This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json)
Hash identifier: q1tKh2W3t2H4GhheuAwqfVvTvhTPxfB1gT3XkORlduQ=
Subject key identifier: B6:02:14:D3:75:4D:26:7C:8A:35:D8:C9:83:CB:78:B4:1D:C0:DE:2E
Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD
Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
Certificate serial: 50934020FD30AAE1594484C4903076F2471B4D0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
Manifest number: 019E
Signing time: Tue 02 Dec 2025 19:41:03 +0000
Manifest this update: Tue 02 Dec 2025 19:36:03 +0000
Manifest next update: Sat 06 Dec 2025 05:06:03 +0000
Files and hashes: 1: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=)
2: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: ygs0YvlhKrQYQL+lUfgNfdWSlW6235YXYisXH4IJbcw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl
rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 05:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:93:40:20:fd:30:aa:e1:59:44:84:c4:90:30:76:f2:47:1b:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
Validity
Not Before: Dec 2 19:36:03 2025 GMT
Not After : Dec 6 05:06:03 2025 GMT
Subject: CN=B60214D3754D267C8A35D8C983CB78B41DC0DE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:a1:12:65:8e:18:4e:e5:76:3e:71:0d:30:
b8:6c:96:b3:59:fe:27:58:bf:29:d0:60:8a:d0:2c:
ee:88:d3:33:a1:18:06:5b:d7:4d:84:e5:8a:3d:bb:
7d:b0:62:d9:14:d7:fa:86:20:5a:f3:6a:41:20:b9:
05:73:2f:43:58:39:af:79:11:12:4e:63:33:aa:64:
ce:f2:41:a1:c8:7e:4e:6c:11:24:cc:cb:1f:0c:0c:
32:bd:af:35:44:e1:cc:85:05:ca:6b:4a:29:0c:dc:
7e:eb:47:cc:99:0e:9b:60:4e:2d:dc:b0:66:02:11:
6a:f2:a9:05:fb:e0:b2:1f:68:c3:43:63:77:c1:db:
42:b1:04:f4:b4:b0:c4:82:43:a1:bf:10:32:32:b7:
ca:b7:52:2e:69:a9:88:76:59:df:b4:fb:25:5b:30:
bc:6d:50:80:82:46:3b:7b:09:a3:1e:66:52:43:c8:
c3:bd:4f:c6:22:33:91:53:9a:f2:27:c4:83:77:8c:
bf:ed:41:d1:89:23:b6:7b:d9:6e:a0:bc:bf:58:b2:
a3:96:7b:e6:c4:68:20:97:be:c6:4d:27:61:df:6b:
b0:c4:09:41:50:71:c7:a7:19:be:22:a2:37:ab:76:
b2:67:af:1f:1b:49:67:5d:83:5d:50:c0:aa:8e:07:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:02:14:D3:75:4D:26:7C:8A:35:D8:C9:83:CB:78:B4:1D:C0:DE:2E
X509v3 Authority Key Identifier:
keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:5c:c9:4a:b0:6c:fb:e6:69:94:3b:d4:98:10:aa:d9:36:
e9:4e:a0:28:0f:b8:44:4f:0c:3a:64:90:fa:4d:6f:7b:37:2a:
8d:5b:af:a7:20:65:70:25:47:4e:0b:0d:ed:3c:8d:67:be:5f:
29:0b:85:ba:29:78:f3:20:b7:4e:e1:6c:1d:66:a3:26:dc:e7:
a7:8d:0d:e4:99:82:fd:ab:59:95:bf:d8:e7:58:be:e5:dc:23:
c6:87:4d:5a:61:cc:b1:2c:44:c6:22:69:99:19:e5:df:a7:05:
e1:83:bb:45:a8:25:04:ed:45:49:e7:dd:f9:74:ed:d9:1b:85:
4d:17:e7:dd:24:81:28:2d:77:f8:1a:6b:2a:ee:61:56:d2:1b:
04:01:39:79:fc:70:12:25:88:79:91:d5:c4:d7:cf:c9:42:89:
96:b7:59:1d:93:94:02:3a:24:58:f9:b2:92:f5:dd:d8:0b:1e:
af:3a:ce:43:d3:91:24:1a:46:78:5b:c9:3a:7b:bb:1f:7a:f3:
1b:ea:75:98:4c:93:15:20:a5:2a:87:ed:22:0c:04:9c:77:a1:
f6:23:00:d2:2a:52:f3:bc:26:94:47:5f:89:94:65:b1:6f:c1:
2a:a9:4b:ec:7a:3c:d4:80:d9:b9:73:18:b3:d8:14:08:9c:7d:
a4:63:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:42 2025 by rpki-client