This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: v4DGnAL29ohA/IKvO2rNLdyQYuJIzPjAn9bU3drY6JA= Subject key identifier: AF:83:30:F3:1A:61:CA:D0:19:6D:B1:3F:B8:06:43:78:AE:46:04:D5 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 5604386C44C93D90EA091DDC7B937E9F5C556935 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 0301 Signing time: Tue 23 Dec 2025 04:22:52 +0000 Manifest this update: Tue 23 Dec 2025 04:17:52 +0000 Manifest next update: Fri 26 Dec 2025 08:27:52 +0000 Files and hashes: 1: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: xbiaWP9/MGOmLrNkH/JmDvv8SVCnFLyYYm7Oenl+LM4=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:04:38:6c:44:c9:3d:90:ea:09:1d:dc:7b:93:7e:9f:5c:55:69:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Dec 23 04:17:52 2025 GMT Not After : Dec 26 08:27:52 2025 GMT Subject: CN=AF8330F31A61CAD0196DB13FB8064378AE4604D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:00:1f:3d:72:02:78:ac:8e:f9:99:a1:c1: 96:66:19:b5:ab:57:a0:4b:15:d3:69:2c:01:cd:74: 43:72:18:19:08:bf:a4:78:fa:3f:f4:a6:b0:29:90: e2:c6:f4:32:e5:51:e7:9c:ef:34:9f:e2:0f:73:92: b2:d1:c4:83:e3:77:56:57:28:59:96:14:cf:7c:d0: 6b:af:35:05:76:2a:39:9c:43:39:c5:77:4a:33:e0: ef:13:b5:f3:e8:39:e3:ca:36:63:1b:22:e6:30:1a: 7d:e9:80:88:d5:77:92:27:1b:52:c5:04:51:c3:d0: c6:b6:d2:a3:21:c7:e7:60:8a:2e:69:c0:0a:97:63: b2:d8:dc:2f:3a:62:b8:de:4a:f9:a4:6f:c7:37:96: 73:1a:ea:93:1b:67:c1:92:83:ea:72:2a:94:55:c6: 80:a1:15:05:d5:b4:26:96:70:2b:8d:12:67:06:22: 08:54:73:9f:19:82:4c:90:b9:31:51:56:79:90:39: f1:95:7d:e4:b6:7b:1a:40:7c:02:ed:d5:aa:43:a1: 7d:d2:d4:df:cb:ef:f9:5f:2d:03:0e:6c:cc:5e:66: 97:2d:8a:78:4e:77:8a:1b:6e:d9:27:54:69:58:67: 63:ad:bd:1d:f0:45:2f:2d:51:fa:b9:2a:74:a1:2d: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:83:30:F3:1A:61:CA:D0:19:6D:B1:3F:B8:06:43:78:AE:46:04:D5 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:b8:29:5e:c5:3a:d6:97:6b:d6:ef:b8:23:83:fd:6e:cc: 14:5a:4a:25:ba:99:57:26:57:a6:ab:f5:95:80:48:61:03:1f: 68:5b:d6:7b:d1:e1:8c:fd:c9:49:0f:1a:8e:3c:8e:13:01:8e: 3f:00:01:f4:84:78:15:40:14:7c:c3:9a:f0:eb:de:d2:90:d5: 85:64:7b:9e:59:09:83:fa:86:35:b7:05:a4:23:73:0c:cf:06: d8:3b:82:34:97:cb:07:2d:55:c8:b1:9c:73:8f:0d:51:ce:d2: 20:cb:4f:d3:ff:8f:80:65:5e:df:be:8d:b5:52:65:76:12:d0: e2:a3:3b:8c:e9:2d:70:c1:40:4a:99:f4:8b:83:87:df:c9:ab: 3f:83:ee:a2:37:f3:3f:25:7a:91:84:0d:a5:4a:2c:bf:cd:80: 30:2a:62:5e:a1:36:e1:ce:7d:6b:4a:cb:78:4e:a4:20:74:3e: f8:40:eb:cc:39:58:2c:d3:d9:c0:5b:ee:34:a5:fb:ec:1d:6b: 36:7b:51:56:cc:f2:39:be:5a:cb:5b:f3:66:f6:32:b6:1b:08: 74:28:a3:02:7b:a1:68:cf:59:e2:b4:f3:35:72:78:a6:49:77: 9c:f3:ac:1d:ca:de:22:7c:88:0b:3c:e7:eb:b2:33:49:d4:49: e6:50:bf:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgQ4bETJPZDqCR3ce5N+n1xVaTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTEyMjMwNDE3NTJaFw0yNTEyMjYwODI3NTJaMDMxMTAvBgNV BAMTKEFGODMzMEYzMUE2MUNBRDAxOTZEQjEzRkI4MDY0Mzc4QUU0NjA0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr6QAfPXICeKyO+ZmhwZZmGbWr V6BLFdNpLAHNdENyGBkIv6R4+j/0prApkOLG9DLlUeec7zSf4g9zkrLRxIPjd1ZX KFmWFM980GuvNQV2KjmcQznFd0oz4O8TtfPoOePKNmMbIuYwGn3pgIjVd5InG1LF BFHD0Ma20qMhx+dgii5pwAqXY7LY3C86YrjeSvmkb8c3lnMa6pMbZ8GSg+pyKpRV xoChFQXVtCaWcCuNEmcGIghUc58ZgkyQuTFRVnmQOfGVfeS2expAfALt1apDoX3S 1N/L7/lfLQMObMxeZpctinhOd4obbtknVGlYZ2OtvR3wRS8tUfq5KnShLV5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr4Mw8xphytAZbbE/uAZDeK5GBNUwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADssuClexTrWl2vW77gjg/1uzBRaSiW6mVcm V6ar9ZWASGEDH2hb1nvR4Yz9yUkPGo48jhMBjj8AAfSEeBVAFHzDmvDr3tKQ1YVk e55ZCYP6hjW3BaQjcwzPBtg7gjSXywctVcixnHOPDVHO0iDLT9P/j4BlXt++jbVS ZXYS0OKjO4zpLXDBQEqZ9IuDh9/Jqz+D7qI38z8lepGEDaVKLL/NgDAqYl6hNuHO fWtKy3hOpCB0PvhA68w5WCzT2cBb7jSl++wdazZ7UVbM8jm+Wstb82b2MrYbCHQo owJ7oWjPWeK08zVyeKZJd5zzrB3K3iJ8iAs85+uyM0nUSeZQv0g= -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:20 2025 by rpki-client