This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: x+wY4VV3CEqm7TRp7JxJgYYzrB4XJf+03gsueIfikoY= Subject key identifier: 08:57:4A:D4:05:83:0F:78:29:C5:C3:8E:F1:56:34:F4:36:45:DC:56 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 484CF592F6BCA50273F56C9C7F6A67D72FA61CF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 015F Signing time: Tue 02 Dec 2025 06:41:49 +0000 Manifest this update: Tue 02 Dec 2025 06:36:49 +0000 Manifest next update: Fri 05 Dec 2025 11:27:49 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 2: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) 3: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: h9xEHpNQsCO89LRa1Xhl7U+bwpatXOj0lFu4DgGt/iQ=) 4: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) 5: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4c:f5:92:f6:bc:a5:02:73:f5:6c:9c:7f:6a:67:d7:2f:a6:1c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Dec 2 06:36:49 2025 GMT Not After : Dec 5 11:27:49 2025 GMT Subject: CN=08574AD405830F7829C5C38EF15634F43645DC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:e2:9d:bf:5e:cc:3c:cf:6f:40:84:c1:2f: 4c:24:c5:11:a5:12:6e:49:51:c6:61:b6:52:1b:08: f0:b0:fe:7d:55:ae:17:9c:28:42:87:21:58:e5:c9: dd:13:37:7c:25:60:a4:ef:54:6d:8e:c5:7e:0f:d0: 00:8c:1d:26:56:53:cb:2d:dd:88:41:ce:95:92:3c: 6d:66:23:71:51:79:5c:a5:10:a1:19:54:86:f8:cc: 18:ba:cb:ca:e0:51:a7:37:cb:ce:64:0e:b8:c4:b9: 4c:8c:19:8b:60:82:ec:f9:07:24:4e:7e:d7:df:3a: fe:54:d1:e5:20:d6:a4:82:31:99:0f:50:07:d5:3e: ca:ab:71:5c:00:b7:d6:c8:cf:42:3b:54:4d:3f:df: 99:30:9c:39:db:62:82:54:44:98:34:b6:db:8a:b5: 98:29:8e:88:49:b8:d5:7d:8f:36:84:24:fd:6a:30: 9f:f9:fc:74:94:18:af:1a:fb:ab:7c:01:e5:26:81: 86:d6:fc:0e:78:15:a7:83:69:d8:a4:fc:f9:d1:53: 28:68:e1:a4:72:72:c0:44:5a:b5:25:f8:67:09:6c: 7b:ba:b4:ab:90:12:22:a0:d9:52:3e:ee:36:43:31: 39:37:0f:c1:02:9f:65:1b:ab:60:54:89:c0:2f:0d: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:4A:D4:05:83:0F:78:29:C5:C3:8E:F1:56:34:F4:36:45:DC:56 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:78:66:5a:db:a2:50:6c:a3:69:b5:03:3d:db:12:21:cb:c9: 71:21:cd:21:10:98:5f:39:38:8b:4f:9e:95:bf:ff:8b:73:7d: 04:97:9a:e5:a0:4a:bb:8f:d8:42:dc:c1:0c:d5:28:dc:86:78: db:53:4d:a1:e6:53:c4:23:27:03:da:cd:b3:30:7c:85:27:bd: 5c:b1:4b:af:99:52:ce:6a:20:f2:63:7c:5a:6b:28:0b:80:b2: f9:c4:61:dd:7a:6a:aa:8b:8d:16:78:20:aa:9b:0a:fe:43:ab: 4f:59:e5:e4:a3:9d:6e:23:d4:29:67:37:9d:28:4d:f6:fd:9f: 6c:06:61:cf:03:f7:69:e9:de:87:a8:de:81:9d:04:10:75:f5: d4:0e:3b:ae:3c:bf:e6:f3:8e:6b:3c:24:5e:3c:89:64:e1:50: 89:5b:93:52:9d:22:a4:89:25:ab:66:c8:34:5f:9b:26:a3:07: 8e:80:38:c6:43:79:11:4d:03:eb:c6:1f:bb:ca:cf:71:98:c2: 60:8f:9b:d9:52:64:2a:08:90:6c:38:c4:9e:40:65:f0:84:7e: bf:e9:47:0d:c4:bb:0f:e9:df:52:34:68:44:2b:08:09:31:57: 81:6e:34:e0:11:98:c6:19:1b:6e:6a:1d:4a:1c:25:9d:b4:a1: 1a:a4:12:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEz1kva8pQJz9Wycf2pn1y+mHPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTEyMDIwNjM2NDlaFw0yNTEyMDUxMTI3NDlaMDMxMTAvBgNV BAMTKDA4NTc0QUQ0MDU4MzBGNzgyOUM1QzM4RUYxNTYzNEY0MzY0NURDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lOKdv17MPM9vQITBL0wkxRGl Em5JUcZhtlIbCPCw/n1VrhecKEKHIVjlyd0TN3wlYKTvVG2OxX4P0ACMHSZWU8st 3YhBzpWSPG1mI3FReVylEKEZVIb4zBi6y8rgUac3y85kDrjEuUyMGYtgguz5ByRO ftffOv5U0eUg1qSCMZkPUAfVPsqrcVwAt9bIz0I7VE0/35kwnDnbYoJURJg0ttuK tZgpjohJuNV9jzaEJP1qMJ/5/HSUGK8a+6t8AeUmgYbW/A54FaeDadik/PnRUyho 4aRycsBEWrUl+GcJbHu6tKuQEiKg2VI+7jZDMTk3D8ECn2Ubq2BUicAvDcozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFdK1AWDD3gpxcOO8VY09DZF3FYwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp4ZlrbolBso2m1Az3bEiHLyXEhzSEQmF85 OItPnpW//4tzfQSXmuWgSruP2ELcwQzVKNyGeNtTTaHmU8QjJwPazbMwfIUnvVyx S6+ZUs5qIPJjfFprKAuAsvnEYd16aqqLjRZ4IKqbCv5Dq09Z5eSjnW4j1ClnN50o Tfb9n2wGYc8D92np3oeo3oGdBBB19dQOO648v+bzjms8JF48iWThUIlbk1KdIqSJ JatmyDRfmyajB46AOMZDeRFNA+vGH7vKz3GYwmCPm9lSZCoIkGw4xJ5AZfCEfr/p Rw3Euw/p31I0aEQrCAkxV4FuNOARmMYZG25qHUocJZ20oRqkEsM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:09 2025 by rpki-client