This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: WfmUr0tMrEMVeCj/nlDgJUv5APERdnXXIUq+Q9VNVhQ= Subject key identifier: E1:FA:C2:A9:D3:3C:D7:B3:9C:1C:8D:FD:C3:65:33:42:E5:91:88:E8 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 0A9AF8D32968390E88B09425E6873DACAF928BE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01EA Signing time: Mon 01 Dec 2025 17:01:09 +0000 Manifest this update: Mon 01 Dec 2025 16:56:09 +0000 Manifest next update: Fri 05 Dec 2025 03:44:09 +0000 Files and hashes: 1: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) 4: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: GuosH1/qJBq/kLNl6re0BFDM8uRyl1tTu0JlmjEy7xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9a:f8:d3:29:68:39:0e:88:b0:94:25:e6:87:3d:ac:af:92:8b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Dec 1 16:56:09 2025 GMT Not After : Dec 5 03:44:09 2025 GMT Subject: CN=E1FAC2A9D33CD7B39C1C8DFDC3653342E59188E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:b5:38:38:0d:17:20:44:36:d3:82:e2:29: 6f:1a:77:71:53:83:10:34:b3:90:68:fd:f0:0d:c8: 65:2e:07:2d:d0:ad:ce:03:7b:a0:ae:c3:64:b3:34: aa:a3:96:bf:16:68:d3:cb:3f:34:bc:e1:c7:85:55: a8:a3:c4:67:4e:4a:cd:9d:3b:d9:10:d9:1b:24:21: cc:4e:cf:36:04:98:45:74:8f:ad:b6:81:30:34:62: e9:32:70:b3:81:af:0d:58:4c:ac:95:b7:c9:3d:81: 06:3e:b8:64:55:a2:ee:65:da:b7:93:d5:9f:9e:17: 15:0a:7f:a6:dd:56:ea:6a:5e:e5:04:2b:2b:0f:c3: 9b:d9:38:23:3f:79:9f:d3:56:5a:82:34:20:87:4d: 83:97:8e:07:fe:87:11:7c:86:eb:92:c5:ed:0a:81: 1f:c0:07:55:34:61:fc:91:e7:00:2f:ef:bc:14:37: d2:9d:21:fe:4e:2b:4d:ca:4b:88:02:40:3f:2c:ad: 54:4b:f9:b3:cf:33:86:e1:4c:4a:14:34:ce:de:97: 72:e9:f0:d1:6b:28:ce:54:91:24:e1:a8:83:80:65: 91:2b:8a:99:f1:fb:35:f7:ed:98:89:77:f1:71:7f: f3:4d:3a:13:f3:3f:bf:7d:8f:96:6a:7e:71:df:e0: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FA:C2:A9:D3:3C:D7:B3:9C:1C:8D:FD:C3:65:33:42:E5:91:88:E8 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:b1:be:80:54:e3:46:f9:5a:f5:79:5e:97:a9:2d:2b:25: 68:45:1b:84:3c:f1:3a:a1:a8:17:b8:e9:60:52:f2:2b:49:82: 1b:24:46:a4:8e:c2:c5:3e:06:c0:e6:3b:74:82:cc:3b:bd:5b: 07:aa:d3:4a:2e:d8:af:77:5a:df:00:0f:72:44:11:bb:86:2f: 45:97:04:8c:55:2d:84:92:09:0b:63:47:50:48:7b:ed:65:9e: 7b:02:65:3c:97:02:7c:9b:2d:03:59:c1:a6:3b:1d:3c:43:94: 71:c6:8e:18:ef:21:0a:18:4d:50:72:c1:71:b5:43:c5:e7:b7: 52:c3:24:0b:1e:ad:54:ea:ac:18:fd:60:15:f5:1f:4d:54:3e: 8e:f5:e9:45:44:4b:34:35:ce:1a:ce:13:a4:7c:ad:a3:1e:4e: 66:3e:2d:dc:41:57:be:0a:13:1c:40:81:bb:14:5e:b7:5b:2f: ca:c2:f9:22:4b:c9:53:7d:76:a7:1a:4c:cd:67:86:c7:66:97: 9a:2b:4b:36:e6:4f:e7:fe:5e:55:29:a6:f0:a1:18:08:62:c0: 46:ed:8f:5a:72:70:4f:a0:0e:e0:0a:b2:fd:51:40:4d:0c:9d: 32:80:9b:3d:4f:56:a1:de:bc:71:4d:88:df:3f:02:1e:b5:13: f8:e6:07:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpr40yloOQ6IsJQl5oc9rK+Si+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTEyMDExNjU2MDlaFw0yNTEyMDUwMzQ0MDlaMDMxMTAvBgNV BAMTKEUxRkFDMkE5RDMzQ0Q3QjM5QzFDOERGREMzNjUzMzQyRTU5MTg4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRLU4OA0XIEQ204LiKW8ad3FT gxA0s5Bo/fANyGUuBy3Qrc4De6Cuw2SzNKqjlr8WaNPLPzS84ceFVaijxGdOSs2d O9kQ2RskIcxOzzYEmEV0j622gTA0YukycLOBrw1YTKyVt8k9gQY+uGRVou5l2reT 1Z+eFxUKf6bdVupqXuUEKysPw5vZOCM/eZ/TVlqCNCCHTYOXjgf+hxF8huuSxe0K gR/AB1U0YfyR5wAv77wUN9KdIf5OK03KS4gCQD8srVRL+bPPM4bhTEoUNM7el3Lp 8NFrKM5UkSThqIOAZZEripnx+zX37ZiJd/Fxf/NNOhPzP799j5ZqfnHf4IF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4frCqdM817OcHI39w2UzQuWRiOgwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADljsb6AVONG+Vr1eV6XqS0rJWhFG4Q88Tqh qBe46WBS8itJghskRqSOwsU+BsDmO3SCzDu9Wweq00ou2K93Wt8AD3JEEbuGL0WX BIxVLYSSCQtjR1BIe+1lnnsCZTyXAnybLQNZwaY7HTxDlHHGjhjvIQoYTVBywXG1 Q8Xnt1LDJAserVTqrBj9YBX1H01UPo716UVESzQ1zhrOE6R8raMeTmY+LdxBV74K ExxAgbsUXrdbL8rC+SJLyVN9dqcaTM1nhsdml5orSzbmT+f+XlUppvChGAhiwEbt j1pycE+gDuAKsv1RQE0MnTKAmz1PVqHevHFNiN8/Ah61E/jmB4M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client