This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft File: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json) Hash identifier: 4re4TEpx+BGCHBuF16gYa7BKpoBOTOqMNOOM8YftcdY= Subject key identifier: DF:2E:16:4F:93:7F:BD:AE:0C:7B:8F:7C:FD:6E:BE:11:B8:41:78:7C Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 024B8F7B58B96E6086F2E4D3DFE6F7236677A525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft Manifest number: 0532 Signing time: Sat 20 Dec 2025 13:22:27 +0000 Manifest this update: Sat 20 Dec 2025 13:17:27 +0000 Manifest next update: Tue 23 Dec 2025 15:58:27 +0000 Files and hashes: 1: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=) 2: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=) 3: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=) 4: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=) 5: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=) 6: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=) 7: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=) 8: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=) 9: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=) 10: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=) 11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=) 12: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=) 13: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: Ax1FJQLBhW1+15HMxc92DvvWu2a6x2POpM12DO4Wo18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4b:8f:7b:58:b9:6e:60:86:f2:e4:d3:df:e6:f7:23:66:77:a5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Dec 20 13:17:27 2025 GMT Not After : Dec 23 15:58:27 2025 GMT Subject: CN=DF2E164F937FBDAE0C7B8F7CFD6EBE11B841787C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:14:2c:d3:68:a7:2e:ba:c9:09:a9:1c:61: 59:7f:d5:7f:ae:de:a8:fd:41:c6:b9:ef:97:99:16: 40:64:3d:39:99:84:55:75:35:5e:1a:18:dd:1b:11: d8:17:08:08:29:63:a0:ab:94:b9:b5:30:ec:b4:96: 46:1e:dc:90:3f:02:32:0f:b4:c9:4b:6f:f1:a6:41: 14:91:7e:80:f1:70:c6:f4:a8:a4:a7:de:d8:ef:bf: aa:6d:b6:e3:fe:0d:f6:b8:d8:d4:66:c1:d0:5f:13: 75:a0:a5:ef:5e:bb:de:fc:4a:8f:f7:08:d8:6b:27: 52:b8:bf:3b:60:ca:81:12:bd:eb:27:99:9c:c4:39: 5e:0b:f0:96:37:97:bf:db:ea:ea:4b:36:32:54:9f: d9:c7:d5:2a:8b:4f:9f:99:fd:f6:f7:02:89:a5:e9: 26:4e:d5:f3:17:e9:ae:1d:84:73:86:69:5b:af:01: fd:c1:5d:13:1c:86:83:75:19:6a:27:d3:0a:6f:60: cf:fb:ff:21:b9:82:45:7e:17:35:ef:29:6e:e9:3c: 60:05:86:6a:5e:bb:9a:92:c5:4f:5f:ef:bd:62:a6: d6:e1:e1:e4:93:fa:d5:79:f3:54:6b:f9:61:96:ee: 33:1b:af:4b:25:3e:e8:08:d4:90:ac:8f:74:70:ef: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:16:4F:93:7F:BD:AE:0C:7B:8F:7C:FD:6E:BE:11:B8:41:78:7C X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:91:0a:22:d0:4e:92:9d:4f:66:7f:fb:64:ba:e3:e1:9b:a5: 4a:97:fb:49:a4:25:86:04:5d:3d:cc:67:33:00:f0:01:81:c6: a1:37:5f:e2:07:8e:85:27:e0:0f:4b:3c:7a:59:7a:44:ea:b1: 6b:a7:07:10:11:a1:cd:22:68:66:a9:b4:ce:48:f8:d5:fa:61: 94:f1:f5:2d:cb:22:95:80:33:eb:f4:7c:a4:44:62:a2:bc:4b: 05:d9:46:72:6c:27:04:ed:f5:d3:a0:bc:92:6c:a6:a6:c7:e8: c5:96:02:9f:54:dc:fd:46:26:e2:4d:8b:c5:09:8d:2e:94:7a: ec:4f:4e:61:71:82:8e:ab:bc:ff:e7:7d:bd:01:02:63:3f:33: ae:99:1f:68:a6:cb:1c:fb:84:3d:c4:d6:0c:3b:b1:07:00:c1: 2a:c3:19:f5:4f:14:bc:6d:aa:db:6f:3a:e4:4c:1f:bb:05:93: 1a:c3:11:99:73:21:c8:b8:5c:44:48:18:ab:6d:bd:cd:9d:6d: 73:dc:1e:52:9d:37:91:dc:92:8a:c6:1a:f9:61:60:ec:d4:b4: d2:6a:d0:01:98:19:71:bc:be:fc:9f:cd:e3:d7:e8:15:b6:46: 73:37:2d:35:37:ad:25:68:29:6d:4b:14:58:4e:b8:de:c4:5a: 22:ac:61:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkuPe1i5bmCG8uTT3+b3I2Z3pSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTEyMjAxMzE3MjdaFw0yNTEyMjMxNTU4MjdaMDMxMTAvBgNV BAMTKERGMkUxNjRGOTM3RkJEQUUwQzdCOEY3Q0ZENkVCRTExQjg0MTc4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOxQs02inLrrJCakcYVl/1X+u 3qj9Qca575eZFkBkPTmZhFV1NV4aGN0bEdgXCAgpY6CrlLm1MOy0lkYe3JA/AjIP tMlLb/GmQRSRfoDxcMb0qKSn3tjvv6pttuP+Dfa42NRmwdBfE3Wgpe9eu978So/3 CNhrJ1K4vztgyoESvesnmZzEOV4L8JY3l7/b6upLNjJUn9nH1SqLT5+Z/fb3Aoml 6SZO1fMX6a4dhHOGaVuvAf3BXRMchoN1GWon0wpvYM/7/yG5gkV+FzXvKW7pPGAF hmpeu5qSxU9f771iptbh4eST+tV581Rr+WGW7jMbr0slPugI1JCsj3Rw750DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3y4WT5N/va4Me498/W6+EbhBeHwwHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz ZTUtNTIyZWU1NDAxOGQ2LzAvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2 NEQ1NTQ5ODZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGRCiLQTpKdT2Z/+2S64+GbpUqX+0mkJYYE XT3MZzMA8AGBxqE3X+IHjoUn4A9LPHpZekTqsWunBxARoc0iaGaptM5I+NX6YZTx 9S3LIpWAM+v0fKREYqK8SwXZRnJsJwTt9dOgvJJspqbH6MWWAp9U3P1GJuJNi8UJ jS6UeuxPTmFxgo6rvP/nfb0BAmM/M66ZH2imyxz7hD3E1gw7sQcAwSrDGfVPFLxt qttvOuRMH7sFkxrDEZlzIci4XERIGKttvc2dbXPcHlKdN5HckorGGvlhYOzUtNJq 0AGYGXG8vvyfzePX6BW2RnM3LTU3rSVoKW1LFFhOuN7EWiKsYZI= -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:05 2025 by rpki-client