This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: 2VhKIKSayHxr28lPyR4f4aUR7JCt0Sk6WFEpfsl/1ZE= Subject key identifier: 47:D7:B5:AF:DC:A6:C6:A7:C7:6E:D4:A0:69:72:61:FA:26:03:5F:5A Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 3EBFB55A6BB0543D71D9720D9CE78E83E756D459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01D7 Signing time: Wed 17 Dec 2025 15:00:39 +0000 Manifest this update: Wed 17 Dec 2025 14:55:39 +0000 Manifest next update: Sat 20 Dec 2025 20:33:39 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: gWubg6d9HoOJ43Yx+YRV1TlSPMtI/9u/IAXkafLD90M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bf:b5:5a:6b:b0:54:3d:71:d9:72:0d:9c:e7:8e:83:e7:56:d4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Dec 17 14:55:39 2025 GMT Not After : Dec 20 20:33:39 2025 GMT Subject: CN=47D7B5AFDCA6C6A7C76ED4A0697261FA26035F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:f2:58:2e:95:16:75:68:7f:bb:88:cc:a9: 84:87:a0:fe:47:4c:e5:48:8a:c1:a9:ca:f7:32:37: ee:2c:8d:d5:0b:bd:1a:6f:b5:a8:9b:b2:0a:c2:14: b9:38:b5:44:4a:ad:17:39:ec:ee:3a:e2:60:5f:ba: 46:57:69:af:d3:5b:fc:3b:6d:98:e4:0b:3c:cc:a6: 16:6a:1a:37:b2:56:1b:21:a3:34:7c:85:e2:72:5a: e8:f1:64:ec:50:ef:86:62:ba:06:06:55:00:a5:e8: 9d:5f:49:29:0a:f6:1b:d1:3f:33:c7:5f:14:56:5b: eb:be:f2:8b:10:c2:4b:00:a7:6e:fc:bc:19:93:8e: 9a:fb:9d:3b:8f:29:b3:d1:0f:53:a7:39:1b:5a:6a: b9:d9:78:04:e4:2e:47:15:6b:41:4f:40:6e:dc:e4: 0d:0c:19:06:7c:36:37:e6:04:bf:df:be:19:e2:c0: f4:c0:c4:b0:ae:0d:04:e2:d0:92:c3:90:8a:71:ae: dd:38:35:4e:fb:7b:41:ed:e2:42:3e:75:92:2c:30: e1:21:74:bc:07:9d:94:c8:29:98:0b:25:d0:8a:bf: 97:0a:a9:c6:a5:5a:54:bc:c4:5c:05:5a:d6:de:49: b7:dd:fc:cf:95:e9:bd:e6:37:77:93:54:3e:df:55: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D7:B5:AF:DC:A6:C6:A7:C7:6E:D4:A0:69:72:61:FA:26:03:5F:5A X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:b1:c8:e0:e8:01:0c:08:40:3b:2d:d1:86:a1:55:20:8f: 19:5f:a2:85:98:19:ec:60:c1:d7:c1:cc:1e:c5:b8:bf:c3:30: 3b:47:91:b5:75:80:f4:54:41:2c:b3:0b:a6:2b:a3:06:f9:cb: ec:43:75:0b:bd:85:f9:34:29:b3:17:3e:1b:af:24:8e:8a:d6: b8:44:7b:75:29:20:12:c0:b9:e5:fc:7b:81:fd:06:e4:96:72: 41:8a:29:5b:16:5c:32:96:73:c6:9e:16:7f:18:fe:9a:36:c1: 57:7d:af:ae:ba:a9:d7:ea:c7:75:f3:45:b4:f6:9b:49:d6:7b: e9:b4:0d:fb:11:ac:60:e4:27:fe:0d:4b:ad:d6:9f:d1:b1:17: c3:95:ed:11:ef:f0:17:30:52:b4:0f:6a:10:30:a3:67:ad:ad: bc:79:a1:1c:71:e9:25:46:af:19:dc:a9:57:25:47:48:3f:da: 34:1f:de:cb:63:e4:b3:ba:b9:ce:44:a3:50:dc:7e:f0:73:3d: ee:bf:e0:85:f4:82:15:eb:0c:cd:c6:7a:b9:2b:ba:e0:5d:83: 81:26:e3:e5:60:ae:ba:f3:f0:2f:cf:97:59:26:22:72:2c:27: 7d:d3:38:7b:fa:9f:18:6c:91:15:fc:0c:3f:76:fc:9f:6d:29: 56:1b:79:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPr+1WmuwVD1x2XINnOeOg+dW1FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTEyMTcxNDU1MzlaFw0yNTEyMjAyMDMzMzlaMDMxMTAvBgNV BAMTKDQ3RDdCNUFGRENBNkM2QTdDNzZFRDRBMDY5NzI2MUZBMjYwMzVGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hfJYLpUWdWh/u4jMqYSHoP5H TOVIisGpyvcyN+4sjdULvRpvtaibsgrCFLk4tURKrRc57O464mBfukZXaa/TW/w7 bZjkCzzMphZqGjeyVhshozR8heJyWujxZOxQ74ZiugYGVQCl6J1fSSkK9hvRPzPH XxRWW+u+8osQwksAp278vBmTjpr7nTuPKbPRD1OnORtaarnZeATkLkcVa0FPQG7c 5A0MGQZ8NjfmBL/fvhniwPTAxLCuDQTi0JLDkIpxrt04NU77e0Ht4kI+dZIsMOEh dLwHnZTIKZgLJdCKv5cKqcalWlS8xFwFWtbeSbfd/M+V6b3mN3eTVD7fVXI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9e1r9ymxqfHbtSgaXJh+iYDX1owHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8Mscjg6AEMCEA7LdGGoVUgjxlfooWYGexg wdfBzB7FuL/DMDtHkbV1gPRUQSyzC6Yrowb5y+xDdQu9hfk0KbMXPhuvJI6K1rhE e3UpIBLAueX8e4H9BuSWckGKKVsWXDKWc8aeFn8Y/po2wVd9r666qdfqx3XzRbT2 m0nWe+m0DfsRrGDkJ/4NS63Wn9GxF8OV7RHv8BcwUrQPahAwo2etrbx5oRxx6SVG rxncqVclR0g/2jQf3stj5LO6uc5Eo1DcfvBzPe6/4IX0ghXrDM3GerkruuBdg4Em 4+Vgrrrz8C/Pl1kmInIsJ33TOHv6nxhskRX8DD92/J9tKVYbecQ= -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:49 2025 by rpki-client