This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: YyQ2UUW8dGBEgordKPGpB1SvQC4+/qwsNKMwyxGR5u8= Subject key identifier: E4:B3:29:88:B9:90:6B:72:69:18:43:D9:2E:D0:BA:45:F3:CA:BF:F8 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 54E7A6BBA17615CA4FE061D1FD2895EA0CAE12F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0157 Signing time: Fri 05 Dec 2025 10:32:07 +0000 Manifest this update: Fri 05 Dec 2025 10:27:07 +0000 Manifest next update: Mon 08 Dec 2025 21:27:07 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: VgcdO6P9HX8akZGe4gAd0ufB1AEHxAVlQmx4ZDV7v8I=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e7:a6:bb:a1:76:15:ca:4f:e0:61:d1:fd:28:95:ea:0c:ae:12:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Dec 5 10:27:07 2025 GMT Not After : Dec 8 21:27:07 2025 GMT Subject: CN=E4B32988B9906B72691843D92ED0BA45F3CABFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:83:f4:36:c7:0d:d4:1b:75:42:9e:ff:53: 38:ae:b6:76:6d:3b:6a:0a:b7:22:2d:70:47:6b:5b: 4c:9c:71:84:b0:de:93:25:ef:9b:58:12:a1:15:4c: 71:01:5a:2c:d4:1f:16:eb:4a:90:df:c0:65:ca:ba: 85:99:26:f6:fe:a3:10:fd:c6:12:fc:99:9e:65:57: 05:1b:b0:c2:72:40:47:10:49:ff:a1:8d:27:39:f5: 32:46:8f:96:00:fe:38:6e:45:95:47:f2:2a:26:32: 86:ec:78:aa:7a:7f:31:23:07:1e:c8:0b:e7:6e:d6: 5a:9a:80:83:37:cd:b5:55:ab:38:e4:2a:b8:07:d6: 86:18:f3:04:95:23:21:2e:d1:93:a0:b0:a6:3f:03: 81:73:9f:e7:46:41:99:6a:d8:c3:05:5e:3a:eb:ea: 5f:41:3f:4d:8e:b8:12:60:78:be:24:6b:46:6d:88: f9:28:e1:c4:d1:01:e8:fc:a3:e4:ed:5e:fe:8a:2e: 59:b1:4f:05:a1:b7:a7:e9:b0:0b:ff:67:93:fa:e7: 46:c6:f5:cc:eb:11:d2:c6:79:7d:10:f9:a5:06:cd: d2:65:d7:64:c6:75:ee:9b:d7:26:6b:d4:51:9a:12: c9:3d:5f:59:94:f7:c2:70:99:dd:35:55:ed:78:66: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:29:88:B9:90:6B:72:69:18:43:D9:2E:D0:BA:45:F3:CA:BF:F8 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c9:dc:f9:d0:d5:57:e0:60:e3:8d:13:7a:08:0f:df:58:d9: 3a:91:a7:31:53:1e:db:f8:90:cc:99:5a:5f:78:f9:7d:97:ab: d1:6a:a9:dc:35:8e:62:fb:5a:4c:36:53:19:d1:d2:70:d7:50: f1:1a:81:b7:69:e8:06:4e:7a:f6:00:51:73:96:b6:95:a8:8d: 59:0e:63:53:69:69:6c:fd:d7:ed:74:cd:53:83:7d:6c:ed:4d: 5f:5e:3b:8a:4d:8a:84:d6:05:0b:75:58:26:d6:62:fb:84:67: c8:ff:8f:00:25:0b:a3:f3:4d:66:0b:de:bf:37:5b:8c:05:2d: 31:90:17:d3:d4:0b:fa:11:0c:cd:c4:28:7b:ab:d4:35:e6:d9: 52:6c:c5:54:22:a4:47:f4:67:7a:b3:ec:1e:7e:c6:4c:71:b4: 7b:2e:13:7f:1d:34:c0:e6:12:43:17:2b:39:56:c6:ea:d6:a1: 0e:fc:be:29:a8:ff:de:a8:b5:ca:64:1d:06:47:fb:d1:f2:67: 18:1d:66:7d:54:f8:5e:84:f5:9f:95:36:7b:bb:a1:69:b0:94: 13:c2:47:87:69:8e:74:48:86:3a:1b:a6:3e:3c:52:13:92:a2: b7:3e:e0:25:10:17:1b:b2:0d:24:4a:a0:a0:3b:8c:00:55:72: f2:44:d6:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOemu6F2FcpP4GHR/SiV6gyuEvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTEyMDUxMDI3MDdaFw0yNTEyMDgyMTI3MDdaMDMxMTAvBgNV BAMTKEU0QjMyOTg4Qjk5MDZCNzI2OTE4NDNEOTJFRDBCQTQ1RjNDQUJGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijoP0NscN1Bt1Qp7/UziutnZt O2oKtyItcEdrW0yccYSw3pMl75tYEqEVTHEBWizUHxbrSpDfwGXKuoWZJvb+oxD9 xhL8mZ5lVwUbsMJyQEcQSf+hjSc59TJGj5YA/jhuRZVH8iomMobseKp6fzEjBx7I C+du1lqagIM3zbVVqzjkKrgH1oYY8wSVIyEu0ZOgsKY/A4Fzn+dGQZlq2MMFXjrr 6l9BP02OuBJgeL4ka0ZtiPko4cTRAej8o+TtXv6KLlmxTwWht6fpsAv/Z5P650bG 9czrEdLGeX0Q+aUGzdJl12TGde6b1yZr1FGaEsk9X1mU98Jwmd01Ve14Zl9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5LMpiLmQa3JpGEPZLtC6RfPKv/gwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbJ3PnQ1VfgYOONE3oID99Y2TqRpzFTHtv4 kMyZWl94+X2Xq9Fqqdw1jmL7Wkw2UxnR0nDXUPEagbdp6AZOevYAUXOWtpWojVkO Y1NpaWz91+10zVODfWztTV9eO4pNioTWBQt1WCbWYvuEZ8j/jwAlC6PzTWYL3r83 W4wFLTGQF9PUC/oRDM3EKHur1DXm2VJsxVQipEf0Z3qz7B5+xkxxtHsuE38dNMDm EkMXKzlWxurWoQ78vimo/96otcpkHQZH+9HyZxgdZn1U+F6E9Z+VNnu7oWmwlBPC R4dpjnRIhjobpj48UhOSorc+4CUQFxuyDSRKoKA7jABVcvJE1nM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:42:05 2025 by rpki-client