This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: hl11PQqnKuKAunrNUupLdJKRJgP6v1s2ym2lh8Ooamk= Subject key identifier: 59:11:E8:7C:07:A6:E0:39:7F:FA:23:C9:EB:3C:48:0C:38:44:39:49 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 0C4BA069820876401C56A13DD9C6C908421E9A49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 01A6 Signing time: Thu 25 Dec 2025 03:10:55 +0000 Manifest this update: Thu 25 Dec 2025 03:05:55 +0000 Manifest next update: Sun 28 Dec 2025 09:26:55 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: SXZ8OhrEL+3Tcnjg7fH3ys3GJHpKJp/ycT9Xv/gp8Rw=) 2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) 3: 3130332e3138392e3232392e302f32342d3234203d3e20313533303637.roa (hash: vjhjgRhzt1JqsmC1aofaHI99IqjsXLKnPCxe8EhPf/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 09:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4b:a0:69:82:08:76:40:1c:56:a1:3d:d9:c6:c9:08:42:1e:9a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Dec 25 03:05:55 2025 GMT Not After : Dec 28 09:26:55 2025 GMT Subject: CN=5911E87C07A6E0397FFA23C9EB3C480C38443949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:23:4d:23:26:a3:61:1f:2d:2b:fb:24:c2: a1:29:81:3a:6b:34:0f:33:39:6b:bf:63:06:30:98: 37:b8:ca:db:16:33:ec:d4:08:7c:d2:8b:34:ed:a1: 3f:7e:bd:51:70:f1:fc:e7:f6:68:49:db:c0:b2:78: 2d:9c:23:d1:3a:e2:a1:d4:e0:2b:16:76:fd:60:4c: fc:f2:7d:4d:0c:27:75:65:3d:66:e9:17:77:4a:58: 89:02:8f:e1:21:5f:a8:b8:b6:d2:6b:25:9b:89:b5: 1f:3d:ca:cd:bf:3d:5c:3a:4b:75:25:b7:d7:24:80: 5c:15:07:9c:d5:41:c1:2c:be:e1:7c:c5:ac:ad:81: 68:3d:47:ce:70:c4:97:af:ac:93:73:49:5d:c0:c9: 23:33:b9:68:f2:06:64:f4:74:6f:6d:8a:56:64:83: 09:91:00:f1:fd:19:51:af:b1:5b:07:10:83:ba:bb: 96:f6:e3:95:c9:8f:9c:c2:69:02:4a:54:ce:a3:d4: d1:91:9a:52:55:f1:05:82:57:9f:c7:1b:d9:77:dc: 09:86:f7:67:f9:e7:27:19:e7:f1:ef:b5:fc:5c:fb: fa:bf:99:ee:29:80:6d:d3:d5:62:c5:83:9f:89:fd: b4:72:bb:16:34:62:b9:c4:8c:b9:bf:2f:f4:a8:95: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:11:E8:7C:07:A6:E0:39:7F:FA:23:C9:EB:3C:48:0C:38:44:39:49 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:3b:0b:5a:59:76:f6:f7:9d:62:48:83:c6:34:80:26:cd: ad:9e:53:87:dd:cc:06:94:6f:f4:d9:0e:29:b3:dd:6e:87:3e: 0e:48:e7:d0:9e:08:f6:07:8d:17:a3:44:56:84:78:b5:9e:0a: 98:b0:35:20:76:a2:1f:b0:14:41:fc:77:45:c7:6b:67:b0:9d: 68:92:d2:ed:d6:1f:c3:04:16:89:bb:c6:b6:f0:c6:ad:e2:ad: 64:e5:f6:42:a4:51:4f:b2:4f:ca:db:57:5a:ac:5f:dc:55:02: b9:bf:0a:f0:e0:97:37:ad:6d:bc:d5:9f:9d:2c:7d:7d:4f:70: 6f:ee:fb:58:a4:32:7b:52:dc:07:9a:b0:ff:ce:fd:08:58:b3: 42:3c:71:4d:c4:4e:57:9f:9f:24:f1:80:37:30:a3:6a:22:9d: 9d:99:90:3a:a4:34:ef:17:ea:f4:6f:00:f0:56:22:cb:29:ad: e3:88:de:94:20:1f:95:f1:ad:50:32:33:9f:d0:71:f8:f2:46: 2d:99:a1:b5:1d:aa:03:cc:97:b6:e3:1b:59:01:01:61:c6:cd: d6:a3:97:b6:7c:da:2a:d5:06:ef:22:9f:4f:6c:c4:0d:62:bf: 43:a4:3d:7e:ce:e4:89:85:e3:e9:93:bf:5a:80:af:49:82:10: ae:9f:30:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEugaYIIdkAcVqE92cbJCEIemkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTEyMjUwMzA1NTVaFw0yNTEyMjgwOTI2NTVaMDMxMTAvBgNV BAMTKDU5MTFFODdDMDdBNkUwMzk3RkZBMjNDOUVCM0M0ODBDMzg0NDM5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+iNNIyajYR8tK/skwqEpgTpr NA8zOWu/YwYwmDe4ytsWM+zUCHzSizTtoT9+vVFw8fzn9mhJ28CyeC2cI9E64qHU 4CsWdv1gTPzyfU0MJ3VlPWbpF3dKWIkCj+EhX6i4ttJrJZuJtR89ys2/PVw6S3Ul t9ckgFwVB5zVQcEsvuF8xaytgWg9R85wxJevrJNzSV3AySMzuWjyBmT0dG9tilZk gwmRAPH9GVGvsVsHEIO6u5b245XJj5zCaQJKVM6j1NGRmlJV8QWCV5/HG9l33AmG 92f55ycZ5/Hvtfxc+/q/me4pgG3T1WLFg5+J/bRyuxY0YrnEjLm/L/SolTMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRHofAem4Dl/+iPJ6zxIDDhEOUkwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcOOwtaWXb2951iSIPGNIAmza2eU4fdzAaU b/TZDimz3W6HPg5I59CeCPYHjRejRFaEeLWeCpiwNSB2oh+wFEH8d0XHa2ewnWiS 0u3WH8MEFom7xrbwxq3irWTl9kKkUU+yT8rbV1qsX9xVArm/CvDglzetbbzVn50s fX1PcG/u+1ikMntS3AeasP/O/QhYs0I8cU3ETlefnyTxgDcwo2oinZ2ZkDqkNO8X 6vRvAPBWIsspreOI3pQgH5XxrVAyM5/QcfjyRi2ZobUdqgPMl7bjG1kBAWHGzdaj l7Z82irVBu8in09sxA1iv0OkPX7O5ImF4+mTv1qAr0mCEK6fMCQ= -----END CERTIFICATE-----Generated at Thu Dec 25 11:15:09 2025 by rpki-client