This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: 8oeMG33BtfTLPDM8eEplYbPRNEZyMAPq+3AgOj3kD/c= Subject key identifier: DC:E8:F7:B4:FB:E0:4C:25:87:E5:80:21:E4:64:E0:C4:E8:54:C7:40 Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 3D802EFA26A2184FE53C59F98739C624909229F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 015C Signing time: Wed 17 Dec 2025 07:21:19 +0000 Manifest this update: Wed 17 Dec 2025 07:16:19 +0000 Manifest next update: Sat 20 Dec 2025 17:20:19 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: 6+9bqDSHaAUEv2xoMUgc/vyAb3n50Wh2CNTpv5sMcC8=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 17:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:80:2e:fa:26:a2:18:4f:e5:3c:59:f9:87:39:c6:24:90:92:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Dec 17 07:16:19 2025 GMT Not After : Dec 20 17:20:19 2025 GMT Subject: CN=DCE8F7B4FBE04C2587E58021E464E0C4E854C740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:67:dc:27:13:aa:db:8c:fc:0a:54:f6:b0: c0:c9:bd:01:9a:8c:d8:f6:ba:8f:10:2c:d1:af:b0: 49:0d:bb:f9:64:07:ff:2d:f2:ee:0e:1d:d3:ef:ca: d2:26:8a:11:4f:e7:d7:c7:a7:4e:50:34:6e:ef:6b: 0a:39:1b:15:3f:81:a9:89:f3:69:ff:2f:e3:ae:5f: 1d:57:ef:ce:71:99:90:49:f0:1a:15:8f:58:6b:2b: 47:ac:42:a6:e5:57:b1:8c:92:62:42:6a:d6:da:75: 57:5b:81:84:1d:90:60:91:d9:0a:94:06:43:38:e7: d1:79:86:86:8f:9c:9c:b4:89:8a:d0:64:72:25:e3: ce:47:6c:11:cd:21:05:83:08:72:c6:3c:aa:d3:e6: c9:eb:d3:d3:61:86:c8:73:52:ab:f1:e2:7a:e8:70: 4d:08:cc:c4:0b:0c:b6:aa:63:a0:ab:2b:6e:0e:80: 8a:c3:af:10:5e:4a:2a:55:47:a1:06:9e:5f:ff:18: 3d:de:cd:6d:2f:32:9e:f5:53:6a:63:0b:4a:fc:c4: e8:76:b3:0c:2a:4b:bb:d1:2e:08:ca:c6:9d:aa:b1: 44:d5:7c:2a:a8:3a:ce:9b:eb:da:0a:9c:32:cb:9e: cb:22:8b:37:86:92:d5:f7:06:eb:b3:3f:03:5e:ff: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:F7:B4:FB:E0:4C:25:87:E5:80:21:E4:64:E0:C4:E8:54:C7:40 X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ca:2a:f2:dd:b3:39:ab:70:a7:ff:7f:cf:5d:fa:01:e1:06: 18:92:ce:ea:e5:51:6f:98:b0:dc:a7:6c:92:c7:31:90:58:98: e3:91:70:13:97:d8:45:2c:bd:a9:26:fc:8c:94:00:09:79:4d: ed:db:ea:98:f2:67:6e:6e:a5:bd:a9:c9:30:c2:a0:97:25:36: 81:3d:27:8f:ec:c5:30:50:08:81:e0:a3:08:44:ab:1b:4b:da: 08:c2:b4:c5:a7:f1:2c:fa:32:6c:4c:18:a9:76:67:a7:15:de: d7:7d:66:eb:ca:d9:a4:9c:66:d3:b1:56:ea:88:49:d6:b9:8c: 7a:9e:24:6e:db:7d:a7:7a:3a:fd:65:98:a4:b0:79:dd:cc:77: 6a:ee:d5:ab:c0:9b:7d:b9:b7:e4:da:29:dc:b2:78:d2:bb:eb: 8a:b9:61:0d:f2:59:44:a3:be:b6:b3:27:b6:6c:cb:8d:5e:d0: 00:5c:3e:11:5b:ba:8a:74:fe:77:69:32:77:3d:0c:d9:9e:0c: ee:15:b0:3a:d1:ec:85:7c:f0:da:97:2d:bd:6e:e4:4c:5a:f5: 29:ad:8c:18:03:2f:73:d6:33:56:54:db:01:f2:8e:69:84:76: fa:b9:b7:84:e3:ea:fd:db:e7:b1:7a:e7:70:6e:76:7e:06:56: 49:1d:20:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYAu+iaiGE/lPFn5hznGJJCSKfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTEyMTcwNzE2MTlaFw0yNTEyMjAxNzIwMTlaMDMxMTAvBgNV BAMTKERDRThGN0I0RkJFMDRDMjU4N0U1ODAyMUU0NjRFMEM0RTg1NEM3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sWfcJxOq24z8ClT2sMDJvQGa jNj2uo8QLNGvsEkNu/lkB/8t8u4OHdPvytImihFP59fHp05QNG7vawo5GxU/gamJ 82n/L+OuXx1X785xmZBJ8BoVj1hrK0esQqblV7GMkmJCatbadVdbgYQdkGCR2QqU BkM459F5hoaPnJy0iYrQZHIl485HbBHNIQWDCHLGPKrT5snr09NhhshzUqvx4nro cE0IzMQLDLaqY6CrK24OgIrDrxBeSipVR6EGnl//GD3ezW0vMp71U2pjC0r8xOh2 swwqS7vRLgjKxp2qsUTVfCqoOs6b69oKnDLLnssiizeGktX3BuuzPwNe/zbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Oj3tPvgTCWH5YAh5GTgxOhUx0AwHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADKKvLdszmrcKf/f89d+gHhBhiSzurlUW+Y sNynbJLHMZBYmOORcBOX2EUsvakm/IyUAAl5Te3b6pjyZ25upb2pyTDCoJclNoE9 J4/sxTBQCIHgowhEqxtL2gjCtMWn8Sz6MmxMGKl2Z6cV3td9ZuvK2aScZtOxVuqI Sda5jHqeJG7bfad6Ov1lmKSwed3Md2ru1avAm325t+TaKdyyeNK764q5YQ3yWUSj vrazJ7Zsy41e0ABcPhFbuop0/ndpMnc9DNmeDO4VsDrR7IV88NqXLb1u5Exa9Smt jBgDL3PWM1ZU2wHyjmmEdvq5t4Tj6v3b57F653Budn4GVkkdIGc= -----END CERTIFICATE-----Generated at Fri Dec 19 18:20:05 2025 by rpki-client