This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: lYGkzoRlpCOiYt4PtRM2AjNL6Gf2bZgVaviEJKyBZsw= Subject key identifier: 2B:B4:DA:71:B6:B3:86:AB:CF:A2:90:9F:33:5F:9E:18:B6:9F:93:93 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 1F81DC276F6CB33397E5F7D4DA689A293A138823 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 0204 Signing time: Tue 02 Dec 2025 09:41:15 +0000 Manifest this update: Tue 02 Dec 2025 09:36:15 +0000 Manifest next update: Fri 05 Dec 2025 10:28:15 +0000 Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: u/FQ+C6fhByWufzkFy4co7EWXnxxm1EAfn7lzBPgZ6w=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:81:dc:27:6f:6c:b3:33:97:e5:f7:d4:da:68:9a:29:3a:13:88:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Dec 2 09:36:15 2025 GMT Not After : Dec 5 10:28:15 2025 GMT Subject: CN=2BB4DA71B6B386ABCFA2909F335F9E18B69F9393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:13:b9:ef:c3:68:35:9b:a9:4a:e8:8f:d5: 6a:79:58:66:21:67:33:b2:c0:28:cc:6f:85:d8:7d: d4:60:6e:18:7f:3f:e2:8e:f1:3e:7b:ab:54:42:26: c7:4c:c3:53:68:7a:da:44:fa:c9:0b:33:80:d3:a5: 7d:39:14:bf:be:b6:af:9a:3a:db:54:34:7c:92:78: 9e:d8:5a:62:03:0b:46:0e:78:3d:f2:06:b5:74:7f: 1b:32:fd:45:33:2c:e2:6f:6f:5e:8c:af:d6:39:4c: 67:54:b6:e7:7b:c8:f6:b1:96:36:1a:cf:4f:eb:8b: e9:63:13:90:fd:ac:3e:a8:84:9f:01:8a:e2:5c:15: 72:5e:e8:d8:eb:1c:ff:78:98:b4:10:75:7a:6d:9a: 55:56:3f:ce:14:21:c2:12:0e:50:6f:de:44:ad:20: 5f:08:3b:ab:c2:c6:e1:66:19:bc:bf:3c:c7:e6:13: 87:a7:ec:6a:7e:21:86:cf:c3:d7:ea:1a:96:1b:75: 12:3e:8a:44:22:8d:8e:3e:f2:ed:37:34:74:69:ce: 8e:07:a2:f7:00:8b:94:17:1a:43:db:70:fc:42:46: 0e:7d:9a:93:14:ea:e5:ed:ef:36:da:7e:11:89:0f: 16:75:08:37:d8:1a:09:31:7b:88:dc:f5:87:53:7c: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B4:DA:71:B6:B3:86:AB:CF:A2:90:9F:33:5F:9E:18:B6:9F:93:93 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:de:49:f0:43:8d:dd:64:e1:44:56:ff:57:b4:91:84:c7:7b: 6e:03:ca:c9:28:a3:d3:cb:ec:e2:57:79:bf:ef:51:93:fd:ef: 99:47:39:bf:97:95:bd:4b:50:ed:01:fa:a9:2b:92:02:dc:a3: bf:06:65:8d:f2:2a:1a:aa:cf:b9:35:05:31:60:80:03:cc:32: 76:10:c9:2e:35:22:69:4d:b6:71:c2:7f:3f:95:da:fd:da:0d: bf:b2:75:c0:5b:93:91:6b:ae:76:f3:59:21:05:21:8f:2f:23: b6:08:93:4e:5a:4d:53:f1:29:e6:3b:5b:1a:83:45:d1:5a:50: 55:0c:6c:40:21:36:87:a7:5e:fa:c9:ff:3b:65:35:8b:88:2b: 4d:07:84:1e:30:22:2b:58:09:fc:ff:7a:10:de:32:4c:a4:c3: 6e:f1:57:d2:a5:0b:a6:42:19:ca:63:2f:fc:b0:0f:2b:ee:bc: 14:53:ff:16:86:47:b4:c7:00:d4:bb:92:f4:c9:18:ef:61:eb: 24:fd:49:ac:aa:86:66:8d:47:61:49:6a:4b:9d:14:b9:d1:80: 52:3d:20:e2:a3:aa:7e:ca:34:30:d5:14:e2:bb:12:fb:35:ca: ac:58:94:c9:08:98:28:b3:00:b1:7b:71:c1:b5:b6:f5:2d:92: d5:94:b5:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4HcJ29sszOX5ffU2miaKToTiCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTEyMDIwOTM2MTVaFw0yNTEyMDUxMDI4MTVaMDMxMTAvBgNV BAMTKDJCQjREQTcxQjZCMzg2QUJDRkEyOTA5RjMzNUY5RTE4QjY5RjkzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJRO578NoNZupSuiP1Wp5WGYh ZzOywCjMb4XYfdRgbhh/P+KO8T57q1RCJsdMw1NoetpE+skLM4DTpX05FL++tq+a OttUNHySeJ7YWmIDC0YOeD3yBrV0fxsy/UUzLOJvb16Mr9Y5TGdUtud7yPaxljYa z0/ri+ljE5D9rD6ohJ8BiuJcFXJe6NjrHP94mLQQdXptmlVWP84UIcISDlBv3kSt IF8IO6vCxuFmGby/PMfmE4en7Gp+IYbPw9fqGpYbdRI+ikQijY4+8u03NHRpzo4H ovcAi5QXGkPbcPxCRg59mpMU6uXt7zbafhGJDxZ1CDfYGgkxe4jc9YdTfM7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK7TacbazhqvPopCfM1+eGLafk5MwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABreSfBDjd1k4URW/1e0kYTHe24Dyskoo9PL 7OJXeb/vUZP975lHOb+Xlb1LUO0B+qkrkgLco78GZY3yKhqqz7k1BTFggAPMMnYQ yS41ImlNtnHCfz+V2v3aDb+ydcBbk5FrrnbzWSEFIY8vI7YIk05aTVPxKeY7WxqD RdFaUFUMbEAhNoenXvrJ/ztlNYuIK00HhB4wIitYCfz/ehDeMkykw27xV9KlC6ZC GcpjL/ywDyvuvBRT/xaGR7THANS7kvTJGO9h6yT9SayqhmaNR2FJakudFLnRgFI9 IOKjqn7KNDDVFOK7Evs1yqxYlMkImCizALF7ccG1tvUtktWUtVQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client