This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: mfcjyHCJvsad/fi75G70zRAYnfizNwNUhI2Ny8FUMPM= Subject key identifier: 7A:F7:18:AE:F1:30:CB:EF:CD:7A:F2:1D:AC:8A:CE:B7:6B:A3:67:20 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 16366664C4439E5920D5C775240A0127D0984D17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01B9 Signing time: Sat 20 Dec 2025 08:31:46 +0000 Manifest this update: Sat 20 Dec 2025 08:26:46 +0000 Manifest next update: Tue 23 Dec 2025 15:03:46 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 3: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: Sp23WTf8bENuhuSpkuKYScMLPLBtBBqRX5JDm9sRBPE=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:36:66:64:c4:43:9e:59:20:d5:c7:75:24:0a:01:27:d0:98:4d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Dec 20 08:26:46 2025 GMT Not After : Dec 23 15:03:46 2025 GMT Subject: CN=7AF718AEF130CBEFCD7AF21DAC8ACEB76BA36720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:3c:e8:c3:32:a3:5e:88:5a:91:d5:54:89: 58:50:a5:5f:b2:67:01:35:ef:75:fb:f2:a7:95:f2: da:eb:f9:1e:3f:eb:ec:aa:27:cf:38:a5:a2:e6:82: ad:b5:03:e6:5a:2f:00:65:56:0c:cb:46:08:4a:87: 5c:a5:1d:f3:09:0d:e2:8d:53:a0:4d:21:36:34:9b: d3:da:07:66:3d:4c:98:30:12:1d:77:9e:46:c5:66: cc:2a:4f:9f:14:a8:c1:73:cf:46:71:75:77:a6:71: be:60:a9:1f:e6:9b:40:d5:7a:f8:dc:77:b4:2e:d9: d5:1f:72:bd:41:1b:54:61:97:ff:d5:8f:4b:c7:cc: 5c:8a:c4:81:e6:90:10:e3:b7:60:f8:14:b7:f7:d5: 2a:02:7f:d7:59:30:e2:db:2e:df:1f:e0:ba:93:b2: 94:b9:e0:45:3c:74:0d:79:d3:b8:8c:2b:1d:18:8d: a2:79:b2:e3:eb:49:d0:bd:49:2f:12:82:b0:c1:a3: 06:ac:d0:40:53:78:59:c0:6c:21:5e:27:3e:cd:50: d5:27:47:74:d6:e6:65:03:ef:44:a3:54:dc:72:7f: 74:74:d2:c0:e7:7e:d0:26:55:76:8f:be:f2:72:51: 30:5f:0c:1b:6c:e4:a2:d6:17:41:bb:1f:76:4c:40: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:18:AE:F1:30:CB:EF:CD:7A:F2:1D:AC:8A:CE:B7:6B:A3:67:20 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e9:01:b1:e9:dd:96:d3:98:8d:2e:2b:4f:64:70:77:c8:54: b5:62:54:e7:f6:78:dd:19:0c:18:a1:0f:e7:56:2f:2f:21:46: b4:dd:b0:e6:68:7e:a7:dc:9f:fa:d9:ab:89:1f:8c:b1:5f:61: 4f:06:b0:9e:5a:8f:9e:50:e7:50:49:89:95:52:9d:58:42:05: 99:d5:2e:b2:01:fb:5f:1d:bd:6b:37:f7:eb:22:34:d4:c3:46: 85:50:80:87:2a:bd:2a:a4:94:fd:a7:80:eb:4a:e3:39:21:ff: f4:82:a8:27:47:f4:ab:8e:b4:4a:37:1d:fe:76:c9:6c:af:01: f1:50:06:43:6e:cc:ce:81:98:7d:26:5d:e9:8c:44:5e:3f:4c: 26:37:67:fb:16:45:4a:47:0e:c0:fe:a5:b9:45:59:97:e1:65: 75:37:c5:37:9e:54:63:49:a4:30:91:0a:e8:40:47:e5:fb:52: fe:43:62:18:10:34:40:c4:44:ca:70:2c:d2:17:63:93:b0:97: 40:06:66:6d:75:72:f2:cc:3f:60:c8:6a:bb:c0:c8:f5:ab:8e: 1d:a4:5d:14:33:50:7e:e4:8a:82:c7:72:b9:43:1e:18:0d:50: 10:65:48:18:c5:f3:9b:cb:74:ab:d5:4e:d4:c2:18:7d:59:bb: 5c:67:40:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjZmZMRDnlkg1cd1JAoBJ9CYTRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTEyMjAwODI2NDZaFw0yNTEyMjMxNTAzNDZaMDMxMTAvBgNV BAMTKDdBRjcxOEFFRjEzMENCRUZDRDdBRjIxREFDOEFDRUI3NkJBMzY3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflDzowzKjXohakdVUiVhQpV+y ZwE173X78qeV8trr+R4/6+yqJ884paLmgq21A+ZaLwBlVgzLRghKh1ylHfMJDeKN U6BNITY0m9PaB2Y9TJgwEh13nkbFZswqT58UqMFzz0ZxdXemcb5gqR/mm0DVevjc d7Qu2dUfcr1BG1Rhl//Vj0vHzFyKxIHmkBDjt2D4FLf31SoCf9dZMOLbLt8f4LqT spS54EU8dA1507iMKx0YjaJ5suPrSdC9SS8SgrDBowas0EBTeFnAbCFeJz7NUNUn R3TW5mUD70SjVNxyf3R00sDnftAmVXaPvvJyUTBfDBts5KLWF0G7H3ZMQLtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevcYrvEwy+/NevIdrIrOt2ujZyAwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3pAbHp3ZbTmI0uK09kcHfIVLViVOf2eN0Z DBihD+dWLy8hRrTdsOZofqfcn/rZq4kfjLFfYU8GsJ5aj55Q51BJiZVSnVhCBZnV LrIB+18dvWs39+siNNTDRoVQgIcqvSqklP2ngOtK4zkh//SCqCdH9KuOtEo3Hf52 yWyvAfFQBkNuzM6BmH0mXemMRF4/TCY3Z/sWRUpHDsD+pblFWZfhZXU3xTeeVGNJ pDCRCuhAR+X7Uv5DYhgQNEDERMpwLNIXY5Owl0AGZm11cvLMP2DIarvAyPWrjh2k XRQzUH7kioLHcrlDHhgNUBBlSBjF85vLdKvVTtTCGH1Zu1xnQLE= -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:17 2025 by rpki-client