This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: 7cBBhXtv5go+9v7elkObYOxHh1As7JYmYw/+h0lg/GI= Subject key identifier: 1B:C7:6F:75:DF:B9:95:F9:BE:42:AA:84:9C:56:16:A0:20:49:D2:5D Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 0B17E1289C24026EB15A0B68D21A13FA641E7295 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0146 Signing time: Mon 15 Dec 2025 09:00:41 +0000 Manifest this update: Mon 15 Dec 2025 08:55:41 +0000 Manifest next update: Thu 18 Dec 2025 17:13:41 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 2: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: 0Q7IgfjHNSbjlLXGPKCaJH7GNiFvwi+ET36I7GHpVjU=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 10:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:17:e1:28:9c:24:02:6e:b1:5a:0b:68:d2:1a:13:fa:64:1e:72:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Dec 15 08:55:41 2025 GMT Not After : Dec 18 17:13:41 2025 GMT Subject: CN=1BC76F75DFB995F9BE42AA849C5616A02049D25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:3e:d0:cf:e1:17:39:f5:2b:0f:ee:51:dd: 78:a4:d0:b1:83:49:52:73:9f:88:0c:68:a5:65:78: 8b:3c:6e:26:35:ca:c4:bc:e5:ed:19:a3:5f:39:08: 05:4a:14:1a:d2:67:22:bd:7e:f0:cb:24:0e:aa:2b: 54:13:fc:e4:03:76:ec:a5:2c:7a:0b:65:4f:b5:7a: 90:f6:91:a6:71:30:7e:dd:b9:06:3a:29:f6:f4:52: c3:c2:a0:9e:83:8a:20:e9:7f:34:c7:38:f3:4a:31: b6:e0:b7:6f:c1:63:92:18:ee:d1:4f:86:a6:b8:5a: f1:0f:a8:4c:0f:1a:29:25:bc:63:45:84:a8:0b:5c: 6d:96:66:8c:c5:15:41:32:6a:02:54:72:85:55:58: 53:a6:ce:46:0f:99:1d:0f:68:53:35:52:80:17:07: 3b:97:04:1d:52:a4:ff:a8:5c:1d:cb:cb:90:0a:a0: 26:e8:3b:a7:00:b7:7a:cd:5a:97:4d:5f:67:ff:f1: de:70:87:7f:80:16:0f:6d:b5:01:14:d6:e2:5a:f7: 35:42:f0:13:65:fb:ec:df:c1:64:bc:a6:66:e2:7e: 8d:01:d9:45:06:86:6d:5a:ad:78:ad:e4:84:16:77: 29:ca:bf:76:a9:e6:17:56:40:d2:e8:c3:37:1d:17: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:6F:75:DF:B9:95:F9:BE:42:AA:84:9C:56:16:A0:20:49:D2:5D X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:33:5d:d5:58:b3:64:be:b9:57:8b:32:31:fa:69:ab:8a:1e: 30:c3:b7:30:29:97:48:5a:b4:0b:53:c1:e8:d0:85:30:76:b5: 7e:f1:d0:84:2c:bf:01:5f:05:35:7c:e8:dd:8d:de:fa:8e:34: ba:8e:53:3d:d1:1c:47:da:7d:d9:31:e9:9d:1a:c1:1b:28:85: 5d:42:de:78:5a:94:44:ef:73:af:08:39:ff:48:2c:d6:05:84: fc:63:d3:cd:4b:ec:5c:de:60:8f:9d:3c:59:2c:80:06:cd:25: 02:2a:d2:40:12:62:2c:c2:69:d0:08:4f:3e:1e:a9:ec:00:c8: 3f:21:30:2b:fa:97:30:6d:f8:62:57:80:d7:5a:6f:d0:fc:e0: 43:34:c6:80:7d:2e:cd:99:03:bb:6f:1b:9a:89:3a:fc:68:02: 47:a3:50:a7:c3:52:c3:b8:ea:05:d3:5b:9e:f6:f2:f9:46:a8: 4d:96:c7:eb:63:9b:dc:65:ab:86:fa:62:3e:b5:c0:5d:dc:c2: 70:8c:b3:73:1d:be:ce:1f:0b:8d:49:39:ef:6e:fc:56:e7:6f: cd:94:8b:6d:9e:4b:e0:1a:03:a6:f7:b7:c6:0c:6d:7b:ca:af: ff:be:15:01:eb:41:83:2b:28:95:8b:2c:bd:20:4f:6f:fa:29: ce:e9:6f:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxfhKJwkAm6xWgto0hoT+mQecpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTEyMTUwODU1NDFaFw0yNTEyMTgxNzEzNDFaMDMxMTAvBgNV BAMTKDFCQzc2Rjc1REZCOTk1RjlCRTQyQUE4NDlDNTYxNkEwMjA0OUQyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0j7Qz+EXOfUrD+5R3Xik0LGD SVJzn4gMaKVleIs8biY1ysS85e0Zo185CAVKFBrSZyK9fvDLJA6qK1QT/OQDduyl LHoLZU+1epD2kaZxMH7duQY6Kfb0UsPCoJ6DiiDpfzTHOPNKMbbgt2/BY5IY7tFP hqa4WvEPqEwPGiklvGNFhKgLXG2WZozFFUEyagJUcoVVWFOmzkYPmR0PaFM1UoAX BzuXBB1SpP+oXB3Ly5AKoCboO6cAt3rNWpdNX2f/8d5wh3+AFg9ttQEU1uJa9zVC 8BNl++zfwWS8pmbifo0B2UUGhm1arXit5IQWdynKv3ap5hdWQNLowzcdF+aLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8dvdd+5lfm+QqqEnFYWoCBJ0l0wHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUzXdVYs2S+uVeLMjH6aauKHjDDtzApl0ha tAtTwejQhTB2tX7x0IQsvwFfBTV86N2N3vqONLqOUz3RHEfafdkx6Z0awRsohV1C 3nhalETvc68IOf9ILNYFhPxj081L7FzeYI+dPFksgAbNJQIq0kASYizCadAITz4e qewAyD8hMCv6lzBt+GJXgNdab9D84EM0xoB9Ls2ZA7tvG5qJOvxoAkejUKfDUsO4 6gXTW5728vlGqE2Wx+tjm9xlq4b6Yj61wF3cwnCMs3Mdvs4fC41JOe9u/Fbnb82U i22eS+AaA6b3t8YMbXvKr/++FQHrQYMrKJWLLL0gT2/6Kc7pby4= -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:19 2025 by rpki-client