This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: sU+I//2GcSKddmwKmFZjCINJHC2TV686gFfCMErEELY= Subject key identifier: 67:1E:02:42:2D:EE:42:37:7F:C1:5D:F1:BA:27:A1:DA:85:11:B5:A8 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 252564A83BDC172F60118EDF18F83DCC01A01CB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0166 Signing time: Thu 18 Dec 2025 02:11:46 +0000 Manifest this update: Thu 18 Dec 2025 02:06:46 +0000 Manifest next update: Sun 21 Dec 2025 11:56:46 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=) 2: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: oT5ooBM9T7Dz/weCkRmsb05LILWy5WI2pBy4Uzh0YZ0=) 3: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=) 4: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=) 5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:25:64:a8:3b:dc:17:2f:60:11:8e:df:18:f8:3d:cc:01:a0:1c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Dec 18 02:06:46 2025 GMT Not After : Dec 21 11:56:46 2025 GMT Subject: CN=671E02422DEE42377FC15DF1BA27A1DA8511B5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:97:3d:2d:fb:29:87:9d:9e:e7:70:40:12: f9:3e:56:8c:94:b6:3b:5d:d5:db:e7:bb:8b:39:4c: 64:91:96:4e:b0:21:d3:1d:4f:a5:d6:7a:11:fb:f8: 4a:68:2b:5a:d3:47:67:04:70:24:98:17:3c:3a:30: aa:0c:b0:76:c8:cc:ea:da:bd:1f:4d:67:89:38:52: 35:71:10:36:63:e6:c9:7e:49:d3:d6:c1:99:73:4b: c8:55:d4:b6:ae:c7:78:7a:dd:2f:58:18:57:de:00: 22:fb:3a:3c:ea:5a:9a:85:73:0f:8f:a9:fa:4e:2a: d3:9e:20:da:d2:7e:ff:bf:1e:40:f5:07:a6:fa:e9: ef:28:e8:2a:8f:df:9c:71:e9:90:e2:05:f6:5f:b9: d0:40:3b:e0:bf:31:b5:0d:14:21:55:77:8a:36:97: d9:b8:65:35:7a:f6:bc:13:1f:c0:24:39:72:cd:33: 7a:6d:6a:b9:4b:27:27:f6:3f:09:8d:01:a4:e8:3c: 16:53:d1:84:19:78:cf:5f:c4:f6:e9:1d:7e:a3:42: 7a:54:0a:d3:2e:70:08:58:af:07:81:32:97:66:a0: 76:ea:ff:0f:f3:e7:f3:46:6b:f5:f6:b6:bd:80:11: 00:9f:bd:44:0a:cb:ad:7d:2e:85:94:d3:9a:60:36: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1E:02:42:2D:EE:42:37:7F:C1:5D:F1:BA:27:A1:DA:85:11:B5:A8 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c9:01:38:14:4e:a5:e4:3b:c4:cd:27:83:de:66:57:d7:12: 49:3c:b6:22:87:df:1d:d0:43:ae:92:39:f0:cc:05:66:a8:71: f9:4b:c9:e9:92:02:fa:d7:3b:42:27:ab:d6:59:da:cf:0f:ae: 6b:1f:f9:13:b8:16:63:b7:88:07:5e:f6:1a:d6:f3:55:22:de: a9:7d:50:6d:cd:c7:d0:26:4c:ef:f4:96:61:62:85:c9:d8:bf: 66:ba:a0:be:ce:95:e5:25:0a:70:c7:e9:78:75:7d:d8:14:2f: 3f:1a:1a:e4:37:b5:f3:cb:5b:09:e4:3c:36:92:69:3c:14:c8: 60:13:a3:47:d3:c8:40:ee:b6:be:74:ec:2e:5d:1f:b0:a8:06: e6:a4:39:a7:b3:c9:dd:ea:70:39:39:3b:3a:08:27:0d:15:62: 10:e4:96:a6:7b:48:c9:f4:5c:db:c9:f7:f1:be:7d:a7:ce:c7: c4:30:6f:f1:f1:d2:77:5e:0a:bb:1e:10:86:c8:f4:57:10:e0: f3:a3:05:4c:cb:bb:f9:7c:28:c9:7a:a2:55:c4:ae:5a:fc:e5: 4a:19:87:92:c9:99:4e:15:11:21:9b:27:42:63:16:11:03:b1: a0:aa:b6:cb:1b:a5:b5:73:38:55:a1:07:d8:00:28:d4:97:84: 9d:b4:27:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSVkqDvcFy9gEY7fGPg9zAGgHLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTEyMTgwMjA2NDZaFw0yNTEyMjExMTU2NDZaMDMxMTAvBgNV BAMTKDY3MUUwMjQyMkRFRTQyMzc3RkMxNURGMUJBMjdBMURBODUxMUI1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq5c9Lfsph52e53BAEvk+VoyU tjtd1dvnu4s5TGSRlk6wIdMdT6XWehH7+EpoK1rTR2cEcCSYFzw6MKoMsHbIzOra vR9NZ4k4UjVxEDZj5sl+SdPWwZlzS8hV1Laux3h63S9YGFfeACL7OjzqWpqFcw+P qfpOKtOeINrSfv+/HkD1B6b66e8o6CqP35xx6ZDiBfZfudBAO+C/MbUNFCFVd4o2 l9m4ZTV69rwTH8AkOXLNM3ptarlLJyf2PwmNAaToPBZT0YQZeM9fxPbpHX6jQnpU CtMucAhYrweBMpdmoHbq/w/z5/NGa/X2tr2AEQCfvUQKy619LoWU05pgNoYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZx4CQi3uQjd/wV3xuieh2oURtagwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALJATgUTqXkO8TNJ4PeZlfXEkk8tiKH3x3Q Q66SOfDMBWaocflLyemSAvrXO0Inq9ZZ2s8Prmsf+RO4FmO3iAde9hrW81Ui3ql9 UG3Nx9AmTO/0lmFihcnYv2a6oL7OleUlCnDH6Xh1fdgULz8aGuQ3tfPLWwnkPDaS aTwUyGATo0fTyEDutr507C5dH7CoBuakOaezyd3qcDk5OzoIJw0VYhDklqZ7SMn0 XNvJ9/G+fafOx8Qwb/Hx0ndeCrseEIbI9FcQ4POjBUzLu/l8KMl6olXErlr85UoZ h5LJmU4VESGbJ0JjFhEDsaCqtssbpbVzOFWhB9gAKNSXhJ20Jww= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:40 2025 by rpki-client