This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: 5uMO3snhDY0c61Pqmef8DWVQciSa+VUlsVkYFk3bxOk= Subject key identifier: 3C:FE:F1:ED:F7:83:D6:2D:97:63:B6:12:E0:CD:69:79:60:CD:41:39 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 70175880A3676469C77380D3D6EF573C25D9AE38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0536 Signing time: Tue 23 Dec 2025 03:11:20 +0000 Manifest this update: Tue 23 Dec 2025 03:06:20 +0000 Manifest next update: Fri 26 Dec 2025 10:08:20 +0000 Files and hashes: 1: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 2: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: 3Z/HHFWNkQs9IHeHKjVeP/aaJ3nsFtl9+612f2dIw7o=) 3: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 4: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 5: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:17:58:80:a3:67:64:69:c7:73:80:d3:d6:ef:57:3c:25:d9:ae:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Dec 23 03:06:20 2025 GMT Not After : Dec 26 10:08:20 2025 GMT Subject: CN=3CFEF1EDF783D62D9763B612E0CD697960CD4139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:77:a6:4a:da:84:24:65:12:18:eb:ca:55: 22:91:31:9c:71:7b:de:b2:b9:a3:b8:6c:6c:c6:e1: ee:8f:f7:54:a4:45:82:ac:e1:c0:88:78:63:b6:58: b6:57:c3:61:0e:e7:14:fc:d5:64:1a:b9:97:8f:73: f8:0f:a2:54:b8:f3:16:fb:42:91:41:fc:02:ae:cf: 3e:7a:f7:5c:ca:71:37:b9:19:ee:cc:44:6e:2a:c3: 85:7e:50:dd:11:c0:78:56:45:f8:3f:99:41:f1:db: 6d:e7:79:91:47:c2:d8:e7:d1:fd:f6:c1:b4:64:cc: 16:05:6b:99:0c:b1:aa:78:a0:f0:f7:3f:03:99:92: eb:7e:03:5e:e4:a6:79:91:c7:ae:a1:24:b0:c9:b1: 13:51:8a:91:0e:06:9a:55:c0:08:2d:7b:4e:a9:e7: d1:95:a0:2c:c7:77:14:3f:a2:8f:8d:93:e1:1c:81: e6:e5:37:0d:46:5f:58:d8:9e:6c:00:b9:64:90:85: d3:69:f7:82:66:ff:7d:08:25:c7:c6:97:7e:74:01: 2f:79:b1:90:58:30:5b:a3:f6:a6:44:fc:df:55:6d: fc:af:5d:8f:76:75:24:d6:db:70:29:13:5e:40:d1: 2d:a1:9d:97:15:09:71:10:6c:a8:97:75:b5:75:38: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:F1:ED:F7:83:D6:2D:97:63:B6:12:E0:CD:69:79:60:CD:41:39 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e7:d9:5f:4d:c0:1b:9e:1e:47:d0:e9:f8:51:3b:e9:f8:3a: 84:4c:d8:a4:16:83:91:69:a4:2f:64:3a:ef:e4:be:b3:8b:5c: 4b:3e:5d:24:d3:30:b4:6b:79:73:05:cc:79:e0:25:7b:74:3f: f2:b5:c8:c8:61:ac:bd:a4:41:c8:ba:9a:3b:ec:0b:6d:3e:75: 66:a0:47:26:8b:f1:91:46:70:f9:ae:b0:10:40:54:17:c8:9e: 4a:4a:21:86:8e:5a:d9:fe:41:e9:cf:95:4f:e5:ee:7e:05:77: 14:f6:37:ab:72:fc:65:fa:6b:1b:8e:b5:e8:9e:dd:4f:75:2f: d2:59:fa:8e:b9:43:aa:30:02:e6:ea:1d:d4:68:82:49:43:7d: 87:83:2e:93:c5:87:6e:09:e6:37:bb:99:5d:d4:4d:56:77:40: 2b:51:c3:63:97:8a:05:3a:e6:0d:9f:d6:51:ae:22:6f:19:fe: 81:d6:03:76:16:42:e7:0f:d1:c8:32:63:b9:41:aa:ef:23:03: 82:27:ef:e5:31:6c:78:f0:48:c8:ee:a5:14:30:e0:98:4e:8b: 72:f9:6b:59:37:2d:97:74:73:ee:67:f1:07:df:03:58:5b:7f: 63:fc:a9:9e:e2:26:b3:60:07:de:7e:ed:10:5c:91:9c:01:11: d1:c4:47:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBdYgKNnZGnHc4DT1u9XPCXZrjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTEyMjMwMzA2MjBaFw0yNTEyMjYxMDA4MjBaMDMxMTAvBgNV BAMTKDNDRkVGMUVERjc4M0Q2MkQ5NzYzQjYxMkUwQ0Q2OTc5NjBDRDQxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEknemStqEJGUSGOvKVSKRMZxx e96yuaO4bGzG4e6P91SkRYKs4cCIeGO2WLZXw2EO5xT81WQauZePc/gPolS48xb7 QpFB/AKuzz5691zKcTe5Ge7MRG4qw4V+UN0RwHhWRfg/mUHx223neZFHwtjn0f32 wbRkzBYFa5kMsap4oPD3PwOZkut+A17kpnmRx66hJLDJsRNRipEOBppVwAgte06p 59GVoCzHdxQ/oo+Nk+EcgeblNw1GX1jYnmwAuWSQhdNp94Jm/30IJcfGl350AS95 sZBYMFuj9qZE/N9VbfyvXY92dSTW23ApE15A0S2hnZcVCXEQbKiXdbV1OOYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPP7x7feD1i2XY7YS4M1peWDNQTkwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTn2V9NwBueHkfQ6fhRO+n4OoRM2KQWg5Fp pC9kOu/kvrOLXEs+XSTTMLRreXMFzHngJXt0P/K1yMhhrL2kQci6mjvsC20+dWag RyaL8ZFGcPmusBBAVBfInkpKIYaOWtn+QenPlU/l7n4FdxT2N6ty/GX6axuOteie 3U91L9JZ+o65Q6owAubqHdRogklDfYeDLpPFh24J5je7mV3UTVZ3QCtRw2OXigU6 5g2f1lGuIm8Z/oHWA3YWQucP0cgyY7lBqu8jA4In7+UxbHjwSMjupRQw4JhOi3L5 a1k3LZd0c+5n8QffA1hbf2P8qZ7iJrNgB95+7RBckZwBEdHER6Y= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:41 2025 by rpki-client