This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: cQ57Lxg4vecyk+/S/SJ0XcMu86MX4jUpTGtUo8g+6DM= Subject key identifier: 68:8D:4B:03:51:C9:8B:0C:9C:9D:4C:17:86:F2:9D:41:BE:AA:FB:D7 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 50DEBE94580CDE12F8E3ED73EB74695EA75D6618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0530 Signing time: Wed 17 Dec 2025 13:00:48 +0000 Manifest this update: Wed 17 Dec 2025 12:55:48 +0000 Manifest next update: Sun 21 Dec 2025 00:55:48 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: WleDbxeaK2JuEKwZvqZOlcWxGKrHEdXpMxkSHwMNRBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:de:be:94:58:0c:de:12:f8:e3:ed:73:eb:74:69:5e:a7:5d:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Dec 17 12:55:48 2025 GMT Not After : Dec 21 00:55:48 2025 GMT Subject: CN=688D4B0351C98B0C9C9D4C1786F29D41BEAAFBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:97:1f:a6:01:b9:64:90:8a:df:0b:94:2e: b1:dc:7b:a3:68:50:86:a6:3c:3d:ac:a9:b8:e7:17: d2:e8:49:a6:5b:a8:65:62:99:09:b8:88:91:d1:0a: a6:b2:5c:a0:b8:ce:04:d7:8e:b1:0f:08:1e:32:7c: f2:ee:e5:ec:73:82:19:e6:73:fe:5f:8d:5f:80:63: 27:03:65:d9:52:ba:58:d8:ba:bf:0d:16:5d:19:c7: f0:12:57:67:e9:c0:7a:4f:dc:1d:c8:ad:8f:05:3e: f5:f1:1f:80:d6:07:da:27:f4:ef:6a:54:be:43:cb: 5e:07:47:e3:9f:07:77:03:1d:a4:ec:16:7b:38:e8: f8:42:54:18:87:51:04:bf:50:ca:0a:f3:3a:e4:54: f4:cf:8b:e0:69:6c:a9:03:6a:16:0c:5b:2b:e1:b9: 25:6c:43:31:62:01:e2:f7:68:88:e3:a5:88:38:91: 9e:86:59:2a:bd:9f:c9:64:f8:93:30:aa:68:41:47: de:e3:ad:9c:6b:58:fd:6f:28:62:24:fe:54:40:13: c1:db:bd:c3:13:8e:42:f0:2f:25:72:ae:37:ea:5f: 97:be:ca:d7:61:42:3c:22:6c:df:9a:f7:63:13:9b: 90:0e:31:2e:0a:7a:8a:b9:0d:fc:b5:74:b9:f7:ae: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:4B:03:51:C9:8B:0C:9C:9D:4C:17:86:F2:9D:41:BE:AA:FB:D7 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b8:bb:47:98:74:be:77:ed:61:91:df:c2:75:32:e3:43:ad: b6:17:60:e8:85:8e:0e:65:35:44:f0:76:75:c9:2a:43:53:3b: db:3f:d7:42:e9:b3:9e:a6:73:2e:03:0a:c8:91:cf:8e:51:f2: 7b:59:35:87:a6:bd:22:05:77:8d:ae:8f:02:35:02:73:ec:45: 1a:a2:0a:35:80:35:4b:e7:d4:92:6d:6a:c4:b7:0d:3e:8a:1a: 21:92:52:13:87:4d:61:09:be:28:11:68:2c:6a:ba:94:23:3e: 03:2e:bb:5e:f4:5d:67:a6:5a:6e:26:9b:19:a5:86:36:44:1d: 0a:9b:e2:3f:28:03:a5:1b:6c:e8:6f:4f:63:27:83:8d:62:da: 76:66:56:99:c8:06:52:58:1b:8c:39:c0:e0:0f:6c:5f:39:5e: 6e:10:22:d3:77:c9:ad:02:3d:2a:7b:5d:72:a8:1f:16:4f:23: 14:78:14:5c:d7:94:f2:21:4e:8a:9d:3e:79:ba:89:6e:5c:9f: 0a:9a:a3:0e:6e:f6:27:1d:a9:26:a1:98:cc:58:d8:6e:92:b2: 04:f6:08:ec:19:d2:16:73:fe:4f:9e:46:42:18:b8:7a:0f:61: a3:dd:54:eb:c1:d1:c5:94:89:4d:26:9b:6f:a0:94:9c:5a:ca: 39:5e:3e:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN6+lFgM3hL44+1z63RpXqddZhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTEyMTcxMjU1NDhaFw0yNTEyMjEwMDU1NDhaMDMxMTAvBgNV BAMTKDY4OEQ0QjAzNTFDOThCMEM5QzlENEMxNzg2RjI5RDQxQkVBQUZCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUZcfpgG5ZJCK3wuULrHce6No UIamPD2sqbjnF9LoSaZbqGVimQm4iJHRCqayXKC4zgTXjrEPCB4yfPLu5exzghnm c/5fjV+AYycDZdlSuljYur8NFl0Zx/ASV2fpwHpP3B3IrY8FPvXxH4DWB9on9O9q VL5Dy14HR+OfB3cDHaTsFns46PhCVBiHUQS/UMoK8zrkVPTPi+BpbKkDahYMWyvh uSVsQzFiAeL3aIjjpYg4kZ6GWSq9n8lk+JMwqmhBR97jrZxrWP1vKGIk/lRAE8Hb vcMTjkLwLyVyrjfqX5e+ytdhQjwibN+a92MTm5AOMS4Keoq5Dfy1dLn3rtg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI1LA1HJiwycnUwXhvKdQb6q+9cwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy4u0eYdL537WGR38J1MuNDrbYXYOiFjg5l NUTwdnXJKkNTO9s/10Lps56mcy4DCsiRz45R8ntZNYemvSIFd42ujwI1AnPsRRqi CjWANUvn1JJtasS3DT6KGiGSUhOHTWEJvigRaCxqupQjPgMuu170XWemWm4mmxml hjZEHQqb4j8oA6UbbOhvT2Mng41i2nZmVpnIBlJYG4w5wOAPbF85Xm4QItN3ya0C PSp7XXKoHxZPIxR4FFzXlPIhToqdPnm6iW5cnwqaow5u9icdqSahmMxY2G6SsgT2 COwZ0hZz/k+eRkIYuHoPYaPdVOvB0cWUiU0mm2+glJxayjlePkM= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:16 2025 by rpki-client