This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: A1Ghgx1o0Laa/CGaFmMyXE/9L0Eilab2pPsyiqlTBmY= Subject key identifier: 8B:B1:01:5A:BB:8F:47:69:29:A1:79:D5:4F:4C:C9:DC:E0:9A:D4:0D Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 57F1449DC892DAAF63BD295A92A6594DBD8370CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: EF Signing time: Tue 16 Dec 2025 22:51:17 +0000 Manifest this update: Tue 16 Dec 2025 22:46:17 +0000 Manifest next update: Sat 20 Dec 2025 07:17:17 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: yDl6+75WAU34ll8eiKwPcTVQ7E6n51QoqPUzyWGSL3s=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f1:44:9d:c8:92:da:af:63:bd:29:5a:92:a6:59:4d:bd:83:70:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Dec 16 22:46:17 2025 GMT Not After : Dec 20 07:17:17 2025 GMT Subject: CN=8BB1015ABB8F476929A179D54F4CC9DCE09AD40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ef:ce:4d:bf:1f:22:88:e2:3d:2e:99:7e:c1: e2:1c:05:87:98:be:f9:18:1d:8f:c9:ea:29:3c:3b: c6:e5:cc:19:a1:b2:0b:11:55:b0:59:73:7b:e8:70: d9:24:06:8e:a6:4b:48:05:0f:17:34:3a:53:5c:83: 0b:94:9c:46:c6:0a:13:9d:d9:8f:a8:6f:fb:65:4d: 25:a5:11:82:c9:fb:86:8f:d0:32:e8:e6:f9:02:14: 2a:c3:29:41:3c:42:9f:73:19:82:b5:5c:ae:c7:54: a2:c3:1f:56:71:04:6c:44:15:40:13:10:ec:64:35: 8b:c8:b8:d7:1e:86:82:5a:d3:6a:e7:00:53:5b:bd: ad:98:c3:9c:a5:97:1b:5e:be:38:02:65:76:7b:a3: de:59:ff:49:c7:fb:73:00:09:f8:ae:50:07:88:a2: e6:5f:6f:bf:ba:36:48:bf:de:59:6a:02:0b:1c:b2: a8:f6:f6:f6:d0:fa:62:1d:a3:e2:f3:8e:26:21:28: e2:f0:c5:6f:68:3f:77:81:cb:47:b5:6f:e8:e4:b4: 02:c3:1a:ab:52:76:4b:6e:12:6d:2e:c2:ee:25:93: 7f:ab:5d:c4:ac:b4:eb:a9:3a:62:9b:48:ce:87:ff: ab:95:8f:2e:36:e8:58:db:b1:0b:c2:64:20:db:c0: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:01:5A:BB:8F:47:69:29:A1:79:D5:4F:4C:C9:DC:E0:9A:D4:0D X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:11:15:dd:f2:c7:f6:0d:e9:0f:49:e6:98:4f:d7:e7:d7:a4: bc:9b:5c:b2:6b:a7:27:8b:fc:40:60:b0:55:08:04:a3:dd:1a: b2:dd:66:9c:f8:08:16:4c:25:a6:6b:dc:f5:4e:b6:27:10:a7: dd:7b:df:43:9c:a4:10:b7:56:2e:ab:3f:dc:24:83:3a:f8:6c: d4:2f:4e:ce:30:5f:07:ba:a4:11:d9:c5:2f:07:89:9d:47:ae: ed:88:93:ed:73:70:71:47:5a:f6:55:1e:3e:45:85:b7:c7:34: 48:29:b2:92:6e:09:da:8d:4f:ee:fc:37:fd:ec:b2:4b:5a:a0: b8:3e:c3:7a:13:dc:62:f2:67:6f:15:e6:80:9b:12:08:e2:23: 7c:49:34:7a:87:d4:d4:9a:18:78:51:ab:a1:b2:26:c2:9e:a4: cd:37:a2:32:9f:9d:ac:a8:e7:51:ed:30:9b:1c:1d:f6:c2:b3: 62:53:93:5b:19:01:0e:e6:f0:e3:f8:d1:21:69:d2:51:70:0d: 95:76:ba:24:b4:dd:2e:31:78:3e:bc:f4:1e:b0:d3:85:b5:07: d0:37:4f:f0:ba:ff:f5:c2:e2:ca:42:29:e2:1e:57:74:a9:88: 87:91:e6:20:64:52:71:83:86:5c:42:29:60:74:55:49:aa:a6: 2e:b2:23:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/FEnciS2q9jvSlakqZZTb2DcM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTEyMTYyMjQ2MTdaFw0yNTEyMjAwNzE3MTdaMDMxMTAvBgNV BAMTKDhCQjEwMTVBQkI4RjQ3NjkyOUExNzlENTRGNENDOURDRTA5QUQ0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt785Nvx8iiOI9Lpl+weIcBYeY vvkYHY/J6ik8O8blzBmhsgsRVbBZc3vocNkkBo6mS0gFDxc0OlNcgwuUnEbGChOd 2Y+ob/tlTSWlEYLJ+4aP0DLo5vkCFCrDKUE8Qp9zGYK1XK7HVKLDH1ZxBGxEFUAT EOxkNYvIuNcehoJa02rnAFNbva2Yw5yllxtevjgCZXZ7o95Z/0nH+3MACfiuUAeI ouZfb7+6Nki/3llqAgscsqj29vbQ+mIdo+LzjiYhKOLwxW9oP3eBy0e1b+jktALD GqtSdktuEm0uwu4lk3+rXcSstOupOmKbSM6H/6uVjy426FjbsQvCZCDbwCdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7EBWruPR2kpoXnVT0zJ3OCa1A0wHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgRFd3yx/YN6Q9J5phP1+fXpLybXLJrpyeL /EBgsFUIBKPdGrLdZpz4CBZMJaZr3PVOticQp91730OcpBC3Vi6rP9wkgzr4bNQv Ts4wXwe6pBHZxS8HiZ1Hru2Ik+1zcHFHWvZVHj5FhbfHNEgpspJuCdqNT+78N/3s sktaoLg+w3oT3GLyZ28V5oCbEgjiI3xJNHqH1NSaGHhRq6GyJsKepM03ojKfnayo 51HtMJscHfbCs2JTk1sZAQ7m8OP40SFp0lFwDZV2uiS03S4xeD689B6w04W1B9A3 T/C6//XC4spCKeIeV3SpiIeR5iBkUnGDhlxCKWB0VUmqpi6yI3M= -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:02 2025 by rpki-client