This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: 6uB96CgghPiK4Q2qM71d214199Aa7MHYrYy3Q84QoY8= Subject key identifier: E0:02:51:13:F4:29:7D:CD:E3:A6:E3:80:A0:89:B9:A9:8B:C1:68:84 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 15FE006B0FA90F51A69F27E13AC54D53D922401C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03C6 Signing time: Wed 17 Dec 2025 20:32:33 +0000 Manifest this update: Wed 17 Dec 2025 20:27:33 +0000 Manifest next update: Sat 20 Dec 2025 23:56:33 +0000 Files and hashes: 1: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: ef2qmG2IjAJpO/MUMi6mSfW6F9rd4JOar2jid497/6U=) 2: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 4: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fe:00:6b:0f:a9:0f:51:a6:9f:27:e1:3a:c5:4d:53:d9:22:40:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Dec 17 20:27:33 2025 GMT Not After : Dec 20 23:56:33 2025 GMT Subject: CN=E0025113F4297DCDE3A6E380A089B9A98BC16884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:44:48:84:01:48:b0:fd:31:17:90:2c:fd:4c: f5:b0:8c:68:eb:ce:51:86:78:d1:02:67:44:b3:09: 43:e0:6d:43:29:7f:d2:ce:25:fd:81:32:e7:10:c4: 1a:c2:b0:f7:ea:47:4f:0f:e7:10:40:04:43:a5:c7: f9:55:3b:17:ba:83:5a:ea:fc:1f:7a:4f:d2:c0:14: 22:6c:b4:ba:b4:a7:72:cd:33:d7:ab:73:02:19:9e: 5a:9e:8f:eb:d3:1d:f6:e5:ed:c9:31:6c:6a:d0:dd: 65:f6:4a:a2:c9:ea:b0:7d:e3:f4:aa:c9:44:a5:f5: 4c:04:b8:f7:fc:ba:73:70:e1:cd:ab:31:89:94:be: 71:ff:ef:76:2b:cc:7b:d8:0b:b4:14:3a:ab:18:d9: a4:fd:1c:7c:70:21:ec:17:cf:a2:7e:42:17:c8:4b: b9:51:6d:11:0c:35:15:61:bf:e5:92:83:94:2e:db: b7:4b:0a:d6:8b:1b:26:3a:3b:35:f6:ca:b6:ad:af: 45:9a:e5:b0:38:59:ad:88:43:34:07:e8:6b:5a:2c: 63:00:d3:df:02:71:80:31:28:2f:65:e3:ed:bf:0f: 5f:86:f9:9e:80:aa:ff:f8:3a:51:dd:d1:86:e8:ac: 75:55:8f:3b:3b:3c:53:65:bd:e6:45:83:55:7f:62: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:51:13:F4:29:7D:CD:E3:A6:E3:80:A0:89:B9:A9:8B:C1:68:84 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b1:8d:d6:a5:0c:6f:d6:49:12:ab:a5:f0:96:21:b9:c8:e2: 9f:58:74:66:0e:7f:a2:de:b5:de:0a:1c:98:75:74:57:5b:a3: bb:65:d3:62:55:c8:6b:a2:f5:74:da:c3:f6:7a:16:84:87:2b: 98:09:31:56:92:3f:d2:09:d5:b3:0f:c4:31:84:ec:f7:c8:d1: 08:cc:99:61:93:6a:52:09:b3:5c:ef:fd:54:8b:91:e9:65:02: 53:2d:85:38:b4:d2:9f:a5:55:8e:ce:4e:6c:1a:78:29:42:b0: d0:8e:a0:09:f0:2c:ae:49:4e:33:0b:00:d9:7b:9c:75:c7:6e: 2c:09:b0:61:34:e8:d2:1f:b9:8d:5b:aa:37:1d:bc:e0:20:c8: 3f:34:95:50:86:b2:02:cf:e9:d7:0e:c5:9d:d3:f0:7e:67:32: 88:60:23:37:fd:a2:09:1e:ec:1f:16:7a:b2:1b:c6:0a:37:6b: c6:20:b6:b1:03:30:74:92:b9:83:49:22:7e:2a:19:90:d0:00: 41:c6:3b:71:ea:bb:04:16:c6:84:ff:4c:68:23:51:76:aa:b8: 9e:61:94:42:9a:f4:13:02:59:51:a9:17:ce:13:74:11:59:ac: d8:aa:84:75:d1:62:c8:22:f6:f8:86:3f:f0:f5:b1:56:86:aa: cb:6b:1b:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFf4Aaw+pD1GmnyfhOsVNU9kiQBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTEyMTcyMDI3MzNaFw0yNTEyMjAyMzU2MzNaMDMxMTAvBgNV BAMTKEUwMDI1MTEzRjQyOTdEQ0RFM0E2RTM4MEEwODlCOUE5OEJDMTY4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwREiEAUiw/TEXkCz9TPWwjGjr zlGGeNECZ0SzCUPgbUMpf9LOJf2BMucQxBrCsPfqR08P5xBABEOlx/lVOxe6g1rq /B96T9LAFCJstLq0p3LNM9ercwIZnlqej+vTHfbl7ckxbGrQ3WX2SqLJ6rB94/Sq yUSl9UwEuPf8unNw4c2rMYmUvnH/73YrzHvYC7QUOqsY2aT9HHxwIewXz6J+QhfI S7lRbREMNRVhv+WSg5Qu27dLCtaLGyY6OzX2yratr0Wa5bA4Wa2IQzQH6GtaLGMA 098CcYAxKC9l4+2/D1+G+Z6Aqv/4OlHd0YborHVVjzs7PFNlveZFg1V/YuX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4AJRE/Qpfc3jpuOAoIm5qYvBaIQwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyxjdalDG/WSRKrpfCWIbnI4p9YdGYOf6Le td4KHJh1dFdbo7tl02JVyGui9XTaw/Z6FoSHK5gJMVaSP9IJ1bMPxDGE7PfI0QjM mWGTalIJs1zv/VSLkellAlMthTi00p+lVY7OTmwaeClCsNCOoAnwLK5JTjMLANl7 nHXHbiwJsGE06NIfuY1bqjcdvOAgyD80lVCGsgLP6dcOxZ3T8H5nMohgIzf9ogke 7B8WerIbxgo3a8YgtrEDMHSSuYNJIn4qGZDQAEHGO3HquwQWxoT/TGgjUXaquJ5h lEKa9BMCWVGpF84TdBFZrNiqhHXRYsgi9viGP/D1sVaGqstrG1k= -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:28 2025 by rpki-client