This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: vSAT/kibE6SL9FeXrWHsbyfc0oPpjqlD7aj2ryWYar8= Subject key identifier: 5B:9C:C9:FC:AD:D7:C0:36:2A:15:D0:BA:47:7C:9D:DC:A0:B1:E9:C6 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 4CEF01FD12AA7462F5A6AD472C6CF54418A80587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0241 Signing time: Tue 02 Dec 2025 19:31:44 +0000 Manifest this update: Tue 02 Dec 2025 19:26:44 +0000 Manifest next update: Fri 05 Dec 2025 22:30:44 +0000 Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: R9R+jDgKz7DTXXSE7/x1k/8ZSMNMR7pICfU8ibUa7vM=) 2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) 3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ef:01:fd:12:aa:74:62:f5:a6:ad:47:2c:6c:f5:44:18:a8:05:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Dec 2 19:26:44 2025 GMT Not After : Dec 5 22:30:44 2025 GMT Subject: CN=5B9CC9FCADD7C0362A15D0BA477C9DDCA0B1E9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:90:c7:bb:fc:b7:fe:5b:76:2d:29:c2:57: 7d:0e:21:c9:c2:26:5b:4f:7d:69:dd:86:25:58:c4: a2:36:b3:6b:e0:f1:29:05:83:38:a4:99:08:7e:aa: e5:f3:fa:a2:ec:94:40:b8:8c:1e:51:c1:55:1c:c4: 52:9c:f4:a1:c9:22:16:d7:bb:99:38:7f:91:1b:84: 1e:fa:10:68:04:f5:10:f8:03:a9:4d:c8:da:16:f7: 5a:a1:c2:b6:ff:5e:8f:e0:91:6c:31:db:56:f7:8c: a8:c3:55:75:9c:29:af:54:b6:5c:4b:3b:e9:17:62: f9:15:e6:bf:9d:99:14:c2:fe:d1:4a:f3:59:f5:cd: 30:6a:cf:7d:cc:e3:5b:aa:9e:52:c9:fb:dc:f8:30: a9:bf:8e:62:13:77:12:4f:1f:7d:9a:54:99:b3:5a: 40:86:8a:8b:dc:5e:98:73:b7:7d:36:d8:a1:f1:72: e4:86:b7:5d:83:0a:ed:6c:06:a2:8f:63:76:7f:f7: 49:de:ec:92:2c:f8:bc:78:29:3f:9b:09:92:37:c3: c7:e4:0f:e0:33:69:26:08:f0:f0:1c:fa:06:6f:56: 29:8c:3a:17:d7:32:a6:78:19:6b:b5:b3:d4:51:de: a3:6c:c4:25:8a:c3:1d:d3:a0:2e:f3:73:db:82:8a: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:C9:FC:AD:D7:C0:36:2A:15:D0:BA:47:7C:9D:DC:A0:B1:E9:C6 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c4:34:4e:08:6f:57:a3:ce:12:c7:c6:c2:23:fb:af:bd:53: dd:35:bb:28:85:1c:c1:32:60:88:dd:0a:43:b3:f1:1e:02:72: ed:47:06:d8:fe:6c:a1:f6:39:cf:40:fb:22:17:fa:44:ca:f2: 9e:38:59:2b:de:51:e0:8a:57:2b:e1:04:ee:26:b3:be:7b:dc: 63:15:67:5e:9b:2f:1e:a5:df:da:0c:49:ac:ac:43:6f:be:51: 63:7a:ca:b0:ba:71:32:b2:4a:ee:4d:e6:0b:38:55:d3:4c:27: 23:c5:59:de:f9:5f:20:b6:8d:a2:db:d7:2a:60:4a:16:97:8f: d6:f9:25:18:2c:62:4a:48:9b:f6:fb:da:33:b0:85:0b:99:e8: 57:12:39:be:19:1b:42:df:59:a8:de:dd:ca:40:8b:31:f9:27: 39:94:e7:9e:05:39:d6:01:ca:aa:1b:13:1a:bc:31:f4:3c:ea: db:42:ba:6a:02:c4:e2:a2:23:09:07:82:10:15:d6:e3:02:7c: 92:15:c6:2b:87:3d:bb:0a:3a:72:b4:ac:f6:9f:4d:26:fa:0a: 4d:88:18:77:01:2c:e3:08:f6:62:01:f8:3b:04:7f:68:b6:f8: 1e:80:b8:6c:e4:88:ee:2b:f0:72:f3:3d:0f:7b:01:7c:e7:61: d8:8e:d7:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTO8B/RKqdGL1pq1HLGz1RBioBYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEyMDIxOTI2NDRaFw0yNTEyMDUyMjMwNDRaMDMxMTAvBgNV BAMTKDVCOUNDOUZDQUREN0MwMzYyQTE1RDBCQTQ3N0M5RERDQTBCMUU5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/35DHu/y3/lt2LSnCV30OIcnC JltPfWndhiVYxKI2s2vg8SkFgzikmQh+quXz+qLslEC4jB5RwVUcxFKc9KHJIhbX u5k4f5EbhB76EGgE9RD4A6lNyNoW91qhwrb/Xo/gkWwx21b3jKjDVXWcKa9UtlxL O+kXYvkV5r+dmRTC/tFK81n1zTBqz33M41uqnlLJ+9z4MKm/jmITdxJPH32aVJmz WkCGiovcXphzt3022KHxcuSGt12DCu1sBqKPY3Z/90ne7JIs+Lx4KT+bCZI3w8fk D+AzaSYI8PAc+gZvVimMOhfXMqZ4GWu1s9RR3qNsxCWKwx3ToC7zc9uCivVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5zJ/K3XwDYqFdC6R3yd3KCx6cYwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzENE4Ib1ejzhLHxsIj+6+9U901uyiFHMEy YIjdCkOz8R4Ccu1HBtj+bKH2Oc9A+yIX+kTK8p44WSveUeCKVyvhBO4ms7573GMV Z16bLx6l39oMSaysQ2++UWN6yrC6cTKySu5N5gs4VdNMJyPFWd75XyC2jaLb1ypg ShaXj9b5JRgsYkpIm/b72jOwhQuZ6FcSOb4ZG0LfWaje3cpAizH5JzmU554FOdYB yqobExq8MfQ86ttCumoCxOKiIwkHghAV1uMCfJIVxiuHPbsKOnK0rPafTSb6Ck2I GHcBLOMI9mIB+DsEf2i2+B6AuGzkiO4r8HLzPQ97AXznYdiO1xg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:24 2025 by rpki-client