This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: D1VNAHpiV1buXp0comvb4bqLvpCWbd78HmHYv2XA/1k= Subject key identifier: 55:4B:85:D3:38:22:E1:4B:25:3E:07:2A:2B:80:D9:FE:4B:70:CC:0C Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 71C3F34560174E58775365398AD9CF687F9C21BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0538 Signing time: Thu 18 Dec 2025 22:01:45 +0000 Manifest this update: Thu 18 Dec 2025 21:56:45 +0000 Manifest next update: Mon 22 Dec 2025 06:09:45 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: z3XOWL+k3rVB+CDFFEGilbINfu0qea8lE7gbwCpuqZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c3:f3:45:60:17:4e:58:77:53:65:39:8a:d9:cf:68:7f:9c:21:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Dec 18 21:56:45 2025 GMT Not After : Dec 22 06:09:45 2025 GMT Subject: CN=554B85D33822E14B253E072A2B80D9FE4B70CC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:3e:74:8b:f6:4c:57:19:e0:59:5d:7c:ff: 72:d1:d7:f6:47:a5:39:aa:28:43:e3:c1:83:fe:ea: 79:aa:de:48:e9:ae:ba:f7:6e:71:86:2c:9d:86:d1: fc:d0:97:46:65:75:56:9b:57:f9:b8:5f:7e:63:3e: 79:78:0c:20:39:62:46:e6:79:80:a2:9f:b7:6c:2c: 82:2d:87:be:f6:dc:5e:ff:4a:50:9e:bc:46:37:ba: c0:7c:af:db:10:63:94:1c:f9:89:1a:bc:6c:d5:d2: d7:25:66:ef:db:bd:71:b4:6e:f6:2c:e6:24:60:27: de:60:e2:85:04:9e:93:54:77:46:ab:45:0e:d2:36: b8:59:4d:93:ee:5e:5e:b5:4e:6d:94:56:f3:fd:2d: cd:e0:dc:12:41:75:8f:15:05:ad:dc:3a:73:f8:1a: 3c:7e:20:c2:26:68:89:32:27:f6:33:cd:d6:b5:e3: bf:01:b5:c1:d7:c5:91:b8:30:db:49:85:83:fb:e5: 81:62:77:49:3c:b8:4c:01:44:9c:1a:b2:93:bb:1a: d4:9f:ca:7f:9c:3e:17:ab:03:1d:90:11:81:0a:e3: c5:2c:0c:f8:b0:eb:47:d5:03:7d:53:10:92:be:a8: 54:a0:03:0e:27:bd:6c:c3:9d:0b:ac:57:1c:42:8a: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4B:85:D3:38:22:E1:4B:25:3E:07:2A:2B:80:D9:FE:4B:70:CC:0C X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:83:4c:af:92:76:f0:54:fc:0e:6f:ca:ca:85:45:04:d5:f9: 97:80:32:28:80:7d:ed:17:72:d1:e1:a6:e6:b5:f9:b2:25:7f: d5:dd:ec:27:ed:00:c1:c5:10:44:61:07:24:8b:36:c3:45:fd: 0f:58:4c:7d:4d:c9:dd:da:27:86:24:30:5e:62:b0:a9:86:75: cf:4c:ba:34:81:91:9b:91:b6:98:38:6d:14:25:2e:71:8d:0d: 4a:06:b1:f1:8e:70:19:bc:60:53:bd:bc:f0:32:40:d3:dc:64: a3:23:73:ad:cf:05:45:7b:17:5e:fb:08:96:fe:57:50:08:82: 73:4b:80:27:bc:bb:63:3b:45:ff:d5:65:15:65:cd:3f:75:1f: 19:52:ff:50:66:8c:cb:9e:fe:8f:ef:03:44:1d:f0:cb:61:2c: c8:a3:8e:26:58:ee:f0:2f:5a:39:aa:2e:fd:23:72:99:1c:cb: 8d:ef:e7:80:42:f2:b4:1b:c0:34:13:3b:82:9c:b9:0b:1f:c5: 54:5b:f6:c4:82:5a:88:32:41:cc:66:39:14:08:35:a0:df:47: c9:22:12:3d:d3:97:20:cf:05:de:e0:81:9f:bc:64:0b:3e:18: eb:7a:ff:2f:9c:af:d9:cd:65:c3:64:28:78:f6:0c:48:c9:ff: da:af:e0:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccPzRWAXTlh3U2U5itnPaH+cIbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTEyMTgyMTU2NDVaFw0yNTEyMjIwNjA5NDVaMDMxMTAvBgNV BAMTKDU1NEI4NUQzMzgyMkUxNEIyNTNFMDcyQTJCODBEOUZFNEI3MENDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3T50i/ZMVxngWV18/3LR1/ZH pTmqKEPjwYP+6nmq3kjprrr3bnGGLJ2G0fzQl0ZldVabV/m4X35jPnl4DCA5Ykbm eYCin7dsLIIth7723F7/SlCevEY3usB8r9sQY5Qc+YkavGzV0tclZu/bvXG0bvYs 5iRgJ95g4oUEnpNUd0arRQ7SNrhZTZPuXl61Tm2UVvP9Lc3g3BJBdY8VBa3cOnP4 Gjx+IMImaIkyJ/Yzzda1478BtcHXxZG4MNtJhYP75YFid0k8uEwBRJwaspO7GtSf yn+cPherAx2QEYEK48UsDPiw60fVA31TEJK+qFSgAw4nvWzDnQusVxxCirr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVUuF0zgi4UslPgcqK4DZ/ktwzAwwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2DTK+SdvBU/A5vysqFRQTV+ZeAMiiAfe0X ctHhpua1+bIlf9Xd7CftAMHFEERhBySLNsNF/Q9YTH1Nyd3aJ4YkMF5isKmGdc9M ujSBkZuRtpg4bRQlLnGNDUoGsfGOcBm8YFO9vPAyQNPcZKMjc63PBUV7F177CJb+ V1AIgnNLgCe8u2M7Rf/VZRVlzT91HxlS/1BmjMue/o/vA0Qd8MthLMijjiZY7vAv WjmqLv0jcpkcy43v54BC8rQbwDQTO4KcuQsfxVRb9sSCWogyQcxmORQINaDfR8ki Ej3TlyDPBd7ggZ+8ZAs+GOt6/y+cr9nNZcNkKHj2DEjJ/9qv4H0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:58 2025 by rpki-client