This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: iGQ/Wp/dgjvfVETdE65HkCUuGW0F0AS0CRzFLEy0bjs= Subject key identifier: 24:85:E4:4D:CF:15:74:67:9E:AD:AB:72:2E:ED:CA:7F:6F:4E:70:21 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 391A408E0F6FB7AC3328615F6C7562AC310A8A9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 025D Signing time: Tue 16 Dec 2025 11:32:28 +0000 Manifest this update: Tue 16 Dec 2025 11:27:28 +0000 Manifest next update: Fri 19 Dec 2025 18:37:28 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 2: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 3: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: 7CgbgCx4/N4YMG/Zc9fov7eZm8ujy4bMAy0f2Ckw+rY=) 5: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 6: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 18:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1a:40:8e:0f:6f:b7:ac:33:28:61:5f:6c:75:62:ac:31:0a:8a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Dec 16 11:27:28 2025 GMT Not After : Dec 19 18:37:28 2025 GMT Subject: CN=2485E44DCF1574679EADAB722EEDCA7F6F4E7021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:4a:a7:55:93:93:20:8d:f6:f5:ec:a8:68: e9:ce:df:9b:40:67:8c:58:82:cc:f7:4b:eb:59:20: 5a:95:78:de:34:6a:1f:28:0c:9e:1a:98:06:73:05: 96:e4:16:60:17:75:09:f3:86:5e:24:14:79:63:90: 39:06:49:5c:82:29:63:f4:a6:0e:08:a0:16:0a:6a: db:ee:51:e0:d3:8c:50:c3:7b:f3:9f:e1:20:7e:37: 47:8a:aa:38:84:ac:cb:43:d1:0b:45:b1:22:38:1f: ef:da:d1:7d:a4:26:95:0a:2a:97:bc:6d:a7:cd:70: 75:10:ea:36:fe:78:b5:55:7d:d4:8d:ec:1e:6c:f1: 0a:a4:84:24:c0:35:65:e0:4a:69:da:68:8f:c9:d6: ac:10:b4:fc:8a:6c:e8:48:4c:1a:47:b5:54:aa:7e: 75:3a:8e:97:57:4a:11:23:c9:3c:50:8d:4b:d4:fc: 5f:1a:1b:39:b8:56:74:8a:6a:b7:7f:70:cd:a2:7c: 0d:20:56:53:cf:41:d6:4f:e7:bd:e1:c3:c6:a8:cd: 8d:3d:19:55:90:8e:9b:67:af:b2:79:95:ab:09:1d: be:85:a1:ae:43:e8:51:f2:da:a7:97:ec:9f:33:4a: 83:0a:2b:7d:42:f5:4d:47:7e:2f:39:11:c5:0d:36: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:E4:4D:CF:15:74:67:9E:AD:AB:72:2E:ED:CA:7F:6F:4E:70:21 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dc:37:8f:d4:ec:c4:5d:b6:56:5a:4e:29:ac:e7:11:29:f4: 3c:23:05:b3:0f:92:2f:c7:98:64:53:55:74:7e:a9:ed:65:e0: 4d:5d:65:64:01:55:1b:d7:e6:04:d0:f9:a3:02:68:57:5e:6c: 34:ea:7e:f1:f5:46:9c:7e:f1:4f:65:3f:37:0a:aa:cd:b1:8e: 9e:76:d2:1d:5c:ae:2c:b6:58:0e:61:d8:a0:5f:b6:0b:07:ad: 4d:5c:e5:fc:f0:60:cc:c1:c0:1c:f0:91:54:4a:8b:9a:8b:fb: 86:9e:02:af:f1:57:26:19:c5:2d:e6:6c:2e:1a:f2:f7:79:a9: c2:ab:81:f6:27:9d:b5:65:db:4b:65:91:1b:c1:48:33:2d:17: f5:80:15:22:81:16:71:5c:ce:b3:f8:ee:6b:61:65:ba:f6:0c: 69:d9:0a:17:60:f9:46:f2:b7:fc:bd:b4:3d:ad:8d:3e:1b:d1: 22:20:a6:6c:08:7f:05:a3:5e:26:7d:d3:9f:91:80:1b:6e:3d: 25:58:61:8f:24:a8:3a:63:ec:22:e7:8a:ab:9c:85:24:0f:e8: 44:88:38:de:37:6a:41:af:6f:4c:09:5d:bf:7e:4f:91:ce:1e: cd:8b:1d:ab:f0:06:69:f9:ce:dc:9d:26:40:26:e5:36:6e:1e: 95:c2:e5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORpAjg9vt6wzKGFfbHVirDEKipowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTEyMTYxMTI3MjhaFw0yNTEyMTkxODM3MjhaMDMxMTAvBgNV BAMTKDI0ODVFNDREQ0YxNTc0Njc5RUFEQUI3MjJFRURDQTdGNkY0RTcwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgEqnVZOTII329eyoaOnO35tA Z4xYgsz3S+tZIFqVeN40ah8oDJ4amAZzBZbkFmAXdQnzhl4kFHljkDkGSVyCKWP0 pg4IoBYKatvuUeDTjFDDe/Of4SB+N0eKqjiErMtD0QtFsSI4H+/a0X2kJpUKKpe8 bafNcHUQ6jb+eLVVfdSN7B5s8QqkhCTANWXgSmnaaI/J1qwQtPyKbOhITBpHtVSq fnU6jpdXShEjyTxQjUvU/F8aGzm4VnSKard/cM2ifA0gVlPPQdZP573hw8aozY09 GVWQjptnr7J5lasJHb6Foa5D6FHy2qeX7J8zSoMKK31C9U1Hfi85EcUNNvN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIXkTc8VdGeeratyLu3Kf29OcCEwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfcN4/U7MRdtlZaTims5xEp9DwjBbMPki/H mGRTVXR+qe1l4E1dZWQBVRvX5gTQ+aMCaFdebDTqfvH1Rpx+8U9lPzcKqs2xjp52 0h1criy2WA5h2KBftgsHrU1c5fzwYMzBwBzwkVRKi5qL+4aeAq/xVyYZxS3mbC4a 8vd5qcKrgfYnnbVl20tlkRvBSDMtF/WAFSKBFnFczrP47mthZbr2DGnZChdg+Uby t/y9tD2tjT4b0SIgpmwIfwWjXiZ905+RgBtuPSVYYY8kqDpj7CLniquchSQP6ESI ON43akGvb0wJXb9+T5HOHs2LHavwBmn5ztydJkAm5TZuHpXC5dk= -----END CERTIFICATE-----Generated at Wed Dec 17 04:14:32 2025 by rpki-client