This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: pF1EMetZLrZmdKHykQDcF45JuPfM5Y0f3AqQ7xQqlVo= Subject key identifier: 03:61:60:D3:E8:7F:17:02:46:49:88:CD:E4:45:FB:BE:A6:6D:F4:C3 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 555D2461E4C99613B8C8DFE96AF9AC7D08E400D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0105 Signing time: Sat 20 Dec 2025 12:13:28 +0000 Manifest this update: Sat 20 Dec 2025 12:08:28 +0000 Manifest next update: Tue 23 Dec 2025 18:43:28 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 3GHLH8FJHhjLbpbr6v5C9FAsTt0aRSBguypSCWJloWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5d:24:61:e4:c9:96:13:b8:c8:df:e9:6a:f9:ac:7d:08:e4:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Dec 20 12:08:28 2025 GMT Not After : Dec 23 18:43:28 2025 GMT Subject: CN=036160D3E87F1702464988CDE445FBBEA66DF4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:80:b1:ce:d4:d9:8a:3d:e6:c5:b6:f8:41: 30:71:b7:81:37:69:f0:f3:d6:d0:c2:28:a7:20:e8: 12:62:68:26:dd:a4:54:fd:e5:4d:b4:c2:d1:6c:e9: bb:9f:1a:27:dc:e9:8d:92:75:70:82:bf:ad:14:eb: b9:2d:72:09:fe:ab:2f:bb:e5:44:48:bb:59:e7:81: e1:a1:23:ba:1b:ad:76:6a:d7:93:07:aa:7a:d3:98: 13:cc:50:35:b2:74:87:93:5e:8d:0d:96:26:2e:e7: 9f:10:b0:a4:b0:52:83:4a:95:9d:3e:6c:71:bb:1a: e5:76:ff:8a:40:e8:bd:65:70:b4:27:48:f8:c4:5b: 96:70:85:dc:81:cf:fd:8d:cd:1f:2c:2b:05:52:2a: 64:9a:47:1d:89:4e:73:52:74:ea:4c:26:a7:61:ba: ec:ab:8e:dc:ad:c1:e5:9f:ae:79:ea:f9:06:1d:1b: b5:c7:2a:cc:84:be:82:47:be:d9:b6:5a:b7:e2:48: 57:2f:67:4f:c4:01:45:f0:3f:42:3c:18:de:15:af: 39:fb:64:58:04:b9:8b:63:1a:2c:3f:a1:54:15:df: dd:06:c6:9a:e2:56:ef:e2:93:f7:d5:67:63:2a:7f: b6:95:89:61:99:25:9c:df:7c:59:09:54:92:29:11: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:60:D3:E8:7F:17:02:46:49:88:CD:E4:45:FB:BE:A6:6D:F4:C3 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:91:16:f4:f4:5f:f4:b8:1d:9f:e9:8f:a6:32:02:94:96:c4: a8:8c:bf:f6:d0:b5:01:52:a4:7b:af:29:44:45:6a:77:6a:76: 26:a5:52:a2:7b:5e:4a:6d:67:de:2f:36:e4:cd:17:ab:e0:a6: 7a:32:8d:86:05:d0:f0:a3:17:ca:fa:2e:b6:34:c9:aa:79:07: 9d:b4:86:90:99:f8:93:20:1c:c3:7b:e1:a1:fd:2b:59:e6:83: df:8e:ec:18:0b:9b:1d:ec:42:60:0b:93:f8:5e:e2:1d:18:bd: cf:a2:28:38:ff:31:52:fd:26:dd:7f:92:9d:84:28:fd:14:ca: 62:df:ef:39:8d:b0:40:0d:42:b5:9b:f2:6f:99:27:ef:57:27: e2:d8:a8:fc:d2:8d:fb:2a:84:64:29:c4:79:55:01:8d:81:10: d7:34:1d:ba:79:7b:eb:71:11:a1:94:02:a5:f9:81:84:e2:3b: 96:e2:23:9a:b3:88:b8:56:52:68:38:d2:98:dd:56:2c:2f:ab: 3c:67:a7:d6:a4:59:af:0e:8f:1c:3c:02:05:64:18:8b:3a:4f: 06:10:c1:38:b4:0f:b7:c3:9c:e0:e3:99:7e:56:42:ee:37:3c: 8c:65:f6:18:bb:07:34:2f:10:8b:11:78:52:37:b9:42:6a:f8: d2:93:0a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVV0kYeTJlhO4yN/pavmsfQjkANAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTEyMjAxMjA4MjhaFw0yNTEyMjMxODQzMjhaMDMxMTAvBgNV BAMTKDAzNjE2MEQzRTg3RjE3MDI0NjQ5ODhDREU0NDVGQkJFQTY2REY0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkaoCxztTZij3mxbb4QTBxt4E3 afDz1tDCKKcg6BJiaCbdpFT95U20wtFs6bufGifc6Y2SdXCCv60U67ktcgn+qy+7 5URIu1nngeGhI7obrXZq15MHqnrTmBPMUDWydIeTXo0NliYu558QsKSwUoNKlZ0+ bHG7GuV2/4pA6L1lcLQnSPjEW5ZwhdyBz/2NzR8sKwVSKmSaRx2JTnNSdOpMJqdh uuyrjtytweWfrnnq+QYdG7XHKsyEvoJHvtm2WrfiSFcvZ0/EAUXwP0I8GN4Vrzn7 ZFgEuYtjGiw/oVQV390GxpriVu/ik/fVZ2Mqf7aViWGZJZzffFkJVJIpEX1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2Fg0+h/FwJGSYjN5EX7vqZt9MMwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiRFvT0X/S4HZ/pj6YyApSWxKiMv/bQtQFS pHuvKURFandqdialUqJ7XkptZ94vNuTNF6vgpnoyjYYF0PCjF8r6LrY0yap5B520 hpCZ+JMgHMN74aH9K1nmg9+O7BgLmx3sQmALk/he4h0Yvc+iKDj/MVL9Jt1/kp2E KP0UymLf7zmNsEANQrWb8m+ZJ+9XJ+LYqPzSjfsqhGQpxHlVAY2BENc0Hbp5e+tx EaGUAqX5gYTiO5biI5qziLhWUmg40pjdViwvqzxnp9akWa8Ojxw8AgVkGIs6TwYQ wTi0D7fDnODjmX5WQu43PIxl9hi7BzQvEIsReFI3uUJq+NKTCqs= -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:05 2025 by rpki-client