This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: IInIe7h2peYPv7g043bvHzf+fqTJjyFjTXL9qSVQhdE= Subject key identifier: 79:A0:C8:3C:6E:5A:36:AF:D4:00:AF:66:5A:E4:02:3B:E6:F3:1F:E3 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 34CAAFC9452CF5C9FB352933EA87EE556D3FC04E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04B9 Signing time: Thu 18 Dec 2025 01:52:06 +0000 Manifest this update: Thu 18 Dec 2025 01:47:06 +0000 Manifest next update: Sun 21 Dec 2025 11:19:06 +0000 Files and hashes: 1: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: 8BI8RD4ZtHnz0AVcPU6yKGZwNYPzTso1TUHqXPbZg8U=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 3: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 4: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 5: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ca:af:c9:45:2c:f5:c9:fb:35:29:33:ea:87:ee:55:6d:3f:c0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Dec 18 01:47:06 2025 GMT Not After : Dec 21 11:19:06 2025 GMT Subject: CN=79A0C83C6E5A36AFD400AF665AE4023BE6F31FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:cf:8d:bd:c5:b3:d6:d9:83:ba:91:76:8a: a0:40:14:91:ad:2c:82:40:e9:b7:d7:a1:ab:d1:f8: 07:d7:52:7e:8e:a5:c8:0e:74:a1:fa:08:d9:93:dc: bc:82:ae:69:42:0e:49:72:a5:f2:5e:d3:2c:63:2e: 34:4d:88:20:0e:ff:18:b6:d0:52:0d:45:d1:f6:98: b1:e8:c0:c8:47:c9:3f:85:a8:05:6b:73:53:51:31: f5:98:1e:27:3a:3c:ab:48:00:61:ff:12:2c:ad:78: 78:96:9b:08:ff:e8:ae:f0:81:85:a4:6b:25:f4:bb: 29:e9:54:74:fe:cc:36:d0:78:53:91:cc:1d:b3:33: 38:3f:9d:0e:31:37:92:04:99:45:52:42:d3:c6:98: af:d8:7c:43:56:8c:20:db:df:e5:5f:c6:f4:b9:8e: a5:ad:8a:4d:3a:ee:b7:fb:47:ec:7e:6e:3f:91:bc: 1a:5f:16:7d:f7:ba:4d:bd:c2:3a:40:e5:5f:25:e1: e4:0a:06:cc:68:8a:3f:f0:05:d8:54:18:5d:f9:99: 45:11:85:a0:b4:22:7d:09:60:30:64:0d:e7:74:d1: ae:20:4e:dd:56:53:71:a9:5e:68:8e:a6:21:f1:7d: 8d:96:9f:fe:7f:00:7c:62:de:11:a9:3f:d4:eb:9a: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A0:C8:3C:6E:5A:36:AF:D4:00:AF:66:5A:E4:02:3B:E6:F3:1F:E3 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c6:e1:a9:3e:9e:21:42:0a:53:6d:ae:d6:b9:6b:82:7d:a2: 44:24:2b:61:7f:e4:9b:56:aa:29:52:82:bb:b4:b9:d3:5b:d5: 2d:80:35:bd:f8:87:d6:a8:9f:18:ac:ba:19:29:e5:21:de:f6: 28:b3:27:0c:8c:a9:57:51:ac:d2:e8:25:c2:03:27:70:68:af: c7:9c:e4:d1:e8:03:f5:7d:65:c3:16:d9:29:e8:e9:1d:e1:6f: 27:92:4a:c8:3e:48:23:0c:07:f3:fd:b8:62:ec:5b:72:33:9e: 81:2e:79:70:88:94:13:52:2f:19:25:27:3f:56:8c:0c:cb:ed: fd:91:d1:c3:dd:82:8d:46:de:dd:9b:c9:d5:d4:fd:60:d4:fc: e6:5d:80:5e:c4:a3:91:bf:1c:b4:46:fa:5c:e8:9c:d1:75:64: 2c:6a:6c:29:14:fb:ee:de:fa:e5:80:de:a9:07:fc:e8:ab:b2: 23:36:cb:5b:a9:98:ef:4e:bd:95:c9:83:a6:51:f5:5b:fe:c2: 45:8e:fc:79:80:76:79:9a:69:c7:d2:9a:5a:4c:8e:17:73:71: b5:34:07:63:5b:6b:77:f9:dd:27:29:aa:9f:da:09:4b:b3:38: c2:2d:09:62:fa:74:ed:04:34:50:4b:2f:18:40:38:c5:c8:7a: 59:45:37:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMqvyUUs9cn7NSkz6ofuVW0/wE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTEyMTgwMTQ3MDZaFw0yNTEyMjExMTE5MDZaMDMxMTAvBgNV BAMTKDc5QTBDODNDNkU1QTM2QUZENDAwQUY2NjVBRTQwMjNCRTZGMzFGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1c+NvcWz1tmDupF2iqBAFJGt LIJA6bfXoavR+AfXUn6OpcgOdKH6CNmT3LyCrmlCDklypfJe0yxjLjRNiCAO/xi2 0FINRdH2mLHowMhHyT+FqAVrc1NRMfWYHic6PKtIAGH/EiyteHiWmwj/6K7wgYWk ayX0uynpVHT+zDbQeFORzB2zMzg/nQ4xN5IEmUVSQtPGmK/YfENWjCDb3+VfxvS5 jqWtik067rf7R+x+bj+RvBpfFn33uk29wjpA5V8l4eQKBsxoij/wBdhUGF35mUUR haC0In0JYDBkDed00a4gTt1WU3GpXmiOpiHxfY2Wn/5/AHxi3hGpP9Trmkv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeaDIPG5aNq/UAK9mWuQCO+bzH+MwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnG4ak+niFCClNtrta5a4J9okQkK2F/5JtW qilSgru0udNb1S2ANb34h9aonxisuhkp5SHe9iizJwyMqVdRrNLoJcIDJ3Bor8ec 5NHoA/V9ZcMW2Sno6R3hbyeSSsg+SCMMB/P9uGLsW3IznoEueXCIlBNSLxklJz9W jAzL7f2R0cPdgo1G3t2bydXU/WDU/OZdgF7Eo5G/HLRG+lzonNF1ZCxqbCkU++7e +uWA3qkH/OirsiM2y1upmO9OvZXJg6ZR9Vv+wkWO/HmAdnmaacfSmlpMjhdzcbU0 B2Nba3f53Scpqp/aCUuzOMItCWL6dO0ENFBLLxhAOMXIellFN1E= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:19 2025 by rpki-client