This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: cOM8U2D9eTD1kgVUdjmVUjcViFJupZzgVnVkYYLYikY= Subject key identifier: FF:D6:7F:82:F3:F1:89:23:97:EE:24:DC:36:33:F6:7D:87:46:6B:FF Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 2E8B38360ACDF574EBB9EFFE9C19C46A38C1BD30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04E8 Signing time: Wed 03 Dec 2025 12:20:50 +0000 Manifest this update: Wed 03 Dec 2025 12:15:50 +0000 Manifest next update: Sat 06 Dec 2025 18:42:50 +0000 Files and hashes: 1: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 2: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 3: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 4: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: ESOJyfOkDe8foZKDqtwH9HNMZCjQOYOUdI6U3fJDkRI=) 5: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) 6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8b:38:36:0a:cd:f5:74:eb:b9:ef:fe:9c:19:c4:6a:38:c1:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Dec 3 12:15:50 2025 GMT Not After : Dec 6 18:42:50 2025 GMT Subject: CN=FFD67F82F3F1892397EE24DC3633F67D87466BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:37:8b:33:7e:88:01:7f:52:ef:6e:cd:41: 79:88:51:ba:c4:c2:e1:22:b2:ea:ad:ae:eb:f3:84: df:a6:7a:6e:72:3c:81:3e:12:e0:4b:90:05:78:6c: 50:3d:f3:9b:fb:61:df:cb:49:d6:59:7b:34:8b:0d: cc:c3:84:02:e0:4c:ec:aa:16:a1:bb:a0:64:77:0f: bc:2e:b6:4e:8c:d5:62:ed:3d:36:66:f8:88:c4:72: 0f:a8:21:d8:2e:3c:5f:60:3c:dd:23:56:d4:9c:75: a9:8c:91:8a:d4:f3:94:cf:36:f3:83:88:2f:ef:ab: 4d:7d:16:7c:d4:0e:7e:ce:2d:6b:1e:c0:d4:22:5a: 95:36:09:29:08:9c:50:df:29:0e:9f:8f:18:86:db: 93:99:af:ba:59:ed:40:bf:28:a3:9c:2a:c7:a7:41: 15:97:e9:80:68:a7:81:20:39:b9:c6:da:6c:c9:e6: 4c:0a:24:05:4b:8c:56:28:e1:7f:b4:0a:df:f3:66: 79:37:8a:21:76:15:2a:53:84:45:51:81:3d:6b:4b: 85:3d:cf:4e:13:b4:f8:37:47:57:fb:6f:56:ee:0d: ce:16:de:1e:b1:70:ee:95:8d:75:c7:58:d9:7a:f9: 31:27:ef:9c:bd:a8:27:c3:96:d5:40:dd:9e:8d:7e: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:7F:82:F3:F1:89:23:97:EE:24:DC:36:33:F6:7D:87:46:6B:FF X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c9:c3:90:82:e1:d5:75:fb:bb:83:b9:5a:53:59:d2:6b:f7: 8f:54:49:20:7f:29:a5:70:9b:14:b6:a5:cd:bf:f0:f7:fc:4a: b0:2a:2c:b6:81:b5:2b:33:a4:78:9c:bd:8a:02:86:1b:27:6d: 05:14:b8:20:c4:46:80:05:db:95:a4:e7:5c:47:2f:7a:39:b0: 4f:84:b8:51:63:99:50:3d:d2:09:98:d8:01:e2:e4:30:8d:d3: 4a:c0:a9:b7:85:47:22:be:75:a0:38:3d:9e:99:b0:b5:9c:e7: 4b:57:01:66:53:91:fa:25:23:df:b3:93:fa:7e:0e:d7:d2:12: b0:ec:fa:fa:a9:13:5f:5a:d7:be:38:6f:3e:d2:a4:0f:e6:07: 65:bf:fd:5d:ae:ec:a5:e1:3b:8c:30:bf:07:91:2a:59:66:2e: 58:e3:54:96:c0:25:09:c5:42:f0:b4:58:97:ab:c3:2f:2a:dd: 07:96:66:f9:f9:1c:71:16:f0:6f:73:af:e8:ba:58:c0:40:4a: 8b:c7:cb:34:f3:8d:90:4a:75:e1:07:a9:87:53:a4:67:34:05: 27:37:09:9e:de:41:9d:e4:e8:69:a5:6e:89:86:ba:47:f9:67: 41:43:30:3d:e8:33:70:95:41:98:7b:4e:02:8f:45:b8:e5:f1: 69:24:2f:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULos4NgrN9XTrue/+nBnEajjBvTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTEyMDMxMjE1NTBaFw0yNTEyMDYxODQyNTBaMDMxMTAvBgNV BAMTKEZGRDY3RjgyRjNGMTg5MjM5N0VFMjREQzM2MzNGNjdEODc0NjZCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMjeLM36IAX9S727NQXmIUbrE wuEisuqtruvzhN+mem5yPIE+EuBLkAV4bFA985v7Yd/LSdZZezSLDczDhALgTOyq FqG7oGR3D7wutk6M1WLtPTZm+IjEcg+oIdguPF9gPN0jVtScdamMkYrU85TPNvOD iC/vq019FnzUDn7OLWsewNQiWpU2CSkInFDfKQ6fjxiG25OZr7pZ7UC/KKOcKsen QRWX6YBop4EgObnG2mzJ5kwKJAVLjFYo4X+0Ct/zZnk3iiF2FSpThEVRgT1rS4U9 z04TtPg3R1f7b1buDc4W3h6xcO6VjXXHWNl6+TEn75y9qCfDltVA3Z6Nfl/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9Z/gvPxiSOX7iTcNjP2fYdGa/8wHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfJw5CC4dV1+7uDuVpTWdJr949USSB/KaVw mxS2pc2/8Pf8SrAqLLaBtSszpHicvYoChhsnbQUUuCDERoAF25Wk51xHL3o5sE+E uFFjmVA90gmY2AHi5DCN00rAqbeFRyK+daA4PZ6ZsLWc50tXAWZTkfolI9+zk/p+ DtfSErDs+vqpE19a1744bz7SpA/mB2W//V2u7KXhO4wwvweRKllmLljjVJbAJQnF QvC0WJerwy8q3QeWZvn5HHEW8G9zr+i6WMBASovHyzTzjZBKdeEHqYdTpGc0BSc3 CZ7eQZ3k6GmlbomGukf5Z0FDMD3oM3CVQZh7TgKPRbjl8WkkL5k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:42 2025 by rpki-client