This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: Xsb7sZm2d1J7mAMOwPtMykDLNHPKv/mP8SUh50GJgWQ= Subject key identifier: 21:35:2D:9B:A9:9F:69:0D:AB:43:A8:07:90:54:6B:55:A1:36:1F:67 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 3DDC177A25061ED7D79E158EAFEA65E6596BCEA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 0417 Signing time: Wed 17 Dec 2025 02:42:13 +0000 Manifest this update: Wed 17 Dec 2025 02:37:13 +0000 Manifest next update: Sat 20 Dec 2025 13:21:13 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: r520W4Z83GgaT610lELzmGajxEde10Sw635EDaCcfWE=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:17:7a:25:06:1e:d7:d7:9e:15:8e:af:ea:65:e6:59:6b:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Dec 17 02:37:13 2025 GMT Not After : Dec 20 13:21:13 2025 GMT Subject: CN=21352D9BA99F690DAB43A80790546B55A1361F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a7:40:7b:42:49:ff:ad:55:9b:d6:ba:1d:30: 86:5e:6a:6f:7e:25:43:98:de:12:1f:27:dd:0f:6c: 15:89:9d:58:de:0b:9a:cd:d5:5b:18:39:60:e8:f8: 92:e7:98:18:9f:9d:60:68:a3:4a:54:2c:a1:7a:33: e7:38:b1:14:37:7a:ef:88:c4:90:2a:bb:48:5c:13: 94:1f:89:a7:08:c7:bc:54:4f:51:b4:15:59:2d:12: 16:29:3b:7c:05:e5:df:64:a0:de:78:57:d3:5d:d4: a6:88:95:54:38:06:71:83:67:6b:1b:3f:48:2b:ce: 84:cb:15:b0:75:50:59:1a:34:f6:75:7b:83:18:91: a6:c1:01:ed:03:88:8e:29:52:61:9b:2f:16:69:af: 7a:86:30:3a:21:53:bf:41:7d:03:40:dc:ef:ef:69: 2d:1b:8c:d6:bb:fe:1b:67:b1:9f:b3:08:bc:c1:a6: d3:e5:82:b8:8b:1c:62:0e:f8:d7:c7:e9:49:cb:0e: 12:5c:98:a0:dd:b3:6a:fb:11:47:17:44:b5:7c:ee: b5:fc:f6:50:59:e1:b4:58:d5:7a:04:2f:76:ba:4e: 85:c3:ac:d6:0c:c9:92:53:bb:a0:af:da:2e:3a:5d: 6d:e0:f2:d1:86:95:4c:44:f0:15:e9:e5:22:ef:03: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:2D:9B:A9:9F:69:0D:AB:43:A8:07:90:54:6B:55:A1:36:1F:67 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:c4:9e:11:76:d0:a6:09:d6:d9:fc:a6:9c:6a:a5:ca:d1: e6:26:f6:7e:63:fa:64:da:8e:44:2d:87:25:78:5b:4c:c8:6b: 29:57:d0:d8:a4:31:55:57:35:eb:de:97:34:f6:ff:43:6a:30: 7a:35:03:f6:0c:26:50:d8:42:19:53:cc:5e:1a:94:e3:e4:f9: d6:3e:ac:05:12:14:78:49:06:7c:a3:9e:dd:4b:2a:cd:00:62: 4f:30:d6:80:4a:74:eb:aa:ab:61:be:36:e1:f6:77:62:01:7c: 35:a5:4f:80:fb:cc:90:f3:55:e5:9b:4c:76:b2:0d:75:f6:43: 4a:b8:66:3b:da:91:b6:70:0c:da:6b:5b:a8:3b:ca:08:dd:cc: 5c:5f:74:bf:24:a9:98:89:76:42:ab:75:3f:10:82:dc:40:64: a0:c3:6a:7c:e8:5e:6f:64:0e:3c:9b:ac:d0:97:f9:4a:8b:11: d2:f2:ae:ce:3f:23:29:db:2d:b1:fc:65:9b:cc:89:21:88:7c: c1:43:73:a0:1e:0d:3a:d8:8e:e8:9a:8f:88:f4:93:c2:21:e8: 37:43:7c:63:6c:6a:45:73:03:36:07:0a:39:52:91:ee:41:64: b0:79:b4:1e:23:fd:30:59:5d:6b:67:23:f9:94:b7:2c:71:8f: ea:b0:c4:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdwXeiUGHtfXnhWOr+pl5llrzqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNTEyMTcwMjM3MTNaFw0yNTEyMjAxMzIxMTNaMDMxMTAvBgNV BAMTKDIxMzUyRDlCQTk5RjY5MERBQjQzQTgwNzkwNTQ2QjU1QTEzNjFGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsp0B7Qkn/rVWb1rodMIZeam9+ JUOY3hIfJ90PbBWJnVjeC5rN1VsYOWDo+JLnmBifnWBoo0pULKF6M+c4sRQ3eu+I xJAqu0hcE5QfiacIx7xUT1G0FVktEhYpO3wF5d9koN54V9Nd1KaIlVQ4BnGDZ2sb P0grzoTLFbB1UFkaNPZ1e4MYkabBAe0DiI4pUmGbLxZpr3qGMDohU79BfQNA3O/v aS0bjNa7/htnsZ+zCLzBptPlgriLHGIO+NfH6UnLDhJcmKDds2r7EUcXRLV87rX8 9lBZ4bRY1XoEL3a6ToXDrNYMyZJTu6Cv2i46XW3g8tGGlUxE8BXp5SLvA13BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITUtm6mfaQ2rQ6gHkFRrVaE2H2cwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACryxJ4RdtCmCdbZ/KacaqXK0eYm9n5j+mTa jkQthyV4W0zIaylX0NikMVVXNevelzT2/0NqMHo1A/YMJlDYQhlTzF4alOPk+dY+ rAUSFHhJBnyjnt1LKs0AYk8w1oBKdOuqq2G+NuH2d2IBfDWlT4D7zJDzVeWbTHay DXX2Q0q4ZjvakbZwDNprW6g7ygjdzFxfdL8kqZiJdkKrdT8QgtxAZKDDanzoXm9k DjybrNCX+UqLEdLyrs4/IynbLbH8ZZvMiSGIfMFDc6AeDTrYjuiaj4j0k8Ih6DdD fGNsakVzAzYHCjlSke5BZLB5tB4j/TBZXWtnI/mUtyxxj+qwxCI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:02 2025 by rpki-client