This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: spFlQwUgTNmBLD/6jxsezDQbXvyDNipwMHXzQ21il6o= Subject key identifier: B9:84:81:BE:28:BB:67:D5:E5:51:76:10:72:70:86:70:C3:EF:5D:32 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 6010A8ECC757468009904D5295DC487E6DACCA33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0532 Signing time: Fri 19 Dec 2025 05:01:46 +0000 Manifest this update: Fri 19 Dec 2025 04:56:46 +0000 Manifest next update: Mon 22 Dec 2025 12:46:46 +0000 Files and hashes: 1: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 2: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 3: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: SpW5iBFRP0B1zXoIamHYd42MqhsAuuj+j/he2wPFkiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:10:a8:ec:c7:57:46:80:09:90:4d:52:95:dc:48:7e:6d:ac:ca:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Dec 19 04:56:46 2025 GMT Not After : Dec 22 12:46:46 2025 GMT Subject: CN=B98481BE28BB67D5E551761072708670C3EF5D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:66:69:80:fb:ef:ca:1b:39:60:d9:05:b6: 52:a2:b7:b3:f0:b0:bc:b1:12:4f:88:69:da:37:8d: 49:c9:b7:2e:a8:c9:aa:7d:0a:c2:56:b1:74:b2:c2: 2c:92:10:46:d3:ef:ac:0d:39:15:15:75:a6:37:81: 5b:4f:6b:7c:91:85:f3:04:49:ad:7d:b8:ef:38:c7: 1d:35:0b:e7:28:07:36:c1:b3:e5:84:2b:aa:76:17: 97:8c:80:66:0c:d4:7d:68:7f:32:cc:6c:c4:cc:0a: 4f:2a:df:80:da:ab:bf:51:71:0b:94:57:bb:c6:95: 5c:10:da:ec:55:f7:7c:b0:de:87:47:f7:7f:bc:2e: c1:6e:e3:8f:ce:2f:54:19:e6:20:24:64:45:23:e7: 30:ca:b0:f0:e9:50:1d:c1:ed:fb:7f:99:a6:13:db: 8d:e8:7e:92:ee:5e:36:1c:e4:e6:96:6e:c3:6c:d7: ac:11:bc:fb:79:94:43:0f:c7:79:c1:e3:79:04:3c: 4c:36:a5:23:27:93:e6:4b:7e:e1:da:7e:36:ff:14: 6b:ba:0a:e3:61:a6:01:d5:d6:c9:fe:40:32:fc:36: f3:10:7e:fb:02:39:3d:26:9d:a8:56:b1:5d:40:57: 2f:4e:4d:58:4f:07:04:a1:61:4e:2f:30:10:c4:c6: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:84:81:BE:28:BB:67:D5:E5:51:76:10:72:70:86:70:C3:EF:5D:32 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:1b:8f:ae:4b:62:38:5e:26:21:d7:52:eb:ff:59:bf:16: 20:49:b3:a2:ed:27:86:7b:cd:47:c9:3c:17:bd:2a:41:89:80: e5:e8:5c:a0:46:0f:79:34:3a:d3:15:e8:fa:2d:74:74:ac:8f: de:17:c5:0b:37:e4:38:e0:67:93:8d:39:99:20:6b:a0:92:ea: a8:63:90:5a:11:f8:5b:67:f7:98:ea:7d:e1:cc:a7:00:62:1a: aa:c0:20:88:e2:0a:d6:c3:8a:83:90:6b:2c:23:f5:92:d8:35: 66:88:b2:49:91:a3:34:2b:fd:11:d5:f1:38:af:81:7a:16:61: 86:96:b2:e5:2d:c5:41:2f:08:b7:6d:ad:e5:79:d9:dc:bd:a8: e8:db:05:ba:ed:5d:db:25:f4:4f:e2:3e:e0:41:e6:d2:33:03: e0:01:07:bf:b6:c3:c3:35:d2:e3:64:70:4f:31:8d:89:cd:2f: bb:d4:39:a5:b9:f4:64:bf:51:ad:f1:29:df:67:c1:cd:9d:be: c9:6a:4b:f0:63:20:3b:bb:28:ee:fd:55:34:88:3e:ab:ee:a7: 69:57:52:3c:ee:39:64:fa:9a:5b:61:c0:56:70:70:c1:f4:66: b2:69:ee:2c:16:e8:8a:5f:22:de:15:f3:00:f9:a4:24:f3:f0: 1e:5e:c5:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBCo7MdXRoAJkE1SldxIfm2syjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTEyMTkwNDU2NDZaFw0yNTEyMjIxMjQ2NDZaMDMxMTAvBgNV BAMTKEI5ODQ4MUJFMjhCQjY3RDVFNTUxNzYxMDcyNzA4NjcwQzNFRjVEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyWZpgPvvyhs5YNkFtlKit7Pw sLyxEk+Iado3jUnJty6oyap9CsJWsXSywiySEEbT76wNORUVdaY3gVtPa3yRhfME Sa19uO84xx01C+coBzbBs+WEK6p2F5eMgGYM1H1ofzLMbMTMCk8q34Daq79RcQuU V7vGlVwQ2uxV93yw3odH93+8LsFu44/OL1QZ5iAkZEUj5zDKsPDpUB3B7ft/maYT 243ofpLuXjYc5OaWbsNs16wRvPt5lEMPx3nB43kEPEw2pSMnk+ZLfuHafjb/FGu6 CuNhpgHV1sn+QDL8NvMQfvsCOT0mnahWsV1AVy9OTVhPBwShYU4vMBDExpvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYSBvii7Z9XlUXYQcnCGcMPvXTIwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS2G4+uS2I4XiYh11Lr/1m/FiBJs6LtJ4Z7 zUfJPBe9KkGJgOXoXKBGD3k0OtMV6PotdHSsj94XxQs35DjgZ5ONOZkga6CS6qhj kFoR+Ftn95jqfeHMpwBiGqrAIIjiCtbDioOQaywj9ZLYNWaIskmRozQr/RHV8Tiv gXoWYYaWsuUtxUEvCLdtreV52dy9qOjbBbrtXdsl9E/iPuBB5tIzA+ABB7+2w8M1 0uNkcE8xjYnNL7vUOaW59GS/Ua3xKd9nwc2dvslqS/BjIDu7KO79VTSIPqvup2lX UjzuOWT6mlthwFZwcMH0ZrJp7iwW6IpfIt4V8wD5pCTz8B5exfw= -----END CERTIFICATE-----Generated at Sun Dec 21 07:47:28 2025 by rpki-client