This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json) Hash identifier: h4/d6YE/izSGWs7Pe4WUg+ZvRyxsInHNwXQKtrWpBxk= Subject key identifier: 48:F5:1C:52:8F:F0:E4:F4:DF:3E:7F:A9:9F:A9:29:5E:DB:46:EC:80 Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 0D52834E64A08ADC701A027152DF654A320C3F07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft Manifest number: 0381 Signing time: Sun 14 Dec 2025 19:31:09 +0000 Manifest this update: Sun 14 Dec 2025 19:26:09 +0000 Manifest next update: Wed 17 Dec 2025 20:35:09 +0000 Files and hashes: 1: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AU2BjjxLKOB7x1afsJypIVoDqfBt5Pa++/i1Uy3JBXs=) 2: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: EOTKT7fYDibJNNEpYClQQRWW/rZFYFT0gwje7qP0tz4=) 3: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: g29pf8GRD5KEsQ3xMiXcjqqLaCsv5cRFguqUqUNSeQU=) 4: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: BfvR/So226bitOLhPr9CHxhxgb1Q7qOXOhbe2UXDXlU=) 5: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: T9vPzFVrVbtfkOIbIR0gBtReDHG4KgAtDeHT2T3EGwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 20:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:52:83:4e:64:a0:8a:dc:70:1a:02:71:52:df:65:4a:32:0c:3f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Dec 14 19:26:09 2025 GMT Not After : Dec 17 20:35:09 2025 GMT Subject: CN=48F51C528FF0E4F4DF3E7FA99FA9295EDB46EC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d6:3e:ef:40:7a:2e:42:cb:d5:3e:f6:1c:41: da:32:ae:01:c2:81:28:59:1a:1e:12:f6:d3:a3:61: ac:96:c9:65:5d:c9:f7:33:df:c5:7a:97:c9:5c:30: 62:63:b1:d7:23:da:60:d6:ec:b2:31:74:2d:67:c5: a5:c3:ec:66:fc:c9:08:d7:4c:46:64:cc:bb:ca:6f: 8e:ad:ae:72:97:87:9c:5a:56:4d:fa:f9:7a:5f:a2: 69:7b:b9:3a:9c:65:67:ab:83:5a:35:6d:4a:c4:c9: 67:93:55:12:f0:c1:07:7e:18:fd:ff:4e:b9:f1:32: d8:b9:dc:00:27:e9:b1:42:4b:39:8a:72:6c:d7:eb: 74:1e:40:e2:c4:53:5c:92:12:55:51:b8:bb:30:56: 1f:aa:e1:f9:83:97:12:05:54:9a:ca:50:c1:77:32: fe:f6:65:22:76:a5:0c:49:ac:37:ef:d8:1f:84:0e: bf:0d:db:67:67:ff:4e:03:b4:1a:b3:e8:18:be:2f: 21:ce:e3:dd:78:1b:9f:cf:de:d1:b9:48:84:90:03: 32:8a:55:46:2a:5e:bc:22:8e:c1:8f:d8:44:0b:9e: 60:f9:42:b3:0b:93:e2:28:bb:e0:69:fa:65:46:ef: 8e:6a:52:a6:16:aa:db:85:ed:98:44:e4:b8:01:38: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F5:1C:52:8F:F0:E4:F4:DF:3E:7F:A9:9F:A9:29:5E:DB:46:EC:80 X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:13:21:07:35:ff:21:59:cf:3e:60:6e:ab:64:15:8a:f6: 75:ef:2c:77:ab:cc:af:aa:79:bd:67:56:ae:78:af:f9:96:87: ec:4d:af:e8:a0:76:95:fd:07:22:d7:21:2d:37:95:d1:dc:63: 23:59:3f:2f:3a:d0:34:39:8e:a3:c0:b3:0a:74:e8:f9:51:2a: e0:fc:ff:6e:ab:d4:3a:fd:11:7d:d4:ba:f4:ae:2c:ec:32:61: a5:c6:ad:68:63:94:d2:40:73:74:44:83:ab:6f:d4:c2:28:74: c4:a2:6b:e6:b3:39:9a:6b:f5:4f:40:42:12:c7:0a:23:42:b6: 55:47:ff:d8:c0:e6:0e:90:b6:e6:7b:1f:18:f1:7a:4e:79:1d: 29:97:b5:da:f2:5e:99:ba:6d:f3:58:f1:25:86:54:81:40:e1: 38:43:bc:04:ab:a3:47:5f:80:90:57:84:01:ea:2d:cb:a4:de: ef:63:61:f9:8a:d0:70:c9:72:f5:2c:0c:a8:36:99:8a:9f:a9: ab:70:1f:9a:80:c2:34:6e:19:5e:39:cc:91:5d:a5:75:bb:83: 96:96:b5:97:e9:5b:f2:33:a5:ce:f7:da:97:f3:d0:8a:ef:f6: 0a:29:f7:40:9e:67:9d:0a:02:f4:12:e1:66:cc:55:83:90:54: 31:c0:44:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVKDTmSgitxwGgJxUt9lSjIMPwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNTEyMTQxOTI2MDlaFw0yNTEyMTcyMDM1MDlaMDMxMTAvBgNV BAMTKDQ4RjUxQzUyOEZGMEU0RjRERjNFN0ZBOTlGQTkyOTVFREI0NkVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz1j7vQHouQsvVPvYcQdoyrgHC gShZGh4S9tOjYayWyWVdyfcz38V6l8lcMGJjsdcj2mDW7LIxdC1nxaXD7Gb8yQjX TEZkzLvKb46trnKXh5xaVk36+Xpfoml7uTqcZWerg1o1bUrEyWeTVRLwwQd+GP3/ TrnxMti53AAn6bFCSzmKcmzX63QeQOLEU1ySElVRuLswVh+q4fmDlxIFVJrKUMF3 Mv72ZSJ2pQxJrDfv2B+EDr8N22dn/04DtBqz6Bi+LyHO4914G5/P3tG5SISQAzKK VUYqXrwijsGP2EQLnmD5QrMLk+Iou+Bp+mVG745qUqYWqtuF7ZhE5LgBOI4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSPUcUo/w5PTfPn+pn6kpXttG7IAwHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5 NUZERkY1NjIwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWZEyEHNf8hWc8+YG6rZBWK9nXvLHerzK+q eb1nVq54r/mWh+xNr+igdpX9ByLXIS03ldHcYyNZPy860DQ5jqPAswp06PlRKuD8 /26r1Dr9EX3UuvSuLOwyYaXGrWhjlNJAc3REg6tv1MIodMSia+azOZpr9U9AQhLH CiNCtlVH/9jA5g6QtuZ7Hxjxek55HSmXtdryXpm6bfNY8SWGVIFA4ThDvASro0df gJBXhAHqLcuk3u9jYfmK0HDJcvUsDKg2mYqfqatwH5qAwjRuGV45zJFdpXW7g5aW tZfpW/Izpc732pfz0Irv9gop90CeZ50KAvQS4WbMVYOQVDHARNo= -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:04 2025 by rpki-client