This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: V5kZWESYv5EivlEcNDMtoj7pi91b/R+Jzx7n2482JSY= Subject key identifier: 9F:F1:97:73:07:06:62:B2:D9:E6:E9:26:10:12:D3:70:1A:45:FE:91 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 67B11B0675CD4BB1D2060831FD1D66198FA31EE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 01A5 Signing time: Mon 22 Dec 2025 21:40:56 +0000 Manifest this update: Mon 22 Dec 2025 21:35:56 +0000 Manifest next update: Fri 26 Dec 2025 03:04:56 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313533303637.roa (hash: vjhjgRhzt1JqsmC1aofaHI99IqjsXLKnPCxe8EhPf/U=) 2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) 3: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: SI+vGlAVGByhZQc3TDiifta6qTZ8dTGFVoCwaTIqCLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b1:1b:06:75:cd:4b:b1:d2:06:08:31:fd:1d:66:19:8f:a3:1e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Dec 22 21:35:56 2025 GMT Not After : Dec 26 03:04:56 2025 GMT Subject: CN=9FF19773070662B2D9E6E9261012D3701A45FE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:8f:85:32:3a:dd:a5:03:d4:68:34:30:71: 43:76:f5:ab:bc:12:ee:e4:61:31:a7:f2:dd:c0:ae: 13:21:3c:32:78:16:a7:12:69:aa:25:d0:9f:95:a1: df:f5:92:22:f0:29:77:c4:98:d2:42:4f:a5:09:c0: a1:8f:8f:b4:6a:88:a6:de:5f:3a:71:a2:f4:3d:65: 21:77:ae:d6:97:d7:c1:8e:78:6d:13:ea:7b:dc:96: 35:83:1b:87:0f:cc:23:00:28:c1:d3:4b:41:36:8c: 14:01:42:88:a0:b5:41:2f:2f:63:47:bd:2f:ee:90: da:e8:a4:c5:a8:df:94:ce:d1:e1:19:bc:20:cd:26: 3b:39:53:65:3c:18:e6:f2:68:c1:ca:4c:a5:04:fe: 93:c4:f2:0d:da:f0:b2:95:5e:fb:34:bd:9c:4b:f1: d7:b6:13:3c:e9:f0:5d:c6:8f:32:df:95:94:29:21: 92:b6:52:08:c0:f3:09:ae:d9:b6:67:b5:a7:bb:94: bc:3a:81:24:2b:2d:6c:45:bb:75:84:b5:eb:19:76: 83:66:28:0b:9f:e7:57:49:b5:3d:c3:3f:6c:97:73: be:c3:2a:8c:cb:a3:ec:1d:cf:f2:23:6e:b0:65:1f: cf:e7:33:d5:a1:3f:5d:2d:79:84:7c:2d:15:1b:44: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:97:73:07:06:62:B2:D9:E6:E9:26:10:12:D3:70:1A:45:FE:91 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e2:c2:49:de:4d:f8:f0:07:78:22:0a:ea:9d:54:9d:f9:98: 23:d9:f6:62:95:76:93:17:7a:a3:6e:af:12:c3:12:a2:4b:1d: ed:85:2a:44:8b:1d:59:b8:fd:55:cb:0c:6c:5d:13:62:ed:ea: 59:bb:ce:e4:a6:de:43:d4:6d:ae:7c:80:17:1b:0f:6a:fb:16: 05:f7:d5:37:8d:16:d2:9e:6a:b1:ae:da:ea:bb:f8:f3:ef:89: 29:5e:f4:d0:31:60:4a:80:57:2d:ad:ab:32:cb:b3:2b:43:2f: a5:c7:98:25:5d:e5:3c:88:cb:59:1c:a5:7d:1c:26:dd:76:a3: 47:69:dc:cc:5b:4f:70:0e:3e:5d:c4:53:fa:e4:b5:47:5e:d9: c8:8d:ba:a3:9d:a4:83:5a:47:b7:1e:e2:75:5d:24:50:47:c4: 6c:14:c9:6b:fc:82:74:84:4c:2e:b0:77:4a:90:ef:8c:d5:ce: d7:14:47:b9:46:a6:9a:7e:7a:e8:29:a9:01:dc:1d:e9:ed:6a: 97:af:97:5b:fc:1f:d5:2a:1e:2a:28:59:b3:c4:f1:be:9d:5d: bc:03:5c:16:c6:65:bb:fa:b6:8c:09:4c:aa:2f:44:c0:5b:26: 81:1d:ec:e3:1e:d0:92:ac:db:1d:e7:e2:f4:1a:f2:fd:a9:44: 78:4c:11:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7EbBnXNS7HSBggx/R1mGY+jHuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTEyMjIyMTM1NTZaFw0yNTEyMjYwMzA0NTZaMDMxMTAvBgNV BAMTKDlGRjE5NzczMDcwNjYyQjJEOUU2RTkyNjEwMTJEMzcwMUE0NUZFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChu4+FMjrdpQPUaDQwcUN29au8 Eu7kYTGn8t3ArhMhPDJ4FqcSaaol0J+Vod/1kiLwKXfEmNJCT6UJwKGPj7RqiKbe XzpxovQ9ZSF3rtaX18GOeG0T6nvcljWDG4cPzCMAKMHTS0E2jBQBQoigtUEvL2NH vS/ukNropMWo35TO0eEZvCDNJjs5U2U8GObyaMHKTKUE/pPE8g3a8LKVXvs0vZxL 8de2Ezzp8F3GjzLflZQpIZK2UgjA8wmu2bZntae7lLw6gSQrLWxFu3WEtesZdoNm KAuf51dJtT3DP2yXc77DKozLo+wdz/IjbrBlH8/nM9WhP10teYR8LRUbREL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/GXcwcGYrLZ5ukmEBLTcBpF/pEwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHiwkneTfjwB3giCuqdVJ35mCPZ9mKVdpMX eqNurxLDEqJLHe2FKkSLHVm4/VXLDGxdE2Lt6lm7zuSm3kPUba58gBcbD2r7FgX3 1TeNFtKearGu2uq7+PPviSle9NAxYEqAVy2tqzLLsytDL6XHmCVd5TyIy1kcpX0c Jt12o0dp3MxbT3AOPl3EU/rktUde2ciNuqOdpINaR7ce4nVdJFBHxGwUyWv8gnSE TC6wd0qQ74zVztcUR7lGppp+eugpqQHcHentapevl1v8H9UqHiooWbPE8b6dXbwD XBbGZbv6towJTKovRMBbJoEd7OMe0JKs2x3n4vQa8v2pRHhMEdc= -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:32 2025 by rpki-client