This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: cOPY5Se+UcFUnFgtfmRpg2uwzMckBwtn3qaBLgAo55M= Subject key identifier: 73:29:83:2D:FE:DA:03:CC:CA:7B:CA:4B:2B:90:D0:AD:A8:BA:7C:E5 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 439914EDC545C092685B3FC7C805A991C538A28F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 0245 Signing time: Mon 22 Dec 2025 17:32:11 +0000 Manifest this update: Mon 22 Dec 2025 17:27:11 +0000 Manifest next update: Thu 25 Dec 2025 21:05:11 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: Mf4H2iX3GBXScBtzffzzWO2QwiL/8uhKLTDPcQwNFmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:99:14:ed:c5:45:c0:92:68:5b:3f:c7:c8:05:a9:91:c5:38:a2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Dec 22 17:27:11 2025 GMT Not After : Dec 25 21:05:11 2025 GMT Subject: CN=7329832DFEDA03CCCA7BCA4B2B90D0ADA8BA7CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:d1:25:ca:a0:05:ae:a2:40:5d:c1:60:e8: 99:52:74:15:ba:22:2f:a2:9f:91:54:5f:16:21:ab: 63:60:ce:45:5a:63:5a:bb:8e:62:cf:24:51:66:dd: 67:4f:16:6e:f7:17:7d:e0:ec:69:d6:f7:8e:84:b2: 8f:86:c1:fb:69:87:ea:25:fd:7a:e7:f9:34:ab:1e: e1:47:75:ff:9a:1d:b6:00:ec:82:70:70:59:b3:8d: 2b:59:f7:fc:38:36:2a:44:39:00:0a:99:28:f8:cc: 38:37:35:8b:5e:be:f1:f4:d0:cc:e7:ad:d9:5c:db: c1:26:9b:94:d6:e3:f8:97:2d:da:34:f4:6e:1d:cb: b5:f8:9f:2b:22:1e:f8:02:65:8d:9d:d0:48:1d:c3: 3b:e5:5b:6c:dc:c6:4c:5c:36:3c:08:2a:01:83:57: 71:f1:40:b1:a2:44:82:a7:43:e4:2c:92:8e:5e:32: 5b:8e:91:3a:5e:65:47:e5:df:86:3f:a2:b9:76:92: b0:75:de:df:8a:d7:b4:a2:09:95:b9:f7:e4:ff:12: 93:cf:b8:d0:66:60:3b:c3:a2:d5:7f:01:c2:0d:72: 5f:f9:68:ad:d7:60:5a:b5:a8:17:cf:7b:12:c7:be: d1:8f:bd:db:a0:14:1b:a6:40:11:d6:87:61:17:37: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:83:2D:FE:DA:03:CC:CA:7B:CA:4B:2B:90:D0:AD:A8:BA:7C:E5 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3a:e2:28:c6:a4:dc:ad:dc:00:00:67:cd:75:e9:ff:8a:2c: 77:11:92:82:8b:3f:dd:e8:d5:73:af:1b:35:33:21:32:d3:c9: c1:3d:2a:aa:a4:db:6e:a3:dc:04:0b:7b:e5:a2:e3:f6:c7:e9: 1c:f8:60:5a:b1:82:27:ba:6a:ea:a2:0c:f2:0c:11:7b:5a:72: 19:66:3a:d4:26:99:02:96:9d:b7:63:52:01:b7:7e:28:e7:97: 72:62:f5:39:34:e9:8b:08:7b:8c:07:b6:b9:6c:4d:68:da:95: 19:49:85:35:e8:69:0f:13:38:aa:0c:78:a9:c6:c0:32:ba:2c: 1c:16:ad:ad:c3:f1:60:07:38:27:7f:12:63:42:dc:1a:24:61: 43:ef:a8:1b:ee:aa:21:52:d6:69:32:15:94:cb:37:ca:82:3a: 7b:3b:6d:03:eb:78:c0:45:ea:54:83:d8:79:9b:5b:6d:1e:88: 11:ea:58:ea:72:53:90:5a:63:50:2e:84:5e:48:55:df:a4:e0: 7c:53:ba:f4:6f:6d:44:9f:ce:0f:bc:bc:61:44:bd:f2:17:3d: 76:70:46:2f:09:ba:38:5c:cc:fb:ed:ff:38:16:03:42:4c:a1: 57:62:8b:c3:9b:6f:5c:bf:fd:14:42:ec:67:c5:0c:47:bf:29: 7e:d0:04:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5kU7cVFwJJoWz/HyAWpkcU4oo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTEyMjIxNzI3MTFaFw0yNTEyMjUyMTA1MTFaMDMxMTAvBgNV BAMTKDczMjk4MzJERkVEQTAzQ0NDQTdCQ0E0QjJCOTBEMEFEQThCQTdDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7dElyqAFrqJAXcFg6JlSdBW6 Ii+in5FUXxYhq2NgzkVaY1q7jmLPJFFm3WdPFm73F33g7GnW946Eso+Gwftph+ol /Xrn+TSrHuFHdf+aHbYA7IJwcFmzjStZ9/w4NipEOQAKmSj4zDg3NYtevvH00Mzn rdlc28Emm5TW4/iXLdo09G4dy7X4nysiHvgCZY2d0EgdwzvlW2zcxkxcNjwIKgGD V3HxQLGiRIKnQ+Qsko5eMluOkTpeZUfl34Y/orl2krB13t+K17SiCZW59+T/EpPP uNBmYDvDotV/AcINcl/5aK3XYFq1qBfPexLHvtGPvdugFBumQBHWh2EXN8svAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcymDLf7aA8zKe8pLK5DQrai6fOUwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU64ijGpNyt3AAAZ8116f+KLHcRkoKLP93o 1XOvGzUzITLTycE9Kqqk226j3AQLe+Wi4/bH6Rz4YFqxgie6auqiDPIMEXtachlm OtQmmQKWnbdjUgG3fijnl3Ji9Tk06YsIe4wHtrlsTWjalRlJhTXoaQ8TOKoMeKnG wDK6LBwWra3D8WAHOCd/EmNC3BokYUPvqBvuqiFS1mkyFZTLN8qCOns7bQPreMBF 6lSD2HmbW20eiBHqWOpyU5BaY1AuhF5IVd+k4HxTuvRvbUSfzg+8vGFEvfIXPXZw Ri8JujhczPvt/zgWA0JMoVdii8Obb1y//RRC7GfFDEe/KX7QBP0= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:17 2025 by rpki-client