This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: QSpPRQ4Vvbnh3d8LP/ian7ZbuHc1boaN5rtU6NvejEU= Subject key identifier: 25:CF:07:9C:41:1F:DE:3B:34:D9:1B:46:26:A8:BE:C3:60:57:58:6B Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 170835A5DF2D1C41C80DA8B1839B65CB8AAD6D5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0197 Signing time: Sat 06 Dec 2025 16:01:47 +0000 Manifest this update: Sat 06 Dec 2025 15:56:47 +0000 Manifest next update: Tue 09 Dec 2025 19:06:47 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: JVqQAWnyDc5Vj/E25tiLi2depYx8GJyfPo32jSKTmBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:08:35:a5:df:2d:1c:41:c8:0d:a8:b1:83:9b:65:cb:8a:ad:6d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Dec 6 15:56:47 2025 GMT Not After : Dec 9 19:06:47 2025 GMT Subject: CN=25CF079C411FDE3B34D91B4626A8BEC36057586B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:63:a1:78:e7:d0:ca:c5:69:1d:0c:11:70: 81:e4:0e:8d:81:a5:34:4e:88:53:26:4a:40:5d:c0: c9:c3:e7:a9:a2:0b:5a:de:f3:39:0d:fb:4b:be:00: f0:0c:66:55:39:b3:28:12:43:02:32:a5:83:66:88: 14:1b:4e:54:9e:02:27:8a:c0:f4:43:44:60:42:dc: 48:82:fd:27:91:4c:5d:fe:0c:23:7e:bf:92:d2:98: 0b:49:fe:55:f7:76:55:a5:51:d2:6e:8c:d2:97:f3: c7:66:7a:f3:5d:ca:7a:a9:a8:b8:9b:59:45:8c:88: 4f:8f:48:62:ed:01:0a:a8:fc:be:89:a3:3e:96:94: 64:f7:ff:01:76:63:e8:95:80:f2:0c:16:5b:d7:b0: 8b:80:18:d5:a1:30:3a:04:04:0b:42:bd:5b:3c:ad: a3:20:37:5c:5c:e6:c3:77:fe:59:3f:1a:f1:8f:b2: 32:a8:b8:f6:f0:e8:f1:7f:e8:7e:dc:04:c7:6f:1a: e8:90:3f:49:3b:ab:ae:19:c1:8e:3c:70:83:e4:40: 36:e5:11:27:12:23:78:90:26:13:9f:b8:cb:04:b9: 6d:b1:47:81:72:ea:04:34:5b:7d:57:38:a2:7d:ff: 2e:d8:68:75:bf:c6:c7:47:40:b5:fb:45:e4:c8:19: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:07:9C:41:1F:DE:3B:34:D9:1B:46:26:A8:BE:C3:60:57:58:6B X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a8:4e:80:c8:a1:26:46:28:60:08:50:c1:03:19:ac:70:f1: 4f:32:00:c9:98:d6:2e:6a:3f:7b:cd:31:05:61:31:48:fc:76: 3d:40:be:4e:7e:73:b2:ac:90:be:bd:fc:8f:1a:1f:cc:7c:d5: ee:4b:bc:da:25:df:32:60:2d:ab:92:30:39:81:25:97:86:12: 60:dd:a0:c6:3e:c1:cf:e0:7d:46:43:47:28:1b:2f:cc:da:17: 54:6e:85:00:e3:de:28:35:ce:3b:9e:19:ec:d1:a9:2e:15:d9: 91:c9:3b:02:26:fd:16:e5:26:99:aa:db:32:79:90:0e:8a:fb: aa:00:33:de:ff:49:3b:4c:b7:31:52:39:4b:7c:fd:06:15:c9: 0d:4d:29:16:be:08:a3:97:48:7c:39:1e:85:cc:81:e7:90:40: 38:c6:47:42:b9:d2:17:d7:7b:b0:0a:93:45:ce:d3:1a:ee:bc: 31:c9:89:44:cb:8e:f3:3a:78:8e:9a:af:19:7b:17:c8:b5:bb: 3a:b7:1a:48:83:55:e0:25:ca:02:e9:cb:fc:d0:de:db:5a:48: b7:76:b7:a3:fa:db:df:8e:44:14:cc:e4:d0:a0:f9:47:d8:e6: 25:a2:c9:32:e7:03:49:94:39:8d:3b:a9:3d:9e:17:24:de:78: ae:e5:b5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwg1pd8tHEHIDaixg5tly4qtbV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTEyMDYxNTU2NDdaFw0yNTEyMDkxOTA2NDdaMDMxMTAvBgNV BAMTKDI1Q0YwNzlDNDExRkRFM0IzNEQ5MUI0NjI2QThCRUMzNjA1NzU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMI2OheOfQysVpHQwRcIHkDo2B pTROiFMmSkBdwMnD56miC1re8zkN+0u+APAMZlU5sygSQwIypYNmiBQbTlSeAieK wPRDRGBC3EiC/SeRTF3+DCN+v5LSmAtJ/lX3dlWlUdJujNKX88dmevNdynqpqLib WUWMiE+PSGLtAQqo/L6Joz6WlGT3/wF2Y+iVgPIMFlvXsIuAGNWhMDoEBAtCvVs8 raMgN1xc5sN3/lk/GvGPsjKouPbw6PF/6H7cBMdvGuiQP0k7q64ZwY48cIPkQDbl EScSI3iQJhOfuMsEuW2xR4Fy6gQ0W31XOKJ9/y7YaHW/xsdHQLX7ReTIGQM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJc8HnEEf3js02RtGJqi+w2BXWGswHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyoToDIoSZGKGAIUMEDGaxw8U8yAMmY1i5q P3vNMQVhMUj8dj1Avk5+c7KskL69/I8aH8x81e5LvNol3zJgLauSMDmBJZeGEmDd oMY+wc/gfUZDRygbL8zaF1RuhQDj3ig1zjueGezRqS4V2ZHJOwIm/RblJpmq2zJ5 kA6K+6oAM97/STtMtzFSOUt8/QYVyQ1NKRa+CKOXSHw5HoXMgeeQQDjGR0K50hfX e7AKk0XO0xruvDHJiUTLjvM6eI6arxl7F8i1uzq3GkiDVeAlygLpy/zQ3ttaSLd2 t6P629+ORBTM5NCg+UfY5iWiyTLnA0mUOY07qT2eFyTeeK7ltRk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:03 2025 by rpki-client