This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: r5C65Rkv2Pnh234zYrziSpIq44AMLA69F2yaxH+R07U= Subject key identifier: 30:4B:E6:36:95:23:FB:CD:7D:AB:A3:4E:08:DC:79:21:B0:C2:94:96 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 7D785F9CEB9DE49B20669A4E721D6497AFEE98FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0140 Signing time: Tue 02 Dec 2025 10:10:40 +0000 Manifest this update: Tue 02 Dec 2025 10:05:40 +0000 Manifest next update: Fri 05 Dec 2025 13:18:40 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: FT7Yq4ZK46FwMA6wu5AIsPmnkgpNSU2/rcOnH6SFB4Y=) 4: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:78:5f:9c:eb:9d:e4:9b:20:66:9a:4e:72:1d:64:97:af:ee:98:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Dec 2 10:05:40 2025 GMT Not After : Dec 5 13:18:40 2025 GMT Subject: CN=304BE6369523FBCD7DABA34E08DC7921B0C29496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:19:f6:69:59:83:dc:c5:f1:7d:e7:d1:43: 57:12:db:c5:ef:7e:d0:1c:3f:d9:43:79:79:1a:c7: da:1f:4b:92:d5:73:a8:3b:e2:5c:dc:82:b0:49:40: 69:ba:75:05:93:a2:4b:a9:3f:e7:4a:72:df:75:15: e6:19:c8:f6:f0:b9:db:81:94:8e:ca:62:7c:07:c5: e4:e8:69:5e:f0:91:00:69:d0:ac:3e:1b:50:b8:8d: a1:b1:ef:bf:fe:3b:8b:82:7c:11:2e:ee:69:2d:3d: d9:fe:7d:46:e6:c7:c5:49:6a:35:2c:ae:0f:ac:44: e9:fe:06:18:33:28:5c:5c:61:ba:4e:e6:e5:c5:bb: 3a:ac:31:d4:11:78:f4:76:e6:2d:79:0f:d6:c5:7e: 02:bd:14:9f:2b:8b:4a:00:8c:e8:d7:26:5a:0c:f9: 11:c6:89:5c:d3:e1:a5:ee:1b:5c:67:57:30:92:b5: 8c:21:10:16:cd:c3:3c:73:8e:80:30:9f:50:88:cb: 5e:3c:9f:fb:c8:07:5d:f1:c1:d5:37:72:71:8d:13: 4d:cb:82:b7:47:eb:43:3c:49:6c:fc:be:60:e0:d9: 6c:f3:9a:bb:38:40:16:52:ae:61:dd:15:1c:49:73: 66:f3:87:c5:37:6e:f5:70:b6:4d:5e:00:b7:50:34: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:E6:36:95:23:FB:CD:7D:AB:A3:4E:08:DC:79:21:B0:C2:94:96 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ab:ee:e7:54:e1:04:5f:19:8b:4b:ce:02:86:85:02:0e:20: df:78:41:4a:47:f9:65:a8:56:6a:cd:0a:bc:e0:d4:8f:9d:f4: fc:ce:e4:c5:5a:ed:07:96:67:ad:b5:81:73:e9:92:1e:19:5c: 3b:50:2c:a5:95:ea:1e:17:15:b4:14:c6:36:a6:9f:63:b9:8d: 23:47:7d:43:9f:e7:2b:59:02:9a:01:90:b4:8a:95:96:af:cd: 48:dd:fb:e5:5b:9b:a6:55:05:83:8b:4f:63:05:cb:10:c2:12: 87:e8:f3:1b:55:68:36:66:f7:d2:ce:de:55:9a:bc:48:14:cd: 2b:b4:9a:f0:28:72:23:16:62:3c:56:d5:6d:1f:39:55:4f:78: dd:62:62:fa:04:4e:44:88:cd:f7:09:ff:f5:45:c2:50:10:ce: 7e:e1:8c:7f:0f:05:e0:db:00:9d:97:28:73:4c:5f:c6:19:7b: 77:74:72:6a:7c:ca:a3:b6:c7:85:2a:25:f5:d1:a4:c8:a3:bd: cd:36:51:d1:4c:ac:8f:15:61:8c:41:8e:ec:9d:a1:33:e7:e2: 3c:aa:dd:00:c1:b5:41:c9:2d:18:cb:09:46:76:11:46:b7:e0: f0:93:af:1a:78:dc:36:c5:d4:d2:d3:ae:98:cb:9d:20:0f:e0: b7:33:e4:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXhfnOud5JsgZppOch1kl6/umP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTEyMDIxMDA1NDBaFw0yNTEyMDUxMzE4NDBaMDMxMTAvBgNV BAMTKDMwNEJFNjM2OTUyM0ZCQ0Q3REFCQTM0RTA4REM3OTIxQjBDMjk0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWRn2aVmD3MXxfefRQ1cS28Xv ftAcP9lDeXkax9ofS5LVc6g74lzcgrBJQGm6dQWTokupP+dKct91FeYZyPbwuduB lI7KYnwHxeToaV7wkQBp0Kw+G1C4jaGx77/+O4uCfBEu7mktPdn+fUbmx8VJajUs rg+sROn+BhgzKFxcYbpO5uXFuzqsMdQRePR25i15D9bFfgK9FJ8ri0oAjOjXJloM +RHGiVzT4aXuG1xnVzCStYwhEBbNwzxzjoAwn1CIy148n/vIB13xwdU3cnGNE03L grdH60M8SWz8vmDg2Wzzmrs4QBZSrmHdFRxJc2bzh8U3bvVwtk1eALdQNH3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMEvmNpUj+819q6NOCNx5IbDClJYwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSr7udU4QRfGYtLzgKGhQIOIN94QUpH+WWo VmrNCrzg1I+d9PzO5MVa7QeWZ621gXPpkh4ZXDtQLKWV6h4XFbQUxjamn2O5jSNH fUOf5ytZApoBkLSKlZavzUjd++Vbm6ZVBYOLT2MFyxDCEofo8xtVaDZm99LO3lWa vEgUzSu0mvAociMWYjxW1W0fOVVPeN1iYvoETkSIzfcJ//VFwlAQzn7hjH8PBeDb AJ2XKHNMX8YZe3d0cmp8yqO2x4UqJfXRpMijvc02UdFMrI8VYYxBjuydoTPn4jyq 3QDBtUHJLRjLCUZ2EUa34PCTrxp43DbF1NLTrpjLnSAP4Lcz5PY= -----END CERTIFICATE-----Generated at Wed Dec 3 16:05:21 2025 by rpki-client