This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: kG6O0mUPftd2C8PE1m+SUQIfBoWM/pF6G2rdSrZ9Yqg= Subject key identifier: 84:0A:6D:55:59:38:7C:DF:C0:E8:B6:AD:E1:55:F6:EC:75:54:AF:E6 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 786DFB4B1C323321F3C18A86D2830C881C479DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01B3 Signing time: Sat 06 Dec 2025 14:10:58 +0000 Manifest this update: Sat 06 Dec 2025 14:05:58 +0000 Manifest next update: Tue 09 Dec 2025 17:13:58 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: 5vPr7oqG9aTMO6IUlb4slg4/jVZB2Np4nDWyOSoMq4c=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:fb:4b:1c:32:33:21:f3:c1:8a:86:d2:83:0c:88:1c:47:9d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Dec 6 14:05:58 2025 GMT Not After : Dec 9 17:13:58 2025 GMT Subject: CN=840A6D5559387CDFC0E8B6ADE155F6EC7554AFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:50:bf:a5:ca:d0:47:13:0e:77:cc:21:71: 90:8c:13:28:5a:1f:0d:0a:2b:ef:bd:23:d1:fe:bf: 06:be:e7:a7:cc:89:1c:bf:42:33:8c:df:fc:f9:0b: 6d:65:10:94:31:e7:0e:a1:7c:45:93:91:97:d3:65: cb:8c:5b:36:1c:02:99:45:47:25:b8:2a:a1:6f:a0: e9:df:90:79:0f:b1:7d:53:78:ce:f3:05:40:24:79: 0c:53:fe:5b:7f:c1:02:e2:31:68:9a:73:c3:ab:2b: f8:99:3d:bf:d7:2f:b9:d7:9c:da:01:b6:08:0b:41: af:29:dd:bf:16:ca:89:59:03:47:46:bd:70:e7:96: 59:f0:04:21:72:28:62:a0:ef:aa:5f:2b:e5:10:10: 36:0a:03:ef:36:12:b4:d2:81:f8:7e:0e:bd:9d:ad: 83:3f:36:9f:2b:f9:40:e1:e9:c5:00:09:f3:ce:2e: 66:41:d2:2c:bc:4a:a2:76:33:74:86:f1:bf:83:43: e1:75:fd:db:fe:bb:15:db:5a:b9:aa:ea:b0:d9:a6: 22:54:b8:1b:05:af:fe:f1:ee:d9:ec:69:9e:0b:eb: 15:99:fe:f1:06:8c:71:50:eb:26:55:8c:6c:84:25: 32:3c:47:ee:4e:7d:65:88:72:c8:cf:1a:b8:fb:b8: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0A:6D:55:59:38:7C:DF:C0:E8:B6:AD:E1:55:F6:EC:75:54:AF:E6 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:91:11:d0:d9:2f:5b:86:4c:83:fe:e2:35:4d:65:ed:3c: 70:2d:e2:04:40:03:ab:96:51:6e:39:87:43:e7:4b:02:a9:ff: dc:ee:d8:a5:b6:e1:55:3a:f3:e5:38:d1:33:4c:a3:e4:05:7c: 75:ca:a8:b4:21:bc:86:e1:a0:7b:96:0c:1b:6c:e2:a2:a3:33: 6b:49:47:0a:07:5f:6a:fa:cc:f5:a5:66:66:46:a6:91:40:d6: 3b:2c:07:66:46:50:14:61:e4:d3:d6:8e:1a:dc:93:2e:c4:5c: a1:98:3c:4c:ed:e8:06:2d:2f:3f:7e:1f:b4:23:6a:3e:a0:a5: ab:33:bc:90:72:a8:67:2d:10:3f:37:2f:c1:02:9c:25:26:e6: 6b:3d:13:39:e5:8b:a3:a2:1d:e4:e8:e6:fc:87:48:da:f8:e6: 72:09:60:51:23:36:04:2c:50:c9:05:b2:e7:b5:60:4e:cf:a1: ff:c1:df:e0:dc:c0:4a:6a:28:e8:07:28:e5:d7:b9:28:1e:a5: 0e:ba:13:d6:1a:f1:89:d0:13:96:06:b3:55:dc:95:51:04:8e: f2:bf:a6:69:2e:7e:b2:d1:cb:c6:47:f9:ea:21:a0:20:a3:be: 7b:cc:16:3b:9b:d6:80:10:85:17:13:02:5b:d4:b2:a2:97:07: 3b:10:f6:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeG37SxwyMyHzwYqG0oMMiBxHndQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTEyMDYxNDA1NThaFw0yNTEyMDkxNzEzNThaMDMxMTAvBgNV BAMTKDg0MEE2RDU1NTkzODdDREZDMEU4QjZBREUxNTVGNkVDNzU1NEFGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTFC/pcrQRxMOd8whcZCMEyha Hw0KK++9I9H+vwa+56fMiRy/QjOM3/z5C21lEJQx5w6hfEWTkZfTZcuMWzYcAplF RyW4KqFvoOnfkHkPsX1TeM7zBUAkeQxT/lt/wQLiMWiac8OrK/iZPb/XL7nXnNoB tggLQa8p3b8WyolZA0dGvXDnllnwBCFyKGKg76pfK+UQEDYKA+82ErTSgfh+Dr2d rYM/Np8r+UDh6cUACfPOLmZB0iy8SqJ2M3SG8b+DQ+F1/dv+uxXbWrmq6rDZpiJU uBsFr/7x7tnsaZ4L6xWZ/vEGjHFQ6yZVjGyEJTI8R+5OfWWIcsjPGrj7uP71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAptVVk4fN/A6Lat4VX27HVUr+YwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICWkRHQ2S9bhkyD/uI1TWXtPHAt4gRAA6uW UW45h0PnSwKp/9zu2KW24VU68+U40TNMo+QFfHXKqLQhvIbhoHuWDBts4qKjM2tJ RwoHX2r6zPWlZmZGppFA1jssB2ZGUBRh5NPWjhrcky7EXKGYPEzt6AYtLz9+H7Qj aj6gpaszvJByqGctED83L8ECnCUm5ms9Eznli6OiHeTo5vyHSNr45nIJYFEjNgQs UMkFsue1YE7Pof/B3+DcwEpqKOgHKOXXuSgepQ66E9Ya8YnQE5YGs1XclVEEjvK/ pmkufrLRy8ZH+eohoCCjvnvMFjub1oAQhRcTAlvUsqKXBzsQ9pE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:51 2025 by rpki-client