This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: Zc776w05KsK8brphu1s9oXFKAGnhiW0WjUs+S2xoayc= Subject key identifier: 5C:F2:9C:76:FD:BC:72:BA:CE:41:B0:AD:8B:84:95:D9:4E:91:38:A2 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 13D7E7E945886112A806F7832041E49F5AFF89D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 0348 Signing time: Tue 23 Dec 2025 08:50:41 +0000 Manifest this update: Tue 23 Dec 2025 08:45:41 +0000 Manifest next update: Fri 26 Dec 2025 15:21:41 +0000 Files and hashes: 1: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=) 2: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: PBN2wLNmbdzQO6tFLRW28faJxLg4mgXth+mlb5LLYEw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d7:e7:e9:45:88:61:12:a8:06:f7:83:20:41:e4:9f:5a:ff:89:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Dec 23 08:45:41 2025 GMT Not After : Dec 26 15:21:41 2025 GMT Subject: CN=5CF29C76FDBC72BACE41B0AD8B8495D94E9138A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:94:9c:7a:71:64:1c:16:f6:93:77:6a:ef: 9d:19:20:73:d4:7f:95:09:fa:9f:de:25:9d:30:cb: 82:3a:5b:d0:b5:38:73:fa:f3:32:07:6b:1c:33:62: 74:05:3d:a9:0d:0b:ba:d1:ab:5d:d9:3f:04:6e:e5: d2:6f:32:00:f2:1c:2c:b7:50:12:32:44:0c:9f:f5: 4b:79:c8:30:20:5d:84:a9:3b:50:25:54:a3:d5:97: b1:93:ba:07:dd:90:a3:08:a4:a7:6f:59:05:2d:4f: b5:62:9d:77:1f:cf:17:59:f7:8c:61:84:fb:85:c5: 65:a8:40:31:e8:b9:ee:e9:c5:7a:9e:9d:99:85:16: 83:8f:92:cd:d8:83:86:bb:2c:71:d5:3f:1e:1f:f9: 97:d2:43:9b:72:a3:63:be:52:7c:18:22:86:ce:a8: 0d:cf:e8:ab:d8:b4:0e:c6:d0:80:d9:d8:02:3f:aa: 33:17:0a:a7:ca:8f:51:96:b4:0b:e4:64:bf:ba:d1: 76:da:3e:45:82:85:37:fa:98:36:d5:1f:b6:f7:d9: 5d:9c:49:3d:1b:4b:47:83:6b:c9:43:4b:ae:5a:63: 9a:7a:a8:c9:41:d3:38:61:53:d0:02:e6:25:f2:47: 8f:f7:3c:38:0c:91:be:37:57:87:39:42:ed:e8:b1: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F2:9C:76:FD:BC:72:BA:CE:41:B0:AD:8B:84:95:D9:4E:91:38:A2 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fd:b2:bd:91:1f:a5:6b:1c:14:bd:f3:0f:e2:98:6d:14:0d: d5:21:a9:a6:63:56:62:4f:96:52:d0:aa:4d:ab:bd:f2:ca:16: e7:dd:ab:73:1a:08:3c:f1:b7:68:19:c1:7d:02:96:1e:50:89: bc:42:b8:6a:a3:6d:c0:c9:48:1d:d8:79:9a:86:c5:a0:10:3f: 4f:28:9e:6c:d6:a9:b0:3b:c5:cd:de:2c:49:73:ca:11:f7:b7: fa:5b:80:b0:31:ed:64:a9:a8:24:eb:97:8e:97:16:41:e4:9b: e4:28:4d:af:73:8f:1a:2c:59:76:cd:95:25:65:0f:a5:70:9e: b9:28:00:c3:6b:82:1a:13:59:8a:ff:38:4e:b7:3c:e5:e3:82: c8:43:39:10:bb:cc:71:9e:d6:e2:0a:e3:29:30:19:1c:73:3c: ff:0d:12:dd:ef:3b:f3:fe:57:6c:cb:38:44:15:f2:56:08:f8: 1b:e9:07:00:78:dc:d1:ca:fa:d5:d0:7b:36:d1:bd:2a:21:9a: 2f:ce:e7:91:4c:8d:28:db:41:a3:de:80:bc:c0:35:c2:b7:7e: 36:c7:5d:4e:fd:a6:0d:9c:33:aa:0a:f4:2b:d8:d2:77:87:c8: 42:2b:b9:89:6c:d4:4f:72:f8:9c:67:60:36:30:72:29:66:7e: 4b:48:f4:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9fn6UWIYRKoBveDIEHkn1r/idUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTEyMjMwODQ1NDFaFw0yNTEyMjYxNTIxNDFaMDMxMTAvBgNV BAMTKDVDRjI5Qzc2RkRCQzcyQkFDRTQxQjBBRDhCODQ5NUQ5NEU5MTM4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FpScenFkHBb2k3dq750ZIHPU f5UJ+p/eJZ0wy4I6W9C1OHP68zIHaxwzYnQFPakNC7rRq13ZPwRu5dJvMgDyHCy3 UBIyRAyf9Ut5yDAgXYSpO1AlVKPVl7GTugfdkKMIpKdvWQUtT7VinXcfzxdZ94xh hPuFxWWoQDHoue7pxXqenZmFFoOPks3Yg4a7LHHVPx4f+ZfSQ5tyo2O+UnwYIobO qA3P6KvYtA7G0IDZ2AI/qjMXCqfKj1GWtAvkZL+60XbaPkWChTf6mDbVH7b32V2c ST0bS0eDa8lDS65aY5p6qMlB0zhhU9AC5iXyR4/3PDgMkb43V4c5Qu3osSfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXPKcdv28crrOQbCti4SV2U6ROKIwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADD9sr2RH6VrHBS98w/imG0UDdUhqaZjVmJP llLQqk2rvfLKFufdq3MaCDzxt2gZwX0Clh5QibxCuGqjbcDJSB3YeZqGxaAQP08o nmzWqbA7xc3eLElzyhH3t/pbgLAx7WSpqCTrl46XFkHkm+QoTa9zjxosWXbNlSVl D6VwnrkoAMNrghoTWYr/OE63POXjgshDORC7zHGe1uIK4ykwGRxzPP8NEt3vO/P+ V2zLOEQV8lYI+BvpBwB43NHK+tXQezbRvSohmi/O55FMjSjbQaPegLzANcK3fjbH XU79pg2cM6oK9CvY0neHyEIruYls1E9y+JxnYDYwcilmfktI9DU= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:19 2025 by rpki-client