This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: LVlU/3YPj/slTgSstDYedO1OgTx8IqHioBt4EBoTmfI= Subject key identifier: B6:4C:23:C8:1F:8C:12:B5:75:20:AC:04:EE:CA:9A:F6:94:B6:69:B8 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 0180F86E5A1209F5BC42DEAB0C810199336244AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 0544 Signing time: Mon 22 Dec 2025 00:51:46 +0000 Manifest this update: Mon 22 Dec 2025 00:46:46 +0000 Manifest next update: Thu 25 Dec 2025 01:31:46 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: XP0ftXtJRKTRnMmM5RHfXvqivFStcWbbL9fTaa1lIQs=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: Z+yI+qBEJQ4HpP+yvfIUbQbmmee7rBGeSeum3wqAtpo=) 3: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: gPDeGvdoPh8JLf1C6iTskCnVpMEc/2rRHmEy1vS+evY=) 4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: MxlZMpoNv5CdONEOPyJ0XCI3HYckgI0HEgji/tMrUdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 01:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:80:f8:6e:5a:12:09:f5:bc:42:de:ab:0c:81:01:99:33:62:44:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Dec 22 00:46:46 2025 GMT Not After : Dec 25 01:31:46 2025 GMT Subject: CN=B64C23C81F8C12B57520AC04EECA9AF694B669B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:e7:9b:14:1d:8b:d0:55:ac:6a:f8:65:98: dc:66:2b:3a:48:4c:e8:67:06:aa:19:55:19:79:30: 1c:36:52:18:9a:bd:5c:81:e5:56:d4:e5:4d:55:08: 99:df:03:6b:9d:33:74:9a:4c:80:d8:18:88:cd:80: 39:49:ed:03:54:75:0e:6d:92:9d:40:d5:11:4c:cf: 27:6c:dc:66:e0:21:00:55:bb:cc:5f:da:78:8f:e9: f5:6b:1c:cd:a8:d1:c8:59:e9:11:08:1d:9b:b4:ca: 31:95:97:5b:8d:35:c9:86:0a:69:31:0a:2e:f5:42: 02:35:ff:76:1b:73:15:2b:0e:02:e3:01:9b:f1:89: b1:a9:01:a1:80:c8:c9:30:c0:54:6b:3f:01:10:04: 33:cd:7a:ba:d3:d9:92:b6:71:ea:df:d9:2a:8d:09: b9:e6:3d:15:7e:ae:5b:7d:35:69:82:b1:b8:be:fd: 6e:3a:92:90:f5:4d:7d:05:26:16:bd:ad:c9:33:40: c3:b5:72:1d:05:f7:7b:49:1e:62:71:09:a8:1a:1a: 2d:a1:b8:da:30:9e:6f:22:65:3a:9d:86:8d:03:54: cd:83:01:cd:ca:d3:89:82:2e:6e:d6:f3:6b:35:6d: 8c:70:22:5d:ff:68:a6:ac:83:51:d4:63:55:ac:b7: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4C:23:C8:1F:8C:12:B5:75:20:AC:04:EE:CA:9A:F6:94:B6:69:B8 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:70:48:61:5b:08:29:ca:a9:d3:e2:14:8c:83:c4:0a:d5:00: cd:fb:c4:da:3c:c5:35:5e:0f:63:5d:73:06:3d:38:57:4e:b4: a8:dc:01:f8:80:31:c0:e3:6a:98:ec:75:a1:b8:b1:b5:eb:bf: d8:01:4e:07:ed:ea:b0:f8:04:c1:9e:13:44:33:cf:69:d6:7e: c6:c8:f9:df:2d:4d:1f:18:04:4a:81:69:1b:1e:09:cf:ba:7f: fd:d2:4a:a1:b2:e0:e8:8d:55:01:84:e6:22:48:ba:bb:f7:94: 12:96:0d:8c:3d:ab:3b:4c:7e:d5:15:36:24:76:76:2c:bd:ce: 7d:b8:83:f4:2c:7e:27:35:a1:a1:2c:4e:61:a4:0d:ce:2d:be: fa:3c:0a:71:da:3f:f1:ea:55:33:ca:b8:c3:c2:5e:72:f7:d9: ae:fa:90:ec:b6:5b:a5:3f:40:33:49:2c:b5:9a:e7:3c:44:d1: b6:60:a5:bc:44:84:d3:12:38:be:bd:9b:8a:33:2d:c7:cf:72: f1:b1:db:e1:62:be:77:fe:71:11:3e:3d:a3:98:d6:27:33:9c: 30:bc:f2:f6:4c:7a:d2:39:46:bb:2e:9c:8e:d1:60:89:e6:2c: 37:35:7f:06:0a:bc:60:d1:f7:32:0c:62:86:16:5e:89:5c:0c: b5:76:76:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYD4bloSCfW8Qt6rDIEBmTNiRK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTEyMjIwMDQ2NDZaFw0yNTEyMjUwMTMxNDZaMDMxMTAvBgNV BAMTKEI2NEMyM0M4MUY4QzEyQjU3NTIwQUMwNEVFQ0E5QUY2OTRCNjY5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8eebFB2L0FWsavhlmNxmKzpI TOhnBqoZVRl5MBw2UhiavVyB5VbU5U1VCJnfA2udM3SaTIDYGIjNgDlJ7QNUdQ5t kp1A1RFMzyds3GbgIQBVu8xf2niP6fVrHM2o0chZ6REIHZu0yjGVl1uNNcmGCmkx Ci71QgI1/3YbcxUrDgLjAZvxibGpAaGAyMkwwFRrPwEQBDPNerrT2ZK2cerf2SqN CbnmPRV+rlt9NWmCsbi+/W46kpD1TX0FJha9rckzQMO1ch0F93tJHmJxCagaGi2h uNownm8iZTqdho0DVM2DAc3K04mCLm7W82s1bYxwIl3/aKasg1HUY1Wst8h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtkwjyB+MErV1IKwE7sqa9pS2abgwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhwSGFbCCnKqdPiFIyDxArVAM37xNo8xTVe D2NdcwY9OFdOtKjcAfiAMcDjapjsdaG4sbXrv9gBTgft6rD4BMGeE0Qzz2nWfsbI +d8tTR8YBEqBaRseCc+6f/3SSqGy4OiNVQGE5iJIurv3lBKWDYw9qztMftUVNiR2 diy9zn24g/Qsfic1oaEsTmGkDc4tvvo8CnHaP/HqVTPKuMPCXnL32a76kOy2W6U/ QDNJLLWa5zxE0bZgpbxEhNMSOL69m4ozLcfPcvGx2+Fivnf+cRE+PaOY1icznDC8 8vZMetI5RrsunI7RYInmLDc1fwYKvGDR9zIMYoYWXolcDLV2dn4= -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:15 2025 by rpki-client