This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: Qz7kLNJ2ba0zPkAIbjcF0Ty+ofg5TlVdC2q2WzSvYZk= Subject key identifier: D2:16:99:DC:C8:EE:DB:0F:40:5B:AA:20:BB:14:41:C7:E0:4A:95:43 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 2C348A6B5D9FE95B5009D0E7E3327E57C9FE50D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 0378 Signing time: Sat 13 Dec 2025 09:42:10 +0000 Manifest this update: Sat 13 Dec 2025 09:37:10 +0000 Manifest next update: Tue 16 Dec 2025 12:37:10 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: pMRydVAv1Y56yPXaAB4bJZDQxJwzNqNh2fhIK0nDyuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 12:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:34:8a:6b:5d:9f:e9:5b:50:09:d0:e7:e3:32:7e:57:c9:fe:50:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Dec 13 09:37:10 2025 GMT Not After : Dec 16 12:37:10 2025 GMT Subject: CN=D21699DCC8EEDB0F405BAA20BB1441C7E04A9543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:ab:32:5e:1c:a7:b4:7a:4a:54:5b:58:3e: fd:e3:85:7f:54:75:2e:01:20:5c:d4:bd:c6:9d:b4: 9b:f7:77:a6:53:c3:4e:95:ad:27:54:f2:a3:f6:b7: 54:9f:4d:09:e0:c1:3c:d1:77:56:f9:63:7c:2c:30: 43:37:d3:6e:62:a4:00:00:00:7d:bb:7d:73:dd:0e: a1:23:90:b4:d7:24:13:99:ec:2e:6c:bc:cc:08:78: 68:14:e2:59:69:3f:9f:bb:00:ac:44:ea:ca:77:3b: 3b:7f:e1:ab:30:d0:84:5f:ba:ef:8f:d0:3e:ad:b3: 08:87:a2:df:89:1c:8c:14:ce:57:14:db:b4:d0:63: 1a:80:92:83:39:4c:a9:ad:0e:7c:7c:38:8f:11:47: 77:98:da:6c:20:f9:67:9c:c3:c7:ae:e3:95:e6:72: 45:82:6a:42:06:a1:a8:5e:a8:6e:25:17:a6:d5:f5: 65:7f:2e:cd:55:40:0f:b5:94:81:ea:79:ff:6e:b5: d1:f8:c9:0b:be:23:74:40:69:e8:d1:9a:70:8e:91: 1f:94:93:54:34:2c:d8:61:f3:ba:d2:ca:43:7a:37: 51:65:40:06:06:7c:71:df:75:52:15:8d:1a:8e:1e: c2:b3:2e:97:d4:54:97:b9:3d:1d:6b:26:49:fd:73: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:99:DC:C8:EE:DB:0F:40:5B:AA:20:BB:14:41:C7:E0:4A:95:43 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:ab:92:c7:4e:b0:c1:3b:54:d0:85:65:71:cf:84:90:af: 46:c3:44:51:db:de:1e:77:4a:3f:a5:9d:1b:d3:f8:fd:45:c8: 3e:df:7a:9e:d0:b0:b8:b9:06:41:57:b1:93:02:d5:fc:a5:dd: fa:48:dd:91:12:f3:45:54:f6:20:dd:21:98:2c:85:ff:a3:5c: c1:cd:58:9c:ae:a9:58:9c:fa:86:ad:bd:f8:d0:72:af:66:c9: 0c:1a:0f:8e:a0:ea:54:6b:0b:51:2f:d6:d5:18:0e:c1:09:ca: fd:da:e7:2d:2d:5a:ea:21:ff:e9:a3:d1:df:cc:d2:37:1d:59: ea:a8:59:7b:db:a9:06:c5:75:b2:46:b2:96:ee:3c:63:79:07: 15:c8:4c:a0:5b:3c:61:66:6d:a2:84:9f:99:33:1d:1a:b2:dd: e4:34:b7:88:d2:14:57:95:f1:b9:8d:a9:e1:7d:29:ae:a5:46: 92:7a:42:c0:44:82:44:5c:8d:1b:20:92:a6:ad:4b:38:cd:72: 4b:ce:6d:fa:8b:ce:55:0d:0a:73:4a:79:b3:c7:c1:cf:86:72: 98:03:ae:74:30:82:08:0a:80:06:ac:4c:83:72:91:4a:77:0d: ea:a9:13:cf:fa:26:63:05:7b:0c:a0:f0:eb:c3:7b:b1:c0:e9: d0:b6:4c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDSKa12f6VtQCdDn4zJ+V8n+UNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTEyMTMwOTM3MTBaFw0yNTEyMTYxMjM3MTBaMDMxMTAvBgNV BAMTKEQyMTY5OURDQzhFRURCMEY0MDVCQUEyMEJCMTQ0MUM3RTA0QTk1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OqsyXhyntHpKVFtYPv3jhX9U dS4BIFzUvcadtJv3d6ZTw06VrSdU8qP2t1SfTQngwTzRd1b5Y3wsMEM3025ipAAA AH27fXPdDqEjkLTXJBOZ7C5svMwIeGgU4llpP5+7AKxE6sp3Ozt/4asw0IRfuu+P 0D6tswiHot+JHIwUzlcU27TQYxqAkoM5TKmtDnx8OI8RR3eY2mwg+Wecw8eu45Xm ckWCakIGoaheqG4lF6bV9WV/Ls1VQA+1lIHqef9utdH4yQu+I3RAaejRmnCOkR+U k1Q0LNhh87rSykN6N1FlQAYGfHHfdVIVjRqOHsKzLpfUVJe5PR1rJkn9c0u/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0haZ3Mju2w9AW6oguxRBx+BKlUMwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx3q5LHTrDBO1TQhWVxz4SQr0bDRFHb3h53 Sj+lnRvT+P1FyD7fep7QsLi5BkFXsZMC1fyl3fpI3ZES80VU9iDdIZgshf+jXMHN WJyuqVic+oatvfjQcq9myQwaD46g6lRrC1Ev1tUYDsEJyv3a5y0tWuoh/+mj0d/M 0jcdWeqoWXvbqQbFdbJGspbuPGN5BxXITKBbPGFmbaKEn5kzHRqy3eQ0t4jSFFeV 8bmNqeF9Ka6lRpJ6QsBEgkRcjRsgkqatSzjNckvObfqLzlUNCnNKebPHwc+GcpgD rnQwgggKgAasTINykUp3DeqpE8/6JmMFewyg8OvDe7HA6dC2TBA= -----END CERTIFICATE-----Generated at Sun Dec 14 06:03:13 2025 by rpki-client