This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: 1H8ItAzYEJ5Z/hDz4Nk9yZRsD0cDVwXi5xlk9v3U57c= Subject key identifier: C6:5B:CD:2F:70:7F:32:C6:85:E6:FD:39:D0:CA:12:ED:DC:A3:70:26 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 160490C334D515451E7318B67B28752D3AC1AB3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: E6 Signing time: Sat 20 Dec 2025 06:13:08 +0000 Manifest this update: Sat 20 Dec 2025 06:08:08 +0000 Manifest next update: Tue 23 Dec 2025 15:09:08 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: 6ZX0p1yNqKk11a5/999/CI5E7SgJVf3LqmdJ47j3dCY=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:04:90:c3:34:d5:15:45:1e:73:18:b6:7b:28:75:2d:3a:c1:ab:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Dec 20 06:08:08 2025 GMT Not After : Dec 23 15:09:08 2025 GMT Subject: CN=C65BCD2F707F32C685E6FD39D0CA12EDDCA37026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:53:25:01:a7:a2:c1:3c:73:56:58:6d:2b: 5d:88:27:d7:33:f7:9c:13:a7:2b:6b:23:c0:96:ce: 48:9d:82:5c:ae:17:81:53:f2:49:2d:08:1d:8d:fe: aa:9c:ed:31:d3:6f:6b:53:95:3d:0d:cc:c5:34:0d: 88:a7:6c:d2:a3:b6:c3:03:d2:5a:4d:48:55:c3:f9: cc:e1:d7:ac:7e:62:a6:f7:ac:e5:31:f5:14:8a:f9: bf:da:98:55:51:de:31:fc:7e:d7:53:d3:d9:bf:7d: 64:ab:fd:63:23:10:90:0c:3e:1b:6d:24:5f:86:1b: d2:90:a6:7e:d5:99:3b:e9:39:cd:ca:a7:b6:45:5e: cb:ba:9b:cf:4e:37:d6:05:77:e1:6f:c2:4b:3f:22: 94:80:1e:92:da:7e:a8:10:99:b8:cb:0e:d9:28:72: 7f:68:d4:de:c4:b1:dc:8a:b3:45:c9:a7:f9:e4:14: 60:30:8b:9d:d9:72:09:6a:3e:e2:df:5d:c5:6c:6d: 46:e0:2c:b6:51:82:1e:ba:ba:8f:a0:df:1b:6b:c4: 65:25:71:35:19:47:2d:ff:b5:7f:30:35:fa:5f:03: f8:b1:d5:5e:8f:8f:3d:a6:89:69:b7:8f:68:ab:1f: 15:ec:3e:c6:29:3d:39:15:13:ae:0f:e5:ae:f7:71: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:CD:2F:70:7F:32:C6:85:E6:FD:39:D0:CA:12:ED:DC:A3:70:26 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:29:b4:aa:f7:9b:ba:e0:86:a5:08:9f:7d:c7:4f:4c:1b:93: 88:73:f5:9d:a0:31:d0:e7:f2:c0:8f:06:22:58:6a:b4:7b:85: 41:b8:3e:73:92:37:18:c3:66:00:c4:b3:dd:06:e2:99:2a:73: e9:9d:c6:b6:c5:9a:2e:b3:c7:c0:04:40:fc:93:4e:aa:99:e1: 7e:21:b2:09:5b:19:b0:7e:d3:b0:c6:52:5a:e2:65:89:03:53: ab:52:32:6d:64:12:c3:cd:54:ea:10:d7:4e:3d:4c:d6:af:84: fb:72:0f:44:bd:00:a3:4f:6c:ca:55:5f:a1:47:0b:b1:78:76: f4:78:3b:c2:94:1e:4a:94:28:d8:e3:ae:6d:70:15:62:a1:b5: e3:0f:f0:b7:5a:11:81:33:96:cc:e1:6a:ca:37:5b:7b:30:14: 94:72:ce:a6:c7:b8:53:60:13:e1:d8:b1:55:c9:7f:25:85:c9: 13:b4:04:a8:d3:e3:17:20:db:b0:6d:ba:d9:f1:ee:09:c5:6f: dd:38:80:25:e9:43:68:1f:d7:dd:20:25:49:48:1f:b2:44:b1: 0f:64:0f:8f:ae:56:d2:9c:b4:90:6c:0d:ad:82:cc:e4:bd:f4: 2c:31:72:32:47:02:3e:1a:fa:4d:ee:39:5c:03:ed:44:8a:31: c4:4c:39:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgSQwzTVFUUecxi2eyh1LTrBqz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTEyMjAwNjA4MDhaFw0yNTEyMjMxNTA5MDhaMDMxMTAvBgNV BAMTKEM2NUJDRDJGNzA3RjMyQzY4NUU2RkQzOUQwQ0ExMkVERENBMzcwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wlMlAaeiwTxzVlhtK12IJ9cz 95wTpytrI8CWzkidglyuF4FT8kktCB2N/qqc7THTb2tTlT0NzMU0DYinbNKjtsMD 0lpNSFXD+czh16x+Yqb3rOUx9RSK+b/amFVR3jH8ftdT09m/fWSr/WMjEJAMPhtt JF+GG9KQpn7VmTvpOc3Kp7ZFXsu6m89ON9YFd+Fvwks/IpSAHpLafqgQmbjLDtko cn9o1N7EsdyKs0XJp/nkFGAwi53ZcglqPuLfXcVsbUbgLLZRgh66uo+g3xtrxGUl cTUZRy3/tX8wNfpfA/ix1V6Pjz2miWm3j2irHxXsPsYpPTkVE64P5a73cfoPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlvNL3B/MsaF5v050MoS7dyjcCYwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMptKr3m7rghqUIn33HT0wbk4hz9Z2gMdDn 8sCPBiJYarR7hUG4PnOSNxjDZgDEs90G4pkqc+mdxrbFmi6zx8AEQPyTTqqZ4X4h sglbGbB+07DGUlriZYkDU6tSMm1kEsPNVOoQ1049TNavhPtyD0S9AKNPbMpVX6FH C7F4dvR4O8KUHkqUKNjjrm1wFWKhteMP8LdaEYEzlszhaso3W3swFJRyzqbHuFNg E+HYsVXJfyWFyRO0BKjT4xcg27Btutnx7gnFb904gCXpQ2gf190gJUlIH7JEsQ9k D4+uVtKctJBsDa2CzOS99CwxcjJHAj4a+k3uOVwD7USKMcRMOdE= -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:59 2025 by rpki-client