This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: jdvVrOXwgfJwF4Ppoc8EwvJqF0BL2H0uyvM4jA3j9r8= Subject key identifier: 9B:EF:89:8A:6B:2C:92:65:3B:83:78:FF:E2:7A:A3:14:D7:E3:2E:26 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 7A713128D3E340AC78C78660A4CFE57A01A928D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0233 Signing time: Tue 23 Dec 2025 08:11:18 +0000 Manifest this update: Tue 23 Dec 2025 08:06:18 +0000 Manifest next update: Fri 26 Dec 2025 12:56:18 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) 2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: cSMoogaXCm7dK/rQ0pZpVD7MeZi8v6aePMUBHd7F8x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:71:31:28:d3:e3:40:ac:78:c7:86:60:a4:cf:e5:7a:01:a9:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Dec 23 08:06:18 2025 GMT Not After : Dec 26 12:56:18 2025 GMT Subject: CN=9BEF898A6B2C92653B8378FFE27AA314D7E32E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:93:a8:06:ca:d5:08:12:0b:f5:74:a4:12: 5b:6e:75:c8:cf:02:f7:94:35:4f:c6:87:89:bb:e3: 29:7f:e7:6d:0d:2f:71:88:b3:92:7c:b4:cc:c1:36: 2e:cb:55:c1:2c:a0:66:5c:19:63:43:cf:76:8f:63: d3:22:b1:de:4c:99:e6:f4:ba:28:58:c6:a0:75:7b: ba:d8:41:ee:7e:98:34:3d:14:96:74:84:89:8d:61: 3c:8c:1d:c7:98:d0:68:8f:9d:fa:93:6e:92:22:8d: 25:e1:5e:7a:ab:a1:63:30:fe:47:3f:67:d9:78:e0: c1:48:cf:e1:81:94:33:e7:cd:de:6f:d4:bf:d3:2b: 56:12:c4:8e:93:58:5a:e8:9e:cf:7b:19:e4:9d:c3: 08:9e:77:a5:7d:4e:63:07:b1:eb:dd:79:52:2d:c2: e4:f4:de:88:bc:c8:00:88:fe:47:ab:4b:ee:bf:31: e6:74:28:ad:37:a6:d1:26:3b:e3:05:17:c1:65:98: b9:4e:b1:56:b7:0f:3e:2a:24:22:d4:ba:27:40:a2: 82:cb:55:95:e5:42:b1:75:f7:1d:de:6d:53:e0:c5: 48:ea:d9:b9:3c:e3:cb:da:a9:28:93:ee:14:db:5e: 83:b9:ab:59:8a:40:85:27:33:67:04:71:6d:8b:3b: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EF:89:8A:6B:2C:92:65:3B:83:78:FF:E2:7A:A3:14:D7:E3:2E:26 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:16:fc:09:17:52:be:95:0e:6e:5c:57:9b:61:b5:87:ce: 01:6d:4a:25:91:68:3a:98:5f:a7:3f:69:7f:3b:58:c3:73:a1: 8f:bd:a1:23:6a:b9:08:d3:8c:c2:ca:4a:e7:e7:21:f5:43:b1: 5c:07:56:93:96:20:b7:8e:f8:65:9e:7d:75:61:60:6e:3e:13: ca:14:be:4e:c6:2e:7d:80:22:c0:e9:f4:93:9e:a5:5d:cb:78: 24:5f:15:45:1a:0f:74:24:e1:f2:d5:0b:44:cc:59:28:76:a4: ca:11:26:1b:1e:53:86:7c:a3:b3:b3:d3:37:ce:63:89:f2:1a: c1:ee:73:2e:a9:02:c2:49:59:ff:be:9f:56:71:73:c7:23:ae: 56:84:44:e5:8f:f2:03:f4:92:f6:ac:f5:01:9f:22:3a:ee:ad: 4e:ca:b9:63:1f:be:d6:5a:1a:48:44:c9:7e:2b:90:25:27:31: f9:7d:fb:74:99:fd:67:85:f6:35:61:4e:fb:fc:c1:40:26:32: 74:10:0e:26:68:ba:d6:93:b9:f9:2b:95:85:5f:a0:7c:73:32: 05:9e:21:cb:c6:fc:66:bb:19:ef:ab:6d:a5:68:62:9b:d2:e3: c5:f2:da:b7:8e:49:2b:35:f9:23:2a:cb:be:de:33:f5:76:a8: 59:05:67:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenExKNPjQKx4x4ZgpM/legGpKNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTEyMjMwODA2MThaFw0yNTEyMjYxMjU2MThaMDMxMTAvBgNV BAMTKDlCRUY4OThBNkIyQzkyNjUzQjgzNzhGRkUyN0FBMzE0RDdFMzJFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOp5OoBsrVCBIL9XSkEltudcjP AveUNU/Gh4m74yl/520NL3GIs5J8tMzBNi7LVcEsoGZcGWNDz3aPY9Misd5Mmeb0 uihYxqB1e7rYQe5+mDQ9FJZ0hImNYTyMHceY0GiPnfqTbpIijSXhXnqroWMw/kc/ Z9l44MFIz+GBlDPnzd5v1L/TK1YSxI6TWFrons97GeSdwwied6V9TmMHsevdeVIt wuT03oi8yACI/kerS+6/MeZ0KK03ptEmO+MFF8FlmLlOsVa3Dz4qJCLUuidAooLL VZXlQrF19x3ebVPgxUjq2bk848vaqSiT7hTbXoO5q1mKQIUnM2cEcW2LOwKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm++JimsskmU7g3j/4nqjFNfjLiYwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKkFvwJF1K+lQ5uXFebYbWHzgFtSiWRaDqY X6c/aX87WMNzoY+9oSNquQjTjMLKSufnIfVDsVwHVpOWILeO+GWefXVhYG4+E8oU vk7GLn2AIsDp9JOepV3LeCRfFUUaD3Qk4fLVC0TMWSh2pMoRJhseU4Z8o7Oz0zfO Y4nyGsHucy6pAsJJWf++n1Zxc8cjrlaEROWP8gP0kvas9QGfIjrurU7KuWMfvtZa GkhEyX4rkCUnMfl9+3SZ/WeF9jVhTvv8wUAmMnQQDiZoutaTufkrlYVfoHxzMgWe IcvG/Ga7Ge+rbaVoYpvS48Xy2reOSSs1+SMqy77eM/V2qFkFZwM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:17 2025 by rpki-client