This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: aTyFIgVIn1Apw4wc6EfT+1vYYdeQG0383AxGHAuqjcs= Subject key identifier: 3B:08:44:FF:2F:E5:CF:B1:70:9C:FD:FD:19:66:26:39:DC:4A:48:3B Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 1B52198F99303819F7F3D906782E9AA5BBA6AC78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0248 Signing time: Thu 18 Dec 2025 12:31:40 +0000 Manifest this update: Thu 18 Dec 2025 12:26:40 +0000 Manifest next update: Sun 21 Dec 2025 13:05:40 +0000 Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: JEmjh3ai+jkXiCstHlLLgQm3HOowE5akF40VbgAfHxg=) 2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) 3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:52:19:8f:99:30:38:19:f7:f3:d9:06:78:2e:9a:a5:bb:a6:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Dec 18 12:26:40 2025 GMT Not After : Dec 21 13:05:40 2025 GMT Subject: CN=3B0844FF2FE5CFB1709CFDFD19662639DC4A483B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:15:18:2a:da:4f:d5:bf:8b:a2:3c:cb:77: 54:84:fb:33:3c:06:5c:3a:41:d1:12:20:36:cc:ff: f5:30:94:ec:cf:b5:97:b6:d5:33:ed:fc:cc:d2:03: c7:f8:60:9e:19:bf:66:bf:a2:c7:9f:fd:36:49:95: a2:db:1c:ed:6a:ee:b6:3e:46:db:34:3f:40:2c:58: c8:b3:e5:64:12:d0:ad:a8:1b:8d:57:2e:c8:7d:6d: 45:f2:13:d5:a6:43:af:1b:d1:47:34:ad:00:78:c3: 8c:f4:e8:a0:9f:e9:ef:92:3d:eb:50:ca:c9:cb:ef: 8c:c1:fc:85:91:c1:24:1f:39:f1:e9:a2:3c:9e:84: 5a:54:c5:59:bb:ba:21:b2:8e:86:a8:60:f5:f7:f9: d7:5d:a6:1e:05:b5:e4:1a:f7:d2:7d:38:cc:07:7d: 84:f3:21:65:fa:2b:39:a3:19:44:30:db:47:45:21: dd:11:40:ee:fa:dc:74:7f:e0:22:0e:74:24:42:3b: a9:4e:32:22:e2:48:41:a9:c1:c9:91:8e:67:1f:5a: 86:39:87:31:f8:0f:b1:62:a2:1c:b9:03:b3:11:30: c0:18:14:47:88:17:42:9e:0e:d7:4e:12:f1:93:db: 33:87:42:38:74:1d:98:7b:58:a6:18:95:cd:7f:0e: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:44:FF:2F:E5:CF:B1:70:9C:FD:FD:19:66:26:39:DC:4A:48:3B X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3d:89:4e:03:e6:64:0d:d2:a9:eb:22:1d:8f:c9:26:bd:5d: f5:27:59:89:98:52:3b:ba:77:62:7d:52:18:4d:30:f7:59:7a: 85:24:5e:49:b4:00:00:60:11:22:c0:cb:bf:9f:2d:1b:50:95: d1:67:08:22:6d:8a:77:66:06:6b:ce:af:fe:d0:cb:50:82:1a: 0c:bd:9f:1e:4a:04:0f:6e:20:62:08:66:a1:d4:d8:df:2b:fb: 74:82:1d:20:c4:b4:dc:e3:c5:47:0f:24:a7:3d:d1:2c:93:a0: 9c:e5:24:b2:35:68:af:50:03:61:b4:74:c4:31:ca:7f:65:bb: 49:2d:d2:94:bc:50:1c:fd:11:14:5e:f2:25:10:94:a7:b9:90: 45:c7:93:92:85:b6:19:1d:31:eb:62:21:18:22:ff:db:db:92: 0a:9a:0f:02:d0:b4:70:2c:7f:a7:ea:f3:89:66:89:a8:37:95: 31:d8:da:dc:89:23:eb:03:bd:57:87:f1:fe:c0:b3:55:dc:d9: d4:c0:99:34:45:c3:7d:6b:9d:58:50:29:26:97:eb:e6:e4:59: 1a:1a:69:02:fb:2e:bd:94:30:02:1a:d7:34:76:3a:67:2f:b4: ec:0b:b2:d8:b4:ec:b1:3e:e3:12:50:d2:00:c8:7b:f2:26:cd: 2a:76:f7:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1IZj5kwOBn389kGeC6apbumrHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEyMTgxMjI2NDBaFw0yNTEyMjExMzA1NDBaMDMxMTAvBgNV BAMTKDNCMDg0NEZGMkZFNUNGQjE3MDlDRkRGRDE5NjYyNjM5REM0QTQ4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0BUYKtpP1b+LojzLd1SE+zM8 Blw6QdESIDbM//UwlOzPtZe21TPt/MzSA8f4YJ4Zv2a/osef/TZJlaLbHO1q7rY+ Rts0P0AsWMiz5WQS0K2oG41XLsh9bUXyE9WmQ68b0Uc0rQB4w4z06KCf6e+SPetQ ysnL74zB/IWRwSQfOfHpojyehFpUxVm7uiGyjoaoYPX3+dddph4FteQa99J9OMwH fYTzIWX6KzmjGUQw20dFId0RQO763HR/4CIOdCRCO6lOMiLiSEGpwcmRjmcfWoY5 hzH4D7Fiohy5A7MRMMAYFEeIF0KeDtdOEvGT2zOHQjh0HZh7WKYYlc1/DpV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwhE/y/lz7FwnP39GWYmOdxKSDswHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU9iU4D5mQN0qnrIh2PySa9XfUnWYmYUju6 d2J9UhhNMPdZeoUkXkm0AABgESLAy7+fLRtQldFnCCJtindmBmvOr/7Qy1CCGgy9 nx5KBA9uIGIIZqHU2N8r+3SCHSDEtNzjxUcPJKc90SyToJzlJLI1aK9QA2G0dMQx yn9lu0kt0pS8UBz9ERRe8iUQlKe5kEXHk5KFthkdMetiIRgi/9vbkgqaDwLQtHAs f6fq84lmiag3lTHY2tyJI+sDvVeH8f7As1Xc2dTAmTRFw31rnVhQKSaX6+bkWRoa aQL7Lr2UMAIa1zR2OmcvtOwLsti07LE+4xJQ0gDIe/ImzSp298I= -----END CERTIFICATE-----Generated at Fri Dec 19 19:37:17 2025 by rpki-client