This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: pNR5EpzAmQ4+KXunHlTYMWTQUwJ8Am0mQOIxngMjF80= Subject key identifier: 75:BF:2F:77:2A:D3:33:4B:80:A5:62:C9:11:2E:F2:C6:D6:7F:DD:1B Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 035F5644EED2A0C8658106E3EF9874FB19F41C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: E9 Signing time: Mon 15 Dec 2025 23:51:36 +0000 Manifest this update: Mon 15 Dec 2025 23:46:36 +0000 Manifest next update: Fri 19 Dec 2025 08:09:36 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 2: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: K9oybGG2iZ+s5bnpSn780TgwqHUrzGBvF3Oq3t8X1fI=) 3: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 08:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5f:56:44:ee:d2:a0:c8:65:81:06:e3:ef:98:74:fb:19:f4:1c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Dec 15 23:46:36 2025 GMT Not After : Dec 19 08:09:36 2025 GMT Subject: CN=75BF2F772AD3334B80A562C9112EF2C6D67FDD1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:1a:fd:2a:ef:da:93:74:12:4c:a1:e5:07: 50:83:09:3e:56:26:fc:c0:04:a4:c8:34:b9:b5:e0: 0d:f5:3b:6b:34:cc:83:2d:26:c6:51:ed:4b:d1:05: 69:81:d5:c6:d1:22:f2:0a:e8:01:be:1e:dc:ee:d0: b0:9d:26:60:14:45:ae:1c:99:91:b0:53:56:73:ae: 3e:23:f2:83:cf:fb:92:d8:ff:2d:dc:49:d3:d1:b8: dd:7a:10:d4:76:79:2c:fe:62:7c:1d:f7:3d:84:3a: 48:fb:02:e4:32:e9:a6:e1:1f:5f:c2:7d:56:2c:42: e1:05:a6:f7:86:35:29:77:ae:e9:90:48:be:2f:b8: db:3f:5e:db:c5:16:92:85:c6:59:04:5d:96:1a:9c: 9e:33:cd:76:57:fa:32:2a:1b:a6:92:4b:21:55:1a: b5:4b:77:22:76:5c:f5:ad:55:58:03:f6:37:4b:e9: 58:84:94:46:d8:55:f4:a3:c8:5b:71:ad:78:28:54: 6c:68:5c:04:79:2c:dc:6a:bd:ca:df:fd:41:30:50: 1a:88:b9:15:e9:1f:40:56:e0:df:f5:76:b3:fc:3d: 4b:86:de:44:7c:cc:60:49:df:27:5d:4a:b8:b4:42: 05:3c:c4:ea:48:7a:f2:22:5e:57:58:6c:ff:17:21: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:2F:77:2A:D3:33:4B:80:A5:62:C9:11:2E:F2:C6:D6:7F:DD:1B X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:81:52:90:25:4b:d2:03:58:22:1e:5e:99:23:ff:1f:23: c7:9b:a9:d7:b5:a2:e2:c4:8a:1b:ea:ba:4a:1f:90:fd:06:cb: cc:7b:b7:d2:81:ee:8e:b1:06:23:b3:59:d0:58:0e:fc:3a:d6: 46:d0:9a:6f:8d:2c:33:19:50:4a:3e:9a:27:8e:17:17:23:ae: 13:2e:3a:53:1b:c3:0e:1a:cf:3d:6b:cd:48:0e:c1:40:90:cc: 26:f6:62:90:88:9d:c9:f0:99:85:2f:3d:4f:e3:6e:1a:ed:7a: 75:b7:c3:3e:83:34:03:2f:2d:3c:9f:b4:88:b6:d0:8e:34:4f: 83:50:93:b7:59:4d:9d:a3:78:f2:13:09:2f:c3:d6:f5:00:cc: 31:2a:95:74:e0:f4:08:2c:f3:59:76:96:f3:57:f1:ce:0c:3b: 7a:e3:dd:25:aa:3c:df:31:95:28:11:4f:19:02:95:1b:37:4f: 80:e0:9a:21:7b:4a:7e:1f:98:84:ad:75:42:30:11:c2:3b:c9: d5:74:da:9a:29:41:45:03:c8:28:dd:4b:84:69:40:0d:20:ac: 64:4f:21:39:3e:7b:ec:4e:18:8f:ea:a6:fa:94:1f:97:80:de: 44:ff:ad:dd:f9:00:2e:2a:4e:0c:67:36:48:53:86:af:09:78: 21:24:38:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA19WRO7SoMhlgQbj75h0+xn0HCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTEyMTUyMzQ2MzZaFw0yNTEyMTkwODA5MzZaMDMxMTAvBgNV BAMTKDc1QkYyRjc3MkFEMzMzNEI4MEE1NjJDOTExMkVGMkM2RDY3RkREMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYhr9Ku/ak3QSTKHlB1CDCT5W JvzABKTINLm14A31O2s0zIMtJsZR7UvRBWmB1cbRIvIK6AG+Htzu0LCdJmAURa4c mZGwU1Zzrj4j8oPP+5LY/y3cSdPRuN16ENR2eSz+Ynwd9z2EOkj7AuQy6abhH1/C fVYsQuEFpveGNSl3rumQSL4vuNs/XtvFFpKFxlkEXZYanJ4zzXZX+jIqG6aSSyFV GrVLdyJ2XPWtVVgD9jdL6ViElEbYVfSjyFtxrXgoVGxoXAR5LNxqvcrf/UEwUBqI uRXpH0BW4N/1drP8PUuG3kR8zGBJ3yddSri0QgU8xOpIevIiXldYbP8XIbC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdb8vdyrTM0uApWLJES7yxtZ/3RswHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvjgVKQJUvSA1giHl6ZI/8fI8ebqde1ouLE ihvqukofkP0Gy8x7t9KB7o6xBiOzWdBYDvw61kbQmm+NLDMZUEo+mieOFxcjrhMu OlMbww4azz1rzUgOwUCQzCb2YpCIncnwmYUvPU/jbhrtenW3wz6DNAMvLTyftIi2 0I40T4NQk7dZTZ2jePITCS/D1vUAzDEqlXTg9Ags81l2lvNX8c4MO3rj3SWqPN8x lSgRTxkClRs3T4DgmiF7Sn4fmIStdUIwEcI7ydV02popQUUDyCjdS4RpQA0grGRP ITk+e+xOGI/qpvqUH5eA3kT/rd35AC4qTgxnNkhThq8JeCEkOEQ= -----END CERTIFICATE-----Generated at Wed Dec 17 09:48:31 2025 by rpki-client