This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: 7BBirVf1svIYzozc0xu6FeyU1OEtmN8B5s95NCxitEM= Subject key identifier: DB:F9:18:19:4E:A0:8C:DA:ED:93:B8:6B:EE:59:FF:67:8A:F2:8F:56 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 02E161B4AF44E839F49750582BAB425FDC7CDE5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 0533 Signing time: Tue 23 Dec 2025 15:41:07 +0000 Manifest this update: Tue 23 Dec 2025 15:36:07 +0000 Manifest next update: Sat 27 Dec 2025 01:47:07 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: iw3Cyi1VQGI3NXc1Y1g7ynB6mTlTdwiAa9nkvlJ8yLw=) 2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) 3: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: sE4FGq3bEIC6gtrpIhZLt8yDW8qbJsFSsIQdbV6A92g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e1:61:b4:af:44:e8:39:f4:97:50:58:2b:ab:42:5f:dc:7c:de:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Dec 23 15:36:07 2025 GMT Not After : Dec 27 01:47:07 2025 GMT Subject: CN=DBF918194EA08CDAED93B86BEE59FF678AF28F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:76:95:a3:c6:09:f5:77:58:44:3c:96:ea: e2:15:09:10:bd:30:4f:75:65:6f:70:94:dc:e4:42: 93:20:03:e2:53:fa:78:18:e6:b5:b5:d8:07:21:8c: 03:42:85:81:b4:cd:f5:5e:9b:62:fe:c4:6e:5d:61: 9e:38:22:ce:e1:7a:f2:4d:f5:d7:b1:9b:97:8a:f4: 1e:69:c8:1e:35:96:0f:9a:eb:9e:c6:0e:44:80:e3: de:4b:a6:d3:fc:79:e1:34:04:89:35:9e:72:c9:8a: 6a:e8:ab:fa:19:1a:77:11:79:c9:28:77:9a:6e:8e: 05:0f:b5:87:6b:eb:a1:8a:8e:43:71:fe:e0:62:c4: e7:a9:85:1e:99:59:ec:7d:1b:c7:4e:21:18:be:99: da:56:3c:1e:ca:8f:96:53:65:da:ee:da:b9:d6:fd: 84:31:27:d8:33:16:1b:16:24:96:76:66:66:dc:a7: c5:c9:8d:d4:91:90:cb:8f:76:b7:2f:1f:75:c9:2b: ab:18:10:94:67:b9:c2:2d:ee:a6:b8:bb:54:58:42: 02:1a:fe:83:4b:c2:26:e8:92:0b:84:ca:04:af:e1: 10:f7:67:d6:7b:a6:69:81:c8:04:96:21:9d:74:00: 4b:68:f3:f8:87:73:1f:cf:50:fc:2e:18:a7:02:b0: cd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:18:19:4E:A0:8C:DA:ED:93:B8:6B:EE:59:FF:67:8A:F2:8F:56 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f2:20:70:0f:39:b6:88:8a:8d:b6:47:22:4f:b6:0f:cc:35: 4f:88:93:ec:94:57:93:57:d5:38:7c:6e:d2:06:27:88:43:2a: 0a:59:44:9f:8b:62:7f:1f:38:90:0d:31:4b:54:0f:49:05:d6: aa:b6:66:fe:ad:3d:33:e3:2d:ad:d2:1d:7f:f7:78:33:c9:66: 95:b9:cb:ca:b6:fa:83:2b:ec:8b:cf:2a:79:bb:1d:74:e4:47: 2e:0b:7f:a6:d7:48:46:e9:fe:09:50:95:0b:f8:1e:84:ed:a5: 5d:95:61:5c:e3:10:db:ea:3b:ad:f8:6c:3f:4b:76:97:7f:56: d4:3b:2f:49:d0:91:a2:3c:1e:10:42:f7:ac:45:f4:3d:43:86: 2c:25:39:2d:d4:85:a8:62:5c:8e:0b:c5:9c:5e:41:08:9f:9d: 20:b1:e7:3b:6f:2e:ea:00:f7:bd:ab:45:82:c9:6b:f3:31:53: 34:f6:b3:c5:60:ed:ab:f3:f7:18:a5:b4:61:bf:ac:83:85:f1: 7a:fd:c4:f4:df:65:47:24:72:ac:84:90:c0:a4:bf:1f:35:11: 1d:03:27:cb:d6:09:c1:e6:c8:da:51:c6:3e:12:ab:a9:df:8d: 99:4f:54:8f:92:b6:72:af:c9:95:70:b0:ae:31:89:ef:df:96: c3:09:f3:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuFhtK9E6Dn0l1BYK6tCX9x83lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTEyMjMxNTM2MDdaFw0yNTEyMjcwMTQ3MDdaMDMxMTAvBgNV BAMTKERCRjkxODE5NEVBMDhDREFFRDkzQjg2QkVFNTlGRjY3OEFGMjhGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0HaVo8YJ9XdYRDyW6uIVCRC9 ME91ZW9wlNzkQpMgA+JT+ngY5rW12AchjANChYG0zfVem2L+xG5dYZ44Is7hevJN 9dexm5eK9B5pyB41lg+a657GDkSA495LptP8eeE0BIk1nnLJimroq/oZGncRecko d5pujgUPtYdr66GKjkNx/uBixOephR6ZWex9G8dOIRi+mdpWPB7Kj5ZTZdru2rnW /YQxJ9gzFhsWJJZ2Zmbcp8XJjdSRkMuPdrcvH3XJK6sYEJRnucIt7qa4u1RYQgIa /oNLwibokguEygSv4RD3Z9Z7pmmByASWIZ10AEto8/iHcx/PUPwuGKcCsM3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/kYGU6gjNrtk7hr7ln/Z4ryj1YwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvyIHAPObaIio22RyJPtg/MNU+Ik+yUV5NX 1Th8btIGJ4hDKgpZRJ+LYn8fOJANMUtUD0kF1qq2Zv6tPTPjLa3SHX/3eDPJZpW5 y8q2+oMr7IvPKnm7HXTkRy4Lf6bXSEbp/glQlQv4HoTtpV2VYVzjENvqO634bD9L dpd/VtQ7L0nQkaI8HhBC96xF9D1DhiwlOS3UhahiXI4LxZxeQQifnSCx5ztvLuoA 972rRYLJa/MxUzT2s8Vg7avz9xiltGG/rIOF8Xr9xPTfZUckcqyEkMCkvx81ER0D J8vWCcHmyNpRxj4Sq6nfjZlPVI+StnKvyZVwsK4xie/flsMJ87c= -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:29 2025 by rpki-client