This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: Z/+IksAAL92xEks3avLEqrHcoeSI9wwo/VUodEAYRMw= Subject key identifier: DC:0B:26:9F:51:B0:F4:E8:72:23:F7:86:5F:9D:D8:06:22:1D:F9:C4 Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 5D5B96EB82FD4D54FA64CCFDF3DB6E689037B2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 0206 Signing time: Thu 18 Dec 2025 22:00:47 +0000 Manifest this update: Thu 18 Dec 2025 21:55:47 +0000 Manifest next update: Mon 22 Dec 2025 01:51:47 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: DR9mJpOsjoGMn55B2CGcb5EuFKG6fyJY1Jf0o0VRbjo=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5b:96:eb:82:fd:4d:54:fa:64:cc:fd:f3:db:6e:68:90:37:b2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Dec 18 21:55:47 2025 GMT Not After : Dec 22 01:51:47 2025 GMT Subject: CN=DC0B269F51B0F4E87223F7865F9DD806221DF9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:64:bf:b7:f9:96:fd:02:fc:4a:b7:0b:ce: af:93:65:d2:76:b2:5a:a0:a0:82:1c:8d:b4:f3:c8: e9:17:9f:0a:7b:31:b7:fa:a7:8d:73:65:59:25:ca: fc:c5:43:bf:02:d7:f6:03:5b:cb:01:29:5d:00:91: 58:6f:b9:88:c7:90:f9:08:a9:48:d7:fb:cf:c8:a7: 2a:96:0d:23:7e:28:7b:e6:90:c2:a5:c8:41:1a:73: d8:36:90:0c:17:14:ca:1f:85:1a:94:0c:83:0e:8f: 91:02:37:53:c4:98:e1:3e:63:96:fe:0a:5d:14:3b: 54:83:c1:3a:77:28:a4:86:b5:de:27:3f:4b:1a:29: be:d4:4b:c6:85:e4:ac:40:a6:ca:ac:28:f0:fd:b5: f8:c3:fd:35:04:8f:92:6e:d1:81:98:9d:6f:da:64: 58:f0:00:d8:a2:b6:a4:47:19:cb:de:e2:20:28:aa: f9:9e:44:28:f4:0a:0b:b7:ab:c2:2f:d5:f4:36:20: 84:99:fd:dc:f8:0b:48:db:c6:c9:1f:1f:64:7e:b6: 17:d0:28:58:27:6c:f8:28:49:44:2c:c3:9b:6e:28: f8:c5:01:fd:01:da:9e:9f:f3:07:9c:5c:84:5d:81: 9e:22:5b:43:33:2e:04:6f:97:69:d5:87:4b:be:c3: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:26:9F:51:B0:F4:E8:72:23:F7:86:5F:9D:D8:06:22:1D:F9:C4 X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:0e:3e:59:d2:37:bc:43:3e:a1:8b:82:63:1c:f8:be:ae:68: 7a:a6:1a:11:cc:c3:3b:f8:99:d5:30:60:cf:7c:c8:1e:bc:5a: 6b:fe:ff:b7:44:a3:68:1b:22:33:bb:54:0a:33:83:fa:ad:44: 1f:a9:0a:31:b7:85:28:35:15:15:d1:6c:7e:58:a9:a8:b1:94: c2:cc:df:ab:95:b8:65:ef:cf:8f:45:4d:7b:e7:34:0e:72:fb: ef:1f:e0:c5:59:fd:b4:ee:c1:ac:10:84:97:73:d4:c6:18:b6: 99:a8:ab:bd:14:a2:15:9e:79:d9:69:78:00:eb:7a:35:49:21: 3e:05:2a:ca:25:50:3e:ba:af:64:13:0f:21:51:a3:75:24:a1: 01:92:b9:c8:10:41:82:9d:65:f8:7a:3e:a0:bf:3e:03:90:cb: 16:78:5d:6c:89:05:2f:97:a9:c8:6f:25:1b:9a:86:f7:2f:c2: f8:6b:2c:dc:35:02:dc:91:c4:90:ad:92:b5:23:f3:72:01:6f: f7:4f:d0:05:e0:d1:84:62:02:d9:a0:f0:84:ff:cd:8c:50:45: f7:37:f8:5e:db:fa:0b:1f:8b:90:b1:68:70:41:88:50:e6:0e: 50:b3:c9:0d:50:19:5f:b4:ed:d4:2a:56:61:b0:1a:07:b9:a8: 00:e7:61:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVuW64L9TVT6ZMz989tuaJA3stUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTEyMTgyMTU1NDdaFw0yNTEyMjIwMTUxNDdaMDMxMTAvBgNV BAMTKERDMEIyNjlGNTFCMEY0RTg3MjIzRjc4NjVGOUREODA2MjIxREY5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mWS/t/mW/QL8SrcLzq+TZdJ2 slqgoIIcjbTzyOkXnwp7Mbf6p41zZVklyvzFQ78C1/YDW8sBKV0AkVhvuYjHkPkI qUjX+8/IpyqWDSN+KHvmkMKlyEEac9g2kAwXFMofhRqUDIMOj5ECN1PEmOE+Y5b+ Cl0UO1SDwTp3KKSGtd4nP0saKb7US8aF5KxApsqsKPD9tfjD/TUEj5Ju0YGYnW/a ZFjwANiitqRHGcve4iAoqvmeRCj0Cgu3q8Iv1fQ2IISZ/dz4C0jbxskfH2R+thfQ KFgnbPgoSUQsw5tuKPjFAf0B2p6f8wecXIRdgZ4iW0MzLgRvl2nVh0u+wxQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Asmn1Gw9OhyI/eGX53YBiId+cQwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoOPlnSN7xDPqGLgmMc+L6uaHqmGhHMwzv4 mdUwYM98yB68Wmv+/7dEo2gbIjO7VAozg/qtRB+pCjG3hSg1FRXRbH5YqaixlMLM 36uVuGXvz49FTXvnNA5y++8f4MVZ/bTuwawQhJdz1MYYtpmoq70UohWeedlpeADr ejVJIT4FKsolUD66r2QTDyFRo3UkoQGSucgQQYKdZfh6PqC/PgOQyxZ4XWyJBS+X qchvJRuahvcvwvhrLNw1AtyRxJCtkrUj83IBb/dP0AXg0YRiAtmg8IT/zYxQRfc3 +F7b+gsfi5CxaHBBiFDmDlCzyQ1QGV+07dQqVmGwGge5qADnYdA= -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:37 2025 by rpki-client