This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: G13RQHtn36ooFTziU7f0UgJXaXr35PS2E9TaMfjN9CE= Subject key identifier: 23:AF:4D:3F:64:89:F3:B1:86:77:F8:1A:EF:14:8B:A5:56:98:51:BD Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 5C0998AD0ADDACAEC0B4AB1E914FFBC6D01DE5C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: FE Signing time: Wed 24 Dec 2025 11:42:14 +0000 Manifest this update: Wed 24 Dec 2025 11:37:14 +0000 Manifest next update: Sat 27 Dec 2025 16:56:14 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: mIoiw2cLZJsuM8UvPQUR3yNET/T0Pq765Th523Peod4=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:09:98:ad:0a:dd:ac:ae:c0:b4:ab:1e:91:4f:fb:c6:d0:1d:e5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Dec 24 11:37:14 2025 GMT Not After : Dec 27 16:56:14 2025 GMT Subject: CN=23AF4D3F6489F3B18677F81AEF148BA5569851BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:bd:81:4d:17:d2:26:9b:83:dd:66:4b:a0: 41:e1:94:c8:cd:91:f7:1c:9a:d8:81:06:06:18:30: 17:06:41:e2:3e:6e:08:3e:5d:5b:92:a0:2b:ac:6c: 56:c1:d5:38:73:88:78:c7:ce:4b:2a:c5:07:83:1d: e6:23:4c:5c:87:6e:cd:4f:f9:eb:2a:6f:eb:37:bf: d9:27:6b:2d:0e:3c:8b:31:21:6d:dc:b7:4f:d8:87: 60:2e:d4:8e:9d:c7:6f:dc:64:6a:fe:b9:61:e8:11: a7:33:a2:8e:c9:c2:4b:78:e8:86:29:f4:78:59:e3: 56:e1:e7:8e:93:a4:7b:85:20:68:72:67:d1:e7:36: 7b:e1:49:9e:e1:76:e7:9c:4a:77:59:9a:87:23:68: 48:2b:4b:cb:61:92:de:7b:bc:45:ee:26:88:ca:84: 4f:da:16:3e:6c:b4:7d:14:c5:af:b1:cc:60:b2:5a: 5f:57:c6:ab:5c:f1:b8:a9:27:9a:34:d0:06:a1:7c: 77:9e:e4:d8:38:2b:67:85:81:03:81:02:eb:26:13: 4c:72:3d:df:eb:91:9d:75:62:2e:1a:bd:6f:c2:16: d9:66:6a:45:c1:c3:12:83:c7:60:f1:dc:95:7f:05: c3:fb:06:44:2e:d0:93:b8:d9:1f:b4:02:bb:ff:e9: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:4D:3F:64:89:F3:B1:86:77:F8:1A:EF:14:8B:A5:56:98:51:BD X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:3e:4f:a0:7b:da:27:1e:3c:e6:ae:6a:2e:db:04:7d:79: 75:56:16:91:11:1b:d9:0f:45:db:27:5c:b8:bb:ca:24:79:f8: e5:a6:e8:93:24:ec:31:57:da:2a:96:2f:8e:4d:f0:73:26:07: ac:9c:11:e6:2c:15:56:f2:81:49:7f:04:c4:bc:b3:2b:c5:65: 7d:d8:b3:3a:c6:c4:9b:9f:2b:26:5c:39:be:eb:59:a0:89:ce: 11:ba:71:6b:0f:3c:1e:5d:34:1c:21:c3:c6:de:20:57:80:79: 6b:40:d9:17:01:f2:65:aa:a8:9d:43:09:14:2d:a7:75:de:28: 2c:d4:90:f5:a4:97:2d:7c:82:75:f0:a0:4b:4c:e7:8e:93:b3: 21:d8:04:ff:1b:fa:75:00:90:d3:06:26:2d:0c:da:e0:d4:2b: b7:2e:07:3a:7f:fc:65:0f:42:06:98:53:a4:3b:ae:75:71:f4: d4:a0:ae:19:a0:31:62:38:2e:f6:82:e8:67:fb:0c:db:5f:f5: b3:9b:ec:e9:7a:90:05:76:ff:bd:ce:ec:b5:7a:b3:24:d0:65: e5:2d:79:80:69:54:af:d4:91:ed:96:8b:87:22:78:20:9c:34: c9:d4:1d:d0:91:90:07:12:1d:35:81:7c:0f:83:70:ec:fc:df: 57:bd:2e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAmYrQrdrK7AtKsekU/7xtAd5cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTEyMjQxMTM3MTRaFw0yNTEyMjcxNjU2MTRaMDMxMTAvBgNV BAMTKDIzQUY0RDNGNjQ4OUYzQjE4Njc3RjgxQUVGMTQ4QkE1NTY5ODUxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69L2BTRfSJpuD3WZLoEHhlMjN kfccmtiBBgYYMBcGQeI+bgg+XVuSoCusbFbB1ThziHjHzksqxQeDHeYjTFyHbs1P +esqb+s3v9knay0OPIsxIW3ct0/Yh2Au1I6dx2/cZGr+uWHoEaczoo7Jwkt46IYp 9HhZ41bh546TpHuFIGhyZ9HnNnvhSZ7hduecSndZmocjaEgrS8thkt57vEXuJojK hE/aFj5stH0Uxa+xzGCyWl9Xxqtc8bipJ5o00AahfHee5Ng4K2eFgQOBAusmE0xy Pd/rkZ11Yi4avW/CFtlmakXBwxKDx2Dx3JV/BcP7BkQu0JO42R+0Arv/6RnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI69NP2SJ87GGd/ga7xSLpVaYUb0wHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERnPk+ge9onHjzmrmou2wR9eXVWFpERG9kP RdsnXLi7yiR5+OWm6JMk7DFX2iqWL45N8HMmB6ycEeYsFVbygUl/BMS8syvFZX3Y szrGxJufKyZcOb7rWaCJzhG6cWsPPB5dNBwhw8beIFeAeWtA2RcB8mWqqJ1DCRQt p3XeKCzUkPWkly18gnXwoEtM546TsyHYBP8b+nUAkNMGJi0M2uDUK7cuBzp//GUP QgaYU6Q7rnVx9NSgrhmgMWI4LvaC6Gf7DNtf9bOb7Ol6kAV2/73O7LV6syTQZeUt eYBpVK/Uke2Wi4cieCCcNMnUHdCRkAcSHTWBfA+DcOz831e9LkU= -----END CERTIFICATE-----Generated at Wed Dec 24 23:28:54 2025 by rpki-client