This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: Dv5p3gEMaIK0nbIMyKsxKCnpMUXUYSJsHUit+1psow4= Subject key identifier: B3:BB:48:89:D3:90:80:21:A2:B1:46:F9:D1:B6:B0:4E:7E:AE:BF:FE Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 7D3B55C5890F5BE67248849DADAAF5EED37F57D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03DC Signing time: Sun 07 Dec 2025 05:21:13 +0000 Manifest this update: Sun 07 Dec 2025 05:16:13 +0000 Manifest next update: Wed 10 Dec 2025 06:14:13 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: Yhud8+1AO9zSvWeKHdlk+X5cNGusrm2juk74VCJkUPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3b:55:c5:89:0f:5b:e6:72:48:84:9d:ad:aa:f5:ee:d3:7f:57:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Dec 7 05:16:13 2025 GMT Not After : Dec 10 06:14:13 2025 GMT Subject: CN=B3BB4889D3908021A2B146F9D1B6B04E7EAEBFFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:55:17:a6:6c:29:e2:83:3e:98:cf:35:14: 05:47:6b:e6:1c:9b:67:10:96:5e:1a:e5:59:f6:86: 8d:bb:da:89:e1:aa:a2:5f:ce:c7:13:07:c7:fe:fd: 06:eb:a2:ed:36:d9:cd:8f:69:59:d3:f1:53:7c:43: f7:5f:de:69:a5:c3:31:27:f3:d1:8a:68:eb:a1:ab: ce:36:5c:09:a7:b1:92:d3:f7:7a:40:e6:55:85:79: 2c:4e:05:34:38:b4:78:a3:2c:a6:2a:c7:62:31:6b: f7:b2:b6:c1:ae:eb:86:c5:f2:c8:fd:38:23:90:14: 4e:8c:8a:be:e5:c4:c8:6b:88:58:7d:fa:63:79:9f: 65:2a:76:0a:88:f8:7e:36:0e:68:34:38:ed:51:60: e7:7a:38:ca:46:e0:ed:d1:18:7f:31:51:09:b8:16: d2:04:72:1c:59:18:9b:36:99:e9:60:aa:67:ba:18: 1b:14:3b:94:8e:38:6e:69:6d:46:62:80:8e:ee:dc: 4b:87:3d:a5:02:89:58:c9:36:aa:5f:80:99:df:fd: 77:c2:bd:1e:30:97:b3:9a:32:d0:fc:a2:f8:e8:d9: 82:11:c8:61:5a:9c:7c:d8:1b:e3:9c:04:e0:2b:d0: fa:e6:81:ec:21:94:27:1a:e6:17:ef:45:61:25:68: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BB:48:89:D3:90:80:21:A2:B1:46:F9:D1:B6:B0:4E:7E:AE:BF:FE X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:6a:1f:be:90:7f:ed:51:92:14:93:df:f4:34:78:ba:84: 78:3e:33:89:0a:c3:ec:27:b8:58:ab:76:d9:82:95:aa:5c:d6: 6d:ba:aa:14:8f:28:15:97:eb:44:e6:43:7a:17:bd:06:15:44: de:0b:36:86:41:3b:d0:f3:48:c6:3d:6c:7c:6a:28:2e:c8:35: a9:9d:f2:bf:b0:ee:fe:34:84:f6:df:f3:4a:25:95:c8:da:7f: 4f:76:3b:62:66:68:95:bf:59:ee:68:0c:aa:24:2c:d1:bf:59: 27:47:26:68:32:55:e2:70:3f:5e:15:05:c4:ec:99:3b:42:77: 6e:bf:1a:26:61:a4:bc:45:c6:f0:1d:bd:76:fb:4f:f1:5c:fa: ae:3b:48:7f:59:ad:c2:f4:42:fa:cc:0f:4f:50:63:90:78:24: 7e:5d:30:f8:8b:fe:37:f7:00:9f:29:a3:7f:af:4b:4f:78:dc: 86:a5:a3:6b:50:b4:bf:7e:9d:c3:bb:fb:82:a0:bb:2a:4f:46: 6b:5c:b1:c7:4d:ae:d5:cd:b7:38:24:ca:8d:24:7d:b2:20:44: 93:cc:09:10:7a:c2:c7:01:0b:a9:d2:4a:44:08:8f:7b:23:f0: 71:44:9a:21:c6:c0:0a:d3:e4:45:e1:cd:35:bd:b3:4e:e5:93: dd:ff:5e:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTtVxYkPW+ZySISdrar17tN/V9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTEyMDcwNTE2MTNaFw0yNTEyMTAwNjE0MTNaMDMxMTAvBgNV BAMTKEIzQkI0ODg5RDM5MDgwMjFBMkIxNDZGOUQxQjZCMDRFN0VBRUJGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYFUXpmwp4oM+mM81FAVHa+Yc m2cQll4a5Vn2ho272onhqqJfzscTB8f+/Qbrou022c2PaVnT8VN8Q/df3mmlwzEn 89GKaOuhq842XAmnsZLT93pA5lWFeSxOBTQ4tHijLKYqx2Ixa/eytsGu64bF8sj9 OCOQFE6Mir7lxMhriFh9+mN5n2UqdgqI+H42Dmg0OO1RYOd6OMpG4O3RGH8xUQm4 FtIEchxZGJs2melgqme6GBsUO5SOOG5pbUZigI7u3EuHPaUCiVjJNqpfgJnf/XfC vR4wl7OaMtD8ovjo2YIRyGFanHzYG+OcBOAr0PrmgewhlCca5hfvRWElaHsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs7tIidOQgCGisUb50bawTn6uv/4wHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBYah++kH/tUZIUk9/0NHi6hHg+M4kKw+wn uFirdtmClapc1m26qhSPKBWX60TmQ3oXvQYVRN4LNoZBO9DzSMY9bHxqKC7INamd 8r+w7v40hPbf80ollcjaf092O2JmaJW/We5oDKokLNG/WSdHJmgyVeJwP14VBcTs mTtCd26/GiZhpLxFxvAdvXb7T/Fc+q47SH9ZrcL0QvrMD09QY5B4JH5dMPiL/jf3 AJ8po3+vS0943Ialo2tQtL9+ncO7+4KguypPRmtcscdNrtXNtzgkyo0kfbIgRJPM CRB6wscBC6nSSkQIj3sj8HFEmiHGwArT5EXhzTW9s07lk93/XtU= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:01 2025 by rpki-client