This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: IJp3ybcy2JtbEOniCURHCt+T9oskHYlFPQjj6gEiA5s= Subject key identifier: 3A:F2:2A:BF:3D:90:19:AF:00:D9:CE:19:A4:30:AE:D5:88:AA:93:F1 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 5D69C641D22E576A6F99D2FCC45004B466AABE4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 027E Signing time: Fri 19 Dec 2025 14:32:45 +0000 Manifest this update: Fri 19 Dec 2025 14:27:45 +0000 Manifest next update: Mon 22 Dec 2025 22:54:45 +0000 Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 2: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: GFwWqQFyU9rGI0FmtYsD92vihMoogHnWUDmrRqBw+TE=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:c6:41:d2:2e:57:6a:6f:99:d2:fc:c4:50:04:b4:66:aa:be:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Dec 19 14:27:45 2025 GMT Not After : Dec 22 22:54:45 2025 GMT Subject: CN=3AF22ABF3D9019AF00D9CE19A430AED588AA93F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:80:f3:2e:89:db:77:63:bf:50:46:09:06: 37:65:29:20:f7:f7:74:18:98:b5:a7:52:b4:31:3a: f6:cf:af:4c:7e:34:78:65:0a:ef:ab:f3:89:48:ac: bc:a4:f3:f0:ed:e1:5e:e9:fb:9d:81:84:60:fa:64: 2b:a9:bc:03:45:9f:73:66:b0:6e:c5:37:de:c9:4d: eb:de:2d:10:d0:1c:ba:c9:86:b6:94:a9:dc:20:b4: 1a:58:85:8b:8d:8a:8f:ff:ee:a0:83:ad:06:18:d5: 2b:58:0b:9a:c3:97:ef:d3:0e:9e:76:74:4f:db:3c: 24:96:4f:4f:3a:b7:55:63:64:5e:29:8e:d3:2d:9c: 2b:96:bf:d2:c1:ce:eb:e6:29:30:a3:9b:a0:9f:7f: ae:1d:71:d3:6a:ae:13:c0:d4:84:6b:35:ff:40:dd: b0:f6:c2:75:1d:90:27:c0:41:f5:43:e3:54:1f:94: 05:f0:59:fe:5c:9e:33:02:b7:34:92:27:e9:c1:da: b4:17:d2:9e:f5:85:46:3e:d6:85:0b:e1:e6:7c:79: 9e:8c:d3:72:7d:11:e0:ad:54:e1:ec:a0:cc:b0:20: be:1b:af:ec:30:69:09:ad:7b:35:04:c1:3c:34:52: a1:b1:26:fe:ce:03:2e:9e:18:09:b6:58:cc:06:db: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:2A:BF:3D:90:19:AF:00:D9:CE:19:A4:30:AE:D5:88:AA:93:F1 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6a:4c:1b:b3:5e:f8:d7:36:77:22:d0:ba:bc:3f:e2:4b:39: 1d:8c:74:05:be:e5:d4:e0:27:ce:f6:5c:76:e2:08:6c:77:a5: c5:96:a6:29:19:f6:08:5e:bb:15:c8:12:06:59:1a:cc:2d:ef: f0:db:a7:0d:d7:1f:52:ba:f8:0d:33:b1:56:b5:1d:d2:5c:e8: dc:86:30:bd:be:f2:b1:d2:e3:e6:c0:a6:e7:ed:67:52:e4:73: 8f:e8:15:93:b4:c3:72:8d:bf:80:8b:2e:2e:dd:b8:a5:c2:6d: c5:6e:5a:51:b2:85:ca:1f:7f:79:89:b4:51:85:8e:79:e3:64: e9:06:b3:e5:10:ba:d5:c5:af:b0:bd:a9:52:ac:19:a0:86:33: 6f:1b:24:a1:0d:c9:eb:77:10:94:20:5a:9a:d9:89:5a:7d:42: 8f:03:e8:0f:97:3e:16:ef:8c:8f:4b:4b:08:72:ad:77:8a:66: 17:e0:50:f5:44:0a:7c:ff:4c:19:6d:ca:e6:7a:7e:4f:b3:84: 5e:1b:35:b5:51:4d:a9:9a:26:37:17:07:72:a1:11:f2:3d:96: 66:1a:80:23:ac:12:91:99:df:99:43:c1:99:af:ce:36:16:ca: 21:11:29:33:59:af:59:81:40:58:d8:03:0c:5e:cd:9b:26:0f: c7:d9:9e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWnGQdIuV2pvmdL8xFAEtGaqvk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTEyMTkxNDI3NDVaFw0yNTEyMjIyMjU0NDVaMDMxMTAvBgNV BAMTKDNBRjIyQUJGM0Q5MDE5QUYwMEQ5Q0UxOUE0MzBBRUQ1ODhBQTkzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBYDzLonbd2O/UEYJBjdlKSD3 93QYmLWnUrQxOvbPr0x+NHhlCu+r84lIrLyk8/Dt4V7p+52BhGD6ZCupvANFn3Nm sG7FN97JTeveLRDQHLrJhraUqdwgtBpYhYuNio//7qCDrQYY1StYC5rDl+/TDp52 dE/bPCSWT086t1VjZF4pjtMtnCuWv9LBzuvmKTCjm6Cff64dcdNqrhPA1IRrNf9A 3bD2wnUdkCfAQfVD41QflAXwWf5cnjMCtzSSJ+nB2rQX0p71hUY+1oUL4eZ8eZ6M 03J9EeCtVOHsoMywIL4br+wwaQmtezUEwTw0UqGxJv7OAy6eGAm2WMwG24a/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvIqvz2QGa8A2c4ZpDCu1Yiqk/EwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5qTBuzXvjXNnci0Lq8P+JLOR2MdAW+5dTg J872XHbiCGx3pcWWpikZ9gheuxXIEgZZGswt7/Dbpw3XH1K6+A0zsVa1HdJc6NyG ML2+8rHS4+bApuftZ1Lkc4/oFZO0w3KNv4CLLi7duKXCbcVuWlGyhcoff3mJtFGF jnnjZOkGs+UQutXFr7C9qVKsGaCGM28bJKENyet3EJQgWprZiVp9Qo8D6A+XPhbv jI9LSwhyrXeKZhfgUPVECnz/TBltyuZ6fk+zhF4bNbVRTamaJjcXB3KhEfI9lmYa gCOsEpGZ35lDwZmvzjYWyiERKTNZr1mBQFjYAwxezZsmD8fZnnY= -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:55 2025 by rpki-client