This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: 9zI0Odv04gHFxPXhAF7Pa21ff0MEVK69/NrUAXoQrPk= Subject key identifier: AC:51:FF:3C:36:EB:28:F7:6A:23:5B:50:29:D5:A6:83:05:AE:F9:B8 Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 5B4FB26896F6AF94B94F74420653E85B93184A80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 0241 Signing time: Tue 02 Dec 2025 20:51:49 +0000 Manifest this update: Tue 02 Dec 2025 20:46:49 +0000 Manifest next update: Sat 06 Dec 2025 07:18:49 +0000 Files and hashes: 1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: dkkc9ZYoMSJiynOnXOaXLINoq1goCNe01/8FhL6L+z8=) 2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4f:b2:68:96:f6:af:94:b9:4f:74:42:06:53:e8:5b:93:18:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Dec 2 20:46:49 2025 GMT Not After : Dec 6 07:18:49 2025 GMT Subject: CN=AC51FF3C36EB28F76A235B5029D5A68305AEF9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:a6:10:d3:ec:87:82:2a:5d:f6:c6:2f:3e: 7c:67:9a:cb:32:35:94:e4:82:bb:d6:da:3b:da:5b: ef:d4:44:6b:ec:c2:fb:41:c6:ae:f1:ed:66:23:b0: 8b:f6:b9:ab:1b:46:a2:2a:2f:a2:68:76:e8:c3:c0: cd:e8:5c:9b:5f:89:a9:fd:b9:24:bb:bf:3d:cd:9f: 16:31:2a:ad:25:a1:b3:6e:59:14:e1:0c:d3:97:8a: a8:ef:f2:66:be:61:f7:5e:f2:c9:66:a4:70:a9:ba: c2:d7:1d:ce:03:e0:a6:49:16:c7:68:b8:dc:84:e7: 01:7d:d5:98:cd:fb:26:7e:7a:f1:89:64:f6:9e:f8: d7:13:ad:04:20:bc:7a:ae:86:7a:aa:db:03:e0:e5: f6:6e:02:0b:a4:ad:40:83:67:da:72:22:c9:9e:47: 96:09:3c:8f:71:00:57:62:c6:a6:d1:3c:de:f9:76: 82:18:97:43:9b:07:27:2d:66:ad:f9:36:53:0f:a2: 51:6d:55:f9:af:f6:25:cf:e9:63:77:45:4d:0f:5a: 71:4d:5e:44:a9:ff:9d:4f:86:2b:fb:20:3c:4b:60: 45:b7:ee:d0:05:15:b5:11:75:4f:b6:05:80:d3:37: ed:aa:88:f9:dc:f2:0a:0a:7f:0f:3f:92:17:27:f0: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:51:FF:3C:36:EB:28:F7:6A:23:5B:50:29:D5:A6:83:05:AE:F9:B8 X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:f7:fa:f6:89:17:dd:c3:d7:d8:58:32:a4:83:73:ec:3c: 4e:2a:c7:09:a6:29:93:42:38:15:fc:f7:41:0d:4c:87:2b:f4: c0:e9:d6:4d:19:ce:6d:c7:5e:dd:cd:46:31:43:03:99:f0:9a: ba:d7:0d:e2:37:ef:b7:4b:90:df:9d:2c:80:1f:bf:0e:54:72: cf:95:60:ac:a6:7d:95:06:50:2b:b8:98:a8:6e:88:39:5f:d9: 76:da:46:65:3c:94:f6:72:2f:25:dc:10:61:af:50:86:91:be: cd:59:ab:2c:f6:ad:c9:aa:ca:f4:bf:a6:87:5d:69:9d:14:ff: 0c:73:f3:31:0c:26:7d:a6:17:79:db:cf:0d:56:80:f4:4a:54: 6d:ac:9d:f5:7f:35:7f:bf:74:8f:b1:dc:fa:70:1d:77:f3:bb: 9c:7f:a1:c0:ba:1d:f7:82:db:c8:5e:b3:73:f0:4d:7a:e5:24: 89:7c:c8:42:59:66:85:e7:ce:cc:f2:df:17:33:c6:65:aa:9b: 90:8d:ba:39:9e:87:bb:d9:c7:07:38:cc:8a:97:01:71:21:7d: c0:26:b5:05:3d:f9:19:86:44:9c:8e:7e:ec:6d:26:99:2b:59: 50:b8:09:d2:6f:89:cf:a3:f6:cd:f7:d1:c2:21:f6:71:34:e3: f2:2b:fd:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0+yaJb2r5S5T3RCBlPoW5MYSoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTEyMDIyMDQ2NDlaFw0yNTEyMDYwNzE4NDlaMDMxMTAvBgNV BAMTKEFDNTFGRjNDMzZFQjI4Rjc2QTIzNUI1MDI5RDVBNjgzMDVBRUY5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROaYQ0+yHgipd9sYvPnxnmssy NZTkgrvW2jvaW+/URGvswvtBxq7x7WYjsIv2uasbRqIqL6JodujDwM3oXJtfian9 uSS7vz3NnxYxKq0lobNuWRThDNOXiqjv8ma+Yfde8slmpHCpusLXHc4D4KZJFsdo uNyE5wF91ZjN+yZ+evGJZPae+NcTrQQgvHquhnqq2wPg5fZuAgukrUCDZ9pyIsme R5YJPI9xAFdixqbRPN75doIYl0ObByctZq35NlMPolFtVfmv9iXP6WN3RU0PWnFN XkSp/51Phiv7IDxLYEW37tAFFbURdU+2BYDTN+2qiPnc8goKfw8/khcn8P+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFH/PDbrKPdqI1tQKdWmgwWu+bgwHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWc9/r2iRfdw9fYWDKkg3PsPE4qxwmmKZNC OBX890ENTIcr9MDp1k0Zzm3HXt3NRjFDA5nwmrrXDeI377dLkN+dLIAfvw5Ucs+V YKymfZUGUCu4mKhuiDlf2XbaRmU8lPZyLyXcEGGvUIaRvs1Zqyz2rcmqyvS/podd aZ0U/wxz8zEMJn2mF3nbzw1WgPRKVG2snfV/NX+/dI+x3PpwHXfzu5x/ocC6HfeC 28hes3PwTXrlJIl8yEJZZoXnzszy3xczxmWqm5CNujmeh7vZxwc4zIqXAXEhfcAm tQU9+RmGRJyOfuxtJpkrWVC4CdJvic+j9s330cIh9nE04/Ir/Rw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:26 2025 by rpki-client