This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: iUgR/ZZximqzXAB9t2C2u5TzC5yKqE/YXriWJnhTtfo= Subject key identifier: 0F:FA:B6:18:5A:89:FB:BD:68:D0:A8:EC:F7:A1:FF:B3:E3:42:85:F7 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 0A00BBE556A10A61FE2A8BDFF7C8E3DD8E811A64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0330 Signing time: Wed 17 Dec 2025 15:40:49 +0000 Manifest this update: Wed 17 Dec 2025 15:35:49 +0000 Manifest next update: Sat 20 Dec 2025 22:45:49 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 3: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: cQdJha9UMPdD4oxmO4kX4dUNxoOtaGMoeznB9WCQctk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:00:bb:e5:56:a1:0a:61:fe:2a:8b:df:f7:c8:e3:dd:8e:81:1a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Dec 17 15:35:49 2025 GMT Not After : Dec 20 22:45:49 2025 GMT Subject: CN=0FFAB6185A89FBBD68D0A8ECF7A1FFB3E34285F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:28:a1:aa:b4:27:41:e5:9e:0a:6e:30:cf: 33:8a:2f:a7:6b:97:f0:b2:b7:8a:d3:2e:92:22:c5: 73:65:87:be:2e:dd:db:bc:b5:d1:9a:07:80:55:50: 3c:b3:30:ac:d0:9f:ce:8e:cb:81:a1:7f:fd:09:c3: 55:24:87:bd:99:59:68:35:75:fd:3c:80:48:e6:31: ff:25:d8:d4:e5:c1:b9:c9:34:7b:04:81:64:17:c8: a2:9c:fd:36:d8:28:7c:52:54:45:0e:31:9a:b8:9b: d5:5c:9d:0f:a7:6c:18:db:c8:57:c4:0b:68:06:ed: 29:c5:a1:57:3f:fb:41:34:db:99:59:87:75:8d:c3: 68:62:11:c6:b4:ac:94:3b:50:6f:2a:11:b8:c4:66: a5:7a:f3:3a:51:ef:38:98:93:13:c5:e2:63:b0:1b: b7:13:38:e3:6f:d1:eb:82:10:be:94:c6:d0:8e:b5: ee:29:d7:49:90:34:4d:b8:c4:f4:8b:2d:bc:3d:3a: 69:90:1f:d1:12:d5:af:70:3b:13:d6:4b:a9:75:ea: 30:b7:f1:44:9e:1e:b1:e5:74:6e:fa:30:23:88:c8: 96:38:d5:16:4f:99:79:e5:39:af:b0:fe:ad:a8:19: 17:c3:a5:65:28:e0:a2:38:3c:62:4e:c9:1d:ac:19: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:B6:18:5A:89:FB:BD:68:D0:A8:EC:F7:A1:FF:B3:E3:42:85:F7 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:69:2e:ec:32:83:e4:34:45:1a:f2:23:96:ef:6a:3c:11:dd: fa:2f:80:a0:f9:7f:cd:1d:0d:df:f6:9c:30:95:ad:c1:c5:28: b4:41:45:6b:c3:d6:5f:19:da:55:32:31:23:d3:72:7a:f6:80: ed:64:fa:b8:4a:84:e7:7b:51:b6:ba:87:48:4a:4f:25:ce:a1: bb:8c:25:f3:6d:85:44:1b:9a:b3:7d:d1:5a:8d:85:aa:20:bf: cf:27:b1:aa:7c:d3:4c:3e:9e:2f:d0:99:0e:35:0b:0c:86:90: 31:5b:a5:ba:49:80:7a:e3:fe:4c:d5:33:a1:1d:60:64:bd:23: 47:a8:ae:8d:c2:d7:d9:01:ad:0d:f6:f1:86:b4:6c:9b:68:7e: 2c:97:ab:b3:a0:f0:9f:4c:b2:dd:01:0b:d1:10:fb:ef:bb:65: 53:85:79:ee:88:5e:81:cb:13:14:83:25:e4:05:e0:db:74:3d: bb:ab:db:9f:f5:da:0d:9c:5d:21:b0:4f:15:68:b1:00:49:32: f0:4a:63:39:15:74:99:62:a9:66:cb:4c:16:4e:b7:04:f4:62: 28:60:5f:1b:37:de:59:e3:01:b7:d6:d4:e4:04:f6:21:d1:6b: 2e:8b:fd:75:29:ea:67:eb:06:fb:61:5f:0c:e8:18:28:d0:80: 7e:f5:d3:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgC75VahCmH+Kovf98jj3Y6BGmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTEyMTcxNTM1NDlaFw0yNTEyMjAyMjQ1NDlaMDMxMTAvBgNV BAMTKDBGRkFCNjE4NUE4OUZCQkQ2OEQwQThFQ0Y3QTFGRkIzRTM0Mjg1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSESihqrQnQeWeCm4wzzOKL6dr l/Cyt4rTLpIixXNlh74u3du8tdGaB4BVUDyzMKzQn86Oy4Ghf/0Jw1Ukh72ZWWg1 df08gEjmMf8l2NTlwbnJNHsEgWQXyKKc/TbYKHxSVEUOMZq4m9VcnQ+nbBjbyFfE C2gG7SnFoVc/+0E025lZh3WNw2hiEca0rJQ7UG8qEbjEZqV68zpR7ziYkxPF4mOw G7cTOONv0euCEL6UxtCOte4p10mQNE24xPSLLbw9OmmQH9ES1a9wOxPWS6l16jC3 8USeHrHldG76MCOIyJY41RZPmXnlOa+w/q2oGRfDpWUo4KI4PGJOyR2sGTZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/q2GFqJ+71o0Kjs96H/s+NChfcwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRpLuwyg+Q0RRryI5bvajwR3fovgKD5f80d Dd/2nDCVrcHFKLRBRWvD1l8Z2lUyMSPTcnr2gO1k+rhKhOd7Uba6h0hKTyXOobuM JfNthUQbmrN90VqNhaogv88nsap800w+ni/QmQ41CwyGkDFbpbpJgHrj/kzVM6Ed YGS9I0eoro3C19kBrQ328Ya0bJtofiyXq7Og8J9Mst0BC9EQ+++7ZVOFee6IXoHL ExSDJeQF4Nt0Pbur25/12g2cXSGwTxVosQBJMvBKYzkVdJliqWbLTBZOtwT0Yihg Xxs33lnjAbfW1OQE9iHRay6L/XUp6mfrBvthXwzoGCjQgH71064= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:45 2025 by rpki-client