This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: iezUjK1ulcfEddAZqhmJ8e5SO+qqQ8BpV5fR6q6smO4= Subject key identifier: A8:25:7A:0B:8A:9E:53:CF:90:1E:45:86:7E:93:1F:2A:6D:6B:2A:C5 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 73FD45104DE7CA88C38A7CD3010E9CAB3543E1CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: F4 Signing time: Mon 29 Dec 2025 01:11:12 +0000 Manifest this update: Mon 29 Dec 2025 01:06:12 +0000 Manifest next update: Thu 01 Jan 2026 12:19:12 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: 9QyYe/mEg+8hOK1AnOn24XKgyR9sTrXT2JTHN/4opy4=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 12:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fd:45:10:4d:e7:ca:88:c3:8a:7c:d3:01:0e:9c:ab:35:43:e1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Dec 29 01:06:12 2025 GMT Not After : Jan 1 12:19:12 2026 GMT Subject: CN=A8257A0B8A9E53CF901E45867E931F2A6D6B2AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:2d:df:eb:10:bc:a0:f6:2e:a8:59:4c:c9: f9:91:a8:00:39:1f:b6:4e:1e:33:38:d9:0d:ff:1f: 01:4c:6e:a4:2c:c9:d9:2d:19:fa:ec:ab:d7:9b:6a: 30:41:c3:b8:5d:53:6e:17:e8:40:3e:34:cf:d9:dd: d0:07:b6:dd:37:26:df:01:99:1d:99:ba:50:af:db: aa:a0:e9:16:dd:1b:92:4c:5c:d1:3f:64:b0:38:78: 5f:99:bd:d2:84:f2:e7:74:b5:ef:da:54:c4:f0:9b: 89:b5:a6:c4:18:32:9d:00:7d:09:e9:2f:38:35:db: 44:4d:70:4b:85:02:6f:98:97:13:2e:0c:dc:61:68: 4a:e1:90:64:cf:c7:af:a7:2d:80:f5:2c:80:ff:d4: bd:9e:51:80:ae:eb:ce:35:8d:d6:47:50:5c:39:44: a9:f9:6d:9a:8c:1a:50:e2:67:08:35:b6:77:7f:14: 80:7d:d1:9a:9a:e9:9b:dc:ba:7c:21:03:2d:a2:da: c6:4d:01:9c:c5:64:23:1b:80:06:ef:95:ed:e4:74: cf:c4:8d:fe:4b:2c:dc:d0:91:5c:58:c0:b0:65:43: de:a5:d9:50:b7:94:38:5b:3a:98:5e:0b:d1:27:3d: e9:3f:26:82:e6:2a:ea:9d:49:f3:ec:5b:a1:0f:f9: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:7A:0B:8A:9E:53:CF:90:1E:45:86:7E:93:1F:2A:6D:6B:2A:C5 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fe:2e:b2:e1:3f:5e:39:8d:1e:37:a3:69:0a:bd:5f:f0:5e: 7f:d9:56:d2:f6:94:c6:80:85:d3:42:73:38:c2:15:30:12:39: 99:e9:96:fc:7f:ff:c2:81:80:c4:7c:0e:24:10:48:80:15:2b: 57:55:55:3e:43:81:0b:5c:76:29:b1:e6:a6:05:ac:d5:04:86: 60:7a:54:63:e0:fe:02:21:44:f6:71:b9:fe:02:72:0e:75:0d: b2:67:77:73:f7:fd:c0:f2:7a:d6:1e:7b:57:3a:91:5b:88:1f: 14:fe:a1:53:e3:90:f7:4e:55:1c:aa:aa:76:fe:5b:05:fc:6a: dc:7f:83:5f:58:5e:7a:1a:36:19:f4:9f:37:17:69:ab:96:76: d0:f3:9a:a0:69:fe:64:9d:72:91:83:03:c7:a6:b2:c9:d0:47: 35:69:28:75:35:d6:6d:92:20:f1:1c:cd:7b:eb:dc:25:4d:85: f9:d2:b1:b7:6c:3e:db:67:1d:d6:ec:39:d7:8d:c3:ac:08:14: f5:27:8e:98:39:06:87:5b:7b:fc:1e:6e:62:09:23:58:70:38: 97:39:32:b3:40:28:f0:6d:50:d1:b2:00:5d:8d:cc:4f:e4:68: de:51:e9:fe:cb:37:73:75:28:6f:e3:94:02:d6:08:e2:e5:f9: c7:09:22:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/1FEE3nyojDinzTAQ6cqzVD4cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTEyMjkwMTA2MTJaFw0yNjAxMDExMjE5MTJaMDMxMTAvBgNV BAMTKEE4MjU3QTBCOEE5RTUzQ0Y5MDFFNDU4NjdFOTMxRjJBNkQ2QjJBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ni3f6xC8oPYuqFlMyfmRqAA5 H7ZOHjM42Q3/HwFMbqQsydktGfrsq9ebajBBw7hdU24X6EA+NM/Z3dAHtt03Jt8B mR2ZulCv26qg6RbdG5JMXNE/ZLA4eF+ZvdKE8ud0te/aVMTwm4m1psQYMp0AfQnp Lzg120RNcEuFAm+YlxMuDNxhaErhkGTPx6+nLYD1LID/1L2eUYCu6841jdZHUFw5 RKn5bZqMGlDiZwg1tnd/FIB90Zqa6ZvcunwhAy2i2sZNAZzFZCMbgAbvle3kdM/E jf5LLNzQkVxYwLBlQ96l2VC3lDhbOpheC9EnPek/JoLmKuqdSfPsW6EP+Z7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCV6C4qeU8+QHkWGfpMfKm1rKsUwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr+LrLhP145jR43o2kKvV/wXn/ZVtL2lMaA hdNCczjCFTASOZnplvx//8KBgMR8DiQQSIAVK1dVVT5DgQtcdimx5qYFrNUEhmB6 VGPg/gIhRPZxuf4Ccg51DbJnd3P3/cDyetYee1c6kVuIHxT+oVPjkPdOVRyqqnb+ WwX8atx/g19YXnoaNhn0nzcXaauWdtDzmqBp/mSdcpGDA8emssnQRzVpKHU11m2S IPEczXvr3CVNhfnSsbdsPttnHdbsOdeNw6wIFPUnjpg5Bodbe/webmIJI1hwOJc5 MrNAKPBtUNGyAF2NzE/kaN5R6f7LN3N1KG/jlALWCOLl+ccJIi4= -----END CERTIFICATE-----Generated at Mon Dec 29 23:53:30 2025 by rpki-client