This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: TcQrwLej7QJej5wM984NN+xI2HiFt44XClglQKvd0tM= Subject key identifier: A8:4E:07:D2:55:5C:35:51:25:70:68:42:35:15:F9:14:99:A0:08:6F Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 5FEE0F9E9E79E92596E3757AA76648B55573DAC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: DF Signing time: Sun 21 Dec 2025 20:02:07 +0000 Manifest this update: Sun 21 Dec 2025 19:57:07 +0000 Manifest next update: Thu 25 Dec 2025 02:19:07 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: +TxKq78fMONBdiW4fZqkszu0kKa16wRxLxHZSYwZguc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ee:0f:9e:9e:79:e9:25:96:e3:75:7a:a7:66:48:b5:55:73:da:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Dec 21 19:57:07 2025 GMT Not After : Dec 25 02:19:07 2025 GMT Subject: CN=A84E07D2555C3551257068423515F91499A0086F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:9f:dd:8d:47:95:bb:60:9e:14:bc:38:04: 6d:0a:79:51:65:69:66:70:2d:9e:2b:1f:63:c2:b5: 5d:2c:57:91:5d:09:63:f9:1a:c8:da:e0:67:23:b0: ab:69:59:76:1d:76:33:7c:e9:c1:f1:dd:c2:df:ad: d1:13:ec:36:a3:d5:79:8c:fb:43:00:e4:6d:4b:f1: 0f:08:ae:d7:d8:0b:65:39:64:f1:73:12:7a:25:ee: 46:02:42:ca:e5:2a:c6:5c:6f:c8:ec:50:21:86:5a: b9:05:17:1a:d4:f3:15:14:da:45:7a:fd:2f:e5:63: db:68:aa:0c:5b:2f:74:31:fb:7e:c7:bd:83:43:67: a2:62:16:91:a5:a7:6b:8b:9c:91:f0:c2:05:d8:ce: 46:cc:d7:04:57:c1:e8:97:df:ef:7f:b2:e5:15:11: 72:47:92:62:ad:d4:cb:5b:69:26:fc:93:59:7c:21: 1d:05:b9:a8:5e:52:97:cc:16:93:be:e4:66:a0:5a: 2c:b8:c8:53:ad:61:f6:32:63:85:8d:0c:32:2d:1d: 1a:45:56:64:1f:0d:57:ca:17:00:02:80:d2:e7:13: 20:8d:6a:5a:b1:29:12:15:79:23:59:2a:01:be:ed: 25:03:d5:38:30:4d:4f:dc:05:bc:1b:3b:8c:51:50: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:07:D2:55:5C:35:51:25:70:68:42:35:15:F9:14:99:A0:08:6F X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7b:38:86:cf:29:59:ec:c3:4c:5c:3d:7d:2b:f8:90:f2:a5: b4:4f:10:0a:36:94:8e:07:14:69:0b:05:53:68:a0:dd:6b:bd: af:fa:25:4c:96:9e:28:3c:a8:1b:e4:4a:1c:b9:e2:34:64:3d: b0:29:99:b2:d1:48:65:8f:67:8c:18:a6:36:e6:40:03:1a:b6: d4:7d:e6:79:21:4b:85:59:17:2f:9b:4f:28:54:30:f2:cb:e4: 01:74:6d:61:64:6c:b7:bd:cc:8a:e2:38:3a:f3:28:65:6c:f0: da:d7:84:67:01:dd:aa:62:fa:f4:2c:8c:1d:d0:ba:fd:34:ca: 1d:ae:2e:57:46:54:76:45:44:d1:42:14:77:58:49:65:1b:8c: 5d:a9:e6:d5:4e:33:a6:d4:96:3d:06:5d:51:94:c3:10:9f:b2: 8f:26:34:35:ec:07:d2:40:5a:4e:bd:49:97:8c:d0:55:66:09: b2:5f:0e:95:b2:2d:b4:8f:9c:3a:ef:81:05:a9:a2:47:02:70: 25:f8:15:4c:86:f6:4b:51:4a:d1:d2:fd:a8:96:06:bc:ac:4d: f6:f2:ca:e6:b8:0b:12:fe:bc:b2:df:18:9d:04:ad:cc:98:b5: 04:c8:e7:6a:21:60:f2:c7:61:38:f4:99:d1:97:c3:67:1e:d6: a5:d8:24:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+4Pnp556SWW43V6p2ZItVVz2sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTEyMjExOTU3MDdaFw0yNTEyMjUwMjE5MDdaMDMxMTAvBgNV BAMTKEE4NEUwN0QyNTU1QzM1NTEyNTcwNjg0MjM1MTVGOTE0OTlBMDA4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPeZ/djUeVu2CeFLw4BG0KeVFl aWZwLZ4rH2PCtV0sV5FdCWP5Gsja4GcjsKtpWXYddjN86cHx3cLfrdET7Daj1XmM +0MA5G1L8Q8IrtfYC2U5ZPFzEnol7kYCQsrlKsZcb8jsUCGGWrkFFxrU8xUU2kV6 /S/lY9toqgxbL3Qx+37HvYNDZ6JiFpGlp2uLnJHwwgXYzkbM1wRXweiX3+9/suUV EXJHkmKt1MtbaSb8k1l8IR0FuaheUpfMFpO+5GagWiy4yFOtYfYyY4WNDDItHRpF VmQfDVfKFwACgNLnEyCNalqxKRIVeSNZKgG+7SUD1TgwTU/cBbwbO4xRUJDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqE4H0lVcNVElcGhCNRX5FJmgCG8wHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF57OIbPKVnsw0xcPX0r+JDypbRPEAo2lI4H FGkLBVNooN1rva/6JUyWnig8qBvkShy54jRkPbApmbLRSGWPZ4wYpjbmQAMattR9 5nkhS4VZFy+bTyhUMPLL5AF0bWFkbLe9zIriODrzKGVs8NrXhGcB3api+vQsjB3Q uv00yh2uLldGVHZFRNFCFHdYSWUbjF2p5tVOM6bUlj0GXVGUwxCfso8mNDXsB9JA Wk69SZeM0FVmCbJfDpWyLbSPnDrvgQWpokcCcCX4FUyG9ktRStHS/aiWBrysTfby yua4CxL+vLLfGJ0ErcyYtQTI52ohYPLHYTj0mdGXw2ce1qXYJH8= -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:58 2025 by rpki-client