This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: XAP2pNpcMRiBd79bEI+kAHpTAoR7oGkA28vPhTh/oqs= Subject key identifier: 1E:47:92:A6:12:C1:9A:C5:D8:15:00:AC:23:5E:9F:11:C6:4A:EF:5E Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 6AC53C68958C393C1971240A9C87534AA298A4F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 0161 Signing time: Mon 22 Dec 2025 13:51:44 +0000 Manifest this update: Mon 22 Dec 2025 13:46:44 +0000 Manifest next update: Fri 26 Dec 2025 01:35:44 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) 2: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: 99sJKCHZq0O729xH7aTgynRZToRjyvZNpN7HSL9EvPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c5:3c:68:95:8c:39:3c:19:71:24:0a:9c:87:53:4a:a2:98:a4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Dec 22 13:46:44 2025 GMT Not After : Dec 26 01:35:44 2025 GMT Subject: CN=1E4792A612C19AC5D81500AC235E9F11C64AEF5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:0e:3f:a5:85:eb:0e:24:6c:db:db:45:13: 04:af:74:f3:f4:bc:82:de:6b:24:4b:e5:c8:1b:9b: 43:64:2d:e4:ce:df:e4:26:44:6a:a2:ba:fa:ea:68: c4:43:c4:61:bc:c6:60:c7:f5:24:06:4c:d5:c4:da: 4c:32:19:cc:ed:92:7b:c2:96:55:94:cc:4a:47:f0: e4:52:4d:dc:8c:c1:29:c4:cd:63:cf:37:2d:4f:62: fc:62:52:19:69:0c:6e:bd:e0:68:09:e0:6f:bb:28: c5:a7:b2:e3:2c:c8:4d:ca:b8:e3:9b:7c:6d:e7:57: 60:42:4b:93:33:05:1a:f5:f6:42:6e:f2:33:05:a1: d5:2c:4c:40:c4:86:23:5e:36:7d:91:32:dc:98:37: 82:05:da:34:f2:d5:82:24:ea:e5:e7:a7:52:0e:f8: dc:ce:74:36:40:be:00:76:74:e5:24:59:b3:eb:da: 7c:ca:28:e0:01:37:46:80:76:ed:fc:18:f2:5e:ad: fb:dc:43:6f:d1:55:98:5c:11:e3:ef:81:ad:7e:27: 7b:2d:e9:10:54:1c:8b:88:bb:c3:91:34:f9:bd:5c: 3b:2e:fa:f1:a1:55:fe:ec:e4:42:a3:7b:d4:9f:78: e0:7c:a1:c6:5b:cb:55:c1:4f:0c:1b:0a:10:23:c2: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:47:92:A6:12:C1:9A:C5:D8:15:00:AC:23:5E:9F:11:C6:4A:EF:5E X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d2:c3:79:ea:f2:67:1c:1d:a5:6a:89:08:47:e2:c2:23:fa: b2:e7:44:35:a2:22:f4:27:4f:9c:67:30:98:05:f8:00:04:83: 67:b1:31:41:d8:54:30:98:9e:e4:af:75:c2:13:08:a3:1e:25: 47:7f:91:02:8d:32:26:07:dc:f1:4f:ff:1b:b8:a6:71:81:79: 87:07:cc:89:48:0b:57:c9:64:a0:a7:86:bc:9b:71:ce:db:49: 74:b5:a1:a9:34:87:a9:2b:01:d0:c5:82:5e:91:38:bf:d0:d1: e0:38:33:1d:00:46:c3:c5:cf:99:ee:72:79:44:4e:93:50:c0: 0f:63:21:19:21:2d:d3:cd:e0:8a:0b:54:9f:b5:e7:1a:53:32: 54:8f:4a:81:9a:ed:c7:17:c7:4f:ee:57:33:fc:be:13:3c:1d: fe:4d:38:04:28:6b:43:95:6d:6b:4e:8a:93:02:21:90:72:37: 9b:5b:19:64:bb:f3:1f:45:95:83:0e:0d:b9:6c:40:49:d3:42: 57:60:f8:5d:7b:2d:2d:ef:7b:6c:31:39:24:72:0b:53:42:26: 16:82:69:0f:f1:51:54:bd:4e:72:c1:f6:fa:24:26:16:d2:6f: 5a:67:a4:f3:70:58:da:56:38:4f:c0:83:3a:ad:2d:6d:21:15: b0:8e:f1:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasU8aJWMOTwZcSQKnIdTSqKYpPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTEyMjIxMzQ2NDRaFw0yNTEyMjYwMTM1NDRaMDMxMTAvBgNV BAMTKDFFNDc5MkE2MTJDMTlBQzVEODE1MDBBQzIzNUU5RjExQzY0QUVGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpA4/pYXrDiRs29tFEwSvdPP0 vILeayRL5cgbm0NkLeTO3+QmRGqiuvrqaMRDxGG8xmDH9SQGTNXE2kwyGcztknvC llWUzEpH8ORSTdyMwSnEzWPPNy1PYvxiUhlpDG694GgJ4G+7KMWnsuMsyE3KuOOb fG3nV2BCS5MzBRr19kJu8jMFodUsTEDEhiNeNn2RMtyYN4IF2jTy1YIk6uXnp1IO +NzOdDZAvgB2dOUkWbPr2nzKKOABN0aAdu38GPJerfvcQ2/RVZhcEePvga1+J3st 6RBUHIuIu8ORNPm9XDsu+vGhVf7s5EKje9SfeOB8ocZby1XBTwwbChAjwsH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkeSphLBmsXYFQCsI16fEcZK714wHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjSw3nq8mccHaVqiQhH4sIj+rLnRDWiIvQn T5xnMJgF+AAEg2exMUHYVDCYnuSvdcITCKMeJUd/kQKNMiYH3PFP/xu4pnGBeYcH zIlIC1fJZKCnhrybcc7bSXS1oak0h6krAdDFgl6ROL/Q0eA4Mx0ARsPFz5nucnlE TpNQwA9jIRkhLdPN4IoLVJ+15xpTMlSPSoGa7ccXx0/uVzP8vhM8Hf5NOAQoa0OV bWtOipMCIZByN5tbGWS78x9FlYMODblsQEnTQldg+F17LS3ve2wxOSRyC1NCJhaC aQ/xUVS9TnLB9vokJhbSb1pnpPNwWNpWOE/AgzqtLW0hFbCO8Xw= -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:30 2025 by rpki-client