This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: 56yA2WEn8S7CH2Ka5CCqGdp6NBBugQlMfQIFSet0ze8= Subject key identifier: 72:23:E7:CC:4E:55:6A:B9:9C:0E:DC:16:9E:70:4F:F0:DF:BA:A2:79 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 26540892F9D1BE3686BE2AA280CAD28CF5258E38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0112 Signing time: Mon 22 Dec 2025 00:11:50 +0000 Manifest this update: Mon 22 Dec 2025 00:06:50 +0000 Manifest next update: Thu 25 Dec 2025 00:32:50 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: uFtulP9Y97PqEi87NVKoc0gSfxnfRREAqGtOvg6waaM=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:54:08:92:f9:d1:be:36:86:be:2a:a2:80:ca:d2:8c:f5:25:8e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Dec 22 00:06:50 2025 GMT Not After : Dec 25 00:32:50 2025 GMT Subject: CN=7223E7CC4E556AB99C0EDC169E704FF0DFBAA279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:44:b3:b7:00:72:0b:bd:30:9f:c4:f4:6f: db:a9:5e:b4:3d:d0:6d:83:1d:6c:a3:a8:d8:a3:d1: 98:2b:7b:60:ca:01:9d:20:75:42:71:42:57:cf:e3: 93:ff:d1:e7:10:54:cd:63:5c:45:96:1d:00:a9:a9: 9c:db:9f:d0:88:d2:81:c0:09:36:5a:1e:fc:01:85: d4:25:7b:c8:56:4b:76:3d:26:0c:5b:91:e4:13:58: a6:0c:33:97:28:dd:02:57:cf:32:77:56:df:c5:43: 03:e8:72:11:ef:3c:44:b8:9f:45:31:ea:e4:59:5d: 31:7f:56:9f:2b:d7:8c:ba:43:76:ea:49:d6:9b:a5: 78:4b:03:57:e0:38:a3:6c:cc:c8:33:c1:0b:8d:53: 25:48:42:ef:65:03:64:ce:33:65:e3:8f:d7:74:3b: 0d:a9:dd:7d:3d:04:f7:1a:ec:85:75:66:3b:5d:5e: 16:08:9c:04:86:90:43:eb:68:19:f6:5b:89:93:9f: 8a:a2:42:3f:68:89:2b:07:f6:4a:51:d5:5e:4d:a2: 9e:17:5a:3e:44:44:4a:4d:0d:98:ad:c3:1e:64:1c: a9:b8:a3:01:7c:7c:59:5e:02:28:f6:18:e1:1d:f5: cc:6e:e7:51:14:6e:30:e8:fd:99:00:ee:be:45:ce: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:E7:CC:4E:55:6A:B9:9C:0E:DC:16:9E:70:4F:F0:DF:BA:A2:79 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:66:07:1d:e8:50:75:06:8e:7a:e4:fd:14:73:af:2a:89:da: 6e:4b:a2:51:0f:3b:e5:15:1b:5b:9f:90:21:20:d1:b7:7b:77: 43:6a:7f:c7:22:a5:d5:33:74:ce:b0:92:7c:1a:0e:57:5b:5f: 37:e3:74:f7:8a:40:25:cb:4d:60:07:52:3d:85:eb:a1:eb:9f: 18:ac:29:4c:d3:84:5f:56:b3:3f:3a:65:7e:35:50:cd:7c:ff: fe:89:1e:67:60:ba:46:bd:b2:d8:b7:f7:1c:89:18:40:69:1f: 2b:95:e3:33:6c:54:e0:83:ea:eb:23:0b:5a:ad:38:86:52:e6: cd:f3:1f:16:bb:dd:4d:d2:ca:45:3e:41:39:0b:46:51:0b:68: cc:c4:85:46:41:b7:66:30:38:84:d0:45:8b:35:40:d3:11:b2: 09:91:b6:bb:a5:09:76:80:19:70:ea:24:4b:96:42:d0:22:78: 62:11:14:cc:7b:b4:7a:9c:69:be:b0:71:c3:0f:47:d1:9f:d1: 54:b1:57:a0:75:80:bc:d2:2c:50:91:92:c3:6f:01:1a:36:75: 1f:62:40:bb:88:9e:5f:d1:b4:97:7c:82:3f:57:09:b0:d9:5a: 77:0a:42:44:fe:db:83:e5:b7:57:bf:05:fe:39:40:d1:8d:08: 80:06:c1:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlQIkvnRvjaGviqigMrSjPUljjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTEyMjIwMDA2NTBaFw0yNTEyMjUwMDMyNTBaMDMxMTAvBgNV BAMTKDcyMjNFN0NDNEU1NTZBQjk5QzBFREMxNjlFNzA0RkYwREZCQUEyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9ESztwByC70wn8T0b9upXrQ9 0G2DHWyjqNij0Zgre2DKAZ0gdUJxQlfP45P/0ecQVM1jXEWWHQCpqZzbn9CI0oHA CTZaHvwBhdQle8hWS3Y9JgxbkeQTWKYMM5co3QJXzzJ3Vt/FQwPochHvPES4n0Ux 6uRZXTF/Vp8r14y6Q3bqSdabpXhLA1fgOKNszMgzwQuNUyVIQu9lA2TOM2Xjj9d0 Ow2p3X09BPca7IV1ZjtdXhYInASGkEPraBn2W4mTn4qiQj9oiSsH9kpR1V5Nop4X Wj5EREpNDZitwx5kHKm4owF8fFleAij2GOEd9cxu51EUbjDo/ZkA7r5FzlKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUciPnzE5VarmcDtwWnnBP8N+6onkwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdmBx3oUHUGjnrk/RRzryqJ2m5LolEPO+UV G1ufkCEg0bd7d0Nqf8cipdUzdM6wknwaDldbXzfjdPeKQCXLTWAHUj2F66Hrnxis KUzThF9Wsz86ZX41UM18//6JHmdguka9sti39xyJGEBpHyuV4zNsVOCD6usjC1qt OIZS5s3zHxa73U3SykU+QTkLRlELaMzEhUZBt2YwOITQRYs1QNMRsgmRtrulCXaA GXDqJEuWQtAieGIRFMx7tHqcab6wccMPR9Gf0VSxV6B1gLzSLFCRksNvARo2dR9i QLuInl/RtJd8gj9XCbDZWncKQkT+24Plt1e/Bf45QNGNCIAGwW0= -----END CERTIFICATE-----Generated at Wed Dec 24 02:14:31 2025 by rpki-client