This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: UhmHTAP9Lgdf83YB9bCDTVcbVwE1GNN2OCix7anXtQ8= Subject key identifier: 43:B5:2C:D3:AE:51:47:60:EC:39:F7:91:E5:37:D5:CD:29:F8:F7:D4 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 7FBE9A72491C2563419FBA61D409A466ED51ECFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03CA Signing time: Sat 27 Dec 2025 04:52:33 +0000 Manifest this update: Sat 27 Dec 2025 04:47:33 +0000 Manifest next update: Tue 30 Dec 2025 12:26:33 +0000 Files and hashes: 1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 3: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: xhj+FroNljeD+JaFBeAFzPaAfvRTqsrFu6HMg8xdjHU=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 12:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:be:9a:72:49:1c:25:63:41:9f:ba:61:d4:09:a4:66:ed:51:ec:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Dec 27 04:47:33 2025 GMT Not After : Dec 30 12:26:33 2025 GMT Subject: CN=43B52CD3AE514760EC39F791E537D5CD29F8F7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:40:51:b2:9c:8e:20:34:22:21:b8:f5:8a: 07:e2:0a:39:2e:cc:dc:a8:4c:9f:36:39:1d:43:39: 00:05:c4:a2:d9:17:eb:67:7d:3f:fa:7e:64:e9:9d: 4d:68:f5:91:84:93:ba:4b:d5:fa:50:8f:54:63:16: fc:11:6b:6c:a4:bd:95:27:e5:aa:22:f7:b9:53:5e: 6f:e6:24:6d:9d:4b:29:82:b8:0e:2b:31:45:74:a1: bf:49:d6:e4:66:2f:44:2c:26:63:cd:43:59:2f:03: 89:48:8c:ff:8e:1d:71:49:ad:66:cd:27:e2:f5:2d: 4e:ea:19:8a:01:78:fd:71:1b:f6:95:d1:99:d9:d7: 93:44:73:32:91:58:80:51:88:4b:ba:51:38:70:9d: 43:f5:a5:f2:a5:c5:59:df:a4:16:29:8c:5b:18:2f: 15:6e:6b:e2:87:04:22:08:39:f7:be:31:43:75:ea: fb:9a:09:55:71:b1:7c:a3:c1:c9:9d:57:74:29:b4: ae:a7:52:48:d3:18:76:c2:03:c2:11:4c:71:82:38: a6:02:92:c5:92:01:de:92:aa:79:20:0b:ba:1a:ee: 46:5d:3a:70:49:dc:af:20:70:8f:2a:77:94:7d:1d: 66:6a:d8:a2:3b:f1:a9:38:73:24:23:0b:42:56:f0: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:2C:D3:AE:51:47:60:EC:39:F7:91:E5:37:D5:CD:29:F8:F7:D4 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:b6:cd:40:5f:6d:5e:19:68:e6:84:c7:a4:cb:11:d2:bc: ab:d2:6a:9e:9b:6e:c2:0c:16:9d:9a:cc:c8:85:ba:24:59:bc: bb:77:15:73:5e:08:a0:fa:c8:c0:33:99:6c:52:3d:d7:04:fd: 60:bf:31:0e:19:a7:4f:23:02:52:43:2a:69:b5:d4:a0:94:67: 9e:ad:93:ac:c8:e9:a8:6e:d6:a8:75:70:24:d6:a5:79:77:12: ec:03:e0:86:d6:ef:d1:58:9b:94:d7:28:38:9b:5c:e2:72:72: e1:91:7f:ad:9b:ee:b8:92:9b:5d:fc:a8:c6:09:b0:35:30:9b: 57:cf:4a:99:1f:a2:3c:39:06:67:78:93:13:2f:10:53:9a:89: 05:6c:bc:d2:cd:67:a5:22:5c:38:18:33:7a:15:db:5b:5d:6b: 3e:e2:4a:2c:f5:7f:2a:bf:f7:9c:6a:a4:73:6a:a8:01:2f:b2: f4:01:2e:07:0d:d2:e1:c5:4b:e0:c1:58:3f:4a:53:1a:26:0a: 96:93:5e:1e:03:42:2d:82:a8:3d:03:54:e4:c1:75:6c:b0:37: 03:ce:4f:52:d4:b9:6c:68:3f:7e:ce:41:74:21:b1:d7:97:60: 4d:7f:b4:68:b6:6c:3a:ab:02:42:53:a4:b4:b5:f7:9a:b6:b5: 85:bb:85:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf76ackkcJWNBn7ph1AmkZu1R7P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTEyMjcwNDQ3MzNaFw0yNTEyMzAxMjI2MzNaMDMxMTAvBgNV BAMTKDQzQjUyQ0QzQUU1MTQ3NjBFQzM5Rjc5MUU1MzdENUNEMjlGOEY3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc0BRspyOIDQiIbj1igfiCjku zNyoTJ82OR1DOQAFxKLZF+tnfT/6fmTpnU1o9ZGEk7pL1fpQj1RjFvwRa2ykvZUn 5aoi97lTXm/mJG2dSymCuA4rMUV0ob9J1uRmL0QsJmPNQ1kvA4lIjP+OHXFJrWbN J+L1LU7qGYoBeP1xG/aV0ZnZ15NEczKRWIBRiEu6UThwnUP1pfKlxVnfpBYpjFsY LxVua+KHBCIIOfe+MUN16vuaCVVxsXyjwcmdV3QptK6nUkjTGHbCA8IRTHGCOKYC ksWSAd6SqnkgC7oa7kZdOnBJ3K8gcI8qd5R9HWZq2KI78ak4cyQjC0JW8BrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7Us065RR2DsOfeR5TfVzSn499QwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyQts1AX21eGWjmhMekyxHSvKvSap6bbsIM Fp2azMiFuiRZvLt3FXNeCKD6yMAzmWxSPdcE/WC/MQ4Zp08jAlJDKmm11KCUZ56t k6zI6ahu1qh1cCTWpXl3EuwD4IbW79FYm5TXKDibXOJycuGRf62b7riSm138qMYJ sDUwm1fPSpkfojw5Bmd4kxMvEFOaiQVsvNLNZ6UiXDgYM3oV21tdaz7iSiz1fyq/ 95xqpHNqqAEvsvQBLgcN0uHFS+DBWD9KUxomCpaTXh4DQi2CqD0DVOTBdWywNwPO T1LUuWxoP37OQXQhsdeXYE1/tGi2bDqrAkJTpLS195q2tYW7hRQ= -----END CERTIFICATE-----Generated at Sun Dec 28 23:23:40 2025 by rpki-client