This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: r5eVAteBYPZTQg/WEwVOt3jZMcSh757vk0wCRa94uDo= Subject key identifier: BC:7E:16:D2:C2:0B:76:7D:9A:57:FE:D4:99:6A:DC:0C:1D:F4:A1:89 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 20C574710D820E7EC089A7AC862760DFC7912956 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 0503 Signing time: Sat 06 Dec 2025 04:30:55 +0000 Manifest this update: Sat 06 Dec 2025 04:25:55 +0000 Manifest next update: Tue 09 Dec 2025 07:32:55 +0000 Files and hashes: 1: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 2: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 3: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 4: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 6: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: 2NUBoK2t2dwDlCuYaQUbx7VzA0bG1uEg6uhGrRaAgi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c5:74:71:0d:82:0e:7e:c0:89:a7:ac:86:27:60:df:c7:91:29:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Dec 6 04:25:55 2025 GMT Not After : Dec 9 07:32:55 2025 GMT Subject: CN=BC7E16D2C20B767D9A57FED4996ADC0C1DF4A189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:9f:e1:fe:66:a6:8b:a1:18:10:fe:0a:ee: c3:24:c5:fd:4b:6e:36:05:cf:55:4f:2a:7d:b5:6b: 72:1f:81:2c:96:7b:2b:9f:56:06:5d:71:c6:ff:c1: 39:3e:11:43:45:53:7b:dc:d9:68:25:1d:c2:85:93: 8d:9c:36:03:55:90:cb:b9:e8:f7:69:88:b1:ff:d8: 84:6b:7d:33:c9:4e:22:76:48:07:d8:c5:e7:43:40: 13:c6:0a:f6:17:6a:75:a2:12:07:5c:5f:e3:81:3f: 20:41:d5:1d:ac:57:94:e1:c2:f0:c4:cd:59:de:31: 90:15:d4:51:d2:4c:2a:ca:ed:54:82:31:9d:15:d4: 5a:e5:3a:7c:c7:4f:b1:30:4b:11:b5:2f:cc:22:f2: b4:96:d2:4d:12:a7:0f:89:ff:fe:54:56:7e:3e:40: 5c:34:ce:5f:3e:0e:2e:78:7f:f5:83:6d:2d:23:f7: 33:1c:3f:6c:97:4f:7d:c9:70:ac:8b:10:0e:5f:c1: b7:a1:c9:b7:25:91:e5:84:02:c3:1e:9b:10:6f:85: fe:05:c4:d3:dd:b8:12:d2:15:e8:09:7f:b3:43:05: a7:8c:81:0e:34:6b:4c:fd:cb:83:e1:2c:60:0d:59: 68:0b:26:2d:42:6b:e6:6a:a7:e8:5e:0e:d5:b8:4a: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7E:16:D2:C2:0B:76:7D:9A:57:FE:D4:99:6A:DC:0C:1D:F4:A1:89 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d9:46:02:01:80:e6:7c:0c:85:5f:64:0b:db:0d:e3:c3:7f: a1:c5:7b:58:b6:9e:c0:20:28:75:f2:d5:04:86:ba:e4:d8:df: 02:69:e3:30:41:89:01:ab:a0:e5:21:4b:61:78:fb:02:5f:17: f1:88:7e:1a:0d:97:b1:fe:71:01:be:02:90:21:ed:25:6a:af: 6d:37:84:dc:4b:37:f1:d8:89:0d:15:48:07:94:41:a0:d3:49: e6:16:0b:94:c8:2c:f6:89:fe:ef:bb:95:f5:cc:d5:03:17:a7: a6:b3:1f:58:cd:b1:98:36:47:a3:ed:de:ac:ce:16:97:a8:03: 7d:67:e0:05:c6:26:12:2a:d5:08:3b:c5:99:ee:dc:af:b7:7b: 3c:fd:4b:29:4d:0c:84:96:a6:11:dc:3b:1d:5a:f5:b5:dd:63: cb:b6:2d:4d:bf:86:b7:7b:4b:01:5c:d1:96:92:f1:18:12:f0: 04:6c:aa:d4:0f:f8:ef:c2:e3:64:48:d6:42:42:8f:55:db:f6: 5c:ef:30:7a:f6:ad:49:25:8d:c3:9d:c1:82:88:05:e6:5f:09: 77:47:a8:b9:0a:f3:1f:cb:9f:7f:e5:1a:0e:4d:82:61:f5:90: 98:3d:e8:70:5d:18:4c:b8:09:43:c5:e9:ab:a8:bc:4f:64:72: 57:b1:83:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMV0cQ2CDn7Aiaeshidg38eRKVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTEyMDYwNDI1NTVaFw0yNTEyMDkwNzMyNTVaMDMxMTAvBgNV BAMTKEJDN0UxNkQyQzIwQjc2N0Q5QTU3RkVENDk5NkFEQzBDMURGNEExODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzZ/h/mami6EYEP4K7sMkxf1L bjYFz1VPKn21a3IfgSyWeyufVgZdccb/wTk+EUNFU3vc2WglHcKFk42cNgNVkMu5 6PdpiLH/2IRrfTPJTiJ2SAfYxedDQBPGCvYXanWiEgdcX+OBPyBB1R2sV5ThwvDE zVneMZAV1FHSTCrK7VSCMZ0V1FrlOnzHT7EwSxG1L8wi8rSW0k0Spw+J//5UVn4+ QFw0zl8+Di54f/WDbS0j9zMcP2yXT33JcKyLEA5fwbehybclkeWEAsMemxBvhf4F xNPduBLSFegJf7NDBaeMgQ40a0z9y4PhLGANWWgLJi1Ca+Zqp+heDtW4SuJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvH4W0sILdn2aV/7UmWrcDB30oYkwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/ZRgIBgOZ8DIVfZAvbDePDf6HFe1i2nsAg KHXy1QSGuuTY3wJp4zBBiQGroOUhS2F4+wJfF/GIfhoNl7H+cQG+ApAh7SVqr203 hNxLN/HYiQ0VSAeUQaDTSeYWC5TILPaJ/u+7lfXM1QMXp6azH1jNsZg2R6Pt3qzO FpeoA31n4AXGJhIq1Qg7xZnu3K+3ezz9SylNDISWphHcOx1a9bXdY8u2LU2/hrd7 SwFc0ZaS8RgS8ARsqtQP+O/C42RI1kJCj1Xb9lzvMHr2rUkljcOdwYKIBeZfCXdH qLkK8x/Ln3/lGg5NgmH1kJg96HBdGEy4CUPF6auovE9kclexg7U= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:14 2025 by rpki-client