This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: xrxtVlTO9L+0C14kdhBWBwXzVY+ZIjIUMIza1TuYY/I= Subject key identifier: 97:9B:50:D1:9A:3D:2C:F5:19:D2:1F:9C:B9:BA:F8:C5:D6:59:55:51 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 2D3FA7AA0F8360A757D34EDE7CC9F225DDD5CC22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0261 Signing time: Fri 05 Dec 2025 08:10:39 +0000 Manifest this update: Fri 05 Dec 2025 08:05:39 +0000 Manifest next update: Mon 08 Dec 2025 12:29:39 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=) 4: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: LL5QadVhxY6hXpPs962jcvjv6AFZkHFg5Ui+t+Y3iNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3f:a7:aa:0f:83:60:a7:57:d3:4e:de:7c:c9:f2:25:dd:d5:cc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Dec 5 08:05:39 2025 GMT Not After : Dec 8 12:29:39 2025 GMT Subject: CN=979B50D19A3D2CF519D21F9CB9BAF8C5D6595551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:d5:32:54:ba:89:cb:e1:48:76:87:e0:78: 5c:e8:8a:a4:c2:90:86:18:84:f4:5e:88:2a:45:5a: 10:aa:db:8a:fc:b3:c7:4f:1e:71:cb:b1:d4:46:7a: 7b:5f:ab:d7:ca:1a:37:f9:b5:90:b8:a7:51:5f:3b: 8f:33:70:c2:17:68:16:5c:d3:8b:09:9a:f9:99:b3: df:1f:40:91:9b:ea:dc:0f:eb:f8:c6:ad:e0:70:1e: f5:7d:60:7c:2b:22:48:08:77:13:ed:cf:41:d8:b4: a8:53:50:d7:68:11:9b:24:42:b7:32:4e:53:0a:56: fa:34:85:23:41:fb:45:78:69:23:c7:dc:a5:1d:78: 7e:0c:ff:a0:f5:38:ab:08:a9:b0:b0:66:8d:52:4b: ed:78:84:54:aa:1f:46:c5:f2:5a:c6:a2:01:fc:4f: 46:f9:ea:6f:20:ed:52:2d:73:57:a1:f6:d0:36:44: 11:42:9c:d1:8e:30:d9:d6:55:d4:f6:13:11:a5:c2: d6:2a:f9:31:70:15:38:46:18:21:6f:6e:ba:5f:e5: de:ca:ba:d4:61:46:5e:75:14:37:be:34:53:d9:e9: a0:0b:85:ff:72:37:22:cc:b2:60:7a:1b:a9:90:0f: 8c:73:fe:e8:ac:05:c8:1b:a6:3d:0a:78:25:c2:e4: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:50:D1:9A:3D:2C:F5:19:D2:1F:9C:B9:BA:F8:C5:D6:59:55:51 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:b0:3c:a1:fb:97:3d:bb:2b:41:2a:8c:25:52:b9:52:2b: c3:23:68:b6:8b:b7:88:46:9c:26:0a:c3:57:f7:2b:43:21:0c: 2f:20:a5:a9:76:bf:e4:c6:de:fa:3d:e3:f9:8b:b8:b1:2a:d0: cc:57:ab:9c:92:4c:c1:33:4d:fb:6d:c5:d2:81:91:41:2b:6f: cd:fc:94:b6:6b:d4:ad:5a:6e:3e:50:18:d7:c7:ab:1c:0f:02: e1:f0:5d:f1:32:20:af:88:0f:96:51:de:8f:f8:61:59:80:29: cb:6d:58:d6:7c:10:20:f6:dc:86:b9:71:01:38:a8:7d:f5:1b: 17:9c:3b:13:21:fd:5c:7f:68:63:cc:c2:b7:d6:cb:09:5f:a4: 37:29:c9:99:f0:2c:ef:a9:f5:78:d0:70:c4:dc:67:e4:e0:c3: 7f:c7:37:34:ea:b1:5d:d7:e3:a5:e5:85:a3:64:67:53:52:27: 54:98:25:f7:b6:6c:28:57:5f:72:3b:14:94:ab:bf:2c:70:17: e5:07:5c:93:f0:6f:4e:b6:83:a7:af:54:ac:a4:c2:3b:34:60: f0:0e:c2:9a:a7:ae:08:18:b8:40:73:6c:c9:57:cc:3d:4c:c4: d4:0d:c1:ae:82:b8:62:d1:31:6f:17:8b:53:a5:ff:5a:3d:9d: 37:97:f7:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULT+nqg+DYKdX007efMnyJd3VzCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTEyMDUwODA1MzlaFw0yNTEyMDgxMjI5MzlaMDMxMTAvBgNV BAMTKDk3OUI1MEQxOUEzRDJDRjUxOUQyMUY5Q0I5QkFGOEM1RDY1OTU1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwc9UyVLqJy+FIdofgeFzoiqTC kIYYhPReiCpFWhCq24r8s8dPHnHLsdRGentfq9fKGjf5tZC4p1FfO48zcMIXaBZc 04sJmvmZs98fQJGb6twP6/jGreBwHvV9YHwrIkgIdxPtz0HYtKhTUNdoEZskQrcy TlMKVvo0hSNB+0V4aSPH3KUdeH4M/6D1OKsIqbCwZo1SS+14hFSqH0bF8lrGogH8 T0b56m8g7VItc1eh9tA2RBFCnNGOMNnWVdT2ExGlwtYq+TFwFThGGCFvbrpf5d7K utRhRl51FDe+NFPZ6aALhf9yNyLMsmB6G6mQD4xz/uisBcgbpj0KeCXC5GqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5tQ0Zo9LPUZ0h+cubr4xdZZVVEwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+ssDyh+5c9uytBKowlUrlSK8MjaLaLt4hG nCYKw1f3K0MhDC8gpal2v+TG3vo94/mLuLEq0MxXq5ySTMEzTfttxdKBkUErb838 lLZr1K1abj5QGNfHqxwPAuHwXfEyIK+ID5ZR3o/4YVmAKcttWNZ8ECD23Ia5cQE4 qH31GxecOxMh/Vx/aGPMwrfWywlfpDcpyZnwLO+p9XjQcMTcZ+Tgw3/HNzTqsV3X 46XlhaNkZ1NSJ1SYJfe2bChXX3I7FJSrvyxwF+UHXJPwb062g6evVKykwjs0YPAO wpqnrggYuEBzbMlXzD1MxNQNwa6CuGLRMW8Xi1Ol/1o9nTeX90k= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:19 2025 by rpki-client