e2:16:4c:85:89:b2:25:83:59: d6:bf:36:57:25:1a:a4:02:1d:1d:d2:e6:8d:58:2f:80:6c:fc: 2d:50:98:aa:8d:4e:38:39:4f:ee:02:eb:9b:c9:a5:54:ab:7f: a9:36:f3:60:dd:0d:8b:33:9e:83:2b:d1:a2:ce:e1:60:3d:8e: 2b:45:ca:3a:8a:ae:4c:16:8e:1f:c1:f3:ab:d6:bf:1a:bc:c8: 35:e3:c8:06:a6:6e:df:37:f6:40:4e:48:f0:ab:48:5b:f6:84: b6:3f:20:d3:0b:96:15:bc:ae:c1:94:f2:23:ce:24:72:6c:d2: bf:69:de:db:ea:c1:4f:61:78:3d:df:9f:61:42:4c:9b:2c:91: ef:2a:77:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLJcsH/FNK271tMbkysx0EV1xXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTEyMTUwMjU5NTJaFw0yNTEyMTgxMTEwNTJaMDMxMTAvBgNV BAMTKEU0MzE0NDM5RTEzOUVERkEyRkU5RUMzRkIwMkY3Nzk0NjFBMzMxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDMXKkDhQ1iOXS4wBKY29CyHl ob4evQlBWaSjusAuRry8SURI/sz0vCoHFQSRoL820n/Pe0lZay9PkJZnkZDYTDl3 ZdPfJXriG5awZHwFFGv7m/D8QUKnXPzLIdjeznVOnlMCnIqGh87xqND4ij71Y9hj LgpUpIaMeICkPkO/fsXvvPz2Cm2HQzTFEdDsGkk7pNqYkIsyqGzeM/PdEs3zJXyF Q/oAV+gWbXl6sOh0gQNMEIdcBPcLwllBtn9ZPwlzxxu6sp+2dR1UkKeAiOuCLymL pXHEEp2i3EkPnccPJsrj5j3va7SAPI//DskxCfCa13wQvjnoEOIQ8784JkBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5DFEOeE57fov6ew/sC93lGGjMbIwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRBqmUVmQXIwD5p8LZ7AuvR8VF6ilohOTAE EIrSF0Le++J73H1JSbPxeAGKZZUoW6e9B4+sYHpeFyOmkR9ZpokFBjKlLKdG6UEx lWbGFR1CsnAEUmw7oSvT4tMSugqk9T25xVFpiFvge/kSMjVbjDKZgH9M6OIWTIWJ siWDWda/NlclGqQCHR3S5o1YL4Bs/C1QmKqNTjg5T+4C65vJpVSrf6k282DdDYsz noMr0aLO4WA9jitFyjqKrkwWjh/B86vWvxq8yDXjyAambt839kBOSPCrSFv2hLY/ INMLlhW8rsGU8iPOJHJs0r9p3tvqwU9heD3fn2FCTJsske8qd6A= -----END CERTIFICATE-----Generated at Mon Dec 15 22:18:23 2025 by rpki-client