This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: EPHiCkeeWHIbDZbcLn1skllolyUvz+GfAq28VGDyUL8= Subject key identifier: BC:ED:A5:24:1A:56:DD:F4:2F:E0:10:24:35:F7:C0:14:60:32:41:9C Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 691C4072244823552EBADB596002C48DB37CBB4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 02AC Signing time: Sat 20 Dec 2025 20:32:07 +0000 Manifest this update: Sat 20 Dec 2025 20:27:07 +0000 Manifest next update: Wed 24 Dec 2025 00:59:07 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: FTJsx/kfDlz7tqQypmA57auRiVsChBeAdenazFeMqrw=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1c:40:72:24:48:23:55:2e:ba:db:59:60:02:c4:8d:b3:7c:bb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Dec 20 20:27:07 2025 GMT Not After : Dec 24 00:59:07 2025 GMT Subject: CN=BCEDA5241A56DDF42FE0102435F7C0146032419C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:56:b9:d5:e0:61:1a:50:e2:4b:26:e3:2a: f0:d2:32:69:3a:ad:c6:07:92:ef:2f:5a:87:5f:0c: 0f:2e:89:59:a8:b0:52:f6:3f:05:96:36:70:c4:5d: b2:65:3a:66:f9:c7:21:f6:0a:3c:82:d7:1a:f7:db: 61:84:fd:24:76:d2:96:4b:dc:69:05:e8:a7:77:b0: dd:12:bd:e0:ff:75:a7:75:22:93:c4:fe:41:63:c3: ea:83:3a:7f:06:a3:12:f0:a5:a5:b5:e5:33:6a:56: 7d:d3:7e:bb:ff:22:5a:ba:f1:27:93:69:c1:e9:8d: 40:39:48:6b:52:4d:e6:27:e7:38:a5:d0:23:c4:22: da:b9:0b:f3:67:eb:9b:97:c3:c1:20:20:88:20:0e: c4:26:a3:7f:10:65:1d:5d:76:91:b2:c8:58:57:16: ec:3b:69:ff:76:87:f5:07:97:22:8a:91:cc:18:cf: 5e:75:d7:3e:52:98:38:8f:3f:67:5d:57:03:9a:79: 84:12:90:54:52:79:a4:a8:15:09:56:74:02:44:dc: b7:77:47:d4:6a:3e:26:4d:09:a8:dc:2b:db:44:ee: 43:91:23:7a:96:e5:87:b9:09:50:10:31:d3:02:6f: 6b:54:09:75:45:9e:bf:00:4d:20:91:c1:67:86:fe: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:ED:A5:24:1A:56:DD:F4:2F:E0:10:24:35:F7:C0:14:60:32:41:9C X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:b2:7e:fc:9b:78:b7:6c:60:86:91:4e:f1:0f:49:75:cf: 84:b8:b1:3b:7d:6a:b5:e4:b0:64:24:21:0d:71:55:1c:b8:4d: c2:4c:0c:17:6d:03:a6:f5:7d:3e:14:3c:e7:f2:4f:a3:6b:38: b9:5f:83:7f:7c:f8:6f:a1:78:22:e0:41:f2:7c:05:7a:15:aa: 07:15:ff:60:47:9d:57:af:2e:3f:4b:40:32:75:5f:ec:ce:ed: 9f:8e:46:4b:64:fa:23:f1:59:b5:92:2f:ed:11:4f:66:30:ce: 48:15:2c:3d:70:61:c7:cc:88:7c:e4:9c:38:93:80:37:1a:de: 8f:df:76:ca:c5:4e:8f:5d:9e:9b:35:c3:59:fe:67:06:0f:82: 8c:19:a6:b9:6b:fe:97:6f:83:b7:b9:5d:3b:b8:05:1e:c5:d1: eb:8c:58:48:b7:c0:9f:bf:33:45:c8:1b:32:62:83:7b:6c:59: 05:64:7e:ba:75:87:1e:88:8a:0a:9d:e7:e8:44:b4:2c:73:16: 7b:db:b8:7a:f1:44:19:27:2b:6a:fe:d0:29:38:ad:77:8f:47: 23:5f:0f:af:cb:ff:17:69:78:4c:16:c5:57:b7:60:45:f7:20: 36:a6:08:e3:41:ae:0a:90:bd:91:7d:83:f3:9c:a2:36:b5:07: 19:fa:38:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRxAciRII1UuuttZYALEjbN8u00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTEyMjAyMDI3MDdaFw0yNTEyMjQwMDU5MDdaMDMxMTAvBgNV BAMTKEJDRURBNTI0MUE1NkRERjQyRkUwMTAyNDM1RjdDMDE0NjAzMjQxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbVa51eBhGlDiSybjKvDSMmk6 rcYHku8vWodfDA8uiVmosFL2PwWWNnDEXbJlOmb5xyH2CjyC1xr322GE/SR20pZL 3GkF6Kd3sN0SveD/dad1IpPE/kFjw+qDOn8GoxLwpaW15TNqVn3Tfrv/Ilq68SeT acHpjUA5SGtSTeYn5zil0CPEItq5C/Nn65uXw8EgIIggDsQmo38QZR1ddpGyyFhX Fuw7af92h/UHlyKKkcwYz1511z5SmDiPP2ddVwOaeYQSkFRSeaSoFQlWdAJE3Ld3 R9RqPiZNCajcK9tE7kORI3qW5Ye5CVAQMdMCb2tUCXVFnr8ATSCRwWeG/gB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvO2lJBpW3fQv4BAkNffAFGAyQZwwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6rsn78m3i3bGCGkU7xD0l1z4S4sTt9arXk sGQkIQ1xVRy4TcJMDBdtA6b1fT4UPOfyT6NrOLlfg398+G+heCLgQfJ8BXoVqgcV /2BHnVevLj9LQDJ1X+zO7Z+ORktk+iPxWbWSL+0RT2YwzkgVLD1wYcfMiHzknDiT gDca3o/fdsrFTo9dnps1w1n+ZwYPgowZprlr/pdvg7e5XTu4BR7F0euMWEi3wJ+/ M0XIGzJig3tsWQVkfrp1hx6Iigqd5+hEtCxzFnvbuHrxRBknK2r+0Ck4rXePRyNf D6/L/xdpeEwWxVe3YEX3IDamCONBrgqQvZF9g/Ocoja1Bxn6ODY= -----END CERTIFICATE-----Generated at Sun Dec 21 08:57:53 2025 by rpki-client