This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: lBHrvpwDUAj43MCVo04txHVnynx4l+JwtuITb8WXkVA= Subject key identifier: D1:88:5C:6D:CF:B4:18:1D:36:C4:4A:A7:E3:BC:68:0B:21:21:2D:D6 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 04EF67D5317BD5301D3969BB922E76DC8EF58067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01D8 Signing time: Fri 19 Dec 2025 20:40:52 +0000 Manifest this update: Fri 19 Dec 2025 20:35:52 +0000 Manifest next update: Mon 22 Dec 2025 22:09:52 +0000 Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: NDZ9BZ/7fycXawT+5+7xtB42cRLK7WPOE160HdmzwHQ=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ef:67:d5:31:7b:d5:30:1d:39:69:bb:92:2e:76:dc:8e:f5:80:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Dec 19 20:35:52 2025 GMT Not After : Dec 22 22:09:52 2025 GMT Subject: CN=D1885C6DCFB4181D36C44AA7E3BC680B21212DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:6b:1a:be:4a:96:50:18:1e:8f:38:61:5a: 6b:0a:2f:89:0b:ca:9d:c8:1d:6a:d8:1a:32:5a:96: 7a:ff:fc:3f:96:78:bc:d2:b3:00:9a:ef:c4:5c:31: f3:2a:f3:f4:71:1a:94:e7:17:38:66:69:d6:49:08: 33:9d:6b:40:c2:39:d1:c8:d6:28:b0:15:a8:69:05: 22:05:e2:2b:0c:89:26:9f:c4:40:50:13:a8:f4:a5: 19:e1:45:ce:57:c6:90:2b:e2:e7:3a:f4:bc:bc:01: 78:4a:90:51:f5:5f:dc:f8:5f:2c:97:b1:97:13:40: 8c:7a:56:82:d6:36:59:ed:63:ed:5d:a0:6b:bf:4d: 38:d5:90:12:02:f8:7a:3c:fc:cc:21:9c:8f:3d:13: 78:8d:ee:c8:7f:14:ee:0d:54:17:45:8d:76:1a:44: 9e:41:e6:61:5a:34:a7:46:e9:01:4b:dd:be:98:5c: 95:f7:e9:c6:00:6f:e9:fe:a5:f6:40:f3:64:85:0e: 40:6a:94:1e:04:48:31:73:19:09:c0:70:c2:37:cd: a8:26:98:28:da:d7:cf:4f:6c:af:b1:99:b5:be:cc: 48:ea:b3:ec:e6:24:a6:7a:48:06:df:6d:9b:b7:7e: 13:bf:82:cd:c2:9e:89:df:65:5f:81:1e:da:6a:82: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:88:5C:6D:CF:B4:18:1D:36:C4:4A:A7:E3:BC:68:0B:21:21:2D:D6 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fc:e3:6c:b6:5a:3b:71:19:b2:ce:7a:41:0b:56:eb:40:fc: 2b:49:94:46:2b:78:d5:bb:41:aa:bf:2f:6c:43:05:8d:ef:0d: 60:fb:65:36:0f:94:d1:9c:34:69:52:73:54:77:59:36:b6:69: cd:22:a0:92:5e:66:a5:40:61:d3:bf:58:da:49:90:d2:50:0c: d3:da:15:99:67:d8:98:ae:6d:c2:b1:21:c2:9f:69:c0:0f:bf: 0a:34:59:a6:5d:d1:be:ae:e4:21:9c:76:e0:b0:88:1d:e2:9e: 69:fb:d8:39:45:07:2c:4a:20:3b:cd:a6:35:d6:1b:7a:61:b0: 6d:7b:20:0e:53:9b:a3:dd:50:f4:2e:9d:51:c5:0a:50:c7:a6: 34:5c:5f:12:69:d7:d0:8f:e9:0f:3e:4b:f8:dd:88:de:84:a6: 06:aa:4b:b9:52:6d:d0:49:3f:4f:71:7d:1e:6a:4f:1e:a6:5f: 4a:1f:2f:71:f4:7b:31:f4:ee:9a:f6:95:b6:1e:da:77:07:0b: 63:16:97:4e:a7:2c:26:75:b0:58:48:2c:13:46:b0:57:29:2d: 15:a2:82:e3:7e:16:c6:8e:6f:2b:5c:ca:73:e2:61:ee:27:63: 61:99:d8:46:76:24:b3:46:10:2e:58:26:a5:cb:41:f8:a1:a4: 45:fb:a6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBO9n1TF71TAdOWm7ki523I71gGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTEyMTkyMDM1NTJaFw0yNTEyMjIyMjA5NTJaMDMxMTAvBgNV BAMTKEQxODg1QzZEQ0ZCNDE4MUQzNkM0NEFBN0UzQkM2ODBCMjEyMTJERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWWsavkqWUBgejzhhWmsKL4kL yp3IHWrYGjJalnr//D+WeLzSswCa78RcMfMq8/RxGpTnFzhmadZJCDOda0DCOdHI 1iiwFahpBSIF4isMiSafxEBQE6j0pRnhRc5XxpAr4uc69Ly8AXhKkFH1X9z4XyyX sZcTQIx6VoLWNlntY+1doGu/TTjVkBIC+Ho8/MwhnI89E3iN7sh/FO4NVBdFjXYa RJ5B5mFaNKdG6QFL3b6YXJX36cYAb+n+pfZA82SFDkBqlB4ESDFzGQnAcMI3zagm mCja189PbK+xmbW+zEjqs+zmJKZ6SAbfbZu3fhO/gs3CnonfZV+BHtpqgm31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Yhcbc+0GB02xEqn47xoCyEhLdYwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr842y2WjtxGbLOekELVutA/CtJlEYreNW7 Qaq/L2xDBY3vDWD7ZTYPlNGcNGlSc1R3WTa2ac0ioJJeZqVAYdO/WNpJkNJQDNPa FZln2JiubcKxIcKfacAPvwo0WaZd0b6u5CGcduCwiB3inmn72DlFByxKIDvNpjXW G3phsG17IA5Tm6PdUPQunVHFClDHpjRcXxJp19CP6Q8+S/jdiN6EpgaqS7lSbdBJ P09xfR5qTx6mX0ofL3H0ezH07pr2lbYe2ncHC2MWl06nLCZ1sFhILBNGsFcpLRWi guN+FsaObytcynPiYe4nY2GZ2EZ2JLNGEC5YJqXLQfihpEX7pps= -----END CERTIFICATE-----Generated at Sun Dec 21 15:50:56 2025 by rpki-client