This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: tmkRHRbVsGGcbX4USeCRSFN3E5gUZHIqsFX/yhNc+4s= Subject key identifier: 4E:87:B3:F3:8D:9D:98:09:9F:F8:F0:13:DD:37:A0:EF:9A:F1:49:E5 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 7282FE3B0EF72AE011D82DA4966B089B204693F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: E5 Signing time: Sun 07 Dec 2025 11:01:40 +0000 Manifest this update: Sun 07 Dec 2025 10:56:40 +0000 Manifest next update: Wed 10 Dec 2025 11:32:40 +0000 Files and hashes: 1: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: j6benMPykdMOmTFBq5DEPAFuhn12b4w5WPzCnRchZTM=) 2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) 3: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) 4: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:82:fe:3b:0e:f7:2a:e0:11:d8:2d:a4:96:6b:08:9b:20:46:93:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Dec 7 10:56:40 2025 GMT Not After : Dec 10 11:32:40 2025 GMT Subject: CN=4E87B3F38D9D98099FF8F013DD37A0EF9AF149E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:f1:f1:7e:a6:42:6c:6a:56:ea:b1:94:70: 86:d8:88:a0:48:46:32:55:dd:b9:ff:44:17:51:ab: 14:b6:e9:4b:c9:7a:08:97:67:f4:fc:19:ca:40:40: 99:fc:bc:5d:05:4d:60:96:98:8f:c6:61:4c:d8:32: 98:86:80:83:f2:ad:9a:65:29:36:6c:db:fa:5d:4d: 71:b1:59:a3:29:e4:14:4f:a4:d3:65:af:20:e6:f3: e8:bf:9a:1c:a1:32:c3:81:ff:51:0a:cf:e5:52:99: 13:fb:93:9f:6b:1d:18:24:bc:27:db:4d:17:63:03: 41:9b:87:69:31:12:b7:71:42:43:65:9b:7b:47:2f: 71:fd:b3:2a:35:e4:f4:b1:7f:83:8f:2a:85:9b:7e: a4:86:e3:c3:9e:a2:1a:90:ea:e6:df:42:18:b5:f5: 68:7e:3e:2a:be:d5:84:6a:94:96:54:95:93:f5:3e: e6:61:3d:d6:b9:db:63:9f:91:a6:41:0c:68:60:e2: 0c:e3:22:4a:73:5f:73:ce:bf:01:29:db:a3:a0:90: cb:7a:09:e1:07:96:81:a9:0a:41:eb:a9:d8:b5:da: 85:46:05:f0:6a:f6:dc:92:15:59:8f:13:d6:0e:86: 1a:22:4b:58:71:8c:ad:5b:57:11:9d:5c:85:b5:11: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:B3:F3:8D:9D:98:09:9F:F8:F0:13:DD:37:A0:EF:9A:F1:49:E5 X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ed:de:20:a7:40:2b:2a:1b:58:cd:66:d3:ce:4d:3d:78:0e: d2:57:b4:8a:69:c7:92:49:2d:d8:85:a2:01:af:aa:5b:5e:7e: b0:68:0d:e6:a6:c7:df:97:19:ea:dd:79:45:24:6c:06:d8:a2: c8:15:0b:64:3e:1d:7f:a9:8b:13:7c:fb:9d:3f:78:1d:90:c3: 66:fc:e3:55:12:61:ae:95:82:10:03:e9:26:d2:4d:c2:e5:e9: 34:43:7b:8c:90:75:1b:1b:a8:44:ad:41:af:73:f4:bb:72:a8: 2d:2e:47:68:e1:37:3c:03:a9:a8:ed:24:14:20:55:f6:34:58: 26:61:a7:72:03:8c:18:44:62:d4:3e:a3:94:15:1f:5f:15:92: 2b:5b:6a:24:3c:3b:be:b6:63:fe:36:df:62:51:48:d5:09:ec: 8a:ce:52:39:18:f4:3e:bc:bf:28:2b:2d:ec:db:c8:30:64:7c: ea:d7:8d:aa:93:21:a0:9f:b4:ec:b0:98:dc:c0:25:4e:9d:93: 98:74:f8:02:65:a4:bd:45:4e:b1:f0:04:64:58:04:76:0f:1b: fb:de:89:cc:0d:ac:01:23:29:56:94:cc:55:b8:67:ea:30:e3: 88:cb:ba:06:48:2b:9f:53:f9:40:29:1b:48:ce:90:5d:28:c7: c3:f2:18:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoL+Ow73KuAR2C2klmsImyBGk/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTEyMDcxMDU2NDBaFw0yNTEyMTAxMTMyNDBaMDMxMTAvBgNV BAMTKDRFODdCM0YzOEQ5RDk4MDk5RkY4RjAxM0REMzdBMEVGOUFGMTQ5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55vHxfqZCbGpW6rGUcIbYiKBI RjJV3bn/RBdRqxS26UvJegiXZ/T8GcpAQJn8vF0FTWCWmI/GYUzYMpiGgIPyrZpl KTZs2/pdTXGxWaMp5BRPpNNlryDm8+i/mhyhMsOB/1EKz+VSmRP7k59rHRgkvCfb TRdjA0Gbh2kxErdxQkNlm3tHL3H9syo15PSxf4OPKoWbfqSG48OeohqQ6ubfQhi1 9Wh+Piq+1YRqlJZUlZP1PuZhPda522OfkaZBDGhg4gzjIkpzX3POvwEp26OgkMt6 CeEHloGpCkHrqdi12oVGBfBq9tySFVmPE9YOhhoiS1hxjK1bVxGdXIW1EdlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToez842dmAmf+PAT3Teg75rxSeUwHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7t3iCnQCsqG1jNZtPOTT14DtJXtIppx5JJ LdiFogGvqltefrBoDeamx9+XGerdeUUkbAbYosgVC2Q+HX+pixN8+50/eB2Qw2b8 41USYa6VghAD6SbSTcLl6TRDe4yQdRsbqEStQa9z9LtyqC0uR2jhNzwDqajtJBQg VfY0WCZhp3IDjBhEYtQ+o5QVH18VkitbaiQ8O762Y/4232JRSNUJ7IrOUjkY9D68 vygrLezbyDBkfOrXjaqTIaCftOywmNzAJU6dk5h0+AJlpL1FTrHwBGRYBHYPG/ve icwNrAEjKVaUzFW4Z+ow44jLugZIK59T+UApG0jOkF0ox8PyGCM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:55:15 2025 by rpki-client