This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: zWK5lsO3qwyli3RYOakgP4F6dApXljBiawrr2KNpwQ0= Subject key identifier: 63:E9:4D:A8:2F:AE:CB:33:BF:9A:46:C8:D6:5E:06:B4:E4:0F:51:ED Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 1EA0718E20808D639F1926A0F097A4DA4F172ED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 62 Signing time: Thu 18 Dec 2025 18:31:36 +0000 Manifest this update: Thu 18 Dec 2025 18:26:36 +0000 Manifest next update: Sun 21 Dec 2025 19:48:36 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) 2: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: TlaAeUeYpGOKvviEeq5yqKS0eHZaHkmz7oKEPG0AoM0=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a0:71:8e:20:80:8d:63:9f:19:26:a0:f0:97:a4:da:4f:17:2e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Dec 18 18:26:36 2025 GMT Not After : Dec 21 19:48:36 2025 GMT Subject: CN=63E94DA82FAECB33BF9A46C8D65E06B4E40F51ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:e6:49:e3:54:11:a4:95:a1:b1:c0:8c:b8: 8c:ea:10:a5:46:c4:fe:19:46:12:dc:6e:56:15:c0: b3:d2:da:ad:61:ae:52:54:f0:c0:0f:66:f2:15:c4: 9c:2c:ec:00:3f:c2:ad:09:6a:7e:16:f2:15:88:aa: f0:b5:d4:e0:c9:d1:bd:78:43:07:d4:5c:6d:c2:7e: c6:b2:c4:20:83:42:40:0a:93:1c:d2:ac:8c:2d:a8: 1f:fb:f1:ea:0c:f9:35:6c:4b:44:03:17:a3:49:5c: 9a:46:fe:3e:40:1a:fa:91:e0:68:b3:95:4c:c4:91: f2:28:56:53:f7:a6:2d:ec:bd:f5:b7:ef:48:63:eb: 23:1c:c6:ae:d3:4f:dd:2d:ae:8b:4f:16:e0:49:da: ce:2e:2b:d0:4c:5f:67:a7:4d:76:db:94:c7:aa:19: ec:4d:11:14:71:a8:fc:d9:33:ce:52:64:de:e2:3f: 07:5a:4c:21:e5:4a:60:1a:c7:92:cf:58:c9:a9:cb: d0:8a:31:5b:9f:56:a1:70:27:2e:0f:10:02:15:09: 5b:d9:be:4d:e4:42:5d:49:e3:9e:6a:83:d5:2e:d4: bd:13:02:28:6b:e4:9e:17:5f:18:9c:24:56:c5:6e: 83:5d:d8:97:94:d1:bb:d9:72:c9:76:50:39:65:e1: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:4D:A8:2F:AE:CB:33:BF:9A:46:C8:D6:5E:06:B4:E4:0F:51:ED X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1a:db:8b:4d:f3:0c:ea:39:54:f8:8b:93:0c:25:f5:e2:e9: c6:8e:8c:d2:e2:e3:5d:7c:cc:14:26:b8:73:fc:1f:bf:ba:29: 50:c5:a3:e7:ce:4f:07:32:4c:7b:af:53:ea:3a:3c:b5:4b:1c: 1b:58:68:91:02:15:be:33:cf:9a:c7:01:75:57:03:a9:b6:9a: fe:74:a4:9e:bd:50:3c:e5:a6:95:65:e1:06:6a:14:29:4b:98: 3a:ec:f9:fb:54:58:dd:f1:8f:30:83:f0:68:6b:02:86:08:a9: ac:2b:29:38:80:ae:ab:dc:c2:b4:e2:f2:cf:23:17:a7:6f:20: 89:3a:60:90:71:4a:a0:5b:37:36:2a:07:60:d2:3c:72:4f:c0: da:7f:3e:aa:df:30:ee:e4:45:50:79:b9:88:27:4e:1f:07:eb: 5a:1b:33:4c:53:e1:04:aa:ec:65:b1:40:11:d5:91:4a:87:5f: 91:ae:88:37:1f:1a:5c:23:04:88:c8:cf:2a:61:20:71:33:d6: 45:28:a3:c1:be:5e:ae:a1:09:5d:67:63:98:05:d4:d5:bc:f9: 7c:fd:93:e2:ca:79:09:13:08:5e:ba:15:4a:4f:8b:c9:f6:27: 30:3a:fb:07:3a:fe:df:16:9a:d5:8c:ff:cf:1e:85:12:fd:37: 39:69:b6:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqBxjiCAjWOfGSag8Jek2k8XLtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTEyMTgxODI2MzZaFw0yNTEyMjExOTQ4MzZaMDMxMTAvBgNV BAMTKDYzRTk0REE4MkZBRUNCMzNCRjlBNDZDOEQ2NUUwNkI0RTQwRjUxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJeZJ41QRpJWhscCMuIzqEKVG xP4ZRhLcblYVwLPS2q1hrlJU8MAPZvIVxJws7AA/wq0Jan4W8hWIqvC11ODJ0b14 QwfUXG3CfsayxCCDQkAKkxzSrIwtqB/78eoM+TVsS0QDF6NJXJpG/j5AGvqR4Giz lUzEkfIoVlP3pi3svfW370hj6yMcxq7TT90trotPFuBJ2s4uK9BMX2enTXbblMeq GexNERRxqPzZM85SZN7iPwdaTCHlSmAax5LPWMmpy9CKMVufVqFwJy4PEAIVCVvZ vk3kQl1J455qg9Uu1L0TAihr5J4XXxicJFbFboNd2JeU0bvZcsl2UDll4YBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+lNqC+uyzO/mkbI1l4GtOQPUe0wHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAa24tN8wzqOVT4i5MMJfXi6caOjNLi4118 zBQmuHP8H7+6KVDFo+fOTwcyTHuvU+o6PLVLHBtYaJECFb4zz5rHAXVXA6m2mv50 pJ69UDzlppVl4QZqFClLmDrs+ftUWN3xjzCD8GhrAoYIqawrKTiArqvcwrTi8s8j F6dvIIk6YJBxSqBbNzYqB2DSPHJPwNp/PqrfMO7kRVB5uYgnTh8H61obM0xT4QSq 7GWxQBHVkUqHX5GuiDcfGlwjBIjIzyphIHEz1kUoo8G+Xq6hCV1nY5gF1NW8+Xz9 k+LKeQkTCF66FUpPi8n2JzA6+wc6/t8WmtWM/88ehRL9NzlptqQ= -----END CERTIFICATE-----Generated at Fri Dec 19 13:50:41 2025 by rpki-client