This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: a1AkrKjFkcqVfB03+DXla4knj+BQag6CqTK70lmsQrk= Subject key identifier: 95:3A:08:9B:C0:CA:EA:CE:71:2B:70:8F:A0:4C:59:D8:10:0C:0C:A1 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 6E34A2CFDA25836EEF3D029F0B663C0E5A2C319E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 023C Signing time: Sat 06 Dec 2025 14:21:20 +0000 Manifest this update: Sat 06 Dec 2025 14:16:20 +0000 Manifest next update: Tue 09 Dec 2025 14:48:20 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) 2: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 3: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: z6bjZoU6s3vjlxjfNk5ntEIv22X4hBnMBAvbi4Zh7W0=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 5: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 6: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:34:a2:cf:da:25:83:6e:ef:3d:02:9f:0b:66:3c:0e:5a:2c:31:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Dec 6 14:16:20 2025 GMT Not After : Dec 9 14:48:20 2025 GMT Subject: CN=953A089BC0CAEACE712B708FA04C59D8100C0CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:07:3e:7a:8c:67:ca:fd:f5:fb:81:9c:87: 60:db:79:90:6d:d8:f4:d4:69:47:32:39:87:2c:d6: e0:4f:d6:ed:38:6d:aa:d7:d1:81:61:75:21:c6:30: 5d:fb:12:6f:2b:6b:fe:32:c1:2f:a3:4f:88:7d:fc: 3b:c4:99:9b:51:98:db:48:c9:1e:7d:eb:90:20:f2: 52:86:cc:0b:2b:7e:32:af:75:d0:8e:c0:ec:46:ab: eb:aa:3d:84:cc:ba:f8:4b:a3:15:e5:4d:40:a3:e7: 9a:e5:bd:e7:f9:da:10:e7:9e:61:f3:7c:26:f1:6c: ce:83:be:c6:62:85:e5:ec:dc:69:0f:c2:80:2e:25: db:38:bf:df:84:55:99:7d:05:0c:50:71:a5:86:15: f4:98:2d:40:63:8f:03:d9:60:59:67:6f:ca:2c:f0: 4f:2a:2f:5b:09:d7:f4:df:54:da:93:e6:4c:0c:75: 42:ab:28:0b:de:c7:6f:b3:ae:fb:45:4a:2a:e0:c5: 91:5a:fa:9c:52:34:c9:b3:fa:b5:0d:2c:09:dc:07: d9:ef:0f:4e:69:79:24:7d:e3:48:90:72:e2:4a:ce: 27:23:5e:d3:11:45:48:31:8c:c0:e9:12:81:7a:58: 3b:cc:33:36:a4:a1:6b:70:ce:b5:6c:e7:d1:93:17: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3A:08:9B:C0:CA:EA:CE:71:2B:70:8F:A0:4C:59:D8:10:0C:0C:A1 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:db:a2:27:2b:05:3f:2f:5b:2f:bb:06:99:11:3a:93:5a:98: 5b:d0:9f:cf:82:fb:43:20:e8:9c:46:d1:18:9c:27:f8:7b:ab: 38:db:41:1b:bb:cb:49:69:4f:54:67:7c:f6:3b:d6:28:43:06: 45:88:42:53:c5:9a:66:86:8e:10:5f:64:f0:af:8d:ac:bb:4f: 9d:af:79:23:24:4e:9c:77:3b:6a:74:96:8b:42:fa:a6:95:5d: 06:11:27:97:4d:fc:4b:6a:65:78:13:42:4b:2f:f3:dd:8c:2a: 99:15:05:c2:8e:45:23:23:0f:92:af:19:56:13:62:51:3c:14: c5:4b:52:d2:fb:ff:be:f1:5c:25:74:42:fc:fb:76:ca:51:b1: ef:77:69:f4:d2:23:b8:76:53:1d:74:97:bb:40:f9:c6:69:69: c2:c3:29:48:ce:43:be:56:98:76:b4:95:a1:b5:eb:f1:e0:27: 07:7a:b6:00:9a:cd:56:bf:ce:b8:d2:33:d7:f9:7c:70:72:9e: 1c:b9:ce:05:99:e5:f9:51:4b:20:a7:fd:47:f8:78:57:a3:c2: 8f:cc:e4:b4:62:a3:b1:fa:65:d4:13:f5:37:72:d8:68:0f:0a: 06:91:db:23:44:60:6c:26:d8:81:49:63:de:e7:ba:ec:f9:80: 7b:bf:94:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjSiz9olg27vPQKfC2Y8DlosMZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTEyMDYxNDE2MjBaFw0yNTEyMDkxNDQ4MjBaMDMxMTAvBgNV BAMTKDk1M0EwODlCQzBDQUVBQ0U3MTJCNzA4RkEwNEM1OUQ4MTAwQzBDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0Qc+eoxnyv31+4Gch2DbeZBt 2PTUaUcyOYcs1uBP1u04barX0YFhdSHGMF37Em8ra/4ywS+jT4h9/DvEmZtRmNtI yR5965Ag8lKGzAsrfjKvddCOwOxGq+uqPYTMuvhLoxXlTUCj55rlvef52hDnnmHz fCbxbM6DvsZiheXs3GkPwoAuJds4v9+EVZl9BQxQcaWGFfSYLUBjjwPZYFlnb8os 8E8qL1sJ1/TfVNqT5kwMdUKrKAvex2+zrvtFSirgxZFa+pxSNMmz+rUNLAncB9nv D05peSR940iQcuJKzicjXtMRRUgxjMDpEoF6WDvMMzakoWtwzrVs59GTF/w3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlToIm8DK6s5xK3CPoExZ2BAMDKEwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrboicrBT8vWy+7BpkROpNamFvQn8+C+0Mg 6JxG0RicJ/h7qzjbQRu7y0lpT1RnfPY71ihDBkWIQlPFmmaGjhBfZPCvjay7T52v eSMkTpx3O2p0lotC+qaVXQYRJ5dN/EtqZXgTQksv892MKpkVBcKORSMjD5KvGVYT YlE8FMVLUtL7/77xXCV0Qvz7dspRse93afTSI7h2Ux10l7tA+cZpacLDKUjOQ75W mHa0laG16/HgJwd6tgCazVa/zrjSM9f5fHBynhy5zgWZ5flRSyCn/Uf4eFejwo/M 5LRio7H6ZdQT9Tdy2GgPCgaR2yNEYGwm2IFJY97nuuz5gHu/lNk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:15 2025 by rpki-client