This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: GFcxnp8VrSXjHOc8kAGqNnHwUoyhw+7UFdx5SKcvr8U= Subject key identifier: 5F:B0:F1:8E:D5:1D:4D:48:C9:69:4B:F4:97:A3:03:F8:FE:73:F8:54 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 1614679F0F96ADDA6D8ECF04E89569542FA21421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 024B Signing time: Wed 24 Dec 2025 22:31:41 +0000 Manifest this update: Wed 24 Dec 2025 22:26:41 +0000 Manifest next update: Sun 28 Dec 2025 02:07:41 +0000 Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: F2CyE5Goa02ZMf42iz6ViNLSPRKR8ZDaShNTy0FnE1Y=) 2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) 3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:14:67:9f:0f:96:ad:da:6d:8e:cf:04:e8:95:69:54:2f:a2:14:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Dec 24 22:26:41 2025 GMT Not After : Dec 28 02:07:41 2025 GMT Subject: CN=5FB0F18ED51D4D48C9694BF497A303F8FE73F854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:a4:7b:3d:22:2b:4c:76:e9:a6:ff:88:49: 7d:cc:b8:d6:fe:3f:c0:4a:fa:f6:e0:6e:2c:7a:bb: ce:85:30:0d:73:56:4a:a3:0c:35:d4:79:b2:f8:dd: 43:d7:32:bc:14:36:36:91:aa:5c:64:39:40:0d:01: 87:d2:b3:c4:fa:53:32:b7:41:d2:c5:a4:55:2d:e1: 83:3c:c7:2d:81:31:c5:01:de:d1:c3:36:6e:4b:dd: 17:6f:98:88:38:6d:19:95:9e:3c:5d:c4:3c:14:23: 9b:e2:3d:59:d4:d8:f5:c1:8e:72:1d:03:6d:bd:fa: e6:8a:36:df:41:1a:e3:f6:49:3a:ae:3e:12:69:ac: 10:d5:15:a5:49:25:b3:1a:80:85:a7:34:f9:c8:8d: e8:26:a9:12:95:20:ab:8a:3d:4e:63:7c:f9:5f:45: 0b:7b:a4:a4:12:38:20:2c:7e:01:17:a6:ad:dc:89: 98:b9:e3:9a:9b:a4:3d:c9:da:95:86:7d:48:a0:08: d6:6e:47:36:4d:14:5f:dd:17:26:5b:5d:c0:7c:d7: 8e:71:ca:6c:eb:1d:6d:4a:40:b5:50:e4:e4:38:d4: e5:57:b0:c5:d5:3d:81:5c:94:8b:07:8e:02:c7:80: 7a:66:16:6a:c6:18:08:5b:c8:31:6d:85:34:43:05: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B0:F1:8E:D5:1D:4D:48:C9:69:4B:F4:97:A3:03:F8:FE:73:F8:54 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:65:ee:52:03:74:3e:63:2c:b3:c1:d9:ba:0b:1d:0c:c1: a4:a9:6c:65:00:4e:1f:90:0b:1f:8b:ce:89:df:ce:a3:83:e8: 72:77:f7:52:ad:2a:c3:4c:b2:99:49:b2:6e:6b:07:50:fb:10: 6b:9a:dc:7e:f3:d7:c6:6a:dc:1f:5c:3a:58:4f:c0:d7:24:70: eb:21:6e:d7:05:34:33:26:49:ce:d5:d0:74:90:47:0f:82:79: 34:3e:62:88:5f:c6:bb:24:9f:73:31:60:45:a3:5f:d3:55:aa: 2b:d6:ea:7e:d7:27:62:d6:89:65:bb:51:c6:93:5b:63:c0:9d: ba:40:42:9e:66:80:26:04:87:be:a3:5c:9c:d4:51:91:df:8c: 63:ae:5f:ee:80:1d:e3:d3:a8:8b:2b:e1:8f:8a:33:b2:e8:cd: f4:3d:12:7e:c2:47:53:11:03:5c:5e:eb:eb:90:6f:a4:a7:fc: ed:3c:01:d9:d0:d0:39:7e:d5:ff:d5:b2:32:26:0a:ec:59:1d: 2f:ef:06:ce:d3:dd:cf:a2:ef:5f:be:5b:9a:11:4a:ce:8f:c4: 36:98:d8:d9:fa:8e:4c:25:65:3f:36:d3:35:b8:9f:19:83:2f: 90:7b:d2:70:1f:62:e9:5f:0a:14:ec:7a:d5:99:52:74:ed:21: 36:01:31:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhRnnw+Wrdptjs8E6JVpVC+iFCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEyMjQyMjI2NDFaFw0yNTEyMjgwMjA3NDFaMDMxMTAvBgNV BAMTKDVGQjBGMThFRDUxRDRENDhDOTY5NEJGNDk3QTMwM0Y4RkU3M0Y4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbC6R7PSIrTHbppv+ISX3MuNb+ P8BK+vbgbix6u86FMA1zVkqjDDXUebL43UPXMrwUNjaRqlxkOUANAYfSs8T6UzK3 QdLFpFUt4YM8xy2BMcUB3tHDNm5L3RdvmIg4bRmVnjxdxDwUI5viPVnU2PXBjnId A229+uaKNt9BGuP2STquPhJprBDVFaVJJbMagIWnNPnIjegmqRKVIKuKPU5jfPlf RQt7pKQSOCAsfgEXpq3ciZi545qbpD3J2pWGfUigCNZuRzZNFF/dFyZbXcB8145x ymzrHW1KQLVQ5OQ41OVXsMXVPYFclIsHjgLHgHpmFmrGGAhbyDFthTRDBUpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7DxjtUdTUjJaUv0l6MD+P5z+FQwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb0Ze5SA3Q+Yyyzwdm6Cx0MwaSpbGUATh+Q Cx+LzonfzqOD6HJ391KtKsNMsplJsm5rB1D7EGua3H7z18Zq3B9cOlhPwNckcOsh btcFNDMmSc7V0HSQRw+CeTQ+Yohfxrskn3MxYEWjX9NVqivW6n7XJ2LWiWW7UcaT W2PAnbpAQp5mgCYEh76jXJzUUZHfjGOuX+6AHePTqIsr4Y+KM7LozfQ9En7CR1MR A1xe6+uQb6Sn/O08AdnQ0Dl+1f/VsjImCuxZHS/vBs7T3c+i71++W5oRSs6PxDaY 2Nn6jkwlZT820zW4nxmDL5B70nAfYulfChTsetWZUnTtITYBMWc= -----END CERTIFICATE-----Generated at Thu Dec 25 19:40:34 2025 by rpki-client