This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: 8HWfE0zy3fGHif+looqdJaOrDkebrCZh174vrKhO1F8= Subject key identifier: 8B:DF:D7:80:2A:7C:BB:B8:6B:21:04:F3:8D:39:F7:F5:E5:C8:61:00 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 5D03109BBD3D58A14299A04387FCF6ECD84C431E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 0276 Signing time: Mon 01 Dec 2025 20:51:54 +0000 Manifest this update: Mon 01 Dec 2025 20:46:54 +0000 Manifest next update: Thu 04 Dec 2025 22:23:54 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 3: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: NB/UwXPvLRm7M5o7MAC6exqWv2AYj4TALGqFGCPZunA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:03:10:9b:bd:3d:58:a1:42:99:a0:43:87:fc:f6:ec:d8:4c:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Dec 1 20:46:54 2025 GMT Not After : Dec 4 22:23:54 2025 GMT Subject: CN=8BDFD7802A7CBBB86B2104F38D39F7F5E5C86100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:9b:7f:9e:0f:01:75:fb:a1:71:48:b3:c3: e6:b0:35:70:84:05:ae:f1:9f:32:c7:32:a9:79:53: 0c:fa:17:7b:02:98:4c:34:96:bc:08:06:fa:d0:ba: f4:39:ea:30:cd:44:6f:15:a2:b3:f1:00:3f:a5:17: 42:33:90:b3:a8:a7:05:74:37:cf:20:ee:a4:13:92: 8c:e7:ef:80:21:60:71:80:bc:9e:48:3b:01:70:b2: fb:26:43:90:68:39:ec:87:fc:b7:46:bb:9f:de:18: 78:46:65:32:2f:3f:22:87:3b:7b:be:9c:be:52:9c: 92:67:a1:3f:7c:b8:a8:09:74:a2:a8:c2:4c:8a:21: f6:b9:a6:3f:4c:7b:d3:f2:03:da:db:17:c8:5f:76: 73:95:87:45:63:21:a2:f0:8f:e3:93:1d:9c:f6:0c: 1b:83:a6:45:ca:a9:42:34:86:04:88:27:dc:bc:bc: 96:fe:85:47:9e:cb:9f:c2:af:c3:f7:36:90:8b:14: 1f:b7:5e:e2:19:18:70:dd:0a:55:b4:94:56:33:56: 16:94:a7:8d:93:cf:c1:8f:73:2e:2c:4c:ae:19:9f: 97:dd:2b:ae:6f:43:47:87:32:c5:fa:01:8a:49:f1: 06:fa:c2:fd:24:ca:36:42:42:b6:01:73:9f:4e:84: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:D7:80:2A:7C:BB:B8:6B:21:04:F3:8D:39:F7:F5:E5:C8:61:00 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:8b:23:a7:28:d7:54:a0:68:31:44:a5:a5:63:9f:18:51:75: 5a:2d:cc:84:8f:62:ca:de:c0:ad:8c:78:3d:b6:fe:25:48:e9: a9:5e:fc:c8:ea:4f:d9:43:db:8f:2f:a5:68:91:ab:23:c3:01: b3:b8:e1:69:48:1d:04:86:e6:1c:f1:96:b1:d9:84:cc:36:48: ce:96:15:67:a1:2e:39:65:f1:b9:cb:67:5c:95:ae:52:29:4b: b8:f6:04:21:35:18:79:02:e3:a4:d9:be:3f:3f:31:3f:30:07: b5:02:ac:5b:e3:d4:c2:1b:09:3a:76:62:8d:c6:b7:4e:11:b9: ed:4f:e6:88:c6:7d:ba:68:04:48:7e:80:b3:bb:da:c6:fe:c3: ac:96:19:fe:3c:37:4e:38:82:b2:c3:dc:86:a9:ec:17:d1:ba: f4:8d:0d:11:9c:96:6e:9a:22:38:ca:9c:9c:dc:9d:35:69:0c: 84:4b:c5:f6:04:13:c7:3b:8b:25:3a:8c:4e:64:7e:2a:b4:24: 90:6d:5b:cb:e7:38:0f:f5:c1:cf:e3:9e:1a:24:19:6c:9c:a8: 50:10:da:f6:77:72:ed:84:e0:88:e4:fd:e0:89:c2:f2:f4:e6: b3:ed:9a:58:28:83:c0:46:fa:a1:00:4e:8e:b0:80:4d:49:51: 8e:15:3e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQMQm709WKFCmaBDh/z27NhMQx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTEyMDEyMDQ2NTRaFw0yNTEyMDQyMjIzNTRaMDMxMTAvBgNV BAMTKDhCREZENzgwMkE3Q0JCQjg2QjIxMDRGMzhEMzlGN0Y1RTVDODYxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHJt/ng8BdfuhcUizw+awNXCE Ba7xnzLHMql5Uwz6F3sCmEw0lrwIBvrQuvQ56jDNRG8VorPxAD+lF0IzkLOopwV0 N88g7qQTkozn74AhYHGAvJ5IOwFwsvsmQ5BoOeyH/LdGu5/eGHhGZTIvPyKHO3u+ nL5SnJJnoT98uKgJdKKowkyKIfa5pj9Me9PyA9rbF8hfdnOVh0VjIaLwj+OTHZz2 DBuDpkXKqUI0hgSIJ9y8vJb+hUeey5/Cr8P3NpCLFB+3XuIZGHDdClW0lFYzVhaU p42Tz8GPcy4sTK4Zn5fdK65vQ0eHMsX6AYpJ8Qb6wv0kyjZCQrYBc59OhB3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9/XgCp8u7hrIQTzjTn39eXIYQAwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKLI6co11SgaDFEpaVjnxhRdVotzISPYsre wK2MeD22/iVI6ale/MjqT9lD248vpWiRqyPDAbO44WlIHQSG5hzxlrHZhMw2SM6W FWehLjll8bnLZ1yVrlIpS7j2BCE1GHkC46TZvj8/MT8wB7UCrFvj1MIbCTp2Yo3G t04Rue1P5ojGfbpoBEh+gLO72sb+w6yWGf48N044grLD3Iap7BfRuvSNDRGclm6a IjjKnJzcnTVpDIRLxfYEE8c7iyU6jE5kfiq0JJBtW8vnOA/1wc/jnhokGWycqFAQ 2vZ3cu2E4Ijk/eCJwvL05rPtmlgog8BG+qEATo6wgE1JUY4VPkY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client