This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft File: 51B0CF7488516A897D04B7AFE3238190B6B5606C.mft (raw, json) Hash identifier: dTFcerdtaLcgmyyfDUWShfVFLb2ncLR8e3HY+NqvlEQ= Subject key identifier: 95:E6:92:D1:51:42:46:84:3B:E7:34:CF:68:01:B3:46:38:D8:67:62 Authority key identifier: 51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C Certificate issuer: /CN=51B0CF7488516A897D04B7AFE3238190B6B5606C Certificate serial: 407EF8F12169F1880288D8F5ED3D3967797774EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft Manifest number: 01C8 Signing time: Mon 22 Dec 2025 15:43:03 +0000 Manifest this update: Mon 22 Dec 2025 15:38:03 +0000 Manifest next update: Thu 25 Dec 2025 21:05:03 +0000 Files and hashes: 1: 51B0CF7488516A897D04B7AFE3238190B6B5606C.crl (hash: R1JOi/2tYuKYryJ7f5IjTUzuiFqAdj/wmXEwIxyimHE=) 2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: nFi+ipcei3slR6xJ5GlGKgJXGqfTYRFEoIAi6SGugKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:f8:f1:21:69:f1:88:02:88:d8:f5:ed:3d:39:67:79:77:74:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51B0CF7488516A897D04B7AFE3238190B6B5606C Validity Not Before: Dec 22 15:38:03 2025 GMT Not After : Dec 25 21:05:03 2025 GMT Subject: CN=95E692D1514246843BE734CF6801B34638D86762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:5d:1d:a3:ed:80:be:59:27:e7:3d:d1:df: 2e:ca:ea:2b:a6:cb:57:7f:a3:54:64:52:a0:e7:24: b4:b0:b2:53:df:83:31:b9:b2:27:e2:64:77:aa:77: fb:dd:03:9f:95:77:a5:d3:0e:6b:ee:b0:d1:16:01: 65:21:eb:2f:c3:9f:9e:3d:75:f7:5d:2f:94:81:ee: 70:f0:53:0a:86:06:a9:51:c6:73:d3:31:c2:e8:34: a1:8f:e7:30:3f:74:2a:6a:b7:ba:a5:23:e6:89:3a: ee:c0:12:14:a5:e4:e5:bd:a3:47:35:55:b1:41:ae: 6c:d3:74:62:24:fb:87:fa:22:c4:74:47:2e:91:f5: b7:0e:48:f2:42:5b:d4:a4:10:e6:70:9f:5c:b3:95: 9a:6c:fa:19:65:32:49:14:0b:c0:d9:34:36:5b:90: d7:99:4f:0f:da:46:46:29:46:01:b2:a3:6e:70:55: 1b:8c:2c:32:c9:ba:70:65:a6:f4:87:cb:d8:6f:13: 16:76:4a:06:48:04:ee:14:fc:2a:dd:cd:73:89:7a: ff:8f:a9:45:40:f8:20:ff:82:6d:32:7a:29:c4:9e: cb:30:44:13:da:d3:8f:cc:4b:bd:3c:d2:a3:2d:8c: 27:bf:72:b6:b5:e0:50:23:f3:2c:27:5e:72:2b:ce: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E6:92:D1:51:42:46:84:3B:E7:34:CF:68:01:B3:46:38:D8:67:62 X509v3 Authority Key Identifier: keyid:51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1d:ac:59:0c:4a:64:f9:76:2d:a4:ac:de:92:7f:05:ca:76: 08:ca:8c:7d:47:f2:54:f3:13:0c:f3:40:9d:01:15:0d:2d:40: 