This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: pIwbdcBw8p5xg3eVDHBykIuFznmDuGaRjOukRtIxEh0= Subject key identifier: C1:2D:DE:82:C6:CF:89:57:DE:2A:D7:C1:E6:F0:B3:41:76:1A:B2:FA Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 3971C6CB84389DB38672B644582BE2D2A6373841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 032B Signing time: Fri 05 Dec 2025 23:20:48 +0000 Manifest this update: Fri 05 Dec 2025 23:15:48 +0000 Manifest next update: Tue 09 Dec 2025 05:22:48 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: 1X15aZ5uXv+ZRmNa+aoi9v7PpygP+sa62UJb3DxMR5k=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:71:c6:cb:84:38:9d:b3:86:72:b6:44:58:2b:e2:d2:a6:37:38:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Dec 5 23:15:48 2025 GMT Not After : Dec 9 05:22:48 2025 GMT Subject: CN=C12DDE82C6CF8957DE2AD7C1E6F0B341761AB2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:48:e1:a7:39:bd:3a:cc:66:6a:96:4b:2f: 40:29:5e:0d:cc:18:92:6c:cb:85:30:fd:0e:62:c4: 5e:0a:fd:4d:f9:36:22:92:c4:c2:25:cd:d1:23:2b: 37:85:1d:61:cf:1e:b1:36:28:27:46:1a:2b:63:ed: c0:f5:fa:e9:15:0c:56:14:2e:57:58:b6:6e:bf:a5: 8d:06:ec:a5:27:7b:6f:df:74:55:df:41:e5:a2:cd: 45:70:ac:04:0e:87:71:d0:27:7f:ec:1c:ba:20:b0: 60:af:02:f2:9e:40:40:f8:02:b4:dc:60:dd:99:90: 8f:8f:35:c5:bd:2d:35:b8:fa:c2:64:99:7c:d3:aa: 81:2f:f6:13:55:42:31:c3:8c:a7:ad:a3:d7:0e:cd: a1:0e:ef:2b:48:e2:8b:d1:3e:52:f0:32:d3:a5:2c: b3:43:cc:41:b2:48:4d:ba:0b:00:6e:68:cc:e1:a7: f6:ed:1b:a8:e6:54:2d:cf:0e:3c:df:da:66:ce:17: e7:d6:97:46:82:e9:23:cc:09:f5:97:ad:34:c6:46: 66:9c:4c:b3:0b:06:24:bb:fa:e6:12:0f:64:38:92: e3:02:30:e9:bf:22:16:14:20:5a:b2:30:bf:cb:42: 30:45:ed:60:f9:75:0b:dc:79:6f:26:c8:d1:45:c9: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:DE:82:C6:CF:89:57:DE:2A:D7:C1:E6:F0:B3:41:76:1A:B2:FA X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:56:fa:71:80:63:6a:3c:16:4c:aa:53:01:0f:87:c2:c2:1a: 89:f1:81:a0:e2:8d:7b:85:49:ca:ea:2b:35:7a:43:99:76:fd: 47:f3:ef:1d:42:70:68:cc:8a:58:fd:6c:89:2e:40:90:8d:5d: 8c:a0:af:c9:c6:66:9d:e0:f0:df:67:fa:42:6d:5e:1e:be:76: 24:19:60:b7:70:61:9b:f4:d4:1f:08:b7:d1:d4:98:9f:d9:9a: b8:6e:7f:60:44:11:07:3f:e0:2d:3c:6a:ff:91:d2:e3:90:6c: 14:4d:36:2a:d4:8f:13:4f:a3:85:c5:1d:17:b0:17:de:22:56: 42:de:f2:a1:e7:7a:1a:b8:38:69:4f:fe:38:16:ce:05:3b:35: 1c:26:1d:3d:ff:ea:5f:f0:f3:4b:82:48:2e:a5:e5:dc:76:26: 73:c0:fa:ed:aa:34:63:0b:d8:74:ca:8f:41:b8:08:3f:96:0d: cd:69:6c:b0:3b:e0:4a:c4:19:d7:2a:29:39:fb:20:12:d5:bd: 99:9b:1a:69:34:75:63:60:b5:c7:4c:a4:29:e7:7f:ad:46:d3: 82:f3:b5:87:b0:4c:fe:98:d4:68:66:ba:04:5e:52:17:ad:76: 75:b0:05:87:5e:ce:02:d6:86:9b:75:09:a5:98:9f:ad:0b:55: bf:0b:46:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXHGy4Q4nbOGcrZEWCvi0qY3OEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTEyMDUyMzE1NDhaFw0yNTEyMDkwNTIyNDhaMDMxMTAvBgNV BAMTKEMxMkRERTgyQzZDRjg5NTdERTJBRDdDMUU2RjBCMzQxNzYxQUIyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjEjhpzm9OsxmapZLL0ApXg3M GJJsy4Uw/Q5ixF4K/U35NiKSxMIlzdEjKzeFHWHPHrE2KCdGGitj7cD1+ukVDFYU LldYtm6/pY0G7KUne2/fdFXfQeWizUVwrAQOh3HQJ3/sHLogsGCvAvKeQED4ArTc YN2ZkI+PNcW9LTW4+sJkmXzTqoEv9hNVQjHDjKeto9cOzaEO7ytI4ovRPlLwMtOl LLNDzEGySE26CwBuaMzhp/btG6jmVC3PDjzf2mbOF+fWl0aC6SPMCfWXrTTGRmac TLMLBiS7+uYSD2Q4kuMCMOm/IhYUIFqyML/LQjBF7WD5dQvceW8myNFFyW5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwS3egsbPiVfeKtfB5vCzQXYasvowHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtW+nGAY2o8FkyqUwEPh8LCGonxgaDijXuF ScrqKzV6Q5l2/Ufz7x1CcGjMilj9bIkuQJCNXYygr8nGZp3g8N9n+kJtXh6+diQZ YLdwYZv01B8It9HUmJ/Zmrhuf2BEEQc/4C08av+R0uOQbBRNNirUjxNPo4XFHRew F94iVkLe8qHnehq4OGlP/jgWzgU7NRwmHT3/6l/w80uCSC6l5dx2JnPA+u2qNGML 2HTKj0G4CD+WDc1pbLA74ErEGdcqKTn7IBLVvZmbGmk0dWNgtcdMpCnnf61G04Lz tYewTP6Y1GhmugReUhetdnWwBYdezgLWhpt1CaWYn60LVb8LRiA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:41 2025 by rpki-client