This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: 4IbNpQ9skBWcNdU+ViMQVWOyiVnlyCO8TiInqAhCO6k= Subject key identifier: 46:E3:F9:7B:40:C9:11:82:73:24:12:A1:C0:E6:D8:57:DA:E3:AF:65 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 787EB75B7EE835E7AF9B3B847781AB0EE475BAD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 023B Signing time: Sat 20 Dec 2025 10:31:59 +0000 Manifest this update: Sat 20 Dec 2025 10:26:59 +0000 Manifest next update: Tue 23 Dec 2025 16:12:59 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 3: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: LMVRrWqLUD91GjLxkPCHD7b4SRPh104sHn4GNqAa1vM=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7e:b7:5b:7e:e8:35:e7:af:9b:3b:84:77:81:ab:0e:e4:75:ba:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Dec 20 10:26:59 2025 GMT Not After : Dec 23 16:12:59 2025 GMT Subject: CN=46E3F97B40C91182732412A1C0E6D857DAE3AF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0b:fc:3e:c0:75:53:1f:df:01:62:c2:ea:13: a1:9a:2c:30:5e:56:10:96:77:b8:ab:fc:fc:64:ea: a6:92:3a:2a:68:40:29:4a:1c:d5:ea:a3:27:6e:9e: e5:35:5a:e8:84:3b:c4:20:58:be:67:ad:0f:d1:4e: 9d:a4:d1:82:21:a3:b2:37:c2:88:c5:2a:cb:31:03: 17:90:82:51:f8:ac:07:bb:90:36:4d:64:14:04:fb: 30:25:67:53:d2:c6:ad:9b:ec:f5:42:d1:e0:a5:f6: 1c:24:4e:0b:c4:e5:2c:2e:5e:29:01:39:d3:9d:6a: b9:93:8b:a4:4a:73:27:d4:ac:33:19:c6:cc:5f:ae: d3:92:1d:ec:86:8c:f2:19:59:94:e2:69:73:19:4f: fe:31:ed:e6:ee:8a:ea:96:d3:8d:04:10:c6:e0:05: ef:bb:dd:45:b3:1e:e1:a3:4c:3f:bb:15:34:c7:7e: f5:38:c9:d8:cf:90:d9:c8:3c:c2:8f:3d:fc:58:3d: 48:30:ac:5d:09:d2:2b:34:7a:60:97:8e:35:42:22: 0c:b2:3e:41:9a:bf:7b:3b:e5:92:cc:6b:87:b8:e5: 50:55:7c:c2:63:82:32:d9:0c:60:9e:bd:71:94:16: ec:1a:ba:99:f2:2b:e3:d2:9e:23:fe:68:50:11:9a: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E3:F9:7B:40:C9:11:82:73:24:12:A1:C0:E6:D8:57:DA:E3:AF:65 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:32:e8:09:68:29:34:83:9e:07:79:2e:53:dd:2b:36:81: 9d:d0:ca:74:af:78:32:be:b5:5c:ed:73:1b:47:26:de:87:5f: 64:66:b0:0c:0d:0a:ab:bc:c0:06:42:c4:e5:4a:30:19:ad:ea: 1d:70:fc:50:bc:2a:25:af:8d:1a:2d:a0:a5:4e:e8:06:7d:69: b4:41:05:78:ce:0e:84:96:e5:e6:45:b6:1a:77:59:31:bd:6f: 92:18:87:a7:8e:d9:86:d2:4f:87:07:18:d6:44:30:6a:23:c0: b9:5a:ab:df:92:42:6e:94:e7:7a:48:28:80:91:21:30:70:e9: a8:cc:f9:4b:a4:93:d4:25:56:9c:8d:73:54:6e:c8:bd:51:cd: 9e:54:e0:85:63:82:82:54:af:4e:1a:4f:b1:ff:76:36:ef:c4: 9a:6e:10:8c:ca:1a:87:51:9a:a2:e8:15:b9:c1:b0:39:16:99: f4:74:2d:02:ef:47:90:98:43:2e:f5:ca:b9:18:a1:0a:e2:cb: 61:cc:8a:0e:99:ed:0f:6e:7e:4a:5d:e7:fd:d2:b5:b7:8c:f7: 7c:27:70:c6:1e:79:9c:f3:e8:51:96:70:4a:94:8b:41:7e:81: 84:fc:06:e5:e0:13:17:cf:f8:dd:ab:e5:ca:5c:99:eb:37:db: eb:be:86:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH63W37oNeevmzuEd4GrDuR1utMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTEyMjAxMDI2NTlaFw0yNTEyMjMxNjEyNTlaMDMxMTAvBgNV BAMTKDQ2RTNGOTdCNDBDOTExODI3MzI0MTJBMUMwRTZEODU3REFFM0FGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4C/w+wHVTH98BYsLqE6GaLDBe VhCWd7ir/Pxk6qaSOipoQClKHNXqoydunuU1WuiEO8QgWL5nrQ/RTp2k0YIho7I3 wojFKssxAxeQglH4rAe7kDZNZBQE+zAlZ1PSxq2b7PVC0eCl9hwkTgvE5SwuXikB OdOdarmTi6RKcyfUrDMZxsxfrtOSHeyGjPIZWZTiaXMZT/4x7ebuiuqW040EEMbg Be+73UWzHuGjTD+7FTTHfvU4ydjPkNnIPMKPPfxYPUgwrF0J0is0emCXjjVCIgyy PkGav3s75ZLMa4e45VBVfMJjgjLZDGCevXGUFuwaupnyK+PSniP+aFARmo3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuP5e0DJEYJzJBKhwObYV9rjr2UwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbQMugJaCk0g54HeS5T3Ss2gZ3QynSveDK+ tVztcxtHJt6HX2RmsAwNCqu8wAZCxOVKMBmt6h1w/FC8KiWvjRotoKVO6AZ9abRB BXjODoSW5eZFthp3WTG9b5IYh6eO2YbST4cHGNZEMGojwLlaq9+SQm6U53pIKICR ITBw6ajM+Uukk9QlVpyNc1RuyL1RzZ5U4IVjgoJUr04aT7H/djbvxJpuEIzKGodR mqLoFbnBsDkWmfR0LQLvR5CYQy71yrkYoQriy2HMig6Z7Q9ufkpd5/3StbeM93wn cMYeeZzz6FGWcEqUi0F+gYT8BuXgExfP+N2r5cpcmes32+u+hiQ= -----END CERTIFICATE-----Generated at Sun Dec 21 12:30:25 2025 by rpki-client