This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: 5xz3TR9rMqAwcLw3x5iST2V3BAilHYyMvdCTEoftGcE= Subject key identifier: 8F:89:10:86:8B:26:D6:A4:5C:C9:FE:4B:8D:A0:72:F4:E4:AA:88:39 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 08B3B3F2395A6D02E1EDC73D18C710837CD53920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02F9 Signing time: Fri 05 Dec 2025 16:52:29 +0000 Manifest this update: Fri 05 Dec 2025 16:47:29 +0000 Manifest next update: Tue 09 Dec 2025 02:02:29 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: 7UvlOuYgr8TeigGzEl9JiLm5PygQuwY/v8B3jNGKdnc=) 3: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b3:b3:f2:39:5a:6d:02:e1:ed:c7:3d:18:c7:10:83:7c:d5:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Dec 5 16:47:29 2025 GMT Not After : Dec 9 02:02:29 2025 GMT Subject: CN=8F8910868B26D6A45CC9FE4B8DA072F4E4AA8839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:82:4f:86:7d:9d:0d:62:75:8f:95:da:93: 83:ac:24:4c:61:5b:03:bc:e7:4a:6e:e3:6d:1b:c7: 89:2b:f2:1b:f5:39:1a:5b:27:e9:65:bd:c1:3a:a1: bb:10:c6:d7:b8:72:58:8a:76:41:21:34:6b:a5:7b: 1c:31:d9:d4:98:6b:97:9a:8c:2f:0e:fe:bd:fd:83: 1f:e5:80:3c:9f:ae:d9:93:b4:e3:93:ab:8d:b3:72: 2d:c2:e3:37:e4:08:f6:91:f9:3f:6e:ff:51:a7:10: 08:d1:0b:b6:63:6b:17:35:ee:32:0c:bd:af:e5:a8: db:66:fb:be:17:04:d6:5a:12:ef:24:5e:7f:e4:45: b0:50:23:b6:64:55:6c:65:36:b1:3b:7c:8d:90:1e: 93:ad:be:2d:62:1e:5a:58:e4:bd:09:21:88:56:40: ff:80:9a:1f:e1:bd:60:86:5e:34:b0:3f:1b:58:e6: 40:1f:c6:3a:ad:82:fa:c9:4a:18:b1:62:8a:24:d7: 4c:93:63:d2:e4:e0:8c:eb:b5:b7:4a:c0:a4:fc:42: 9e:22:b4:83:ad:7f:76:0e:9b:9c:72:3c:2e:1d:5e: d5:3a:d5:d9:f0:71:1d:4e:59:a1:cf:3b:29:f5:d9: c1:28:29:7c:0f:f3:83:e3:4c:86:78:e8:95:cf:36: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:89:10:86:8B:26:D6:A4:5C:C9:FE:4B:8D:A0:72:F4:E4:AA:88:39 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:da:a7:b4:19:7b:02:e4:2a:2e:3e:16:d8:3e:c6:27:d6:0a: 56:d5:22:20:d5:7b:7b:d4:91:ff:9c:12:4e:64:bc:d2:fd:01: 0b:d8:cb:9e:82:a7:37:b7:59:4f:24:fb:d6:5e:76:8a:bc:ee: f3:ef:e8:fa:a7:61:f3:29:dc:30:99:86:75:70:e5:28:17:ee: fe:1a:3a:74:20:10:9c:15:bc:eb:20:13:26:0f:1b:82:87:bc: 3b:1d:dd:82:a1:ae:d7:67:53:54:83:18:16:c6:21:5d:4c:a9: 8d:dd:17:70:e3:a5:0c:ba:c9:e0:78:2b:88:9e:32:00:5b:dc: 15:42:fe:99:9b:9a:45:21:d9:e6:62:17:b5:00:33:bb:42:36: 90:05:0d:55:b8:aa:aa:77:ca:48:da:94:0c:9e:60:48:22:06: d7:62:1d:5f:9e:17:4c:98:b8:87:08:5d:2b:40:91:6b:df:28: 3e:31:10:10:31:fc:bb:a2:df:7b:6f:18:64:27:06:5f:95:b8: 16:9e:70:d7:d8:19:86:41:44:54:8c:45:7f:ae:3a:b3:61:2f: 15:ce:46:e7:9c:e2:47:3a:0f:af:a7:d9:98:3d:ff:5f:23:1b: 0f:1b:91:02:a7:d5:e6:49:e5:22:1e:94:65:ca:74:9f:69:bc: 00:1d:d7:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLOz8jlabQLh7cc9GMcQg3zVOSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTEyMDUxNjQ3MjlaFw0yNTEyMDkwMjAyMjlaMDMxMTAvBgNV BAMTKDhGODkxMDg2OEIyNkQ2QTQ1Q0M5RkU0QjhEQTA3MkY0RTRBQTg4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5oJPhn2dDWJ1j5Xak4OsJExh WwO850pu420bx4kr8hv1ORpbJ+llvcE6obsQxte4cliKdkEhNGulexwx2dSYa5ea jC8O/r39gx/lgDyfrtmTtOOTq42zci3C4zfkCPaR+T9u/1GnEAjRC7Zjaxc17jIM va/lqNtm+74XBNZaEu8kXn/kRbBQI7ZkVWxlNrE7fI2QHpOtvi1iHlpY5L0JIYhW QP+Amh/hvWCGXjSwPxtY5kAfxjqtgvrJShixYook10yTY9Lk4IzrtbdKwKT8Qp4i tIOtf3YOm5xyPC4dXtU61dnwcR1OWaHPOyn12cEoKXwP84PjTIZ46JXPNic9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4kQhosm1qRcyf5LjaBy9OSqiDkwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETap7QZewLkKi4+Ftg+xifWClbVIiDVe3vU kf+cEk5kvNL9AQvYy56Cpze3WU8k+9Zedoq87vPv6PqnYfMp3DCZhnVw5SgX7v4a OnQgEJwVvOsgEyYPG4KHvDsd3YKhrtdnU1SDGBbGIV1MqY3dF3DjpQy6yeB4K4ie MgBb3BVC/pmbmkUh2eZiF7UAM7tCNpAFDVW4qqp3ykjalAyeYEgiBtdiHV+eF0yY uIcIXStAkWvfKD4xEBAx/Lui33tvGGQnBl+VuBaecNfYGYZBRFSMRX+uOrNhLxXO Ruec4kc6D6+n2Zg9/18jGw8bkQKn1eZJ5SIelGXKdJ9pvAAd168= -----END CERTIFICATE-----Generated at Sun Dec 7 05:54:58 2025 by rpki-client