This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json)
Hash identifier: UYJaQ1djbs7oeuO3Yw0cbLcx21XAhcLehRDyTpox4W0=
Subject key identifier: 7B:51:1D:6D:D3:46:BC:ED:EF:B5:D9:8F:EB:FE:7D:87:52:BC:66:A0
Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Certificate serial: 639CCCA78E677CA78D00A8857FA29D79E863AEC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
Manifest number: 04A8
Signing time: Wed 17 Dec 2025 13:20:57 +0000
Manifest this update: Wed 17 Dec 2025 13:15:57 +0000
Manifest next update: Sat 20 Dec 2025 23:43:57 +0000
Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: 53VEZNGjd6JL/+DGDRDPrFUWirmw4jwjTOVF0bD+i6o=)
2: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=)
3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 23:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9c:cc:a7:8e:67:7c:a7:8d:00:a8:85:7f:a2:9d:79:e8:63:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Validity
Not Before: Dec 17 13:15:57 2025 GMT
Not After : Dec 20 23:43:57 2025 GMT
Subject: CN=7B511D6DD346BCEDEFB5D98FEBFE7D8752BC66A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:ab:98:21:b2:c0:24:a1:09:ce:60:e8:40:
73:d2:3b:99:b0:4b:dc:b7:3a:f5:2a:5a:86:9f:14:
72:d6:d0:b8:7f:6e:50:3b:2a:6a:b2:a3:b1:ec:44:
06:14:af:52:1a:d8:cb:cd:ae:a8:48:12:f9:ce:83:
e6:0f:c6:fe:87:53:db:3a:df:7e:6c:e2:c4:fc:e1:
59:c1:e8:b7:61:02:69:65:15:0f:fd:05:b2:98:0a:
f6:ba:ca:11:4b:af:33:92:f3:5c:df:27:a8:50:5d:
e7:d5:b5:83:e4:25:5e:04:94:f4:9c:e7:06:65:04:
0b:55:5d:3f:c6:51:41:4b:ae:61:7b:bd:57:f6:5c:
7f:cb:c9:a6:ca:b6:00:93:ed:1a:74:01:46:2f:cf:
f5:cc:8b:62:b3:e2:0a:2f:39:1b:e0:54:6d:e5:e3:
95:f7:61:5b:6b:10:7e:21:6d:9a:28:ae:52:24:a3:
d7:2c:ea:43:4a:29:28:43:db:70:39:a6:7e:54:0f:
8b:21:02:db:95:f9:5e:71:2f:b2:90:84:fa:ca:9b:
f1:4f:0f:d6:24:f4:34:fa:dd:78:22:8b:56:01:a3:
0d:5f:2f:0c:e8:82:c1:61:6b:dd:56:5f:29:65:3a:
14:09:41:e1:f1:19:51:c4:7f:a6:4b:bf:23:89:57:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:1D:6D:D3:46:BC:ED:EF:B5:D9:8F:EB:FE:7D:87:52:BC:66:A0
X509v3 Authority Key Identifier:
keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:6f:64:16:b9:f1:01:e2:99:eb:d8:44:67:96:11:a7:7a:
4a:25:44:76:d9:68:04:1a:a8:69:01:be:c2:59:4c:46:df:8c:
37:66:9f:25:66:dd:6c:14:54:9d:a1:7f:20:51:3a:d5:09:04:
b1:f9:d1:f7:bb:b7:2e:ef:8e:24:8a:a8:ce:26:a1:a2:39:c9:
a4:6b:1c:ab:cb:d1:27:23:26:af:7f:63:1e:2d:63:4b:02:36:
b1:29:57:ba:6c:68:33:6b:00:d9:a7:44:0d:24:de:3a:f0:10:
e5:e2:ae:2f:ab:cd:d7:e0:cf:ad:30:5b:c7:38:fc:98:73:9f:
55:2a:9d:cc:4a:e3:b4:58:5c:3f:70:bf:aa:02:9e:a7:72:52:
bd:4a:a3:c6:c6:87:f7:b5:2a:2b:b4:00:51:54:cf:8a:f0:40:
ee:75:5c:9f:ab:f3:ff:e5:0e:c5:81:f6:68:01:4c:80:eb:87:
c9:a1:25:2f:f7:72:05:0a:8b:7b:c9:32:b6:e5:ae:8a:80:15:
09:71:30:46:84:56:83:41:f4:18:e1:c7:d8:67:67:e6:03:70:
8b:02:c3:cb:b9:29:83:69:27:d8:b0:5a:6e:0e:64:29:80:e2:
98:ca:12:5b:81:0c:65:91:80:56:ba:b1:ed:0c:99:7f:54:03:
41:78:1f:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY5zMp45nfKeNAKiFf6KdeehjrsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD
Q0IyQjlCMDAeFw0yNTEyMTcxMzE1NTdaFw0yNTEyMjAyMzQzNTdaMDMxMTAvBgNV
BAMTKDdCNTExRDZERDM0NkJDRURFRkI1RDk4RkVCRkU3RDg3NTJCQzY2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukauYIbLAJKEJzmDoQHPSO5mw
S9y3OvUqWoafFHLW0Lh/blA7Kmqyo7HsRAYUr1Ia2MvNrqhIEvnOg+YPxv6HU9s6
335s4sT84VnB6LdhAmllFQ/9BbKYCva6yhFLrzOS81zfJ6hQXefVtYPkJV4ElPSc
5wZlBAtVXT/GUUFLrmF7vVf2XH/LyabKtgCT7Rp0AUYvz/XMi2Kz4govORvgVG3l
45X3YVtrEH4hbZoorlIko9cs6kNKKShD23A5pn5UD4shAtuV+V5xL7KQhPrKm/FP
D9Yk9DT63Xgii1YBow1fLwzogsFha91WXyllOhQJQeHxGVHEf6ZLvyOJV2JFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUe1EdbdNGvO3vtdmP6/59h1K8ZqAwHwYDVR0j
BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0
NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy
QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy
MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC
NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAMFb2QWufEB4pnr2ERnlhGnekolRHbZaAQa
qGkBvsJZTEbfjDdmnyVm3WwUVJ2hfyBROtUJBLH50fe7ty7vjiSKqM4moaI5yaRr
HKvL0ScjJq9/Yx4tY0sCNrEpV7psaDNrANmnRA0k3jrwEOXiri+rzdfgz60wW8c4
/Jhzn1UqncxK47RYXD9wv6oCnqdyUr1Ko8bGh/e1Kiu0AFFUz4rwQO51XJ+r8//l
DsWB9mgBTIDrh8mhJS/3cgUKi3vJMrblroqAFQlxMEaEVoNB9Bjhx9hnZ+YDcIsC
w8u5KYNpJ9iwWm4OZCmA4pjKEluBDGWRgFa6se0MmX9UA0F4H6s=
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:24:10 2025 by rpki-client