This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: sFYnBkrhbkZiWh68NdTc9bBeccvkM9/LsPNzYuPR11Y= Subject key identifier: CA:15:8D:26:8C:BC:DA:91:30:B7:03:62:DE:06:85:01:68:A9:AB:D7 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 69C84150CCE6113305A656A122E1EA4C24748DB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 0253 Signing time: Fri 05 Dec 2025 06:00:49 +0000 Manifest this update: Fri 05 Dec 2025 05:55:49 +0000 Manifest next update: Mon 08 Dec 2025 13:30:49 +0000 Files and hashes: 1: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: 7Fq6nXuV3DyD1Loag2SE8s8H9JVfy+amagh/SMVVFoc=) 2: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:41:50:cc:e6:11:33:05:a6:56:a1:22:e1:ea:4c:24:74:8d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Dec 5 05:55:49 2025 GMT Not After : Dec 8 13:30:49 2025 GMT Subject: CN=CA158D268CBCDA9130B70362DE06850168A9ABD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e1:04:14:29:34:c0:75:ca:85:23:66:84:70: 95:49:a3:ab:40:d2:72:5d:6f:59:66:9a:e4:18:d2: 20:b7:e7:c6:f0:53:42:62:cf:40:52:e5:6e:57:49: 69:ba:07:4a:d2:f6:96:9d:80:72:1c:82:66:e2:e4: 64:fc:93:2f:42:4d:d1:50:d5:e5:f3:63:e7:be:fd: 97:68:39:90:c3:d5:75:85:6a:1e:8c:d1:63:90:d3: d0:8f:db:b5:c7:a9:00:dc:d8:20:78:8b:bc:85:a0: 7e:33:50:07:c6:23:fc:a2:ed:34:6a:bb:22:a9:27: 34:fc:d1:29:20:33:4e:12:c0:c0:62:3b:e8:d1:c6: af:60:ba:8a:07:44:02:e3:3c:98:cc:d7:e9:75:5f: 41:b0:11:34:af:67:19:3f:c7:29:97:e3:2d:b9:30: d4:1f:8b:5d:9a:66:8d:16:1e:f5:a6:f5:36:7f:bf: 67:9c:ce:64:11:28:74:73:e5:a0:eb:0d:84:cb:00: ec:59:61:a3:33:47:10:da:ae:c0:ef:c2:38:1d:e5: d0:00:74:d0:67:77:4b:ff:58:2b:08:61:3f:9e:cb: b4:fb:45:75:d6:fc:3e:fc:69:00:2e:ed:22:ab:d1: 18:32:1f:1d:e1:61:cc:f9:c1:a1:d7:9e:6e:28:86: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:15:8D:26:8C:BC:DA:91:30:B7:03:62:DE:06:85:01:68:A9:AB:D7 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:c7:83:ae:a6:00:28:69:b1:3a:91:52:1a:3e:e8:fa:b9: a5:aa:1e:ff:58:02:48:0c:d9:ed:7e:92:8d:ba:cb:f6:06:b1: f9:64:30:5e:b1:20:e8:2e:6e:fb:85:c1:54:3a:fb:d9:b1:0c: 5e:90:66:3a:e7:2b:1c:64:01:78:eb:71:a6:7b:b4:c3:00:a8: f7:50:ea:5f:48:b9:06:13:97:ac:9a:ec:0e:84:cc:69:84:81: 68:b7:f4:43:b6:28:65:db:4c:71:19:f8:60:ce:be:a6:a9:a3: 6d:63:f5:6a:24:cc:76:ab:37:3a:d7:f9:fa:24:9a:1b:76:fe: 9b:98:76:ca:b5:9e:66:de:e9:bd:9e:f5:62:a9:be:11:37:79: a7:da:58:1a:ec:e1:bd:ee:cd:f1:f9:33:4e:2a:29:80:93:9f: 0f:bd:fb:39:81:3c:e3:5a:52:9e:e3:eb:e3:bc:c3:04:e0:b8: 12:b6:7e:d2:05:f8:49:4a:03:6b:19:02:9d:6a:51:7a:4e:4d: a6:96:ed:7b:a5:2d:17:08:5e:69:7f:bf:4f:09:3a:d4:82:ce: f9:fb:34:a3:ec:6e:fd:67:06:41:4b:9e:1a:fa:51:73:ed:d6: 42:51:ac:b2:cf:16:ba:2c:39:0f:27:bb:37:b5:9c:cc:ce:0d: 48:83:a6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUachBUMzmETMFplahIuHqTCR0jbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTEyMDUwNTU1NDlaFw0yNTEyMDgxMzMwNDlaMDMxMTAvBgNV BAMTKENBMTU4RDI2OENCQ0RBOTEzMEI3MDM2MkRFMDY4NTAxNjhBOUFCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx4QQUKTTAdcqFI2aEcJVJo6tA 0nJdb1lmmuQY0iC358bwU0Jiz0BS5W5XSWm6B0rS9padgHIcgmbi5GT8ky9CTdFQ 1eXzY+e+/ZdoOZDD1XWFah6M0WOQ09CP27XHqQDc2CB4i7yFoH4zUAfGI/yi7TRq uyKpJzT80SkgM04SwMBiO+jRxq9guooHRALjPJjM1+l1X0GwETSvZxk/xymX4y25 MNQfi12aZo0WHvWm9TZ/v2eczmQRKHRz5aDrDYTLAOxZYaMzRxDarsDvwjgd5dAA dNBnd0v/WCsIYT+ey7T7RXXW/D78aQAu7SKr0RgyHx3hYcz5waHXnm4ohsrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyhWNJoy82pEwtwNi3gaFAWipq9cwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGgx4OupgAoabE6kVIaPuj6uaWqHv9YAkgM 2e1+ko26y/YGsflkMF6xIOgubvuFwVQ6+9mxDF6QZjrnKxxkAXjrcaZ7tMMAqPdQ 6l9IuQYTl6ya7A6EzGmEgWi39EO2KGXbTHEZ+GDOvqapo21j9WokzHarNzrX+fok mht2/puYdsq1nmbe6b2e9WKpvhE3eafaWBrs4b3uzfH5M04qKYCTnw+9+zmBPONa Up7j6+O8wwTguBK2ftIF+ElKA2sZAp1qUXpOTaaW7XulLRcIXml/v08JOtSCzvn7 NKPsbv1nBkFLnhr6UXPt1kJRrLLPFrosOQ8nuze1nMzODUiDpvQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:57 2025 by rpki-client