This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: R/t7zxA1AKENlsU5iqhaptH5uoB3Uv+K6RrdrObWZYM= Subject key identifier: 39:58:31:82:6A:8C:EC:FF:77:AA:41:F8:C6:ED:30:52:BD:C0:F8:BB Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 3FD5C2406B427D0724A51D52C48BD0AC2C3EA721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: F5 Signing time: Wed 03 Dec 2025 11:20:46 +0000 Manifest this update: Wed 03 Dec 2025 11:15:46 +0000 Manifest next update: Sat 06 Dec 2025 14:21:46 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: subHfSXfhIFvbBMomkwCDK5H4+Mc/VDPgzFgEIC/sUQ=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d5:c2:40:6b:42:7d:07:24:a5:1d:52:c4:8b:d0:ac:2c:3e:a7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Dec 3 11:15:46 2025 GMT Not After : Dec 6 14:21:46 2025 GMT Subject: CN=395831826A8CECFF77AA41F8C6ED3052BDC0F8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:3b:4d:75:05:6e:d9:4c:53:f3:34:42:4f: 62:db:78:7d:50:fb:9c:67:b0:59:5b:9d:02:67:d3: 13:bd:c6:01:9c:99:23:51:f4:f5:66:7c:18:0d:bf: 5a:20:f2:84:71:fe:d8:1f:62:12:70:f0:b1:62:e4: be:93:eb:4f:eb:0e:52:17:09:84:ee:f1:8a:3f:71: c5:80:a8:66:b3:60:d8:fc:d9:3b:d2:7e:8a:67:5c: 00:4a:0d:65:75:c8:b2:54:07:af:41:0b:45:c1:21: aa:9b:dd:e9:e8:7a:05:0b:1a:22:89:46:56:f0:b8: 2d:07:ed:cf:a2:f8:3b:44:52:a9:a7:09:2e:49:37: a0:9e:2e:9d:22:90:8f:90:86:1f:39:86:e1:39:2e: 28:40:e9:ea:ba:1c:ff:f1:4a:0c:fd:3b:b6:39:f4: b9:1b:2a:b8:be:bc:29:90:b9:ed:a6:a3:02:6a:c3: 82:8a:97:42:e0:56:1f:62:6e:6a:e3:07:c3:5e:2f: e6:b1:e2:a2:7f:95:de:c0:16:17:33:e7:44:58:8e: 97:32:02:52:45:57:3b:74:ff:fe:0c:42:4a:86:b0: 3b:51:c8:f8:6a:cf:3c:b6:49:6b:67:f7:96:f8:15: 14:01:80:06:05:9e:5c:8e:a6:cf:ef:61:19:36:44: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:58:31:82:6A:8C:EC:FF:77:AA:41:F8:C6:ED:30:52:BD:C0:F8:BB X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:21:11:59:3e:5c:8b:7b:4b:9c:96:50:20:c8:e0:66:19: 33:bb:66:19:fe:56:f3:e2:87:33:c8:81:66:3c:6d:13:a1:b0: 94:74:b2:59:61:40:0d:3a:bb:6c:d2:9e:4e:26:dc:54:64:68: af:dc:93:4d:4d:6b:5b:9a:97:21:b4:37:51:4f:14:67:db:33: 2d:99:e5:a0:7b:6d:6e:2f:68:31:fa:b2:78:89:be:d1:25:1d: 90:df:4b:c8:47:62:51:67:9c:21:c5:bc:f2:2f:4a:7b:99:7f: 59:2d:62:23:91:bd:8b:4c:2e:9b:64:a1:f1:cf:94:3f:bc:1f: 96:e1:2e:a0:34:ee:81:c9:6e:e6:10:84:88:37:28:78:46:07: ba:35:79:be:0b:32:e2:4e:6e:35:64:e9:96:50:a6:56:f5:0a: e1:41:1e:b9:89:04:c1:af:ec:00:b7:00:8f:27:db:94:4a:35: e7:6f:e0:01:8a:1c:33:f4:a5:22:5e:0b:d7:0e:df:8f:61:2c: da:96:3b:00:c7:f1:5a:db:75:7b:39:08:2c:6e:32:a0:41:58: 53:98:74:ea:2a:a0:e7:13:1e:c4:1b:a1:a0:fd:2f:4b:4f:df: f6:8c:00:04:a1:56:55:f8:2e:b3:2e:16:8d:fb:dd:6e:03:4b: e4:32:63:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9XCQGtCfQckpR1SxIvQrCw+pyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTEyMDMxMTE1NDZaFw0yNTEyMDYxNDIxNDZaMDMxMTAvBgNV BAMTKDM5NTgzMTgyNkE4Q0VDRkY3N0FBNDFGOEM2RUQzMDUyQkRDMEY4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWTtNdQVu2UxT8zRCT2LbeH1Q +5xnsFlbnQJn0xO9xgGcmSNR9PVmfBgNv1og8oRx/tgfYhJw8LFi5L6T60/rDlIX CYTu8Yo/ccWAqGazYNj82TvSfopnXABKDWV1yLJUB69BC0XBIaqb3enoegULGiKJ RlbwuC0H7c+i+DtEUqmnCS5JN6CeLp0ikI+Qhh85huE5LihA6eq6HP/xSgz9O7Y5 9LkbKri+vCmQue2mowJqw4KKl0LgVh9ibmrjB8NeL+ax4qJ/ld7AFhcz50RYjpcy AlJFVzt0//4MQkqGsDtRyPhqzzy2SWtn95b4FRQBgAYFnlyOps/vYRk2RNUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVgxgmqM7P93qkH4xu0wUr3A+LswHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2fIRFZPlyLe0ucllAgyOBmGTO7Zhn+VvPi hzPIgWY8bROhsJR0sllhQA06u2zSnk4m3FRkaK/ck01Na1ualyG0N1FPFGfbMy2Z 5aB7bW4vaDH6sniJvtElHZDfS8hHYlFnnCHFvPIvSnuZf1ktYiORvYtMLptkofHP lD+8H5bhLqA07oHJbuYQhIg3KHhGB7o1eb4LMuJObjVk6ZZQplb1CuFBHrmJBMGv 7AC3AI8n25RKNedv4AGKHDP0pSJeC9cO349hLNqWOwDH8VrbdXs5CCxuMqBBWFOY dOoqoOcTHsQboaD9L0tP3/aMAAShVlX4LrMuFo373W4DS+QyY5Q= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:12 2025 by rpki-client