This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: JYcesPiQ1nVYvSL5HSfJEEvRHPVqfgYWY95hvIIzUy4= Subject key identifier: 47:4A:C1:C1:F8:9F:40:04:51:29:30:3A:DB:92:0D:58:05:84:46:22 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 340362E2D0113CAAB5E6305EA40A4259694E3CD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0535 Signing time: Thu 25 Dec 2025 21:00:43 +0000 Manifest this update: Thu 25 Dec 2025 20:55:43 +0000 Manifest next update: Mon 29 Dec 2025 03:28:43 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 3: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: 2EDdu8Rdp3mk/Is0hVAfFZZMJOFfNGJwZrerxMeSngI=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 03:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:03:62:e2:d0:11:3c:aa:b5:e6:30:5e:a4:0a:42:59:69:4e:3c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Dec 25 20:55:43 2025 GMT Not After : Dec 29 03:28:43 2025 GMT Subject: CN=474AC1C1F89F40045129303ADB920D5805844622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:06:5f:f2:51:83:24:5b:d6:89:76:36:52: d8:14:9a:2b:49:d3:6d:5c:6d:90:8c:37:73:cc:38: bb:c3:5b:81:59:3e:cf:82:aa:cf:13:e5:e9:ba:8d: 19:b2:d8:d2:b1:bf:b9:0b:74:a6:4d:1e:f0:ec:7c: ff:f3:cc:55:4c:be:fe:a1:da:8f:94:d8:03:8b:58: 78:c1:76:d4:32:ff:08:30:16:21:58:48:25:93:35: 15:ac:d7:f6:a3:a1:6e:9f:69:43:80:77:ee:d5:8d: f0:41:a4:9d:49:44:3b:20:fb:db:5e:fe:1c:10:e0: 4c:db:4e:66:56:2a:2f:ad:11:89:2a:5a:b0:5c:e6: 89:62:67:36:ca:06:2c:d8:0d:d7:dc:d0:c4:50:53: d4:01:de:8c:97:f8:ea:51:02:b7:3b:e7:f2:28:2f: 39:13:9c:94:22:18:6e:e3:5e:36:19:1d:46:b9:c4: b4:3a:75:15:6f:d1:76:06:18:43:21:a5:fb:04:70: f4:05:a8:51:d4:88:86:71:44:9a:29:4d:70:0d:56: 5b:d0:00:41:45:1e:e0:a0:6c:bb:4e:83:41:ab:5a: 5d:8e:0c:f4:21:ee:1f:44:10:93:25:66:a8:63:88: 8b:e9:d6:79:10:a0:6c:49:91:52:c5:36:99:9d:57: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:C1:C1:F8:9F:40:04:51:29:30:3A:DB:92:0D:58:05:84:46:22 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:90:57:99:be:76:a4:12:f2:07:9f:0f:d7:b3:99:92:39: bb:30:44:2c:5d:fc:98:60:ff:21:e8:87:bd:22:4c:02:67:f0: 07:e3:a8:b1:22:09:a1:20:86:0b:ad:60:f0:33:f3:98:3e:c1: 6c:1e:b4:7b:4e:17:90:1b:56:63:be:9e:fd:aa:a6:24:f3:69: c4:26:93:3e:bf:e4:a0:59:0e:12:4e:9a:f7:98:ad:b3:43:6f: 15:fb:2b:ed:fd:1c:62:53:a6:fb:c3:89:10:2e:e1:92:2e:9f: 79:58:9b:be:f1:07:b1:4f:5b:d4:a9:43:7e:dd:26:52:78:4f: af:1a:4c:62:bc:0a:94:f0:e8:51:26:51:8b:29:f2:d4:78:70: ed:a7:b7:4f:4e:d2:fb:d6:c4:e8:78:8e:9c:ba:e7:4f:90:49: 58:10:1f:b6:d1:fa:11:07:35:9a:75:c6:91:58:b3:a8:5f:68: a0:3d:ea:55:0c:4a:1f:3b:b4:12:34:03:61:ee:df:bd:ba:23: 46:10:8e:d6:c6:8c:f8:e6:9d:63:3d:b8:f4:01:33:3f:20:6d: 77:79:bc:51:cb:2b:7b:0c:19:7f:22:67:d1:0a:4f:c0:6e:63: 39:5d:89:9a:fd:59:e1:7d:bb:9c:86:c6:36:30:21:ed:3f:32: 28:00:b3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNANi4tARPKq15jBepApCWWlOPNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTEyMjUyMDU1NDNaFw0yNTEyMjkwMzI4NDNaMDMxMTAvBgNV BAMTKDQ3NEFDMUMxRjg5RjQwMDQ1MTI5MzAzQURCOTIwRDU4MDU4NDQ2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3AZf8lGDJFvWiXY2UtgUmitJ 021cbZCMN3PMOLvDW4FZPs+Cqs8T5em6jRmy2NKxv7kLdKZNHvDsfP/zzFVMvv6h 2o+U2AOLWHjBdtQy/wgwFiFYSCWTNRWs1/ajoW6faUOAd+7VjfBBpJ1JRDsg+9te /hwQ4EzbTmZWKi+tEYkqWrBc5oliZzbKBizYDdfc0MRQU9QB3oyX+OpRArc75/Io LzkTnJQiGG7jXjYZHUa5xLQ6dRVv0XYGGEMhpfsEcPQFqFHUiIZxRJopTXANVlvQ AEFFHuCgbLtOg0GrWl2ODPQh7h9EEJMlZqhjiIvp1nkQoGxJkVLFNpmdV3nNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR0rBwfifQARRKTA625INWAWERiIwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA9kFeZvnakEvIHnw/Xs5mSObswRCxd/Jhg /yHoh70iTAJn8AfjqLEiCaEghgutYPAz85g+wWwetHtOF5AbVmO+nv2qpiTzacQm kz6/5KBZDhJOmveYrbNDbxX7K+39HGJTpvvDiRAu4ZIun3lYm77xB7FPW9SpQ37d JlJ4T68aTGK8CpTw6FEmUYsp8tR4cO2nt09O0vvWxOh4jpy650+QSVgQH7bR+hEH NZp1xpFYs6hfaKA96lUMSh87tBI0A2Hu3726I0YQjtbGjPjmnWM9uPQBMz8gbXd5 vFHLK3sMGX8iZ9EKT8BuYzldiZr9WeF9u5yGxjYwIe0/MigAsxQ= -----END CERTIFICATE-----Generated at Sat Dec 27 17:39:05 2025 by rpki-client