This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json)
Hash identifier: shLpMwIuyJ1Y960kL4L0W2SJZ6AG11GBdD27ANUwsM8=
Subject key identifier: 09:5F:F1:98:B0:D1:2E:D3:83:FE:30:6B:C6:ED:D5:81:1C:23:58:94
Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Certificate serial: 12A4EEDC0D0FD034F02C43E3188F19650AFD1D4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
Manifest number: 04F1
Signing time: Tue 23 Dec 2025 23:50:51 +0000
Manifest this update: Tue 23 Dec 2025 23:45:51 +0000
Manifest next update: Sat 27 Dec 2025 07:23:51 +0000
Files and hashes: 1: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=)
2: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=)
3: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=)
4: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: D/yBkb/B5C0x2kl7xZr3C8meS892vmQFndSBuTsyS9s=)
5: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=)
6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=)
7: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl
rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 07:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a4:ee:dc:0d:0f:d0:34:f0:2c:43:e3:18:8f:19:65:0a:fd:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Validity
Not Before: Dec 23 23:45:51 2025 GMT
Not After : Dec 27 07:23:51 2025 GMT
Subject: CN=095FF198B0D12ED383FE306BC6EDD5811C235894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:5b:ca:b5:76:b6:af:2a:c4:fd:18:46:9a:
5c:81:17:ac:eb:a0:d7:56:f1:71:82:25:13:3c:d2:
2f:ea:00:dc:73:58:eb:51:e6:9a:73:fd:4c:57:8c:
74:59:89:75:5f:1d:7f:9c:5c:2e:c9:57:af:e6:e5:
aa:03:53:46:bb:a4:3d:3d:e7:8d:11:95:48:40:2a:
d2:a5:e9:24:84:4c:f1:af:74:1b:62:47:68:81:48:
97:06:c5:ad:9a:ca:81:8c:39:aa:91:64:f6:1b:d9:
f0:af:4c:6a:bc:1b:c2:9f:6e:a2:b7:b0:4c:4f:ac:
7c:fc:c5:d8:12:8a:27:dd:20:e8:cb:a1:a9:1e:20:
0e:a6:03:2f:10:56:25:8e:63:0e:b1:66:5a:05:e7:
04:35:a7:4b:f0:d1:ea:fe:fb:df:34:20:60:10:73:
df:db:7e:5e:3b:f8:b6:28:86:fd:a0:d7:c7:bb:97:
57:38:bf:9d:92:ec:11:e5:ea:ba:fa:34:56:58:ed:
60:55:47:f3:f4:ba:0e:d8:4d:26:ff:21:84:80:b0:
1e:90:a5:30:11:33:8b:16:4e:c0:2a:1e:9c:26:93:
e1:3c:5a:0b:ed:7c:f3:8a:77:16:b3:37:fc:8b:e8:
e6:ed:67:54:00:04:34:2b:37:09:76:3f:21:03:92:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:F1:98:B0:D1:2E:D3:83:FE:30:6B:C6:ED:D5:81:1C:23:58:94
X509v3 Authority Key Identifier:
keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:b7:00:83:a2:7c:4c:fc:39:d8:c2:36:b6:b7:b1:2b:d1:
fc:a7:40:45:28:ad:1b:07:f4:88:86:b7:0d:41:09:86:09:a1:
42:59:af:55:b5:1d:ac:a4:48:e0:76:6f:c9:e4:b3:9d:e1:3a:
d4:52:80:b3:3c:59:87:66:24:be:69:66:b9:c4:d8:d7:ca:a1:
b5:7b:df:b7:fd:f4:63:81:63:9a:45:e0:b9:1a:ce:cf:1d:1d:
a2:d9:f7:af:2b:cf:8b:7e:f4:6a:13:a3:a5:e3:d5:7a:53:f4:
f0:d1:55:f0:49:1d:7f:0d:08:31:a0:21:d5:6a:66:e3:d3:3b:
11:ed:46:93:2d:b2:35:e9:09:95:9f:78:7a:44:9f:22:6e:68:
8a:7f:34:c7:3c:43:9a:7a:40:06:d8:4e:35:bc:93:25:20:f6:
41:e8:9e:24:de:7a:4f:17:c2:cf:3b:41:b6:e4:de:4f:c2:f0:
19:e5:2e:05:2c:bb:fa:52:a5:b3:0b:ae:bd:df:05:9f:95:65:
f2:42:c9:21:f2:2e:44:58:42:bb:b5:6c:f5:d7:da:9b:99:24:
b4:f2:6b:06:f1:6c:8d:59:1a:ce:f8:dd:cf:83:53:b2:c7:4a:
27:3e:1c:83:3f:a7:92:ac:a9:b8:11:36:94:32:4c:de:c5:e0:
2a:8a:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:05:10 2025 by rpki-client