This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: 5vj6DBu0LFIOGPj3ljSy1wxqmOkwIp83dtMAN71EMhY= Subject key identifier: E1:F3:C5:CC:17:07:FC:E9:D8:B7:C9:6D:DB:17:6F:44:E8:D2:00:29 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 678393A341274F4E78F486A9B727DC6DC9C29A4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 015C Signing time: Wed 17 Dec 2025 00:22:12 +0000 Manifest this update: Wed 17 Dec 2025 00:17:12 +0000 Manifest next update: Sat 20 Dec 2025 11:50:12 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: loLD4fOl+Z47JvOTUri6/PHowVe6Ok3ufMWKfBQHcpM=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:83:93:a3:41:27:4f:4e:78:f4:86:a9:b7:27:dc:6d:c9:c2:9a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Dec 17 00:17:12 2025 GMT Not After : Dec 20 11:50:12 2025 GMT Subject: CN=E1F3C5CC1707FCE9D8B7C96DDB176F44E8D20029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:05:8a:55:30:30:0e:3d:e4:67:87:2a:9a: c4:18:54:09:7c:c3:cc:06:20:eb:92:22:de:5c:b2: 16:e9:11:27:c2:e6:b5:c5:11:dd:7b:89:85:9a:d1: e4:ce:a6:55:ed:45:6f:25:70:6b:d8:00:6b:0d:bd: cc:78:6d:5d:2e:c5:1c:6e:40:de:e2:62:b8:e6:0f: 5c:ed:8e:98:ac:34:c2:9f:01:ee:90:13:cf:eb:29: 39:1e:e2:e4:77:7d:67:0e:4c:fc:f9:10:17:98:ae: 2b:e3:c2:31:1c:6e:58:1f:64:0a:84:62:de:5c:ff: a1:67:a2:03:2d:2b:1a:81:1e:5d:b4:8c:cf:23:4e: 4f:1a:86:5d:37:82:49:60:be:fb:b4:49:80:83:d5: 2e:4c:e2:9c:8c:50:b2:ae:b0:59:32:4a:72:87:6f: 6e:3e:ba:e1:f0:4d:20:ff:62:54:7c:2b:00:a5:79: c9:f3:45:68:90:44:a9:02:61:f8:50:ea:f7:51:94: 74:50:50:cb:8f:c3:6c:3b:7d:7a:ea:77:70:0e:72: 61:9e:44:7d:15:9f:e8:74:cb:77:ec:97:c5:46:03: fa:b6:d6:46:c0:3c:91:ad:28:7a:67:a5:3f:1a:87: d6:b1:ca:44:dd:fa:21:30:71:f0:c5:38:56:58:7e: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:C5:CC:17:07:FC:E9:D8:B7:C9:6D:DB:17:6F:44:E8:D2:00:29 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:04:b1:a4:9e:2a:30:3f:1f:6d:08:fc:97:b5:43:cd:6b:23: dc:76:f5:69:3c:54:2b:b6:16:43:6e:89:74:67:71:e3:29:50: 70:3f:d4:a1:3a:3a:b4:20:2f:ea:a0:06:e3:61:27:23:a8:09: 37:32:12:a2:19:ab:fb:40:e0:b4:6a:5f:76:83:89:10:23:cb: 7a:e5:90:f5:84:fc:d9:02:e3:9a:56:60:39:c8:ab:83:2a:c5: 18:78:c3:01:94:1f:bb:ac:88:e5:cf:f7:3f:65:1a:b7:e0:a2: c9:bb:03:e6:c0:ce:90:f1:5a:1d:5a:48:96:8a:f9:f6:bb:1f: 0d:da:dd:cb:b1:ea:78:e4:78:25:be:7f:e9:f5:42:5c:29:6c: 9d:7b:18:9a:b3:3e:a2:f2:55:a2:9b:95:32:96:63:db:2b:79: 20:c6:11:25:a9:ce:ec:42:06:12:5c:e1:4f:cc:cb:19:b1:7c: d4:60:5c:4d:4a:c1:35:27:1e:24:50:13:d3:18:86:c5:9f:6f: 64:61:54:d8:b3:7c:cf:cb:64:58:c4:21:04:b6:c3:eb:18:2d: de:7b:3e:87:a8:01:4f:35:d0:71:f4:79:24:9b:6d:9a:16:a7: 57:22:e3:ba:b9:b7:d1:31:44:22:2d:9f:78:bb:3d:78:a0:b0: ae:57:97:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4OTo0EnT0549IaptyfcbcnCmkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTEyMTcwMDE3MTJaFw0yNTEyMjAxMTUwMTJaMDMxMTAvBgNV BAMTKEUxRjNDNUNDMTcwN0ZDRTlEOEI3Qzk2RERCMTc2RjQ0RThEMjAwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDAWKVTAwDj3kZ4cqmsQYVAl8 w8wGIOuSIt5cshbpESfC5rXFEd17iYWa0eTOplXtRW8lcGvYAGsNvcx4bV0uxRxu QN7iYrjmD1ztjpisNMKfAe6QE8/rKTke4uR3fWcOTPz5EBeYrivjwjEcblgfZAqE Yt5c/6FnogMtKxqBHl20jM8jTk8ahl03gklgvvu0SYCD1S5M4pyMULKusFkySnKH b24+uuHwTSD/YlR8KwClecnzRWiQRKkCYfhQ6vdRlHRQUMuPw2w7fXrqd3AOcmGe RH0Vn+h0y3fsl8VGA/q21kbAPJGtKHpnpT8ah9axykTd+iEwcfDFOFZYfmaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4fPFzBcH/OnYt8lt2xdvROjSACkwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgEsaSeKjA/H20I/Je1Q81rI9x29Wk8VCu2 FkNuiXRnceMpUHA/1KE6OrQgL+qgBuNhJyOoCTcyEqIZq/tA4LRqX3aDiRAjy3rl kPWE/NkC45pWYDnIq4MqxRh4wwGUH7usiOXP9z9lGrfgosm7A+bAzpDxWh1aSJaK +fa7Hw3a3cux6njkeCW+f+n1QlwpbJ17GJqzPqLyVaKblTKWY9sreSDGESWpzuxC BhJc4U/MyxmxfNRgXE1KwTUnHiRQE9MYhsWfb2RhVNizfM/LZFjEIQS2w+sYLd57 PoeoAU810HH0eSSbbZoWp1ci47q5t9ExRCItn3i7PXigsK5Xl1A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:57 2025 by rpki-client