This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: 3eVWBIv93dH9osCFfUTvbOTl9vhDKCFDLTMTbq4vo7o= Subject key identifier: 3D:EF:9F:49:20:D8:C3:7F:C5:8C:18:F0:46:B8:AD:73:C2:2E:03:35 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 5CD9CAC4C39F3FB9DC09F5C386B23355D5980BE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 051B Signing time: Fri 19 Dec 2025 00:01:16 +0000 Manifest this update: Thu 18 Dec 2025 23:56:16 +0000 Manifest next update: Mon 22 Dec 2025 02:06:16 +0000 Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: 1k8xD8PDlG2Rf1a8Z+SZ90n/uyE1AqQ9ijWHe5Z8lTE=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d9:ca:c4:c3:9f:3f:b9:dc:09:f5:c3:86:b2:33:55:d5:98:0b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Dec 18 23:56:16 2025 GMT Not After : Dec 22 02:06:16 2025 GMT Subject: CN=3DEF9F4920D8C37FC58C18F046B8AD73C22E0335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:a8:a0:fa:25:8a:11:8b:85:30:54:ac:68: 99:49:75:c5:a8:ec:91:19:c3:2a:6a:8b:b1:cc:fc: 70:35:c4:e4:a1:da:35:fa:e5:b2:59:b5:f7:28:e5: a2:44:9e:89:e7:2e:4e:4e:c2:55:08:6b:82:85:43: a3:19:67:94:65:e5:b9:9c:23:66:ce:35:73:60:eb: bf:fe:80:7e:a9:92:38:2e:52:41:8f:a6:5d:0d:4b: c2:33:34:ef:8c:d5:7d:d0:fc:48:88:5f:cb:06:5c: c6:b3:00:e2:dc:b6:4d:a5:a8:cd:65:fc:54:c1:8b: ef:02:c8:ff:e1:14:54:40:8f:34:88:93:c3:89:46: 63:14:89:df:82:27:7f:3c:87:80:f4:85:55:98:3f: 08:2e:21:8f:9b:eb:84:b2:9a:78:2c:6f:f1:2e:0d: 9c:df:86:6f:ee:90:7a:9c:ea:8a:1e:54:21:96:f9: 62:ca:32:f9:76:27:9d:dc:99:38:9c:37:2f:63:9a: ca:48:96:82:72:3e:15:9d:c7:bd:7c:2c:8a:1b:b2: 4f:b8:08:b9:2d:72:d0:5a:c5:8a:c0:0a:c7:b6:44: 38:02:ec:44:06:8a:68:df:89:7a:fb:18:a9:cf:79: 32:7f:e3:2b:79:fb:c0:15:d5:d6:ef:39:1d:c4:a2: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EF:9F:49:20:D8:C3:7F:C5:8C:18:F0:46:B8:AD:73:C2:2E:03:35 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:69:3b:c9:42:7c:e4:18:10:ae:9e:0b:a6:17:18:2e:5c: ca:75:fc:a7:a4:bd:50:13:f4:6f:d7:ed:86:81:01:11:21:bd: 74:99:18:70:ec:7e:08:55:d5:65:12:d8:98:4e:69:38:d0:c4: 5c:d3:20:54:4c:78:b9:25:eb:bc:e2:de:da:97:73:5f:40:be: 88:6f:45:12:a7:32:0d:42:02:76:86:22:21:da:3b:f4:2c:8f: 2a:a3:8d:d2:f6:73:a7:63:d0:64:cd:ad:ba:90:a3:b1:c7:bd: 7f:57:4d:84:b9:0b:4f:f0:3d:31:70:0c:63:89:45:2b:b6:b3: 5b:70:ce:bc:cc:f0:e2:8c:0c:f8:47:37:e2:ae:68:bc:c1:d8: 94:52:e9:3d:f9:69:d1:48:a8:93:68:b5:f8:85:42:37:f6:41: bb:c7:64:25:3b:cd:5e:fc:56:f1:e1:a5:1c:b2:9a:35:c2:77: f9:f2:af:1c:96:72:89:fd:0f:4d:f4:f8:7f:ad:66:d4:82:61: 3d:eb:06:ae:fd:08:9f:8b:8c:48:2c:69:fe:f0:30:1b:3e:5a: 72:39:a0:35:e9:ec:3a:ec:9f:5b:c8:65:f5:47:2b:82:c2:4a: a8:71:65:e7:03:d6:6e:5f:a5:3c:d2:0d:d3:94:c5:f1:cb:de: 49:9b:de:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNnKxMOfP7ncCfXDhrIzVdWYC+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNTEyMTgyMzU2MTZaFw0yNTEyMjIwMjA2MTZaMDMxMTAvBgNV BAMTKDNERUY5RjQ5MjBEOEMzN0ZDNThDMThGMDQ2QjhBRDczQzIyRTAzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyqig+iWKEYuFMFSsaJlJdcWo 7JEZwypqi7HM/HA1xOSh2jX65bJZtfco5aJEnonnLk5OwlUIa4KFQ6MZZ5Rl5bmc I2bONXNg67/+gH6pkjguUkGPpl0NS8IzNO+M1X3Q/EiIX8sGXMazAOLctk2lqM1l /FTBi+8CyP/hFFRAjzSIk8OJRmMUid+CJ388h4D0hVWYPwguIY+b64Symngsb/Eu DZzfhm/ukHqc6ooeVCGW+WLKMvl2J53cmTicNy9jmspIloJyPhWdx718LIobsk+4 CLktctBaxYrACse2RDgC7EQGimjfiXr7GKnPeTJ/4yt5+8AV1dbvOR3EolhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPe+fSSDYw3/FjBjwRritc8IuAzUwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILUaTvJQnzkGBCungumFxguXMp1/KekvVAT 9G/X7YaBAREhvXSZGHDsfghV1WUS2JhOaTjQxFzTIFRMeLkl67zi3tqXc19Avohv RRKnMg1CAnaGIiHaO/QsjyqjjdL2c6dj0GTNrbqQo7HHvX9XTYS5C0/wPTFwDGOJ RSu2s1twzrzM8OKMDPhHN+KuaLzB2JRS6T35adFIqJNotfiFQjf2QbvHZCU7zV78 VvHhpRyymjXCd/nyrxyWcon9D030+H+tZtSCYT3rBq79CJ+LjEgsaf7wMBs+WnI5 oDXp7Drsn1vIZfVHK4LCSqhxZecD1m5fpTzSDdOUxfHL3kmb3pQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:12 2025 by rpki-client