This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: zGZ9FyD436SSARHSL2BbSBZb81neZaU8Y/tu8zDydLw= Subject key identifier: 15:25:68:CA:0F:03:81:8D:50:08:73:6F:D2:47:C8:7D:5D:7F:77:58 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 46C869BADC942B3AA323517A94C91FE0139AFE1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 037B Signing time: Sat 20 Dec 2025 01:42:44 +0000 Manifest this update: Sat 20 Dec 2025 01:37:44 +0000 Manifest next update: Tue 23 Dec 2025 01:58:44 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: htZdO4y3OdIxlokZTvOXp3eynn9YoYyP9ye5vdDjQzQ=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 01:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c8:69:ba:dc:94:2b:3a:a3:23:51:7a:94:c9:1f:e0:13:9a:fe:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Dec 20 01:37:44 2025 GMT Not After : Dec 23 01:58:44 2025 GMT Subject: CN=152568CA0F03818D5008736FD247C87D5D7F7758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:54:6c:5d:96:1b:27:9d:40:39:2f:9f:72: 09:32:9f:41:28:fd:02:c6:4e:28:85:68:97:5d:c8: e9:8a:c2:c4:78:15:e8:7f:c5:3d:9f:b9:fb:69:c3: 9b:da:d0:8f:30:d8:bb:cb:7a:bd:39:cc:14:3b:15: 88:13:d3:86:3a:7c:a4:dc:b6:db:20:56:18:35:5b: b4:18:09:f4:b8:b1:1d:c9:5e:21:9e:75:9c:5c:63: f3:fb:63:7e:94:96:42:a6:20:fc:c5:b4:81:c6:b1: 74:2f:f9:8d:bf:8c:ee:71:12:b6:c2:be:40:cf:80: d6:75:dd:45:b3:e4:83:2f:a4:c9:9b:a5:d1:58:74: 86:d6:70:9a:10:8c:ee:b5:51:79:dd:59:56:d8:e9: 09:de:e4:41:43:fe:5a:52:e4:94:15:bb:d8:17:28: d1:c8:ec:a1:b4:58:d6:72:38:9f:b5:08:81:a2:d2: c7:13:97:3c:e0:ad:aa:05:6b:d1:83:19:ab:a9:6e: e8:53:11:4b:3a:f8:10:41:72:1c:64:dc:9c:ea:03: 79:99:50:80:b9:e0:dd:62:78:fe:dc:c6:44:3d:c8: 68:ea:da:8f:b5:8b:44:52:dc:d8:35:4b:9e:c3:11: 06:cc:8a:c5:ba:ca:0c:4d:95:fe:7d:74:20:b4:a7: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:25:68:CA:0F:03:81:8D:50:08:73:6F:D2:47:C8:7D:5D:7F:77:58 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:47:da:09:d7:d2:16:95:60:93:78:a3:a2:87:c7:5f:ae:aa: 5f:34:22:d2:cf:a2:a2:32:79:1a:b9:2a:35:ed:06:67:c6:c3: a4:0d:ee:2d:df:f7:94:b9:91:de:c5:9a:09:99:ee:20:c9:b6: 5f:56:71:18:ab:a1:9a:f6:cc:3b:90:1c:72:bc:ed:c7:7a:43: 09:3d:c3:0d:45:3a:2b:40:a1:88:51:5c:0f:27:58:b2:71:4c: 3a:2a:8e:ce:0e:69:35:78:dd:7e:d4:d1:67:33:c7:46:b1:a0: 6d:c2:f1:44:62:34:20:ff:72:b5:75:54:9e:6f:9b:2a:5e:59: d3:83:9c:30:b6:b3:39:d8:e7:0f:af:c8:a0:03:37:13:7b:06: 31:8d:58:d2:f3:0b:29:e1:2e:3a:cc:d8:7a:b0:86:97:d7:23: b0:05:5d:64:68:4b:f8:50:74:81:f1:94:56:01:11:b8:89:89: 76:ed:5c:9d:9e:75:d1:c4:28:67:37:43:cd:5d:08:6b:2b:9f: bd:b1:40:4e:61:42:d6:52:98:31:c2:e1:c1:5d:55:1a:6a:a1: b1:29:f7:61:65:bb:ff:6c:55:e8:f7:e4:62:bb:36:af:01:cd: 6e:22:1a:84:8c:20:d6:04:a0:88:8a:fd:5c:8f:70:62:23:13: b3:30:8b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURshputyUKzqjI1F6lMkf4BOa/hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTEyMjAwMTM3NDRaFw0yNTEyMjMwMTU4NDRaMDMxMTAvBgNV BAMTKDE1MjU2OENBMEYwMzgxOEQ1MDA4NzM2RkQyNDdDODdENUQ3Rjc3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0VRsXZYbJ51AOS+fcgkyn0Eo /QLGTiiFaJddyOmKwsR4Feh/xT2fuftpw5va0I8w2LvLer05zBQ7FYgT04Y6fKTc ttsgVhg1W7QYCfS4sR3JXiGedZxcY/P7Y36UlkKmIPzFtIHGsXQv+Y2/jO5xErbC vkDPgNZ13UWz5IMvpMmbpdFYdIbWcJoQjO61UXndWVbY6Qne5EFD/lpS5JQVu9gX KNHI7KG0WNZyOJ+1CIGi0scTlzzgraoFa9GDGaupbuhTEUs6+BBBchxk3JzqA3mZ UIC54N1ieP7cxkQ9yGjq2o+1i0RS3Ng1S57DEQbMisW6ygxNlf59dCC0p+yvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFSVoyg8DgY1QCHNv0kfIfV1/d1gwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVH2gnX0haVYJN4o6KHx1+uql80ItLPoqIy eRq5KjXtBmfGw6QN7i3f95S5kd7FmgmZ7iDJtl9WcRiroZr2zDuQHHK87cd6Qwk9 ww1FOitAoYhRXA8nWLJxTDoqjs4OaTV43X7U0Wczx0axoG3C8URiNCD/crV1VJ5v mypeWdODnDC2sznY5w+vyKADNxN7BjGNWNLzCynhLjrM2HqwhpfXI7AFXWRoS/hQ dIHxlFYBEbiJiXbtXJ2eddHEKGc3Q81dCGsrn72xQE5hQtZSmDHC4cFdVRpqobEp 92Flu/9sVej35GK7Nq8BzW4iGoSMINYEoIiK/VyPcGIjE7Mwi4c= -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:38 2025 by rpki-client