This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: 4w7a7cGy9cwx+v1LOA/n8atbNxN3YRYOKYzQfuR6X+g= Subject key identifier: A1:0A:29:B3:32:C7:06:F2:49:3D:8E:12:55:2B:89:78:00:E4:D0:35 Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 36F23EFFDC06B9D1D1C69F53752F129FCFC2B7DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: FE Signing time: Sat 06 Dec 2025 23:11:05 +0000 Manifest this update: Sat 06 Dec 2025 23:06:05 +0000 Manifest next update: Wed 10 Dec 2025 09:45:05 +0000 Files and hashes: 1: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: LalwukY8NAapy4w5ZjuiRwl4WvNM64sP9SGGcsQUPSg=) 2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: 4USC1AQzGKvJLoaILHyi8/vcN8nVPul2782sFf1fdxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f2:3e:ff:dc:06:b9:d1:d1:c6:9f:53:75:2f:12:9f:cf:c2:b7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Dec 6 23:06:05 2025 GMT Not After : Dec 10 09:45:05 2025 GMT Subject: CN=A10A29B332C706F2493D8E12552B897800E4D035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:9c:47:0b:72:d2:f7:cf:7b:e4:01:61:98: 6e:60:7d:81:ba:b3:25:23:aa:2b:20:bf:b4:fb:c7: 48:52:88:08:18:60:c7:42:1a:ee:ed:4f:f7:08:2c: 46:2c:97:25:11:13:12:8b:58:07:39:10:03:5f:aa: b4:d0:19:17:d0:ca:7e:d4:6e:d6:ac:b4:8f:8b:8b: 2f:b2:87:cd:f2:e4:aa:dc:19:97:b1:8d:62:08:ae: 0b:f7:74:7f:49:fd:ff:ef:ee:ee:8d:63:79:eb:0e: fb:d3:ce:df:e0:88:8f:8a:ab:82:6b:15:c3:91:75: 50:8f:c0:47:54:c5:eb:e8:cc:69:48:75:b7:e6:d3: 06:85:a9:55:d8:12:c3:15:b1:a3:e6:59:1a:b4:22: 90:55:4d:01:2e:08:e6:59:36:c6:3f:cf:88:53:9d: 1d:0c:5a:7e:6c:fe:45:3c:33:30:42:20:8e:ed:d1: 9b:dd:47:c8:bd:0e:b0:2b:f5:28:ca:02:22:9b:ab: a1:b5:4f:3f:ef:de:48:16:3c:1c:7d:78:24:fb:29: 0b:c3:5f:99:00:f0:4f:66:d7:42:a7:7c:5c:b1:b7: 5d:30:19:74:2f:33:50:08:81:81:53:5c:7c:c9:4d: a8:78:90:40:7c:aa:c4:4b:f5:08:b1:74:6d:bd:01: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:29:B3:32:C7:06:F2:49:3D:8E:12:55:2B:89:78:00:E4:D0:35 X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:31:40:a7:d5:b5:19:a1:06:b4:56:03:f8:e4:dc:95:63:54: 73:a8:db:67:93:6d:2a:f5:a1:da:b8:02:0b:dc:c9:51:1b:0a: 50:a2:a7:c5:1e:fb:b3:8c:39:06:ec:63:c3:c7:3c:4f:c7:d0: f7:e2:e6:b1:63:d4:61:e7:3b:f7:b1:8e:9f:ef:ef:72:dc:f1: 1c:51:6d:d1:89:ae:93:be:61:91:a4:9c:f8:ca:d3:db:c8:8b: 07:53:9e:73:02:8c:50:25:b3:4c:e7:a6:89:73:da:46:c3:be: 60:74:de:47:94:94:c3:45:5a:61:2a:11:62:a1:0f:ab:73:24: ee:d2:50:33:fb:4d:c7:3d:19:e9:89:3f:79:6d:3b:69:4b:19: 31:73:16:ae:7e:24:d0:84:e7:ca:d5:e4:f8:ac:c0:d4:8f:ef: bf:51:9c:d2:ee:93:50:4d:8b:c3:d2:2e:76:6f:99:4b:e1:58: 76:59:46:59:b3:0b:45:ac:e7:1e:4f:71:24:3e:af:ca:f4:a4: b0:d3:90:3d:af:f0:b0:50:54:f2:3f:1b:58:92:bc:39:04:e6: 12:23:14:f5:4b:24:f9:64:b6:fb:5e:30:d4:a5:93:af:c5:be: ff:35:fc:be:69:7b:e9:c5:9d:79:ed:b1:c0:9a:e9:88:35:d9: 94:b4:68:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvI+/9wGudHRxp9TdS8Sn8/Ct9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNTEyMDYyMzA2MDVaFw0yNTEyMTAwOTQ1MDVaMDMxMTAvBgNV BAMTKEExMEEyOUIzMzJDNzA2RjI0OTNEOEUxMjU1MkI4OTc4MDBFNEQwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC5xHC3LS98975AFhmG5gfYG6 syUjqisgv7T7x0hSiAgYYMdCGu7tT/cILEYslyURExKLWAc5EANfqrTQGRfQyn7U btastI+Liy+yh83y5KrcGZexjWIIrgv3dH9J/f/v7u6NY3nrDvvTzt/giI+Kq4Jr FcORdVCPwEdUxevozGlIdbfm0waFqVXYEsMVsaPmWRq0IpBVTQEuCOZZNsY/z4hT nR0MWn5s/kU8MzBCII7t0ZvdR8i9DrAr9SjKAiKbq6G1Tz/v3kgWPBx9eCT7KQvD X5kA8E9m10KnfFyxt10wGXQvM1AIgYFTXHzJTah4kEB8qsRL9QixdG29AdBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQopszLHBvJJPY4SVSuJeADk0DUwHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUxQKfVtRmhBrRWA/jk3JVjVHOo22eTbSr1 odq4AgvcyVEbClCip8Ue+7OMOQbsY8PHPE/H0Pfi5rFj1GHnO/exjp/v73Lc8RxR bdGJrpO+YZGknPjK09vIiwdTnnMCjFAls0znpolz2kbDvmB03keUlMNFWmEqEWKh D6tzJO7SUDP7Tcc9GemJP3ltO2lLGTFzFq5+JNCE58rV5PiswNSP779RnNLuk1BN i8PSLnZvmUvhWHZZRlmzC0Ws5x5PcSQ+r8r0pLDTkD2v8LBQVPI/G1iSvDkE5hIj FPVLJPlktvteMNSlk6/Fvv81/L5pe+nFnXntscCa6Yg12ZS0aMg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:47 2025 by rpki-client