This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: JVckJi/JqROSXtBODeMxKhiEJfK27W+ji7S9cjc3cIo= Subject key identifier: 2B:3A:1B:FE:4F:61:46:BE:B4:3B:49:F9:7C:50:7A:22:92:BB:CE:FF Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 68B875B3B6FDD32DBEA9BCDE79C77C06B93487D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 027D Signing time: Wed 17 Dec 2025 03:01:55 +0000 Manifest this update: Wed 17 Dec 2025 02:56:55 +0000 Manifest next update: Sat 20 Dec 2025 14:29:55 +0000 Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: xGuOiS5jisynCcjkriYUKSMrNKFav6hRYGscPxwa7So=) 2: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) 3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b8:75:b3:b6:fd:d3:2d:be:a9:bc:de:79:c7:7c:06:b9:34:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Dec 17 02:56:55 2025 GMT Not After : Dec 20 14:29:55 2025 GMT Subject: CN=2B3A1BFE4F6146BEB43B49F97C507A2292BBCEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:8b:4a:8f:97:6b:31:01:e6:0d:7b:6a:7a: ce:6b:3c:10:a4:ed:4b:e3:b0:47:b1:d8:16:48:d0: c2:60:80:43:06:5f:8e:96:1b:bf:94:d9:65:79:c5: 5c:cc:dc:6c:ff:10:73:9a:41:5a:7b:93:73:7d:d1: b4:fa:ec:b5:19:90:38:01:83:41:89:29:39:0d:7f: 7e:55:88:69:98:59:96:e9:0a:db:e1:27:3d:36:18: 32:86:79:23:e8:cf:ea:45:5b:50:b0:c7:f4:a0:e5: 3c:7c:b1:d4:04:98:f7:23:7a:00:84:66:43:23:88: 12:43:a4:ac:a8:b4:6e:d8:e4:d9:42:91:44:06:00: c6:85:da:d5:4e:de:d7:26:1f:4c:69:ff:dd:60:58: 79:c0:f7:7c:34:7c:57:82:17:27:cf:74:d6:55:5d: 88:a2:98:f3:a6:9b:2d:1b:c4:52:cc:07:45:ef:f8: 7b:cb:cb:35:e7:9e:f9:a2:33:b2:85:22:a2:a2:90: fa:89:dd:c9:c5:bd:2c:85:b1:fd:1e:82:1b:19:3e: 3b:20:05:4e:dd:7e:62:a5:3f:ca:62:e8:f5:b8:46: e0:26:53:50:74:79:d1:35:e9:8b:64:dc:23:11:12: 64:81:cd:3b:3e:77:49:f0:d7:f6:e4:71:f1:c9:d7: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:1B:FE:4F:61:46:BE:B4:3B:49:F9:7C:50:7A:22:92:BB:CE:FF X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a8:1a:82:27:2d:18:a8:8b:16:e2:24:d3:0b:fc:43:94:d4: fd:e1:c8:c3:f8:ea:6e:77:2e:1e:ba:f4:52:49:ff:43:f4:20: 33:0f:88:77:c3:f4:5f:44:f7:5d:7e:bf:bb:ec:96:1e:9a:40: 67:48:eb:69:8a:52:17:2f:cc:63:5d:2d:0a:c7:aa:87:cf:af: ac:29:7f:cc:81:d7:b7:6d:8e:08:3c:94:6f:ad:07:ef:1f:dd: 1c:d7:8e:3e:51:c6:36:08:7e:a6:77:fc:1b:11:91:95:e6:59: 58:79:fe:cd:0e:a4:81:76:ee:da:1e:07:8f:90:ef:60:ad:6f: 7d:c0:f7:30:6a:76:c6:8e:7a:f4:b2:64:d6:7b:8b:7d:75:7e: a2:47:8b:56:c6:f5:da:62:68:0d:f6:0d:60:dd:60:0c:42:a7: 24:a2:df:c0:fc:6c:1f:d1:9a:f2:a6:ee:c3:6d:bd:95:7d:e2: 4f:06:ff:41:90:86:a4:1d:a7:0e:0d:02:dc:59:64:34:c2:95: d0:a1:23:52:af:69:87:52:db:42:cf:07:c7:4c:f3:df:00:8c: 0f:73:cc:ba:1e:0b:7e:12:4e:5d:78:03:b6:de:df:9d:ba:c6: f9:ca:d0:f7:bf:c2:35:86:bd:b6:d3:a3:6c:c0:65:0f:45:09: f2:da:8c:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLh1s7b90y2+qbzeecd8Brk0h9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTEyMTcwMjU2NTVaFw0yNTEyMjAxNDI5NTVaMDMxMTAvBgNV BAMTKDJCM0ExQkZFNEY2MTQ2QkVCNDNCNDlGOTdDNTA3QTIyOTJCQkNFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJItKj5drMQHmDXtqes5rPBCk 7UvjsEex2BZI0MJggEMGX46WG7+U2WV5xVzM3Gz/EHOaQVp7k3N90bT67LUZkDgB g0GJKTkNf35ViGmYWZbpCtvhJz02GDKGeSPoz+pFW1Cwx/Sg5Tx8sdQEmPcjegCE ZkMjiBJDpKyotG7Y5NlCkUQGAMaF2tVO3tcmH0xp/91gWHnA93w0fFeCFyfPdNZV XYiimPOmmy0bxFLMB0Xv+HvLyzXnnvmiM7KFIqKikPqJ3cnFvSyFsf0eghsZPjsg BU7dfmKlP8pi6PW4RuAmU1B0edE16Ytk3CMREmSBzTs+d0nw1/bkcfHJ1w8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzob/k9hRr60O0n5fFB6IpK7zv8wHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWoGoInLRioixbiJNML/EOU1P3hyMP46m53 Lh669FJJ/0P0IDMPiHfD9F9E911+v7vslh6aQGdI62mKUhcvzGNdLQrHqofPr6wp f8yB17dtjgg8lG+tB+8f3RzXjj5RxjYIfqZ3/BsRkZXmWVh5/s0OpIF27toeB4+Q 72Ctb33A9zBqdsaOevSyZNZ7i311fqJHi1bG9dpiaA32DWDdYAxCpySi38D8bB/R mvKm7sNtvZV94k8G/0GQhqQdpw4NAtxZZDTCldChI1KvaYdS20LPB8dM898AjA9z zLoeC34STl14A7be3526xvnK0Pe/wjWGvbbTo2zAZQ9FCfLajME= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:47 2025 by rpki-client