This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: N2J+MP4Z6d28Dza6GI5lODOv4Lv9sHB1I7wV+q0gBuw= Subject key identifier: 27:36:D1:DE:2E:B0:DD:A2:84:EB:36:6D:F1:98:AD:DF:A7:F0:C6:E7 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 412A2184A074F8F76F6B55CBD8EE3604F8EEF230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0101 Signing time: Sat 20 Dec 2025 00:02:10 +0000 Manifest this update: Fri 19 Dec 2025 23:57:10 +0000 Manifest next update: Tue 23 Dec 2025 00:49:10 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: Vuuq0eK9hZfaeyOmEOAEtviEajf60IYRVTQGOgr6RY8=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2a:21:84:a0:74:f8:f7:6f:6b:55:cb:d8:ee:36:04:f8:ee:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Dec 19 23:57:10 2025 GMT Not After : Dec 23 00:49:10 2025 GMT Subject: CN=2736D1DE2EB0DDA284EB366DF198ADDFA7F0C6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:cb:2e:15:86:08:3f:59:59:20:a1:ee:6f: 7f:7f:d4:80:f2:78:7f:d0:11:5f:9b:45:ab:43:ea: 6b:cd:50:8e:8f:ae:c9:0b:f7:9f:f4:f8:ac:c8:cf: 3f:62:7e:1d:2c:0e:d6:24:19:16:9a:27:d2:c4:fe: 30:cb:f0:46:64:68:f8:a4:43:a2:fb:aa:9c:f7:2c: a9:36:d4:fe:66:da:cb:0f:59:08:9c:c4:1c:2c:f1: a2:e9:e9:54:bd:49:06:bb:fa:c0:72:b1:1c:98:48: af:9a:d2:f6:26:4c:5a:e0:33:e1:bc:e7:d0:92:52: 5b:a3:ab:0a:9c:e4:0e:2e:8b:6d:67:60:6c:20:b7: 4d:8c:97:2f:52:d4:e6:d9:dd:e9:67:38:85:ae:8d: 91:b5:ea:b8:4f:73:02:04:65:13:1d:46:9f:4c:23: 16:fe:0d:21:97:c8:e4:a4:ee:3e:32:c0:26:96:29: dd:5a:f4:ef:cf:af:6b:ae:a3:5d:2e:e9:a4:2a:90: 9f:e7:47:8b:e2:31:1f:1d:98:0b:83:97:6d:02:33: 9f:d0:3d:a2:ae:ae:91:dd:2c:dd:74:7b:94:67:47: fa:c4:92:b4:6e:43:d1:a2:47:ca:89:a5:89:74:14: 19:21:82:93:6f:56:89:91:a3:ea:71:cc:c3:37:2c: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:36:D1:DE:2E:B0:DD:A2:84:EB:36:6D:F1:98:AD:DF:A7:F0:C6:E7 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:95:06:1a:f4:d9:fd:b6:a2:6f:41:bd:f3:47:3d:3c:e4: 7e:57:20:a6:86:07:c1:0e:c1:1c:4f:e0:3d:7c:18:68:2c:48: 34:cc:e5:9d:f3:ab:93:57:26:7d:40:78:01:2e:1b:ac:99:e6: 84:df:d1:72:4c:45:88:0a:81:a4:dc:23:92:b3:d1:21:10:77: c3:48:ba:94:55:6a:7b:2b:10:aa:3f:1b:28:e5:02:2f:47:7b: ab:f2:a6:df:2d:e1:5d:42:62:ce:85:74:68:2d:83:d6:b7:8f: 75:76:71:e1:ee:34:01:10:6d:a5:8f:03:a9:58:0d:0c:b4:c7: 94:0c:ff:38:e3:e8:e9:3b:0e:40:66:03:97:15:cd:37:dd:5b: d3:d3:e4:0b:ad:20:ac:f1:ad:59:f0:c1:7b:08:7b:85:e8:65: 0f:ed:33:91:86:6d:63:a1:b2:ef:95:70:a6:96:5e:ab:26:9c: c6:d8:ad:0d:6e:3e:16:e9:b1:64:ce:59:fd:ae:5d:ae:b5:59: 1e:87:e6:b4:d5:0d:e0:a5:67:ad:33:f7:24:39:b7:e4:62:4c: d0:78:ae:ee:ba:45:f9:8a:ce:d8:06:05:af:f9:38:1c:be:76: 34:7d:15:bc:c3:75:02:79:03:62:fa:dd:0d:18:2e:a9:15:14: 32:65:b8:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSohhKB0+Pdva1XL2O42BPju8jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTEyMTkyMzU3MTBaFw0yNTEyMjMwMDQ5MTBaMDMxMTAvBgNV BAMTKDI3MzZEMURFMkVCMEREQTI4NEVCMzY2REYxOThBRERGQTdGMEM2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmcsuFYYIP1lZIKHub39/1IDy eH/QEV+bRatD6mvNUI6PrskL95/0+KzIzz9ifh0sDtYkGRaaJ9LE/jDL8EZkaPik Q6L7qpz3LKk21P5m2ssPWQicxBws8aLp6VS9SQa7+sBysRyYSK+a0vYmTFrgM+G8 59CSUlujqwqc5A4ui21nYGwgt02Mly9S1ObZ3elnOIWujZG16rhPcwIEZRMdRp9M Ixb+DSGXyOSk7j4ywCaWKd1a9O/Pr2uuo10u6aQqkJ/nR4viMR8dmAuDl20CM5/Q PaKurpHdLN10e5RnR/rEkrRuQ9GiR8qJpYl0FBkhgpNvVomRo+pxzMM3LOJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzbR3i6w3aKE6zZt8Zit36fwxucwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1olQYa9Nn9tqJvQb3zRz085H5XIKaGB8EO wRxP4D18GGgsSDTM5Z3zq5NXJn1AeAEuG6yZ5oTf0XJMRYgKgaTcI5Kz0SEQd8NI upRVansrEKo/GyjlAi9He6vypt8t4V1CYs6FdGgtg9a3j3V2ceHuNAEQbaWPA6lY DQy0x5QM/zjj6Ok7DkBmA5cVzTfdW9PT5AutIKzxrVnwwXsIe4XoZQ/tM5GGbWOh su+VcKaWXqsmnMbYrQ1uPhbpsWTOWf2uXa61WR6H5rTVDeClZ60z9yQ5t+RiTNB4 ru66RfmKztgGBa/5OBy+djR9FbzDdQJ5A2L63Q0YLqkVFDJluMA= -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:17 2025 by rpki-client