This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: Chz7WB6c90/FWsCNoRzum2Oj79018xVbDCzsvg70qAs= Subject key identifier: 59:96:85:26:C9:B8:01:C2:63:7A:CA:E5:13:1E:9F:05:44:C2:B0:1C Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 32121706492EBC54DD4FC8524CF3FA984801D374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 08:01:16 +0000 Manifest this update: Sat 24 Jan 2026 07:56:16 +0000 Manifest next update: Tue 27 Jan 2026 16:26:16 +0000 Files and hashes: 1: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 2: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 3: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: Uyibb6ISEfF8+oN+hms3J4YsEsMCxU4Swjw19erR6A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:12:17:06:49:2e:bc:54:dd:4f:c8:52:4c:f3:fa:98:48:01:d3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Jan 24 07:56:16 2026 GMT Not After : Jan 27 16:26:16 2026 GMT Subject: CN=59968526C9B801C2637ACAE5131E9F0544C2B01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:b2:02:bd:48:c1:bf:9b:a9:56:e7:a9:86: 76:25:b6:a4:40:1e:bd:d4:08:56:ca:15:ee:78:bc: 18:83:5c:17:59:0a:7c:dd:c8:d1:e4:68:49:8f:2c: 0c:ce:05:9d:5e:2e:be:79:36:c4:3e:74:0d:9b:24: 2a:04:88:45:c8:30:10:14:cc:08:19:36:aa:33:af: be:0e:44:3a:5b:bd:f3:da:c7:a1:2a:ed:59:a2:f5: 23:1e:1d:74:e3:dc:82:03:4e:1a:4d:c2:bf:8b:19: 98:dd:31:f1:31:b0:2c:5d:c8:5c:d2:a4:11:9f:08: 84:70:c6:e4:e1:d3:c3:7c:66:21:35:5f:dc:c7:4c: 9b:3b:99:72:40:e2:a9:41:f8:09:22:8c:d0:4a:d9: 78:d1:eb:c1:46:2c:3b:27:0b:d6:bd:fc:65:bc:10: 15:02:2c:f9:2d:55:cb:64:ce:15:cd:06:7f:5a:26: 04:03:8d:b8:69:7d:09:2c:66:29:28:82:73:91:18: e6:c7:21:a2:3c:ff:a6:2d:84:dd:10:f8:a9:fd:7a: 41:dd:44:9a:c7:f0:d8:e0:b1:66:4a:3d:bd:05:30: 52:0c:f9:97:24:b6:92:29:27:ff:2b:fb:c2:78:bd: b7:1b:6c:e4:7c:c8:1b:a6:14:bd:83:7e:01:8e:72: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:96:85:26:C9:B8:01:C2:63:7A:CA:E5:13:1E:9F:05:44:C2:B0:1C X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5b:7c:8d:a5:c2:14:10:31:c8:72:d5:b1:db:bc:f9:e3:21: b7:d0:19:83:af:f9:8a:d1:22:be:63:36:63:fd:13:84:26:1d: c6:01:95:d5:a9:00:ad:61:01:38:89:ae:fb:a1:39:f7:32:a6: 14:b7:b9:37:53:74:44:6a:ab:6b:9d:8f:29:0e:37:ca:23:8c: 34:ec:2a:42:6a:3f:79:5e:da:0d:bf:71:72:12:f8:10:fd:fe: d1:cf:97:a9:3c:a7:ea:63:26:7f:15:6f:b1:88:2d:5e:d5:46: ed:76:07:5f:97:80:7c:b7:a3:f9:ed:0b:b8:d7:56:79:65:b6: 76:17:ce:99:ea:aa:9f:2d:44:fd:c8:83:a0:9e:87:de:02:3d: 34:37:ad:46:51:85:bd:09:36:27:a5:a0:3d:b4:45:55:03:2e: f9:74:07:3f:25:90:2a:0b:74:4d:80:b4:16:24:05:e5:db:66: c4:7b:a8:62:4a:d5:19:e6:7b:2c:5a:7d:fe:7f:43:36:38:f2: 1d:a4:06:83:ba:ec:92:a2:0f:40:8f:9f:5a:54:1a:c6:d1:e0: d5:1b:6f:c9:74:b6:b7:63:9d:e7:09:d4:d0:fb:55:71:a6:72: f9:af:2a:7b:5a:80:fa:76:44:33:e8:d0:19:5e:af:e2:3d:cb: 77:fa:92:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhIXBkkuvFTdT8hSTPP6mEgB03QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNjAxMjQwNzU2MTZaFw0yNjAxMjcxNjI2MTZaMDMxMTAvBgNV BAMTKDU5OTY4NTI2QzlCODAxQzI2MzdBQ0FFNTEzMUU5RjA1NDRDMkIwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlL7ICvUjBv5upVuephnYltqRA Hr3UCFbKFe54vBiDXBdZCnzdyNHkaEmPLAzOBZ1eLr55NsQ+dA2bJCoEiEXIMBAU zAgZNqozr74ORDpbvfPax6Eq7Vmi9SMeHXTj3IIDThpNwr+LGZjdMfExsCxdyFzS pBGfCIRwxuTh08N8ZiE1X9zHTJs7mXJA4qlB+AkijNBK2XjR68FGLDsnC9a9/GW8 EBUCLPktVctkzhXNBn9aJgQDjbhpfQksZikognORGObHIaI8/6YthN0Q+Kn9ekHd RJrH8NjgsWZKPb0FMFIM+ZcktpIpJ/8r+8J4vbcbbOR8yBumFL2DfgGOcoRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZaFJsm4AcJjesrlEx6fBUTCsBwwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBbfI2lwhQQMchy1bHbvPnjIbfQGYOv+YrR Ir5jNmP9E4QmHcYBldWpAK1hATiJrvuhOfcyphS3uTdTdERqq2udjykON8ojjDTs KkJqP3le2g2/cXIS+BD9/tHPl6k8p+pjJn8Vb7GILV7VRu12B1+XgHy3o/ntC7jX VnlltnYXzpnqqp8tRP3Ig6Ceh94CPTQ3rUZRhb0JNieloD20RVUDLvl0Bz8lkCoL dE2AtBYkBeXbZsR7qGJK1Rnmeyxaff5/QzY48h2kBoO67JKiD0CPn1pUGsbR4NUb b8l0trdjnecJ1ND7VXGmcvmvKntagPp2RDPo0Bler+I9y3f6kkI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:20 2026 by rpki-client