This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: eICIYJJCgqxokFx8K9GPjbNfYCmw5Nc/rWlnIPTdYRY= Subject key identifier: 99:A4:53:BB:9E:03:95:39:6A:BF:5F:CB:E6:C2:82:81:DF:89:6C:B2 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 26CCB194089A0D518FD50EBC660ABC835CA75B13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 0207 Signing time: Tue 02 Dec 2025 22:51:51 +0000 Manifest this update: Tue 02 Dec 2025 22:46:51 +0000 Manifest next update: Sat 06 Dec 2025 03:25:51 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: mmit2rFqfhxiY5m9Ini73pjIJWQASolgmtgMg5uuy9E=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cc:b1:94:08:9a:0d:51:8f:d5:0e:bc:66:0a:bc:83:5c:a7:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Dec 2 22:46:51 2025 GMT Not After : Dec 6 03:25:51 2025 GMT Subject: CN=99A453BB9E0395396ABF5FCBE6C28281DF896CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:27:0e:fa:ed:bf:7d:ea:62:f2:05:1e:45: 25:71:6a:d7:ab:23:0f:ad:55:d2:14:d7:16:a0:51: 62:1d:77:cf:a8:7d:0d:35:3d:8f:a9:06:86:b4:54: 3c:f2:9c:6a:e8:f4:4f:6a:36:38:45:14:e6:45:2f: 83:b5:ae:b0:2f:d7:bb:57:27:69:2b:1b:cb:13:91: 39:d0:18:85:03:98:98:f1:55:64:3e:03:5a:71:b5: 55:86:3d:e2:ad:08:82:3d:e8:f2:a6:b9:e4:74:90: d6:45:a3:98:12:7d:5f:ff:e7:2f:e9:85:65:c3:2d: 1f:88:b9:9c:fa:03:7b:ca:28:a1:b7:da:37:ca:c2: bf:9c:fb:eb:ac:8d:ed:36:e6:27:df:4f:eb:a1:c1: 64:b5:a3:5e:a3:58:54:a9:b9:a0:d2:5b:3d:d8:6e: c9:c3:ff:70:77:96:34:5b:f1:c5:6d:c6:26:a4:24: b6:98:80:02:98:a0:b1:02:19:44:5f:b4:77:a2:ff: ca:f1:b0:85:08:70:2e:9f:76:dd:71:10:50:a1:f6: 8f:7c:51:51:af:de:27:ab:c6:19:99:06:0d:3d:eb: ab:cb:f1:9f:06:67:a5:49:fd:b1:8c:b4:7e:24:f7: 6a:0d:38:78:c0:56:3f:59:be:17:ac:5a:64:4e:46: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:53:BB:9E:03:95:39:6A:BF:5F:CB:E6:C2:82:81:DF:89:6C:B2 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8d:e4:39:76:09:b7:63:2a:e5:55:02:ef:b2:4b:e1:30:ba: 5e:e5:bc:d5:57:78:1c:08:56:be:79:9f:2f:fb:76:af:02:90: 72:2e:c7:f5:c9:ed:a4:6a:3a:cd:76:3f:13:80:65:01:ed:37: b2:b4:94:cb:c8:3e:be:a4:e5:a8:9a:a9:8a:22:da:f8:54:70: ca:46:7f:bd:17:c8:74:08:39:3f:34:fb:e0:59:2b:ab:c2:f9: f6:51:0d:68:e0:bb:d9:d5:6b:da:d4:1c:cb:08:92:99:0b:ac: 84:56:60:ae:27:95:dc:83:25:6f:81:73:7e:84:05:d2:97:22: 41:1a:00:cf:c3:4f:3f:ba:0b:42:64:b0:9e:74:e7:ab:97:67: 8d:14:5d:07:97:0c:00:80:b8:99:34:7a:28:fa:b1:00:42:53: 56:bb:1a:9d:dc:46:34:6b:1d:ab:07:b5:3b:35:c1:4d:21:38: d5:77:7e:91:00:27:23:c7:ad:d9:4b:68:87:03:30:b1:9e:a3: 3f:76:8c:d1:9d:5f:77:75:41:e6:83:22:64:fd:e2:93:a6:0d: 59:a7:f8:7c:a2:2d:b6:dd:d4:44:3a:3c:08:72:6f:44:cd:7f: f1:d2:af:29:c5:76:65:5e:aa:b5:68:58:db:ea:44:fd:9a:4d: 3f:f4:f6:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsyxlAiaDVGP1Q68Zgq8g1ynWxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTEyMDIyMjQ2NTFaFw0yNTEyMDYwMzI1NTFaMDMxMTAvBgNV BAMTKDk5QTQ1M0JCOUUwMzk1Mzk2QUJGNUZDQkU2QzI4MjgxREY4OTZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8icO+u2/fepi8gUeRSVxater Iw+tVdIU1xagUWIdd8+ofQ01PY+pBoa0VDzynGro9E9qNjhFFOZFL4O1rrAv17tX J2krG8sTkTnQGIUDmJjxVWQ+A1pxtVWGPeKtCII96PKmueR0kNZFo5gSfV//5y/p hWXDLR+IuZz6A3vKKKG32jfKwr+c++usje025iffT+uhwWS1o16jWFSpuaDSWz3Y bsnD/3B3ljRb8cVtxiakJLaYgAKYoLECGURftHei/8rxsIUIcC6fdt1xEFCh9o98 UVGv3ierxhmZBg0966vL8Z8GZ6VJ/bGMtH4k92oNOHjAVj9ZvhesWmRORvnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmaRTu54DlTlqv1/L5sKCgd+JbLIwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaN5Dl2CbdjKuVVAu+yS+Ewul7lvNVXeBwI Vr55ny/7dq8CkHIux/XJ7aRqOs12PxOAZQHtN7K0lMvIPr6k5aiaqYoi2vhUcMpG f70XyHQIOT80++BZK6vC+fZRDWjgu9nVa9rUHMsIkpkLrIRWYK4nldyDJW+Bc36E BdKXIkEaAM/DTz+6C0JksJ5056uXZ40UXQeXDACAuJk0eij6sQBCU1a7Gp3cRjRr HasHtTs1wU0hONV3fpEAJyPHrdlLaIcDMLGeoz92jNGdX3d1QeaDImT94pOmDVmn +HyiLbbd1EQ6PAhyb0TNf/HSrynFdmVeqrVoWNvqRP2aTT/09hw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:51 2025 by rpki-client