This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: ELN/w0h0QEIg8X14xJfH2/xNkURSA61XdPLMe8YN46I= Subject key identifier: 36:05:DF:F0:C3:7C:4E:3A:2D:AC:3D:F3:36:C2:92:48:13:ED:81:9B Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 3CF72888B54C3001267DE7C5A5299D16C1B96266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 01FF Signing time: Tue 02 Dec 2025 16:11:02 +0000 Manifest this update: Tue 02 Dec 2025 16:06:02 +0000 Manifest next update: Fri 05 Dec 2025 20:11:02 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) 2: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: ACRajfS1us0/rzV2+kuw3JMulIvUA65msO3V+1tZk78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f7:28:88:b5:4c:30:01:26:7d:e7:c5:a5:29:9d:16:c1:b9:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Dec 2 16:06:02 2025 GMT Not After : Dec 5 20:11:02 2025 GMT Subject: CN=3605DFF0C37C4E3A2DAC3DF336C2924813ED819B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:f9:42:b8:6d:32:fa:1e:ea:c6:df:3c:be: 3f:fe:2b:74:90:9b:09:87:66:d5:2c:1a:e8:82:8c: 36:b9:7a:f1:f7:2c:23:63:d1:bf:bb:00:7e:a8:ca: 75:43:0e:d5:c6:97:d4:24:84:99:cf:0d:8d:33:c8: 66:c8:bc:b2:d1:49:30:51:4c:29:09:d5:83:20:72: a2:e5:71:5c:e6:4a:5c:6d:94:64:3e:71:38:99:f9: cc:f5:e6:09:76:72:f6:fc:bc:65:d8:4f:ab:d0:09: 6c:36:b6:27:49:28:c8:64:97:3b:12:da:e8:0d:d8: 12:8d:2a:d9:f8:23:02:e1:30:0e:7e:f0:2b:d9:e6: df:38:3f:f8:4b:eb:50:2b:de:85:9e:3b:d5:73:70: 6b:47:43:8f:f9:37:ee:c7:a0:f2:0a:c3:5a:f3:bc: e2:81:17:2c:ba:58:ef:7c:b5:7c:a7:c8:66:ae:b5: f8:e5:1e:ee:48:41:83:4f:64:d6:34:93:4c:9a:95: 72:6e:c5:e7:a8:4c:a4:28:ec:68:d1:ca:a6:95:bd: fe:b8:79:58:9c:d0:1e:8f:fc:56:ae:d5:42:ab:c0: a6:8f:63:b4:ab:ab:32:83:59:a3:df:48:e6:21:d3: b9:9c:36:5b:05:e3:5a:11:02:4f:ab:99:59:ba:c1: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:DF:F0:C3:7C:4E:3A:2D:AC:3D:F3:36:C2:92:48:13:ED:81:9B X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:4f:0c:10:df:20:df:09:c1:62:ee:3a:d2:65:e5:99:7d:29: cc:dd:13:71:6f:c8:ce:68:f5:2f:01:1b:91:ab:3e:1b:92:1b: f7:5a:13:3a:a1:98:61:8d:96:66:8d:b9:ba:f9:78:c3:35:af: 66:28:c0:6c:7f:aa:8b:bb:26:0c:ff:2e:da:97:f1:25:fc:3d: 17:98:8c:c0:94:ac:83:82:48:90:43:9e:40:88:0f:83:74:8b: e0:51:06:44:f6:94:44:ae:c2:9e:19:1b:96:93:1e:40:3a:c8: 7a:e7:f0:6b:be:36:14:eb:51:a5:f4:12:e6:45:95:74:52:2c: 23:41:55:b0:11:13:9d:82:93:0a:92:4d:ee:dd:1a:fc:89:83: 5f:66:42:ac:9b:51:df:9b:54:41:fe:27:c9:ef:9d:b3:06:af: e8:b6:c5:1a:63:aa:d0:5d:ac:98:d9:dc:60:4f:1e:f2:ac:b0: 7e:5a:ce:d9:60:91:31:e2:28:3f:61:8b:ef:e1:45:00:d5:c7: 4f:00:94:9d:c2:0a:b2:86:fb:3d:a3:bf:54:59:c2:af:a5:2d: 36:6a:82:e0:ee:f5:c1:5f:4d:bc:e1:21:7e:d5:e1:c3:a0:9c: 61:c3:92:69:ad:a0:24:10:e8:bd:d7:97:95:6a:ae:5f:fd:fb: 61:c9:7b:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPcoiLVMMAEmfefFpSmdFsG5YmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTEyMDIxNjA2MDJaFw0yNTEyMDUyMDExMDJaMDMxMTAvBgNV BAMTKDM2MDVERkYwQzM3QzRFM0EyREFDM0RGMzM2QzI5MjQ4MTNFRDgxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WflCuG0y+h7qxt88vj/+K3SQ mwmHZtUsGuiCjDa5evH3LCNj0b+7AH6oynVDDtXGl9QkhJnPDY0zyGbIvLLRSTBR TCkJ1YMgcqLlcVzmSlxtlGQ+cTiZ+cz15gl2cvb8vGXYT6vQCWw2tidJKMhklzsS 2ugN2BKNKtn4IwLhMA5+8CvZ5t84P/hL61Ar3oWeO9VzcGtHQ4/5N+7HoPIKw1rz vOKBFyy6WO98tXynyGautfjlHu5IQYNPZNY0k0yalXJuxeeoTKQo7GjRyqaVvf64 eVic0B6P/Fau1UKrwKaPY7SrqzKDWaPfSOYh07mcNlsF41oRAk+rmVm6wVBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNgXf8MN8TjotrD3zNsKSSBPtgZswHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5PDBDfIN8JwWLuOtJl5Zl9KczdE3FvyM5o 9S8BG5GrPhuSG/daEzqhmGGNlmaNubr5eMM1r2YowGx/qou7Jgz/LtqX8SX8PReY jMCUrIOCSJBDnkCID4N0i+BRBkT2lESuwp4ZG5aTHkA6yHrn8Gu+NhTrUaX0EuZF lXRSLCNBVbARE52CkwqSTe7dGvyJg19mQqybUd+bVEH+J8nvnbMGr+i2xRpjqtBd rJjZ3GBPHvKssH5aztlgkTHiKD9hi+/hRQDVx08AlJ3CCrKG+z2jv1RZwq+lLTZq guDu9cFfTbzhIX7V4cOgnGHDkmmtoCQQ6L3Xl5Vqrl/9+2HJe7I= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:40 2025 by rpki-client