This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft File: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft (raw, json) Hash identifier: HiIV0FNBWEX1hoWM0F2uwq7Hetkc3jwnnWyCFS0sp1Q= Subject key identifier: B2:4F:CA:68:E9:3A:23:72:B2:C6:1B:84:65:EE:DC:E2:B5:13:B8:0C Authority key identifier: 55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C Certificate issuer: /CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C Certificate serial: 05554825F64CE557C15BC40B12A2808B214318B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft Manifest number: 01CE Signing time: Mon 01 Dec 2025 22:41:27 +0000 Manifest this update: Mon 01 Dec 2025 22:36:27 +0000 Manifest next update: Fri 05 Dec 2025 04:32:27 +0000 Files and hashes: 1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: dhNCCntTXF8fPVmBhyc2TID6diy3HmHPisy8tFKfm4Y=) 2: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: 6QeO2YACwb/BDxjV2SdJIfE+RbGnx2SRrYdFwDXs0Lw=) 3: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl (hash: O3YerSjYMYUbT/c+SMaL9u56B6zZkvCVgy93e4nHlLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:55:48:25:f6:4c:e5:57:c1:5b:c4:0b:12:a2:80:8b:21:43:18:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C Validity Not Before: Dec 1 22:36:27 2025 GMT Not After : Dec 5 04:32:27 2025 GMT Subject: CN=B24FCA68E93A2372B2C61B8465EEDCE2B513B80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:8b:e5:2b:04:aa:3e:2c:3b:95:1a:7e:5f: dc:dd:32:a2:cb:7b:d5:d8:f6:be:fb:80:53:36:19: f5:22:a9:d5:b8:c9:c2:87:ca:c1:b5:bd:8c:9f:5c: 1a:e4:95:9e:83:3b:20:54:59:b6:c7:4f:b7:6c:30: 2e:e1:5c:52:30:a0:68:e7:5c:5d:04:de:2d:03:99: c7:88:52:2d:af:a5:12:02:a6:f8:11:2c:24:94:7a: 8d:12:68:36:58:0a:27:ec:59:25:c6:f8:30:ae:c3: c3:1d:f8:87:e7:32:b8:3d:10:68:2f:0f:47:72:46: f4:cd:0a:52:b0:4b:ef:54:a5:5b:5f:45:74:4a:51: 51:3f:a3:51:1a:04:1d:b5:a2:71:56:35:d3:67:f0: 1d:ee:ab:3e:c3:06:e7:6a:9e:fd:68:3b:21:58:fc: 00:eb:3a:7d:e0:aa:0a:65:48:d4:16:94:42:81:1e: a5:c4:05:c2:f1:61:06:45:6d:fe:02:6b:a9:d2:fb: 4a:51:c1:2c:37:c1:40:fc:20:ef:e9:a9:9c:56:46: d6:b0:56:95:c0:7e:30:e5:17:45:92:cb:0b:5c:f7: 43:18:47:91:ea:08:b9:f0:13:e3:a9:54:2b:3e:da: 7b:03:8c:d8:1a:5d:a0:2a:a1:ea:fb:77:f5:7e:ac: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:CA:68:E9:3A:23:72:B2:C6:1B:84:65:EE:DC:E2:B5:13:B8:0C X509v3 Authority Key Identifier: keyid:55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:be:b4:19:15:93:a1:1c:83:83:39:72:3b:5a:c4:2c:3a:ed: e8:1c:4d:27:8e:da:0e:c1:7d:34:a8:45:2a:37:dc:e3:a6:7d: 4d:7e:d7:4b:44:2d:7a:1d:9a:d7:21:3e:64:97:9f:99:40:c7: 58:e9:5f:d1:53:68:f8:ad:09:72:1f:2c:f3:5b:f6:f2:49:2e: 64:48:ac:f8:b1:54:f4:74:0a:e0:97:e8:3a:e8:74:71:64:1a: 09:12:9b:f5:2d:d4:fb:91:e9:7b:48:70:e3:4c:7d:8a:7a:9a: d2:82:fc:52:35:cd:ef:ab:f6:fb:58:1f:95:87:3f:11:0a:6d: 7a:a6:8a:6b:91:51:a7:5c:b6:4f:ea:02:75:e1:df:15:cd:88: b7:10:51:01:a3:e0:84:76:dc:fa:5c:fd:35:66:c4:15:02:46: b8:19:23:85:00:47:81:05:e4:aa:5d:71:73:f5:d1:23:7e:f5: fa:71:b3:f8:da:47:26:9c:0c:3d:77:61:f9:e2:02:4a:89:88: dc:85:84:40:9c:ec:eb:05:d9:5c:64:49:67:84:70:06:37:09: a7:f3:3a:5f:17:e2:87:e1:5c:c7:62:53:9d:44:f0:bc:33:22: 6c:3b:eb:b1:fa:dd:97:20:48:69:74:80:b6:34:56:01:3a:57: ed:c1:60:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVVIJfZM5VfBW8QLEqKAiyFDGLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZB NzRDQUMzQzAeFw0yNTEyMDEyMjM2MjdaFw0yNTEyMDUwNDMyMjdaMDMxMTAvBgNV BAMTKEIyNEZDQTY4RTkzQTIzNzJCMkM2MUI4NDY1RUVEQ0UyQjUxM0I4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1YvlKwSqPiw7lRp+X9zdMqLL e9XY9r77gFM2GfUiqdW4ycKHysG1vYyfXBrklZ6DOyBUWbbHT7dsMC7hXFIwoGjn XF0E3i0DmceIUi2vpRICpvgRLCSUeo0SaDZYCifsWSXG+DCuw8Md+IfnMrg9EGgv D0dyRvTNClKwS+9UpVtfRXRKUVE/o1EaBB21onFWNdNn8B3uqz7DBudqnv1oOyFY /ADrOn3gqgplSNQWlEKBHqXEBcLxYQZFbf4Ca6nS+0pRwSw3wUD8IO/pqZxWRtaw VpXAfjDlF0WSywtc90MYR5HqCLnwE+OpVCs+2nsDjNgaXaAqoer7d/V+rG6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsk/KaOk6I3KyxhuEZe7c4rUTuAwwHwYDVR0j BBgwFoAUVWdWsOIR3SYvDV3J7Fkx76dMrDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRiMjBkOC01OTFiLTQxNTItOTc2OC05YzQyYjA2YzJmZTIvMC81NTY3NTZCMEUy MTFERDI2MkYwRDVEQzlFQzU5MzFFRkE3NENBQzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZBNzRD QUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMx RUZBNzRDQUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG+tBkVk6Ecg4M5cjtaxCw67egcTSeO2g7B fTSoRSo33OOmfU1+10tELXodmtchPmSXn5lAx1jpX9FTaPitCXIfLPNb9vJJLmRI rPixVPR0CuCX6DrodHFkGgkSm/Ut1PuR6XtIcONMfYp6mtKC/FI1ze+r9vtYH5WH PxEKbXqmimuRUadctk/qAnXh3xXNiLcQUQGj4IR23Ppc/TVmxBUCRrgZI4UAR4EF 5KpdcXP10SN+9fpxs/jaRyacDD13YfniAkqJiNyFhECc7OsF2VxkSWeEcAY3Cafz Ol8X4ofhXMdiU51E8LwzImw767H63ZcgSGl0gLY0VgE6V+3BYFI= -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:03 2025 by rpki-client