This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: lJphqJUICGT6CiuX6URPdLgtAi1OKM3bp2bjJautm9c= Subject key identifier: C5:2F:14:ED:F5:D4:EF:F2:BE:D0:9C:C3:3A:15:F0:27:8E:30:DB:F1 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 27A75DE47FCA54BF78FDF3795519DE923D41F196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 88 Signing time: Fri 19 Dec 2025 17:44:40 +0000 Manifest this update: Fri 19 Dec 2025 17:39:40 +0000 Manifest next update: Tue 23 Dec 2025 00:57:40 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: hSrPFHyho5S+Gu2uZY6cKUcf720HKBEsdgjKyujmdQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a7:5d:e4:7f:ca:54:bf:78:fd:f3:79:55:19:de:92:3d:41:f1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Dec 19 17:39:40 2025 GMT Not After : Dec 23 00:57:40 2025 GMT Subject: CN=C52F14EDF5D4EFF2BED09CC33A15F0278E30DBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:28:4d:ca:59:af:b1:ba:f6:af:1b:5f:bd:18: 56:25:94:dc:ab:40:ea:3f:a7:74:2e:5a:b3:99:bb: f7:4c:f4:19:65:80:be:8e:75:f3:0e:78:48:80:8c: 2a:63:dc:85:04:e8:b8:31:15:8d:5d:b2:7a:fe:53: 38:75:8b:b7:85:32:16:71:ac:7c:73:70:d2:9d:c1: 22:b9:5e:5b:97:f4:09:ec:38:da:4c:cf:d9:1a:48: f4:74:b8:70:88:63:9f:18:06:8d:90:f5:76:85:67: a5:5e:b8:1c:38:6c:03:a9:3e:b3:1e:d1:b0:28:c1: a8:e2:0c:6c:52:c1:4d:2e:54:46:8c:af:63:e6:f9: 0e:27:3e:27:91:b1:45:13:4d:0f:b7:ee:16:a2:67: 23:bb:a9:33:dc:a4:1e:fb:d8:b7:fd:62:d1:ab:99: e5:0e:62:9c:f8:63:01:a1:cd:98:f1:09:04:f0:d6: 04:96:ee:04:ba:2d:67:2c:c4:ec:6e:03:7a:26:36: cb:a4:b6:8e:fa:7d:10:48:aa:86:f5:1e:7d:f6:fb: 2d:25:45:dd:36:51:b2:d1:f4:52:7f:b9:fc:c6:b8: 4b:20:b6:08:91:06:43:c3:09:a4:65:8c:4c:0f:f0: 81:d9:75:47:a4:7c:8e:c5:de:2f:b6:8b:fc:97:32: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:14:ED:F5:D4:EF:F2:BE:D0:9C:C3:3A:15:F0:27:8E:30:DB:F1 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:c0:43:8a:42:0d:2d:06:02:af:e0:e8:ba:42:23:2a:ff: b7:10:5a:75:c5:ae:f1:49:1f:ff:3a:3c:23:be:1f:e5:ca:d5: 4b:c7:f4:54:a9:80:46:47:cb:db:9f:a5:d3:2b:83:e4:f3:7b: 38:fe:ee:c8:ce:85:ff:b1:d0:ba:7f:30:40:09:02:11:95:36: 55:69:9a:62:ac:46:20:ab:e0:23:28:de:b2:85:9e:65:60:b6: 25:21:9d:ee:c0:73:1d:15:81:2d:86:d9:fd:56:37:2c:73:f1: be:13:b6:f8:01:0e:39:ac:7d:4b:0e:d0:b3:c6:36:a3:db:ad: ed:2b:89:2c:4f:b4:20:a5:b7:38:1a:29:57:7e:69:0f:51:a4: ba:51:b6:82:55:31:fd:ee:35:2f:ec:8e:cf:f7:29:f5:bc:4e: 0f:0c:a9:b8:95:19:cb:b3:6f:a3:57:55:b6:93:20:85:f4:d2: 32:e5:55:1c:ea:70:52:19:78:10:f4:81:a1:a9:81:d1:ea:d5: 04:4a:0b:29:84:33:ce:33:4a:55:01:f4:b4:35:e7:55:ff:d8: 81:8b:61:7f:98:35:1c:de:88:af:b1:32:a3:e7:15:21:3e:b5: bd:0b:cd:97:21:38:05:01:93:ad:c9:16:b6:af:dc:1c:64:a6: d2:71:e6:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6dd5H/KVL94/fN5VRnekj1B8ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTEyMTkxNzM5NDBaFw0yNTEyMjMwMDU3NDBaMDMxMTAvBgNV BAMTKEM1MkYxNEVERjVENEVGRjJCRUQwOUNDMzNBMTVGMDI3OEUzMERCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKE3KWa+xuvavG1+9GFYllNyr QOo/p3QuWrOZu/dM9BllgL6OdfMOeEiAjCpj3IUE6LgxFY1dsnr+Uzh1i7eFMhZx rHxzcNKdwSK5XluX9AnsONpMz9kaSPR0uHCIY58YBo2Q9XaFZ6VeuBw4bAOpPrMe 0bAowajiDGxSwU0uVEaMr2Pm+Q4nPieRsUUTTQ+37haiZyO7qTPcpB772Lf9YtGr meUOYpz4YwGhzZjxCQTw1gSW7gS6LWcsxOxuA3omNsukto76fRBIqob1Hn32+y0l Rd02UbLR9FJ/ufzGuEsgtgiRBkPDCaRljEwP8IHZdUekfI7F3i+2i/yXMhCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxS8U7fXU7/K+0JzDOhXwJ44w2/EwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHUwEOKQg0tBgKv4Oi6QiMq/7cQWnXFrvFJ H/86PCO+H+XK1UvH9FSpgEZHy9ufpdMrg+Tzezj+7sjOhf+x0Lp/MEAJAhGVNlVp mmKsRiCr4CMo3rKFnmVgtiUhne7Acx0VgS2G2f1WNyxz8b4TtvgBDjmsfUsO0LPG NqPbre0riSxPtCCltzgaKVd+aQ9RpLpRtoJVMf3uNS/sjs/3KfW8Tg8MqbiVGcuz b6NXVbaTIIX00jLlVRzqcFIZeBD0gaGpgdHq1QRKCymEM84zSlUB9LQ151X/2IGL YX+YNRzeiK+xMqPnFSE+tb0LzZchOAUBk63JFrav3BxkptJx5vs= -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:54 2025 by rpki-client