This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: RA/6BHSSFRQGHvjC1bbTKYy7eumGvnIYdA8hJz5x9Fw= Subject key identifier: 22:59:A9:E1:62:D2:2F:B3:19:35:31:EA:E6:75:90:9B:2F:6B:43:FE Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 6336CD3D0BC02E09D42D7364B11B4FA30BEFB78B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 0475 Signing time: Wed 17 Dec 2025 00:21:27 +0000 Manifest this update: Wed 17 Dec 2025 00:16:27 +0000 Manifest next update: Sat 20 Dec 2025 03:24:27 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: 0UO6zNlwAraa+5yGZQDUIJSqHNOtbDy/a1m5XIte5pI=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:36:cd:3d:0b:c0:2e:09:d4:2d:73:64:b1:1b:4f:a3:0b:ef:b7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Dec 17 00:16:27 2025 GMT Not After : Dec 20 03:24:27 2025 GMT Subject: CN=2259A9E162D22FB3193531EAE675909B2F6B43FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:1b:96:cc:ab:38:6b:7b:cd:b5:b6:1d:f8: e6:2d:6f:38:db:fc:d0:cd:19:98:6d:33:0b:af:b8: 5b:f1:de:37:23:6c:3f:8c:32:58:2d:e2:24:9a:9f: 00:f5:73:0e:8e:eb:4e:91:2f:b9:66:05:9a:71:40: 4f:76:36:a1:50:70:22:ad:ff:09:a3:8f:5e:0d:4b: 36:c8:27:c9:2c:d4:f1:3a:c6:b0:d2:da:98:d4:ad: 6e:92:6b:2b:27:a2:0d:ea:ab:78:7e:6d:88:b1:34: f2:a2:87:51:f2:fe:37:54:7e:d1:52:8c:bb:99:ea: 58:70:85:04:01:1e:1b:d7:5b:14:18:40:e6:68:d3: d6:ff:c3:85:e6:98:9b:37:cd:76:ac:c7:d8:3e:84: 2b:19:7e:91:08:0c:9c:70:03:87:5f:91:1a:92:91: dc:5f:30:aa:25:77:84:3b:54:59:87:50:95:17:b4: 1f:a6:82:06:cf:1b:ef:00:a2:06:3d:9d:1f:6a:07: 17:43:3c:d5:9e:a7:94:62:66:25:f4:0b:bd:c9:38: 45:8a:d3:42:9c:0f:47:0a:df:c8:d4:cc:4c:66:68: 49:b5:05:85:e4:db:54:e2:24:7f:27:16:23:63:ba: 1b:65:0f:be:1a:18:2f:42:66:f9:08:9f:e1:e5:4e: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:A9:E1:62:D2:2F:B3:19:35:31:EA:E6:75:90:9B:2F:6B:43:FE X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f1:56:b7:9c:0a:79:dd:1d:19:a7:11:24:8d:bb:ec:d3:52: 7d:08:33:56:23:4f:4b:98:ca:de:cf:46:55:ba:11:f6:67:90: e2:56:4e:2c:19:69:d9:33:c4:ab:11:a6:02:24:1f:44:70:f0: 4d:e4:97:05:c3:24:ba:bc:42:c1:5d:71:2c:fc:f2:0d:6a:1b: 53:00:fe:0f:16:4e:b4:97:2d:b5:29:0d:87:d5:12:da:52:4b: 81:e7:7c:6d:88:c1:c3:f6:65:22:61:cb:86:12:0b:07:55:25: 9c:1e:43:ad:36:5c:e2:d7:8d:df:c8:76:cb:6b:93:7e:69:11: 42:49:b6:51:33:2a:64:81:e0:6e:17:a2:e3:87:ee:ae:40:d6: b8:aa:12:a6:6f:33:73:bb:48:ba:86:79:c7:42:9b:26:2c:55: 27:35:fb:d7:58:c0:64:c2:7f:3e:52:b5:c3:75:33:f8:ae:f6: db:0a:46:43:17:80:3d:29:52:1e:f6:b9:63:93:36:9c:b2:b7: 63:8a:1d:aa:0a:77:3e:b6:28:84:8d:ac:9a:81:7d:d5:c6:17: 07:13:2d:7b:a0:3c:2a:74:ba:ad:d1:19:1e:df:a7:bd:44:4d: 1e:5a:24:97:5c:ee:ce:d6:9b:84:64:c3:5c:d3:b6:cb:99:ec: 9e:a7:0e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzbNPQvALgnULXNksRtPowvvt4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTEyMTcwMDE2MjdaFw0yNTEyMjAwMzI0MjdaMDMxMTAvBgNV BAMTKDIyNTlBOUUxNjJEMjJGQjMxOTM1MzFFQUU2NzU5MDlCMkY2QjQzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGhuWzKs4a3vNtbYd+OYtbzjb /NDNGZhtMwuvuFvx3jcjbD+MMlgt4iSanwD1cw6O606RL7lmBZpxQE92NqFQcCKt /wmjj14NSzbIJ8ks1PE6xrDS2pjUrW6Saysnog3qq3h+bYixNPKih1Hy/jdUftFS jLuZ6lhwhQQBHhvXWxQYQOZo09b/w4XmmJs3zXasx9g+hCsZfpEIDJxwA4dfkRqS kdxfMKold4Q7VFmHUJUXtB+mggbPG+8AogY9nR9qBxdDPNWep5RiZiX0C73JOEWK 00KcD0cK38jUzExmaEm1BYXk21TiJH8nFiNjuhtlD74aGC9CZvkIn+HlTi9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlmp4WLSL7MZNTHq5nWQmy9rQ/4wHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjxVrecCnndHRmnESSNu+zTUn0IM1YjT0uY yt7PRlW6EfZnkOJWTiwZadkzxKsRpgIkH0Rw8E3klwXDJLq8QsFdcSz88g1qG1MA /g8WTrSXLbUpDYfVEtpSS4HnfG2IwcP2ZSJhy4YSCwdVJZweQ602XOLXjd/Idstr k35pEUJJtlEzKmSB4G4XouOH7q5A1riqEqZvM3O7SLqGecdCmyYsVSc1+9dYwGTC fz5StcN1M/iu9tsKRkMXgD0pUh72uWOTNpyyt2OKHaoKdz62KISNrJqBfdXGFwcT LXugPCp0uq3RGR7fp71ETR5aJJdc7s7Wm4Rkw1zTtsuZ7J6nDoQ= -----END CERTIFICATE-----Generated at Thu Dec 18 08:40:49 2025 by rpki-client