This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: qE9kZiiawnsHmCa4W24nRG4yixlQlihmPdtaN08GeWw= Subject key identifier: DC:87:25:04:3A:DC:77:47:0C:4D:BC:74:D6:33:26:6B:4F:39:9B:FF Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 29FB386DCC2664B60A5D88AFA4C5B8F15C6FE7CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0157 Signing time: Sat 06 Dec 2025 20:21:22 +0000 Manifest this update: Sat 06 Dec 2025 20:16:22 +0000 Manifest next update: Tue 09 Dec 2025 20:41:22 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: 9oKaELbd3Gfa5CgdwYz3CyVvNG72FhN9vrp0rnus1rs=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fb:38:6d:cc:26:64:b6:0a:5d:88:af:a4:c5:b8:f1:5c:6f:e7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Dec 6 20:16:22 2025 GMT Not After : Dec 9 20:41:22 2025 GMT Subject: CN=DC8725043ADC77470C4DBC74D633266B4F399BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:0c:c6:7c:08:e4:14:e3:b7:e5:39:b6:12: d8:54:ea:de:6c:67:ed:17:2b:00:e0:69:8a:bc:dd: ac:7f:d7:91:e2:ae:b4:9a:ee:04:51:a4:89:b6:96: 9f:76:84:75:9d:76:44:5c:9d:ef:db:f1:18:9b:71: c3:96:3b:32:d6:e5:84:17:39:ee:8d:80:93:5f:20: a9:35:ec:45:b8:68:a1:c6:55:44:5b:72:01:23:2a: 4c:4a:96:2c:00:38:19:f0:a0:f1:c3:0e:ff:21:af: cc:20:6a:a2:95:9f:01:8c:86:a8:87:5e:21:ea:d5: 90:5e:95:f2:28:27:f0:d1:79:ed:94:e4:13:c4:85: 08:e9:18:3b:07:20:ef:a0:35:8e:9c:45:24:4f:5b: e8:a2:9a:70:8c:25:52:c4:46:87:6b:c5:e6:18:20: 23:b0:5d:9a:71:d4:99:37:a7:10:5c:d2:a7:5c:d6: d1:b3:53:7a:de:67:0b:e6:01:6a:44:54:e9:cc:a2: 0f:9a:b9:36:45:f1:74:81:fd:4a:37:36:72:4a:be: 70:dc:7c:2f:87:91:ee:3d:23:57:c7:56:d1:ea:00: e9:ed:b1:b5:1f:c6:01:0b:02:2b:71:4b:d4:9a:d6: 0b:52:74:26:76:63:b6:0d:bd:63:8d:2a:52:75:71: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:25:04:3A:DC:77:47:0C:4D:BC:74:D6:33:26:6B:4F:39:9B:FF X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cc:1c:fe:89:ab:e5:30:46:42:76:fe:bc:1e:2b:5f:bc:85: 07:3c:e4:4b:ff:07:ef:70:25:a6:d3:ca:87:6f:25:76:67:78: 61:18:14:23:23:cf:e6:49:9f:c0:1b:49:8f:d6:c2:05:18:d1: c5:ed:8c:39:ec:22:34:95:7b:5b:44:9e:a0:d7:31:61:24:fc: c8:12:b8:8f:06:a7:91:9a:38:b0:37:60:08:cc:87:71:ce:a4: e8:c3:a0:6d:73:0b:22:46:85:7f:93:c8:1c:97:9e:0c:a1:a7: ca:e2:e1:bf:11:33:dd:67:49:9c:dc:c9:4e:1b:fd:79:84:c6: b5:b0:48:cd:47:9d:1a:98:0c:0e:fc:47:24:c0:3f:4b:72:03: d6:5c:76:7a:95:e3:ab:f8:ea:20:77:3e:4a:cc:57:ac:b6:e8: d9:fc:14:28:a4:48:a4:52:c1:e8:3f:d0:cd:b7:ae:ac:ca:87: 62:04:9b:ec:fa:db:38:d8:a5:c5:75:92:e0:4e:03:a4:87:9e: 90:b8:24:87:68:34:90:d7:0e:c4:bc:cc:51:42:0a:22:93:df: 05:62:c4:8f:55:77:42:65:78:17:da:cd:fa:96:4d:a8:c1:f0: 4c:73:a0:25:fa:1b:a9:9d:91:df:ef:27:22:83:d5:20:82:db: 0f:38:fd:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfs4bcwmZLYKXYivpMW48Vxv584wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTEyMDYyMDE2MjJaFw0yNTEyMDkyMDQxMjJaMDMxMTAvBgNV BAMTKERDODcyNTA0M0FEQzc3NDcwQzREQkM3NEQ2MzMyNjZCNEYzOTlCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzQzGfAjkFOO35Tm2EthU6t5s Z+0XKwDgaYq83ax/15HirrSa7gRRpIm2lp92hHWddkRcne/b8RibccOWOzLW5YQX Oe6NgJNfIKk17EW4aKHGVURbcgEjKkxKliwAOBnwoPHDDv8hr8wgaqKVnwGMhqiH XiHq1ZBelfIoJ/DRee2U5BPEhQjpGDsHIO+gNY6cRSRPW+iimnCMJVLERodrxeYY ICOwXZpx1Jk3pxBc0qdc1tGzU3reZwvmAWpEVOnMog+auTZF8XSB/Uo3NnJKvnDc fC+Hke49I1fHVtHqAOntsbUfxgELAitxS9Sa1gtSdCZ2Y7YNvWONKlJ1cYbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IclBDrcd0cMTbx01jMma085m/8wHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvMHP6Jq+UwRkJ2/rweK1+8hQc85Ev/B+9w JabTyodvJXZneGEYFCMjz+ZJn8AbSY/WwgUY0cXtjDnsIjSVe1tEnqDXMWEk/MgS uI8Gp5GaOLA3YAjMh3HOpOjDoG1zCyJGhX+TyByXngyhp8ri4b8RM91nSZzcyU4b /XmExrWwSM1HnRqYDA78RyTAP0tyA9ZcdnqV46v46iB3PkrMV6y26Nn8FCikSKRS weg/0M23rqzKh2IEm+z62zjYpcV1kuBOA6SHnpC4JIdoNJDXDsS8zFFCCiKT3wVi xI9Vd0JleBfazfqWTajB8ExzoCX6G6mdkd/vJyKD1SCC2w84/X8= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:55 2025 by rpki-client