This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: rurkT4r15LnB3sPAxgzPbOkw+45/2BiZyqGoeS69i0I= Subject key identifier: DD:54:D6:9B:9D:4F:C8:93:34:9B:B0:F6:DB:3D:24:02:2A:E9:77:1E Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 5C0A48BC29AF331650B15C84CCA4848EB1245423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 0231 Signing time: Wed 17 Dec 2025 11:12:01 +0000 Manifest this update: Wed 17 Dec 2025 11:07:01 +0000 Manifest next update: Sat 20 Dec 2025 13:19:01 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 2: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: QQmSQUCX7lq0jg96BTnIlRvGcHkA3UuO6ZbHjr/qOnk=) 3: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 4: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0a:48:bc:29:af:33:16:50:b1:5c:84:cc:a4:84:8e:b1:24:54:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Dec 17 11:07:01 2025 GMT Not After : Dec 20 13:19:01 2025 GMT Subject: CN=DD54D69B9D4FC893349BB0F6DB3D24022AE9771E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:49:d9:de:8b:2d:fd:59:8e:27:74:1b:18: 73:f8:6c:00:ea:b6:76:a9:25:e7:13:bb:9a:93:53: 76:cf:37:72:0b:bc:9d:f6:00:b2:23:d6:ee:72:27: a7:7a:1f:c5:0e:30:d2:14:d1:f9:e0:ac:51:6b:ef: 47:25:c6:76:0d:36:9d:39:2f:79:7b:bc:53:7a:d2: 0f:20:3a:34:48:b7:0b:de:8a:f2:50:9f:3d:ed:7c: 4e:85:28:58:8a:ec:d9:ec:b1:df:f1:4b:d6:6b:33: 90:c4:79:b0:1b:d1:a6:cc:f3:62:77:01:00:ba:61: 77:01:8d:8e:ae:b2:92:ca:0e:02:2d:87:8c:4f:dd: 08:7b:77:20:fe:ad:53:c3:9f:25:48:aa:b9:3d:54: a3:8b:76:7d:8d:d8:34:c6:96:3e:9c:9b:7e:ee:74: c9:3b:79:8c:36:ac:83:1d:ce:04:2a:b3:d0:13:bf: 6f:6b:c3:ee:06:d9:f5:57:a3:96:f0:5f:43:81:ab: 64:28:83:67:17:7a:81:74:97:c9:e4:af:a0:23:99: f0:b7:9a:ad:79:20:60:c7:d5:f4:23:9b:0f:d9:ae: 03:6e:28:8e:f1:8e:b9:92:29:6e:49:41:52:fd:29: 70:0f:32:35:1f:f9:4c:d8:d5:c6:74:45:14:ec:02: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:D6:9B:9D:4F:C8:93:34:9B:B0:F6:DB:3D:24:02:2A:E9:77:1E X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:a3:6a:7b:da:33:48:0d:a3:88:b8:20:60:f0:bb:3e:bf: 4e:83:b2:13:12:d8:9e:84:27:57:f1:6b:e7:a0:8f:39:35:7a: ac:47:51:3b:1c:0d:8f:0d:10:cf:17:11:76:5a:e2:2d:62:f0: 8a:f7:2e:17:d9:d5:a8:ea:b8:82:57:4f:4b:ab:2b:27:c6:17: 17:ec:5e:fa:14:a4:5a:96:c7:bb:75:1c:55:4b:6a:a8:98:c0: f5:69:aa:45:9a:3f:32:2f:81:ae:7e:98:74:61:b9:07:d1:da: a3:29:ac:e9:8d:aa:bf:77:a7:3c:d4:ed:ce:f8:c6:1e:d5:ac: 9d:69:ad:df:87:3d:22:72:5d:79:65:23:6b:70:74:51:a5:5f: 7d:2b:39:80:ba:23:97:59:19:a7:d5:49:61:ed:12:b2:05:f8: 68:af:0d:46:36:07:88:27:1a:c0:64:d3:dc:a4:73:86:08:5d: 50:16:5a:89:7e:2d:a9:e5:76:6e:df:55:77:8d:0c:c3:e8:f4: fe:09:3e:6a:d5:a1:0c:fc:bc:d8:03:5a:bd:f1:a7:9e:23:be: c1:a1:0a:fc:fc:c2:cb:d6:62:44:e4:21:fb:f6:b2:80:a8:8c: 9f:80:a8:d7:f5:a2:de:35:92:a3:7c:90:cb:5a:e7:9e:66:d1: 7a:30:fc:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXApIvCmvMxZQsVyEzKSEjrEkVCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTEyMTcxMTA3MDFaFw0yNTEyMjAxMzE5MDFaMDMxMTAvBgNV BAMTKERENTRENjlCOUQ0RkM4OTMzNDlCQjBGNkRCM0QyNDAyMkFFOTc3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9knZ3ost/VmOJ3QbGHP4bADq tnapJecTu5qTU3bPN3ILvJ32ALIj1u5yJ6d6H8UOMNIU0fngrFFr70clxnYNNp05 L3l7vFN60g8gOjRItwveivJQnz3tfE6FKFiK7Nnssd/xS9ZrM5DEebAb0abM82J3 AQC6YXcBjY6uspLKDgIth4xP3Qh7dyD+rVPDnyVIqrk9VKOLdn2N2DTGlj6cm37u dMk7eYw2rIMdzgQqs9ATv29rw+4G2fVXo5bwX0OBq2Qog2cXeoF0l8nkr6AjmfC3 mq15IGDH1fQjmw/ZrgNuKI7xjrmSKW5JQVL9KXAPMjUf+UzY1cZ0RRTsAl/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VTWm51PyJM0m7D22z0kAirpdx4wHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLqo2p72jNIDaOIuCBg8Ls+v06DshMS2J6E J1fxa+egjzk1eqxHUTscDY8NEM8XEXZa4i1i8Ir3LhfZ1ajquIJXT0urKyfGFxfs XvoUpFqWx7t1HFVLaqiYwPVpqkWaPzIvga5+mHRhuQfR2qMprOmNqr93pzzU7c74 xh7VrJ1prd+HPSJyXXllI2twdFGlX30rOYC6I5dZGafVSWHtErIF+GivDUY2B4gn GsBk09ykc4YIXVAWWol+Lanldm7fVXeNDMPo9P4JPmrVoQz8vNgDWr3xp54jvsGh Cvz8wsvWYkTkIfv2soCojJ+AqNf1ot41kqN8kMta555m0Xow/Ao= -----END CERTIFICATE-----Generated at Sat Dec 20 00:20:08 2025 by rpki-client