This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: 6MwDYqwpUfxTL1YO6r47fyfteUXENXAeIx1xiO0yMt8= Subject key identifier: 11:62:0E:4E:0B:58:22:9B:51:07:71:74:A4:23:50:79:69:A0:E3:24 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 46C5F69A5179AD1153562D608BCDA8F699C302BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 047B Signing time: Thu 18 Dec 2025 03:41:22 +0000 Manifest this update: Thu 18 Dec 2025 03:36:22 +0000 Manifest next update: Sun 21 Dec 2025 07:54:22 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: l9CMttOiSJxQGefi2GpKQ7cz+bG6a8OciiUqS01ad9M=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c5:f6:9a:51:79:ad:11:53:56:2d:60:8b:cd:a8:f6:99:c3:02:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Dec 18 03:36:22 2025 GMT Not After : Dec 21 07:54:22 2025 GMT Subject: CN=11620E4E0B58229B51077174A423507969A0E324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:1d:39:e6:d8:f8:65:3e:7e:b5:a9:47:06: af:44:4f:06:98:0d:4e:bd:ed:92:be:5f:75:77:da: 0a:25:f6:89:2c:24:c1:c3:50:99:06:3f:1d:ec:65: 09:4d:dc:01:87:4b:b9:6d:83:73:77:cd:69:a8:ea: 9a:90:5d:36:b3:f7:16:9b:89:b0:da:c1:ac:16:b4: ac:0a:c8:fe:09:a7:c0:0e:ab:df:8c:9c:2b:ed:68: e8:66:fe:83:52:cb:71:65:2a:4c:94:ad:af:8c:18: 86:c7:fa:2a:fd:36:10:9a:30:46:7d:a1:2c:d5:0f: c9:6f:0d:19:d6:a2:75:60:30:3f:d8:61:99:60:89: 60:f0:8c:f6:06:04:ad:3f:6e:50:f4:d8:94:8e:98: 53:61:95:4e:d4:ad:12:be:31:82:d6:8f:f8:4f:5a: ad:1b:c1:d5:cf:19:6e:37:5b:75:09:a0:48:d5:34: 87:36:58:19:22:b9:59:48:ab:81:07:7d:2e:b3:41: 7e:1e:e1:a8:c4:1e:6d:53:8a:55:90:af:c0:c6:f9: 4c:17:05:0b:ea:73:6c:03:b7:e5:fb:87:23:62:a5: 1a:dc:b8:d4:0c:77:f6:62:c2:06:f6:9b:59:83:27: 4c:a2:a9:1c:a4:67:0b:de:a9:54:00:5a:4f:33:5d: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:62:0E:4E:0B:58:22:9B:51:07:71:74:A4:23:50:79:69:A0:E3:24 X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:51:8f:9c:84:45:94:d3:48:91:24:30:e4:38:d0:1e:5c:e1: 4e:23:52:b9:20:ed:69:da:b4:95:18:66:35:c8:3e:5b:49:9f: f0:db:79:43:56:23:00:41:44:62:b4:06:f8:f4:e2:1c:2f:47: ed:33:7f:a2:d3:41:b6:09:92:93:40:60:f5:ae:b2:42:c3:4c: a9:e5:8e:ef:25:7b:de:ea:b9:a3:e4:c2:be:fe:21:75:bf:9f: 70:3d:63:43:76:78:f6:b6:5e:5d:71:31:dd:47:2f:48:d5:2f: f1:b5:e6:2d:f3:b8:b7:fc:c1:5f:da:e7:22:85:c2:8d:bf:af: 77:30:17:71:0d:97:e3:ae:d8:d0:d0:2c:a2:f5:5c:3a:6e:e9: 13:c3:21:4f:1e:c4:36:d4:5f:a9:0d:d8:4e:05:53:69:d5:8f: c0:e2:90:d6:a0:57:68:0a:15:59:b5:83:06:c6:9b:44:b1:22: bb:ee:96:6d:23:a3:23:ce:96:87:d0:f1:94:f4:c1:f6:08:a4: c9:64:03:4c:2e:06:1f:f1:41:71:a9:7e:ac:a7:01:9a:5c:d5: 0a:73:ce:14:73:da:4c:04:72:4a:a2:36:c8:60:6f:ce:ba:fa: b5:e8:5c:e8:07:0e:d4:1a:0f:04:d9:5e:55:f7:6d:7c:ff:e2: fe:ac:82:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsX2mlF5rRFTVi1gi82o9pnDAr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTEyMTgwMzM2MjJaFw0yNTEyMjEwNzU0MjJaMDMxMTAvBgNV BAMTKDExNjIwRTRFMEI1ODIyOUI1MTA3NzE3NEE0MjM1MDc5NjlBMEUzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5h055tj4ZT5+talHBq9ETwaY DU697ZK+X3V32gol9oksJMHDUJkGPx3sZQlN3AGHS7ltg3N3zWmo6pqQXTaz9xab ibDawawWtKwKyP4Jp8AOq9+MnCvtaOhm/oNSy3FlKkyUra+MGIbH+ir9NhCaMEZ9 oSzVD8lvDRnWonVgMD/YYZlgiWDwjPYGBK0/blD02JSOmFNhlU7UrRK+MYLWj/hP Wq0bwdXPGW43W3UJoEjVNIc2WBkiuVlIq4EHfS6zQX4e4ajEHm1TilWQr8DG+UwX BQvqc2wDt+X7hyNipRrcuNQMd/Ziwgb2m1mDJ0yiqRykZwveqVQAWk8zXUGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWIOTgtYIptRB3F0pCNQeWmg4yQwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhRj5yERZTTSJEkMOQ40B5c4U4jUrkg7Wna tJUYZjXIPltJn/DbeUNWIwBBRGK0Bvj04hwvR+0zf6LTQbYJkpNAYPWuskLDTKnl ju8le97quaPkwr7+IXW/n3A9Y0N2ePa2Xl1xMd1HL0jVL/G15i3zuLf8wV/a5yKF wo2/r3cwF3ENl+Ou2NDQLKL1XDpu6RPDIU8exDbUX6kN2E4FU2nVj8DikNagV2gK FVm1gwbGm0SxIrvulm0joyPOlofQ8ZT0wfYIpMlkA0wuBh/xQXGpfqynAZpc1Qpz zhRz2kwEckqiNshgb866+rXoXOgHDtQaDwTZXlX3bXz/4v6sgr4= -----END CERTIFICATE-----Generated at Thu Dec 18 10:29:55 2025 by rpki-client