This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: M/jNZ/DVSQUG3RCqF+CtjBQZM1/V4BGb0saLupqLrY8= Subject key identifier: 64:23:CF:BA:07:FB:68:05:86:15:F3:01:54:00:DA:3B:2F:69:95:4C Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 3F0892803D77B7E81C8C5499268985D8D690C7AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 046F Signing time: Thu 04 Dec 2025 20:30:39 +0000 Manifest this update: Thu 04 Dec 2025 20:25:39 +0000 Manifest next update: Mon 08 Dec 2025 07:47:39 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=) 3: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: pdhk3AziCb5WJIZrIXhfEcBnUAgsqM5/eJJYq0aEOOY=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:08:92:80:3d:77:b7:e8:1c:8c:54:99:26:89:85:d8:d6:90:c7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Dec 4 20:25:39 2025 GMT Not After : Dec 8 07:47:39 2025 GMT Subject: CN=6423CFBA07FB68058615F3015400DA3B2F69954C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:b1:e0:ee:7e:ea:40:f5:d4:cb:1b:63:e7: 76:a9:18:cb:7e:0b:90:05:d4:0b:64:1d:ec:b0:54: d6:0c:8e:47:b0:16:89:d6:f2:b2:f3:d8:02:05:e8: d0:9f:d9:cf:5c:4f:a9:7b:4d:63:f6:4c:18:35:0b: 76:ef:fd:64:e1:44:58:d1:77:c8:b0:ad:1d:8b:82: 71:92:83:0d:58:06:62:69:01:73:dd:d4:e9:4a:7d: 59:17:44:aa:2c:12:b0:bc:f8:41:a4:fa:63:98:ae: bc:0f:2e:54:6b:da:11:73:e6:0d:dc:93:b4:ea:ef: 72:c8:44:f0:cb:4d:05:8b:e7:5f:eb:ad:66:6d:bf: b4:0e:8f:c7:1f:78:fd:e8:de:06:7f:21:85:79:a8: 2d:11:04:0d:97:00:15:ba:c8:20:9f:5b:8f:e0:6f: 68:6b:be:d2:40:04:45:43:c2:62:56:b8:6b:47:3b: 46:8c:62:15:83:34:4c:35:6f:0e:12:84:2e:a4:be: f5:ea:59:0d:29:c5:2c:c3:e5:19:11:a5:8f:af:a0: 88:04:cd:1a:d5:ab:1a:84:2a:bc:8c:a7:06:d7:3f: b5:cb:ad:5b:7c:e3:58:0d:5a:93:9d:d9:96:bd:12: 08:9a:45:58:6e:63:c2:f6:c7:99:cb:92:69:cd:ec: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:23:CF:BA:07:FB:68:05:86:15:F3:01:54:00:DA:3B:2F:69:95:4C X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:47:2d:6e:88:65:d8:d2:dc:f5:37:88:68:29:e7:74:ca:10: d5:be:23:06:f7:d2:a0:71:25:1e:f4:cc:22:91:67:e0:ac:14: ee:4a:55:45:07:62:2d:d2:d5:b0:39:9d:f3:af:2a:a1:2a:bc: a1:9d:56:c1:80:75:4a:d6:6a:44:dd:f2:25:ee:7a:c0:c9:b5: 4c:8e:aa:f2:3a:fd:aa:05:72:f2:6e:e9:a7:5a:80:65:2e:56: ca:84:2b:42:07:d8:6a:63:fe:f3:9f:60:71:81:5a:5b:eb:54: 88:6c:f8:22:e2:0b:18:fe:cb:ba:3f:ea:fe:fb:16:50:ee:00: 7b:47:79:e8:e4:53:a2:9c:7f:82:f0:6c:83:eb:42:81:99:ef: d5:16:e2:36:ad:d0:a4:c4:a0:97:e4:eb:61:14:78:ba:18:aa: f6:83:5d:26:59:f0:f5:d6:71:87:6d:fb:48:56:18:3b:aa:35: 73:fc:98:06:98:03:37:07:76:e3:aa:43:37:33:50:f2:10:7a: f8:3d:27:76:b9:37:4a:a1:76:51:a1:e6:e7:e6:ad:13:d6:cf: 19:11:83:7a:d1:44:c1:a5:4a:ea:33:05:7b:2c:57:d2:a8:dd: cc:8d:ca:00:f3:84:22:58:a7:1b:e6:bc:da:df:fc:12:40:7d: d8:11:bb:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwiSgD13t+gcjFSZJomF2NaQx6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTEyMDQyMDI1MzlaFw0yNTEyMDgwNzQ3MzlaMDMxMTAvBgNV BAMTKDY0MjNDRkJBMDdGQjY4MDU4NjE1RjMwMTU0MDBEQTNCMkY2OTk1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47bHg7n7qQPXUyxtj53apGMt+ C5AF1AtkHeywVNYMjkewFonW8rLz2AIF6NCf2c9cT6l7TWP2TBg1C3bv/WThRFjR d8iwrR2LgnGSgw1YBmJpAXPd1OlKfVkXRKosErC8+EGk+mOYrrwPLlRr2hFz5g3c k7Tq73LIRPDLTQWL51/rrWZtv7QOj8cfeP3o3gZ/IYV5qC0RBA2XABW6yCCfW4/g b2hrvtJABEVDwmJWuGtHO0aMYhWDNEw1bw4ShC6kvvXqWQ0pxSzD5RkRpY+voIgE zRrVqxqEKryMpwbXP7XLrVt841gNWpOd2Za9EgiaRVhuY8L2x5nLkmnN7GoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZCPPugf7aAWGFfMBVADaOy9plUwwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBHLW6IZdjS3PU3iGgp53TKENW+Iwb30qBx JR70zCKRZ+CsFO5KVUUHYi3S1bA5nfOvKqEqvKGdVsGAdUrWakTd8iXuesDJtUyO qvI6/aoFcvJu6adagGUuVsqEK0IH2Gpj/vOfYHGBWlvrVIhs+CLiCxj+y7o/6v77 FlDuAHtHeejkU6Kcf4LwbIPrQoGZ79UW4jat0KTEoJfk62EUeLoYqvaDXSZZ8PXW cYdt+0hWGDuqNXP8mAaYAzcHduOqQzczUPIQevg9J3a5N0qhdlGh5ufmrRPWzxkR g3rRRMGlSuozBXssV9Ko3cyNygDzhCJYpxvmvNrf/BJAfdgRu4g= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:43 2025 by rpki-client