This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: vlHhX2cCRS+aMtpr2L8rsCSYqgTzocF9P+BPL+y/65w= Subject key identifier: 5F:D7:54:D3:3E:57:07:49:92:6A:3D:38:B6:F4:7D:F6:06:9B:59:CF Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 15FBAFA9C2C5366911AC855E97E5E9B0FA95E4C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 0222 Signing time: Sat 20 Dec 2025 18:31:55 +0000 Manifest this update: Sat 20 Dec 2025 18:26:55 +0000 Manifest next update: Wed 24 Dec 2025 00:32:55 +0000 Files and hashes: 1: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 2: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 3: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: 8wYDK+sD6UNThkcfk9SQdzoeEzUCnwH6aMsRt+e76uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fb:af:a9:c2:c5:36:69:11:ac:85:5e:97:e5:e9:b0:fa:95:e4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Dec 20 18:26:55 2025 GMT Not After : Dec 24 00:32:55 2025 GMT Subject: CN=5FD754D33E570749926A3D38B6F47DF6069B59CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:9e:92:6e:3c:ac:de:38:3e:82:fb:45:56: 48:b6:84:e5:07:a5:4e:12:6b:de:25:10:94:ef:cc: 33:ae:03:f4:4f:af:8b:3a:ce:d2:1f:7e:ec:18:c4: 9a:ba:fb:ff:f2:90:73:0a:84:1f:c2:6d:ef:b4:7f: 41:9c:1c:8a:bf:c4:92:00:4f:ae:fa:94:1f:0a:14: c8:c3:11:3c:ea:bc:9b:28:82:c8:4d:74:84:3b:ad: 45:b9:1c:3e:e6:dc:45:f7:35:4a:02:58:0a:ac:20: ce:93:22:59:53:5f:d4:fc:ee:94:19:2a:a3:2c:81: f0:bc:45:88:0b:35:f2:be:06:74:82:ae:cf:45:a5: 25:41:36:a2:a8:27:e3:68:f4:01:06:d6:6c:22:f9: 09:9c:0d:03:d9:b3:98:d4:c8:e1:50:5d:a4:52:1c: c0:2a:04:27:5a:43:2f:71:c2:ea:0e:6a:f5:8f:91: 63:48:3b:3e:c9:76:11:85:d1:83:5f:86:7a:23:ef: 89:bb:2a:3d:cd:d1:24:62:52:7d:44:e9:33:f4:c0: 69:eb:ed:99:bd:e7:85:09:17:5c:0b:83:bc:bf:92: 67:0f:36:9a:05:b5:e8:c9:bf:92:60:05:bc:2f:85: c9:dc:8c:e7:ad:5d:91:02:aa:58:5e:fc:db:52:ed: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:54:D3:3E:57:07:49:92:6A:3D:38:B6:F4:7D:F6:06:9B:59:CF X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:68:37:c9:75:00:0a:f2:c2:5e:ff:85:cf:b1:e1:c0:d7:6b: dc:58:d7:56:9e:6f:d0:7f:54:9b:8f:69:08:3c:b6:15:7a:fb: 3b:3c:8a:f0:ad:f8:b2:33:ea:91:23:ee:58:3c:82:ab:32:a3: 94:8d:ea:6a:2e:cc:f8:91:7e:93:d1:bc:07:13:d1:79:1c:4b: bc:15:28:df:43:82:79:85:23:35:81:bb:a6:7b:83:86:13:58: 22:8b:2b:63:f3:3f:82:5c:73:3e:e3:d5:35:7c:59:9d:14:c3: ec:a6:0c:2e:94:94:1a:99:fd:c9:fb:9d:b3:e9:a2:63:7f:40: 46:b8:57:4f:0d:e7:be:e3:d4:a3:46:ab:6c:23:e9:e5:16:48: 9b:98:93:5e:53:7e:c2:67:ab:dd:33:fe:3c:ea:93:fc:5d:42: 54:02:c0:8c:ee:30:85:1f:ba:7d:b9:a3:1b:13:d1:e8:8e:e3: ce:13:bc:a1:89:52:df:db:20:ba:80:48:c1:d0:25:e7:64:53: ac:37:a4:32:08:8b:9e:27:91:2b:a8:26:b8:31:0a:8e:79:ac: 43:4b:81:cd:83:fe:a0:7c:cc:b6:3d:39:6b:e9:12:dc:2c:b4: d6:ba:de:e4:b6:39:26:63:5b:6b:98:d3:e9:54:8e:ea:c3:1a: db:2e:3a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfuvqcLFNmkRrIVel+XpsPqV5MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTEyMjAxODI2NTVaFw0yNTEyMjQwMDMyNTVaMDMxMTAvBgNV BAMTKDVGRDc1NEQzM0U1NzA3NDk5MjZBM0QzOEI2RjQ3REY2MDY5QjU5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcZ6Sbjys3jg+gvtFVki2hOUH pU4Sa94lEJTvzDOuA/RPr4s6ztIffuwYxJq6+//ykHMKhB/Cbe+0f0GcHIq/xJIA T676lB8KFMjDETzqvJsogshNdIQ7rUW5HD7m3EX3NUoCWAqsIM6TIllTX9T87pQZ KqMsgfC8RYgLNfK+BnSCrs9FpSVBNqKoJ+No9AEG1mwi+QmcDQPZs5jUyOFQXaRS HMAqBCdaQy9xwuoOavWPkWNIOz7JdhGF0YNfhnoj74m7Kj3N0SRiUn1E6TP0wGnr 7Zm954UJF1wLg7y/kmcPNpoFtejJv5JgBbwvhcncjOetXZECqlhe/NtS7WxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9dU0z5XB0mSaj04tvR99gabWc8wHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRoN8l1AArywl7/hc+x4cDXa9xY11aeb9B/ VJuPaQg8thV6+zs8ivCt+LIz6pEj7lg8gqsyo5SN6mouzPiRfpPRvAcT0XkcS7wV KN9DgnmFIzWBu6Z7g4YTWCKLK2PzP4Jccz7j1TV8WZ0Uw+ymDC6UlBqZ/cn7nbPp omN/QEa4V08N577j1KNGq2wj6eUWSJuYk15TfsJnq90z/jzqk/xdQlQCwIzuMIUf un25oxsT0eiO484TvKGJUt/bILqASMHQJedkU6w3pDIIi54nkSuoJrgxCo55rENL gc2D/qB8zLY9OWvpEtwstNa63uS2OSZjW2uY0+lUjurDGtsuOok= -----END CERTIFICATE-----Generated at Sun Dec 21 12:10:56 2025 by rpki-client