This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: 44F8qQn1XS6+wUEFxlgfnHlHesZ0Chpu1J0GInR91wk= Subject key identifier: BD:31:2B:22:5F:C8:5A:04:C0:C1:67:00:44:A9:B7:26:51:BE:AA:E2 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 075B0FB00CBBF34C64793ECFE3C1CF87FF2952EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0331 Signing time: Fri 19 Dec 2025 22:51:47 +0000 Manifest this update: Fri 19 Dec 2025 22:46:47 +0000 Manifest next update: Tue 23 Dec 2025 04:59:47 +0000 Files and hashes: 1: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: TfYaDRZp3MWaRhhc6/NHAptX00tOG5HqgJJsaH658hQ=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5b:0f:b0:0c:bb:f3:4c:64:79:3e:cf:e3:c1:cf:87:ff:29:52:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Dec 19 22:46:47 2025 GMT Not After : Dec 23 04:59:47 2025 GMT Subject: CN=BD312B225FC85A04C0C1670044A9B72651BEAAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:9d:b8:3d:fa:e7:b2:98:63:db:2b:e0:99: ed:08:26:e5:5a:22:e0:89:4a:da:13:17:55:8a:ab: ef:4d:a0:44:48:ab:d5:1d:74:78:41:dc:5a:31:60: dd:48:65:c9:63:b7:2f:89:0d:9d:18:4c:69:54:4c: b1:b1:31:5d:ae:52:39:99:62:fa:a4:4e:63:81:a5: 67:c9:c7:1e:6d:93:be:e1:1a:cc:88:7a:15:d7:57: b4:f5:57:e7:6c:f5:62:d6:6c:b5:31:1c:3d:4d:22: c9:df:42:ab:de:bb:bf:f6:8b:72:a9:35:3b:c7:1c: 28:ef:97:88:aa:01:b0:66:ba:32:f1:c2:df:a1:58: 5b:88:36:c6:39:55:6e:43:3e:fa:73:16:66:01:f9: d4:f1:f9:9a:cb:c8:1d:e9:78:4a:47:c1:db:3c:fe: ed:82:a3:ef:66:0f:cd:12:54:7f:54:2a:a6:f6:46: 91:9e:f0:61:16:9c:57:7d:fa:0a:30:5d:11:1c:9a: fd:0a:8f:19:93:a6:62:a7:a4:e7:64:60:04:47:3a: b8:ad:91:de:e6:56:ee:06:55:e5:99:80:77:3a:4d: fc:4a:29:1b:76:10:69:42:bb:dd:d3:e4:43:d2:22: 36:e6:c1:e5:d9:9c:64:44:ed:ce:6b:66:e3:47:20: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:2B:22:5F:C8:5A:04:C0:C1:67:00:44:A9:B7:26:51:BE:AA:E2 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:08:26:e0:72:75:6a:11:c0:9b:0d:4d:23:2a:84:a3:3c:34: fd:10:36:7c:26:ba:4b:75:8e:97:0c:15:79:03:20:90:70:98: 31:49:d2:58:b7:6a:61:0d:88:2d:cf:d9:c1:7e:75:17:1b:04: b1:bf:fa:af:ca:21:82:f1:63:63:ff:a2:87:11:91:2e:ae:97: 18:98:30:6f:14:96:1d:29:2f:ec:06:29:75:e2:c2:b0:25:9c: 5f:3d:fe:eb:20:5c:e0:ba:e5:40:14:d0:e5:e4:5e:5b:a4:b2: 91:d5:30:11:19:3c:b5:4b:6a:8d:cd:ff:28:45:53:71:a2:55: 81:b7:c8:5b:47:58:96:e3:ac:10:3c:19:68:0f:07:a1:d1:fd: e3:4a:e9:e9:2d:d2:11:66:4d:c2:73:4e:95:16:ee:53:cb:82: 09:c3:bd:64:26:af:72:3d:f7:42:d0:d5:71:95:86:78:f3:98: 55:c1:5b:da:9a:33:52:ea:d0:85:f5:44:67:bb:d3:ac:f4:1e: e3:25:93:c3:64:41:02:c8:df:7a:32:bb:aa:bc:80:cb:a1:e7: bc:1a:98:9e:41:da:05:8d:5c:3f:67:b1:57:a1:d7:39:94:ad: 82:84:f8:f2:a4:60:ca:07:24:74:dd:05:1e:61:7f:24:da:42: b7:9c:11:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1sPsAy780xkeT7P48HPh/8pUuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTEyMTkyMjQ2NDdaFw0yNTEyMjMwNDU5NDdaMDMxMTAvBgNV BAMTKEJEMzEyQjIyNUZDODVBMDRDMEMxNjcwMDQ0QTlCNzI2NTFCRUFBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36Z24Pfrnsphj2yvgme0IJuVa IuCJStoTF1WKq+9NoERIq9UddHhB3FoxYN1IZcljty+JDZ0YTGlUTLGxMV2uUjmZ YvqkTmOBpWfJxx5tk77hGsyIehXXV7T1V+ds9WLWbLUxHD1NIsnfQqveu7/2i3Kp NTvHHCjvl4iqAbBmujLxwt+hWFuINsY5VW5DPvpzFmYB+dTx+ZrLyB3peEpHwds8 /u2Co+9mD80SVH9UKqb2RpGe8GEWnFd9+gowXREcmv0KjxmTpmKnpOdkYARHOrit kd7mVu4GVeWZgHc6TfxKKRt2EGlCu93T5EPSIjbmweXZnGRE7c5rZuNHIMRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTErIl/IWgTAwWcARKm3JlG+quIwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEIJuBydWoRwJsNTSMqhKM8NP0QNnwmukt1 jpcMFXkDIJBwmDFJ0li3amENiC3P2cF+dRcbBLG/+q/KIYLxY2P/oocRkS6ulxiY MG8Ulh0pL+wGKXXiwrAlnF89/usgXOC65UAU0OXkXlukspHVMBEZPLVLao3N/yhF U3GiVYG3yFtHWJbjrBA8GWgPB6HR/eNK6ekt0hFmTcJzTpUW7lPLggnDvWQmr3I9 90LQ1XGVhnjzmFXBW9qaM1Lq0IX1RGe706z0HuMlk8NkQQLI33oyu6q8gMuh57wa mJ5B2gWNXD9nsVeh1zmUrYKE+PKkYMoHJHTdBR5hfyTaQrecEZc= -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:56 2025 by rpki-client