This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: 684cNsubnl6orF5Z56dp/cxkv0oeYGv2xQVxL1HiwFo= Subject key identifier: 4D:00:5F:92:DD:C6:39:45:A6:D5:E4:67:BD:B4:C8:F7:97:82:67:CC Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 529E7FAB8EBA4BBD44C061FF17948B362E3392D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 020E Signing time: Thu 18 Dec 2025 16:41:52 +0000 Manifest this update: Thu 18 Dec 2025 16:36:52 +0000 Manifest next update: Mon 22 Dec 2025 01:44:52 +0000 Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) 2: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: +5/nuOhf1UZr+Jjhav8+m/wlBCkghyaMhgzhYVQh6iE=) 3: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9e:7f:ab:8e:ba:4b:bd:44:c0:61:ff:17:94:8b:36:2e:33:92:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Dec 18 16:36:52 2025 GMT Not After : Dec 22 01:44:52 2025 GMT Subject: CN=4D005F92DDC63945A6D5E467BDB4C8F7978267CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:8d:5f:e1:75:cf:68:da:95:52:91:3a:c7: cc:32:7c:55:82:01:78:28:4d:ac:b3:b8:7a:15:d4: 69:f3:cd:35:39:cc:02:9e:33:bb:c7:6c:89:10:b7: 6a:b5:b3:c4:b3:39:b5:4f:8c:f7:e1:08:e6:45:4f: 9a:ec:5b:87:ee:0c:96:9d:9b:fa:32:7d:da:dd:da: dc:4b:08:db:80:7e:1d:c0:32:e1:9c:5f:37:49:2a: 58:40:2c:bc:78:4b:88:e8:79:fc:8f:b2:af:36:1e: 42:42:3d:bd:76:18:98:77:54:9d:a6:d3:4d:b3:88: cd:ff:fb:fd:73:6a:63:6c:42:04:b8:1c:61:93:5c: 45:17:76:50:50:d2:3f:92:65:40:0f:17:03:46:46: ae:63:41:c3:6b:24:20:bf:0d:e4:dc:30:9f:e4:e0: 97:d9:dd:ce:8a:36:b5:30:ca:ba:e5:f4:e3:22:0f: 0c:55:1a:21:b3:da:f7:30:89:cd:72:c4:85:51:40: 0c:62:49:4e:e6:02:e0:81:d3:50:be:fc:d5:04:b0: 6d:5d:19:cc:37:71:4f:37:f4:82:16:ce:89:f8:f9: 75:54:e3:7a:89:a2:58:78:04:51:f1:bf:9b:00:a8: c0:9c:35:35:f8:28:1e:de:48:0e:05:b8:97:7b:b2: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:00:5F:92:DD:C6:39:45:A6:D5:E4:67:BD:B4:C8:F7:97:82:67:CC X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:98:74:83:52:8a:8f:33:98:f5:6e:c8:7e:e8:b6:aa:c7: 70:57:1d:8d:78:25:3d:ce:82:44:85:ff:14:ef:aa:90:ac:f8: 22:2f:f1:80:74:43:31:69:5a:21:05:f2:e2:e8:9d:7e:12:6b: 12:3f:50:1d:24:d2:aa:be:dd:85:bc:14:4f:38:f6:ee:e1:f0: ba:32:60:34:9c:f0:15:c8:d3:e4:70:5a:1d:ec:58:d3:56:c9: 3d:2b:f9:83:6b:71:f4:f4:41:65:a1:cd:34:3d:b3:80:4a:c4: 6a:77:c8:38:c9:49:af:10:8e:c3:38:23:00:8b:8e:65:dd:d1: 0b:1a:17:80:33:78:bc:63:fa:44:2e:a5:8b:54:fc:44:13:bf: c3:3a:a8:1b:c1:d7:5f:49:35:19:65:a6:b9:3b:32:fd:71:58: 1e:d6:95:42:a0:14:ae:dd:f1:5d:5d:69:c7:f3:23:30:df:42: ad:02:3b:ea:7b:80:17:1a:56:2a:26:26:d8:0a:db:dd:2f:a8: 65:f4:43:02:17:a0:2d:69:44:95:94:0e:9d:15:af:56:27:98: 4c:3a:55:f3:71:cd:a9:3f:e1:f3:7e:45:2f:81:5c:08:1a:81: 92:93:99:ba:08:c0:31:94:84:31:86:5f:d5:e7:f7:6e:ec:42: 5f:37:bc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp5/q466S71EwGH/F5SLNi4zktcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTEyMTgxNjM2NTJaFw0yNTEyMjIwMTQ0NTJaMDMxMTAvBgNV BAMTKDREMDA1RjkyRERDNjM5NDVBNkQ1RTQ2N0JEQjRDOEY3OTc4MjY3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5o1f4XXPaNqVUpE6x8wyfFWC AXgoTayzuHoV1GnzzTU5zAKeM7vHbIkQt2q1s8SzObVPjPfhCOZFT5rsW4fuDJad m/oyfdrd2txLCNuAfh3AMuGcXzdJKlhALLx4S4joefyPsq82HkJCPb12GJh3VJ2m 002ziM3/+/1zamNsQgS4HGGTXEUXdlBQ0j+SZUAPFwNGRq5jQcNrJCC/DeTcMJ/k 4JfZ3c6KNrUwyrrl9OMiDwxVGiGz2vcwic1yxIVRQAxiSU7mAuCB01C+/NUEsG1d Gcw3cU839IIWzon4+XVU43qJolh4BFHxv5sAqMCcNTX4KB7eSA4FuJd7spm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQBfkt3GOUWm1eRnvbTI95eCZ8wwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY9mHSDUoqPM5j1bsh+6Laqx3BXHY14JT3O gkSF/xTvqpCs+CIv8YB0QzFpWiEF8uLonX4SaxI/UB0k0qq+3YW8FE849u7h8Loy YDSc8BXI0+RwWh3sWNNWyT0r+YNrcfT0QWWhzTQ9s4BKxGp3yDjJSa8QjsM4IwCL jmXd0QsaF4AzeLxj+kQupYtU/EQTv8M6qBvB119JNRllprk7Mv1xWB7WlUKgFK7d 8V1dacfzIzDfQq0CO+p7gBcaViomJtgK290vqGX0QwIXoC1pRJWUDp0Vr1YnmEw6 VfNxzak/4fN+RS+BXAgagZKTmboIwDGUhDGGX9Xn927sQl83vG0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:33 2025 by rpki-client