1b:4a:2a:80:0d:a1:b1:b7:71:8f:4c:19:e9:d1:3d:3e:0f:0c: 54:a9:83:dd:2e:69:18:05:7b:8c:68:ed:fc:c9:06:b4:52:94: 88:22:3e:f7:17:65:6a:90:36:f5:4c:2c:0d:2f:4c:d6:5f:b4: a2:cb:ee:cf:e4:85:ea:f8:35:51:a8:65:93:f1:3c:52:0f:04: f0:46:06:7e:6b:04:e6:c7:a0:00:b5:3d:04:df:36:0e:15:ea: e6:83:4d:5f:19:f3:c8:9e:1b:64:08:be:fb:3b:ae:6f:0f:99: 75:3c:9d:c7:8e:77:8d:5c:c9:f0:06:e5:28:b1:15:56:ce:b4: 60:ec:bd:7a:e6:84:08:e0:ca:1f:e1:75:28:60:08:d2:6d:24: 85:41:b4:7f:3c:a7:4b:dd:4e:f0:1c:fa:c5:3f:b3:74:20:75: d3:48:67:6c:aa:77:ec:82:76:8c:9c:32:7b:fc:11:0c:83:23: be:c6:2d:1d:70:aa:0c:2f:ec:e0:cf:22:df:16:f7:f9:50:73: 74:af:a7:69:3d:4f:3c:3a:7c:37:29:c8:f3:27:03:8c:f9:ea: cf:51:2f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQH748SFp8YgCiNj17T05Z3l3dO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFCMENGNzQ4ODUxNkE4OTdEMDRCN0FGRTMyMzgxOTBC NkI1NjA2QzAeFw0yNTEyMjIxNTM4MDNaFw0yNTEyMjUyMTA1MDNaMDMxMTAvBgNV BAMTKDk1RTY5MkQxNTE0MjQ2ODQzQkU3MzRDRjY4MDFCMzQ2MzhEODY3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqv10do+2Avlkn5z3R3y7K6ium y1d/o1RkUqDnJLSwslPfgzG5sifiZHeqd/vdA5+Vd6XTDmvusNEWAWUh6y/Dn549 dfddL5SB7nDwUwqGBqlRxnPTMcLoNKGP5zA/dCpqt7qlI+aJOu7AEhSl5OW9o0c1 VbFBrmzTdGIk+4f6IsR0Ry6R9bcOSPJCW9SkEOZwn1yzlZps+hllMkkUC8DZNDZb kNeZTw/aRkYpRgGyo25wVRuMLDLJunBlpvSHy9hvExZ2SgZIBO4U/CrdzXOJev+P qUVA+CD/gm0yeinEnsswRBPa04/MS7080qMtjCe/cra14FAj8ywnXnIrzv0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleaS0VFCRoQ75zTPaAGzRjjYZ2IwHwYDVR0j BBgwFoAUUbDPdIhRaol9BLev4yOBkLa1YGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0Mzk1MC0zZmRmLTQ5YWItYmZkYy1mNTg2NDUzNzA0YzYvMC81MUIwQ0Y3NDg4 NTE2QTg5N0QwNEI3QUZFMzIzODE5MEI2QjU2MDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTFCMENGNzQ4ODUxNkE4OTdEMDRCN0FGRTMyMzgxOTBCNkI1 NjA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNDM5NTAtM2ZkZi00OWFiLWJm ZGMtZjU4NjQ1MzcwNGM2LzAvNTFCMENGNzQ4ODUxNkE4OTdEMDRCN0FGRTMyMzgx OTBCNkI1NjA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4drFkMSmT5di2krN6SfwXKdgjKjH1H8lTz EwzzQJ0BFQ0tQBtKKoANobG3cY9MGenRPT4PDFSpg90uaRgFe4xo7fzJBrRSlIgi PvcXZWqQNvVMLA0vTNZftKLL7s/kher4NVGoZZPxPFIPBPBGBn5rBObHoAC1PQTf Ng4V6uaDTV8Z88ieG2QIvvs7rm8PmXU8nceOd41cyfAG5SixFVbOtGDsvXrmhAjg yh/hdShgCNJtJIVBtH88p0vdTvAc+sU/s3QgddNIZ2yqd+yCdoycMnv8EQyDI77G LR1wqgwv7ODPIt8W9/lQc3Svp2k9Tzw6fDcpyPMnA4z56s9RL+Y= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:12 2025 by rpki-client