This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: DYOOhvN5X4i1SpiHCx5moboQnSYFAxvi70ljx9bAILc= Subject key identifier: 55:1D:10:AA:CE:A3:E0:F9:CE:FF:B0:02:92:AD:72:98:D1:73:9A:A3 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 0EB7D1BD77D830325A3E10F6700D8CC7B2569D65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 0515 Signing time: Fri 05 Dec 2025 15:31:12 +0000 Manifest this update: Fri 05 Dec 2025 15:26:12 +0000 Manifest next update: Mon 08 Dec 2025 17:30:12 +0000 Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: /doUay/w9F3t2L52uIorNqDoyI0qqtPYDJtPUQ3D+AE=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b7:d1:bd:77:d8:30:32:5a:3e:10:f6:70:0d:8c:c7:b2:56:9d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Dec 5 15:26:12 2025 GMT Not After : Dec 8 17:30:12 2025 GMT Subject: CN=551D10AACEA3E0F9CEFFB00292AD7298D1739AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:4d:9f:97:10:60:53:b6:e8:0c:2d:bc:d9: e1:4c:7e:29:dd:72:05:63:b8:7f:98:52:7a:31:4d: db:5e:d6:6e:2d:95:a6:7d:14:86:fb:44:0f:71:bb: 25:c5:81:f8:02:65:3b:3e:dc:9e:f9:ed:1e:0d:06: 85:17:c1:8e:92:42:79:65:27:5e:a1:b6:ad:74:16: ef:a5:8e:79:18:a0:51:63:81:3a:f5:06:a2:de:8e: 58:c1:5f:42:b9:d4:c5:38:20:c8:11:fd:0e:92:55: 1e:39:e1:b0:01:a4:ed:2c:42:76:82:ad:32:03:4c: eb:38:b6:0b:43:84:ce:0c:fd:1c:4a:c5:14:d1:4a: 09:a9:1e:f5:94:9e:65:5a:01:5b:e4:9c:f7:8d:75: 09:39:5f:d7:e4:b9:6a:88:46:fd:39:2e:3b:08:a1: 59:3b:e3:01:1b:f0:5a:27:37:cf:7d:b9:9b:00:e3: 45:33:7e:44:ad:10:45:22:b9:ac:1d:e0:41:f4:eb: 3e:b0:42:f1:f1:a4:dd:c3:cd:cd:74:13:12:ad:36: ac:53:48:60:02:56:cc:37:97:0d:f8:95:e9:fc:dc: be:5c:c4:7e:f9:7c:1a:93:44:23:ef:b7:9d:f9:8e: 8a:66:c6:bb:e7:3d:47:eb:f5:32:0e:cd:bd:87:24: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1D:10:AA:CE:A3:E0:F9:CE:FF:B0:02:92:AD:72:98:D1:73:9A:A3 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:14:a4:69:82:8c:cf:e0:9f:e2:5e:fd:af:b5:4e:e3:39:d3: b5:e2:f6:37:f5:ba:29:46:32:59:e9:24:62:39:4c:52:d2:b1: 7f:75:c7:e0:93:60:4c:57:8e:b0:fa:02:48:00:00:bd:ec:06: 58:64:be:a5:87:50:9d:4c:6d:43:8c:37:30:71:01:a3:95:9c: 48:21:10:04:43:e5:3f:6c:dd:38:11:ec:db:94:5c:80:b9:55: 6d:20:d8:b3:9a:3b:89:34:de:63:45:a9:28:c5:0b:41:e6:62: 5b:cf:2e:fa:96:df:32:82:2c:d1:ff:32:d1:b0:09:9f:03:5a: c5:4c:ad:2d:a7:dc:ae:85:f8:15:90:f8:96:66:4b:ae:05:5b: 4c:fc:f8:33:07:73:29:f5:d7:a6:32:b5:16:73:95:51:e1:86: 7e:9f:72:d7:d9:6b:ae:54:4f:e6:df:f8:d7:bb:48:a4:b6:50: 53:90:23:b6:10:70:c5:b6:f7:a8:85:92:ad:cd:32:d9:a7:91: d9:00:91:63:05:42:6d:36:6e:d7:12:f8:32:9a:44:69:f7:48: 82:d1:57:eb:60:8e:02:84:35:34:e8:f0:f7:43:cf:8b:64:cc: e6:ec:31:18:ce:53:8d:99:9e:16:23:78:9e:6d:b9:2e:5e:5f: 1a:4f:f7:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrfRvXfYMDJaPhD2cA2Mx7JWnWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTEyMDUxNTI2MTJaFw0yNTEyMDgxNzMwMTJaMDMxMTAvBgNV BAMTKDU1MUQxMEFBQ0VBM0UwRjlDRUZGQjAwMjkyQUQ3Mjk4RDE3MzlBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvF02flxBgU7boDC282eFMfind cgVjuH+YUnoxTdte1m4tlaZ9FIb7RA9xuyXFgfgCZTs+3J757R4NBoUXwY6SQnll J16htq10Fu+ljnkYoFFjgTr1BqLejljBX0K51MU4IMgR/Q6SVR454bABpO0sQnaC rTIDTOs4tgtDhM4M/RxKxRTRSgmpHvWUnmVaAVvknPeNdQk5X9fkuWqIRv05LjsI oVk74wEb8FonN899uZsA40UzfkStEEUiuawd4EH06z6wQvHxpN3Dzc10ExKtNqxT SGACVsw3lw34len83L5cxH75fBqTRCPvt535jopmxrvnPUfr9TIOzb2HJOz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR0Qqs6j4PnO/7ACkq1ymNFzmqMwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEUpGmCjM/gn+Je/a+1TuM507Xi9jf1uilG MlnpJGI5TFLSsX91x+CTYExXjrD6AkgAAL3sBlhkvqWHUJ1MbUOMNzBxAaOVnEgh EARD5T9s3TgR7NuUXIC5VW0g2LOaO4k03mNFqSjFC0HmYlvPLvqW3zKCLNH/MtGw CZ8DWsVMrS2n3K6F+BWQ+JZmS64FW0z8+DMHcyn116YytRZzlVHhhn6fctfZa65U T+bf+Ne7SKS2UFOQI7YQcMW296iFkq3NMtmnkdkAkWMFQm02btcS+DKaRGn3SILR V+tgjgKENTTo8PdDz4tkzObsMRjOU42ZnhYjeJ5tuS5eXxpP95s= -----END CERTIFICATE-----Generated at Sun Dec 7 06:56:41 2025 by rpki-client