This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: x6zbbspkmd1iK+yeYvce4CS3Z7NjB+oxcPjuHwix20I= Subject key identifier: 3D:A5:16:1A:2D:8B:02:79:6D:0D:D9:06:E3:DC:1B:78:30:03:3F:73 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 34111C559AA844D85B10EE4D3C2560F55B4DC6B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 18:51:13 +0000 Manifest this update: Fri 05 Dec 2025 18:46:13 +0000 Manifest next update: Tue 09 Dec 2025 00:39:13 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: 88ukZp0bnsbon6PeruH05SFpeyTr3gqPSxYHUL9AvoE=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:11:1c:55:9a:a8:44:d8:5b:10:ee:4d:3c:25:60:f5:5b:4d:c6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Dec 5 18:46:13 2025 GMT Not After : Dec 9 00:39:13 2025 GMT Subject: CN=3DA5161A2D8B02796D0DD906E3DC1B7830033F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:d1:9e:20:34:e9:e9:c5:5f:e2:7f:a7:4a: 23:6d:f8:0c:3e:d6:15:01:0f:a5:d4:04:84:1c:cb: d9:c8:c7:23:b2:03:7d:5d:1d:a0:a1:b0:09:dd:63: 89:a8:42:65:72:5c:bc:e3:19:fd:a6:2a:3a:32:38: 08:dd:ce:46:ca:dd:ff:32:05:16:31:22:eb:cd:11: 03:cd:91:49:5e:7e:ff:6f:03:12:f2:cf:99:b6:e1: 1b:8e:24:9a:a5:7d:0c:7c:b8:43:61:2e:4b:41:44: e4:21:9e:5a:e1:f6:17:ac:8a:a3:a8:ac:db:21:41: ae:2d:f1:05:36:69:c7:dd:ca:40:4d:ef:4b:9e:9a: 1d:e5:8d:a0:9c:7f:21:54:b9:dd:79:34:9c:00:2e: bc:4a:ab:62:c5:4f:67:8c:7c:e4:af:20:8f:07:b3: 40:28:95:de:31:53:94:54:32:96:ef:6a:40:ce:e7: 74:fb:f6:cd:5f:23:0d:70:91:58:65:df:e3:0a:71: 6c:c5:28:ad:b7:4e:ad:2e:1e:7f:97:3e:ce:99:0d: 98:f6:01:60:5c:b2:11:9f:fb:5a:4f:30:c3:ea:09: b0:a1:4a:a5:90:37:03:8f:66:cf:82:b3:eb:f2:5e: 42:81:7c:45:b8:23:df:b7:fd:a2:60:ba:77:a6:89: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A5:16:1A:2D:8B:02:79:6D:0D:D9:06:E3:DC:1B:78:30:03:3F:73 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c5:d7:02:82:6d:94:49:2a:cb:08:14:64:8a:4d:dd:ee:8f: cc:f4:f3:7c:80:b4:4c:97:b3:c1:a6:97:09:69:12:6a:86:5f: 7f:53:aa:79:da:5d:3b:fa:a8:d1:01:32:fe:80:0b:a5:f2:4f: 29:3d:18:45:85:b2:a5:45:4e:fd:94:93:8e:5f:bf:d7:51:c9: de:48:61:77:d1:f1:23:7d:c3:0e:4b:88:4b:34:c4:6d:2f:94: 07:38:6b:71:08:68:c7:53:44:65:ea:c7:30:f7:42:3e:c1:0a: bb:19:23:b9:af:e2:e2:82:45:52:4d:0f:f3:5b:77:8b:06:e7: c3:22:17:55:c9:b1:3c:d9:a4:54:fe:55:33:fd:33:e6:6e:bf: 06:5c:d4:17:d9:a8:70:86:9b:11:8f:b6:e3:9f:f3:af:cc:db: 70:9e:76:06:72:d3:bd:ba:b0:38:b2:16:c9:6d:fc:b9:f1:c9: 8c:c4:fb:f4:ab:26:e4:c6:87:d3:5e:f1:d6:9a:b9:64:04:33: 66:b5:3b:70:97:d1:a8:9d:20:94:9d:b8:f3:ca:bf:a0:3f:c3: 66:9a:21:8f:0b:93:37:e5:5c:ae:0c:0e:3b:57:6f:fe:d2:1d: 59:ca:59:bc:e4:ff:9c:13:09:cb:8a:70:14:3c:f3:0f:55:0f: 7c:ed:68:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBEcVZqoRNhbEO5NPCVg9VtNxrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTEyMDUxODQ2MTNaFw0yNTEyMDkwMDM5MTNaMDMxMTAvBgNV BAMTKDNEQTUxNjFBMkQ4QjAyNzk2RDBERDkwNkUzREMxQjc4MzAwMzNGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbNGeIDTp6cVf4n+nSiNt+Aw+ 1hUBD6XUBIQcy9nIxyOyA31dHaChsAndY4moQmVyXLzjGf2mKjoyOAjdzkbK3f8y BRYxIuvNEQPNkUlefv9vAxLyz5m24RuOJJqlfQx8uENhLktBROQhnlrh9hesiqOo rNshQa4t8QU2acfdykBN70uemh3ljaCcfyFUud15NJwALrxKq2LFT2eMfOSvII8H s0Aold4xU5RUMpbvakDO53T79s1fIw1wkVhl3+MKcWzFKK23Tq0uHn+XPs6ZDZj2 AWBcshGf+1pPMMPqCbChSqWQNwOPZs+Cs+vyXkKBfEW4I9+3/aJgunemie/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaUWGi2LAnltDdkG49wbeDADP3MwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALF1wKCbZRJKssIFGSKTd3uj8z083yAtEyX s8GmlwlpEmqGX39TqnnaXTv6qNEBMv6AC6XyTyk9GEWFsqVFTv2Uk45fv9dRyd5I YXfR8SN9ww5LiEs0xG0vlAc4a3EIaMdTRGXqxzD3Qj7BCrsZI7mv4uKCRVJND/Nb d4sG58MiF1XJsTzZpFT+VTP9M+ZuvwZc1BfZqHCGmxGPtuOf86/M23CedgZy0726 sDiyFslt/LnxyYzE+/SrJuTGh9Ne8daauWQEM2a1O3CX0aidIJSduPPKv6A/w2aa IY8LkzflXK4MDjtXb/7SHVnKWbzk/5wTCcuKcBQ88w9VD3ztaDc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:30 2025 by rpki-client