This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: FiYv/bI8zgo3Jtau+A71y5oADkuu0xEZMdLXMdP5dmQ= Subject key identifier: F8:88:E3:25:D2:5F:3D:57:4E:2B:C1:4D:4B:8F:E5:BC:74:FE:0D:C6 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 38BA7B48686E65CE5C46283687F7DFB2D13FA996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 15:20:51 +0000 Manifest this update: Tue 02 Dec 2025 15:15:51 +0000 Manifest next update: Fri 05 Dec 2025 23:01:51 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: y4Xl5zPirgAjMp/wqbaluCXWEmDoweQ+sQGftmckPiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:7b:48:68:6e:65:ce:5c:46:28:36:87:f7:df:b2:d1:3f:a9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Dec 2 15:15:51 2025 GMT Not After : Dec 5 23:01:51 2025 GMT Subject: CN=F888E325D25F3D574E2BC14D4B8FE5BC74FE0DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:10:65:a0:b9:e4:8c:74:33:9d:f1:f1:72: 3c:bb:e3:bf:ef:82:3a:5d:1e:d6:a2:3d:74:b2:6f: eb:26:41:c0:d9:ca:43:cc:da:b3:fa:86:13:e2:59: 4b:fb:9a:d5:d5:cc:27:6b:89:68:26:5c:16:4a:69: 92:8a:dd:d1:34:9c:cf:69:b3:37:5b:49:73:7d:4d: b9:af:dc:f6:a2:4d:46:c7:aa:fd:3e:cb:fb:72:81: 7a:cf:78:90:de:4b:fa:9d:56:c1:b0:1b:32:07:7e: 28:26:26:2b:53:eb:e8:8b:b6:83:ee:60:70:26:72: b8:2f:3a:be:10:72:28:c0:c1:23:69:b4:bd:a7:46: 3c:d0:75:14:24:bc:13:c2:17:eb:d8:7c:f2:87:0f: 92:4e:f2:e9:c2:ff:d1:44:87:ea:ff:fe:71:6a:4d: 90:49:6a:bc:95:dd:f2:b7:db:e2:7e:d8:2e:1d:e4: c7:41:bd:b2:08:69:f5:17:90:22:df:24:eb:84:1f: a4:a7:36:6e:ae:4e:30:f4:da:a3:55:0d:19:0b:ea: 47:9c:81:4f:db:4e:fd:ef:0d:ca:91:60:e0:6b:dd: f8:bc:45:fe:fd:77:67:56:d5:49:22:68:ee:32:66: 08:e9:21:1c:d6:f1:58:65:61:7a:d6:0f:02:f8:15: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:88:E3:25:D2:5F:3D:57:4E:2B:C1:4D:4B:8F:E5:BC:74:FE:0D:C6 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e1:8e:df:70:dd:be:a5:eb:ae:20:41:6d:39:c5:d7:72:3e: b9:13:d9:b7:76:41:56:ab:e8:3c:02:b3:89:29:5a:49:eb:5a: c2:40:b1:78:a3:b2:9e:f4:4b:73:bf:2f:04:0c:cf:0d:a8:79: 79:cc:61:05:b6:b7:83:1c:28:55:fd:50:df:bc:f7:6f:2c:28: df:35:ee:d4:90:01:85:dd:f7:54:1b:56:a5:fc:9e:9d:40:79: bc:52:ec:8e:3a:74:30:64:71:2d:95:90:15:c8:c7:82:b3:15: 2d:4e:bf:42:ee:cf:c8:0a:07:f6:9a:69:a1:bd:f3:5b:36:bd: 2a:8b:47:44:2e:24:df:5b:d8:92:13:4b:80:a4:66:68:4b:e3: cf:e6:fe:23:61:93:2c:d7:7f:39:ed:35:f2:86:0c:38:57:c6: 5e:93:86:d0:75:2c:2f:90:51:62:61:c6:e6:0e:ca:3c:61:aa: 5f:03:e8:b0:74:54:16:7a:e5:ad:81:b8:02:48:7c:dc:14:47: 3e:06:96:9c:55:5d:1f:9e:94:bb:d6:b3:31:4a:2d:5f:5e:60: fe:94:0f:fe:34:1c:b6:5d:16:93:ad:a1:8b:b0:88:62:76:73: 14:30:e1:a0:33:c5:72:d5:a4:72:2a:53:85:c5:9d:d5:5d:89: 22:3f:ff:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLp7SGhuZc5cRig2h/ffstE/qZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTEyMDIxNTE1NTFaFw0yNTEyMDUyMzAxNTFaMDMxMTAvBgNV BAMTKEY4ODhFMzI1RDI1RjNENTc0RTJCQzE0RDRCOEZFNUJDNzRGRTBEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmthBloLnkjHQznfHxcjy747/v gjpdHtaiPXSyb+smQcDZykPM2rP6hhPiWUv7mtXVzCdriWgmXBZKaZKK3dE0nM9p szdbSXN9Tbmv3PaiTUbHqv0+y/tygXrPeJDeS/qdVsGwGzIHfigmJitT6+iLtoPu YHAmcrgvOr4QcijAwSNptL2nRjzQdRQkvBPCF+vYfPKHD5JO8unC/9FEh+r//nFq TZBJaryV3fK32+J+2C4d5MdBvbIIafUXkCLfJOuEH6SnNm6uTjD02qNVDRkL6kec gU/bTv3vDcqRYOBr3fi8Rf79d2dW1UkiaO4yZgjpIRzW8VhlYXrWDwL4FS8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IjjJdJfPVdOK8FNS4/lvHT+DcYwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDhjt9w3b6l664gQW05xddyPrkT2bd2QVar 6DwCs4kpWknrWsJAsXijsp70S3O/LwQMzw2oeXnMYQW2t4McKFX9UN+8928sKN81 7tSQAYXd91QbVqX8np1AebxS7I46dDBkcS2VkBXIx4KzFS1Ov0Luz8gKB/aaaaG9 81s2vSqLR0QuJN9b2JITS4CkZmhL48/m/iNhkyzXfzntNfKGDDhXxl6ThtB1LC+Q UWJhxuYOyjxhql8D6LB0VBZ65a2BuAJIfNwURz4GlpxVXR+elLvWszFKLV9eYP6U D/40HLZdFpOtoYuwiGJ2cxQw4aAzxXLVpHIqU4XFndVdiSI//5o= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client