This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: qmehk6lH0EEnYKy1FAIEPJTLRK4UqAqDiMk55HVeKdQ= Subject key identifier: B7:66:6B:7B:6D:BE:07:0B:AD:2C:1F:AA:FC:A2:09:7E:51:14:AA:FA Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 0A5D8D6A42A9CF982F29B429F7AAF03D2DBAD9AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04F4 Signing time: Fri 05 Dec 2025 05:31:40 +0000 Manifest this update: Fri 05 Dec 2025 05:26:40 +0000 Manifest next update: Mon 08 Dec 2025 10:24:40 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: rBLO2bS4HMmLdJdVALVT8glaDjJIg+xnv7M6M57XxuI=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5d:8d:6a:42:a9:cf:98:2f:29:b4:29:f7:aa:f0:3d:2d:ba:d9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Dec 5 05:26:40 2025 GMT Not After : Dec 8 10:24:40 2025 GMT Subject: CN=B7666B7B6DBE070BAD2C1FAAFCA2097E5114AAFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:e7:85:e5:b1:db:1f:ae:79:2b:9c:0b:ba: 6a:45:33:24:bb:ea:df:5f:b5:e3:15:64:39:31:71: 50:75:59:07:1c:a4:d2:8d:de:ad:49:bb:da:9f:ee: f5:f7:83:16:a5:cf:0f:e4:3c:01:45:69:f0:ee:b6: c0:c5:08:ea:39:a9:c7:51:36:fd:8e:b2:a4:c1:99: d6:0d:1d:f7:c5:e1:1d:15:92:6e:46:ad:f0:27:b5: fd:90:9d:2f:e7:17:f4:13:9d:f7:a9:4c:29:0f:49: 56:ff:41:a7:47:22:91:e3:b9:e2:e7:6e:b1:14:03: 05:4e:c2:c3:71:09:49:33:a7:2b:76:58:05:ec:a2: 5f:35:40:dd:f2:a2:e4:60:66:d9:02:db:54:c8:6e: 66:8f:41:14:ee:d7:cd:2a:fb:5c:cf:54:7b:ca:e0: 21:eb:59:38:1e:82:b5:28:95:b1:7f:13:4f:c4:58: 13:eb:1d:56:8d:50:2a:41:9f:50:68:c9:c4:d7:b9: 9f:7b:77:41:50:12:bf:4c:2a:9d:db:54:5e:1c:80: 89:09:90:82:b7:83:24:46:eb:ee:11:25:34:fc:0f: 56:eb:b8:61:55:ae:81:5e:ac:f9:86:0e:5f:d7:30: cc:5d:d0:75:73:fb:51:0c:84:16:e5:3e:02:bc:1e: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:6B:7B:6D:BE:07:0B:AD:2C:1F:AA:FC:A2:09:7E:51:14:AA:FA X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6b:6f:99:42:02:fd:70:31:c4:7c:e5:f5:84:d9:99:2c:41: 9d:94:59:d3:bd:09:8d:17:32:10:ce:a9:fb:0c:cd:d2:62:04: b8:c8:d7:b0:69:a2:05:a1:b2:e2:28:2d:8a:a2:48:48:27:cf: 0e:73:d4:3f:df:ae:10:be:3c:4b:fc:c8:3e:0d:5e:8a:31:d6: 4f:08:3e:fc:67:47:e0:77:3d:7f:8e:0d:52:ea:2b:b5:7d:6a: f6:e0:ad:3c:e4:54:fb:db:b2:da:b2:6d:e3:a4:20:fe:29:e9: 3e:36:d4:bd:1a:aa:a3:02:3c:1a:d8:14:79:e9:7c:26:f0:ac: 42:92:7f:14:81:f0:54:e6:bc:ad:05:23:89:bd:16:d7:5b:f8: fb:8d:d0:50:58:6a:72:c0:8e:02:6b:14:72:17:31:07:e8:ca: 71:7b:32:d2:ee:1c:eb:8d:b3:7a:61:39:b9:f5:d5:ed:9d:3c: 44:bd:f3:56:8f:43:5a:81:8b:9a:50:16:2d:a7:df:2e:00:69: e7:f6:66:34:12:a2:d0:b8:2e:8b:20:9b:c0:39:22:0c:37:4e: 35:f8:ef:c9:d9:0d:f5:5c:54:92:0e:4a:19:92:94:dc:a1:0d: da:7b:66:66:a5:cb:84:1d:98:78:41:52:63:d8:e0:97:d4:ea: b1:ad:be:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCl2NakKpz5gvKbQp96rwPS262awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTEyMDUwNTI2NDBaFw0yNTEyMDgxMDI0NDBaMDMxMTAvBgNV BAMTKEI3NjY2QjdCNkRCRTA3MEJBRDJDMUZBQUZDQTIwOTdFNTExNEFBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZOeF5bHbH655K5wLumpFMyS7 6t9fteMVZDkxcVB1WQccpNKN3q1Ju9qf7vX3gxalzw/kPAFFafDutsDFCOo5qcdR Nv2OsqTBmdYNHffF4R0Vkm5GrfAntf2QnS/nF/QTnfepTCkPSVb/QadHIpHjueLn brEUAwVOwsNxCUkzpyt2WAXsol81QN3youRgZtkC21TIbmaPQRTu180q+1zPVHvK 4CHrWTgegrUolbF/E0/EWBPrHVaNUCpBn1BoycTXuZ97d0FQEr9MKp3bVF4cgIkJ kIK3gyRG6+4RJTT8D1bruGFVroFerPmGDl/XMMxd0HVz+1EMhBblPgK8HhP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2Zre22+BwutLB+q/KIJflEUqvowHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFrb5lCAv1wMcR85fWE2ZksQZ2UWdO9CY0X MhDOqfsMzdJiBLjI17BpogWhsuIoLYqiSEgnzw5z1D/frhC+PEv8yD4NXoox1k8I PvxnR+B3PX+ODVLqK7V9avbgrTzkVPvbstqybeOkIP4p6T421L0aqqMCPBrYFHnp fCbwrEKSfxSB8FTmvK0FI4m9Ftdb+PuN0FBYanLAjgJrFHIXMQfoynF7MtLuHOuN s3phObn11e2dPES981aPQ1qBi5pQFi2n3y4Aaef2ZjQSotC4Losgm8A5Igw3TjX4 78nZDfVcVJIOShmSlNyhDdp7Zmaly4QdmHhBUmPY4JfU6rGtvsE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:44 2025 by rpki-client