This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft File: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft (raw, json) Hash identifier: ikuLiTNEp8twB+N6v8M1orHDxf067gt7/8UnzxwZKAQ= Subject key identifier: FE:B8:58:D7:05:2F:00:6D:07:0D:0C:5C:52:AF:31:59:BF:5D:E0:FE Authority key identifier: 15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D Certificate issuer: /CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D Certificate serial: 56A42F0E66F65F5F85EE8FB4506CA678D146127A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft Manifest number: 01A5 Signing time: Wed 17 Dec 2025 09:41:34 +0000 Manifest this update: Wed 17 Dec 2025 09:36:34 +0000 Manifest next update: Sat 20 Dec 2025 15:00:34 +0000 Files and hashes: 1: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: 7kydv1XIv8/JAr4nfh+b4R84/a7ZfF4+fcId+aE1Hhc=) 2: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl (hash: GV4e3/19+u+AM7Iwfcg3evXnzwQZ0pFOUc4O1zUWuNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a4:2f:0e:66:f6:5f:5f:85:ee:8f:b4:50:6c:a6:78:d1:46:12:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D Validity Not Before: Dec 17 09:36:34 2025 GMT Not After : Dec 20 15:00:34 2025 GMT Subject: CN=FEB858D7052F006D070D0C5C52AF3159BF5DE0FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:c3:9b:6b:c4:3f:4b:80:5d:f8:83:51:ce: 16:04:83:d0:6f:14:54:db:02:8e:e9:07:7a:89:65: ee:7d:42:80:87:12:01:a0:20:75:3d:40:c5:93:5b: 99:12:87:e3:ff:a7:1a:aa:a2:29:e5:18:61:ba:ab: ff:ea:6b:b3:16:8b:5c:dd:a9:82:4c:86:ee:f8:2b: ac:d6:5f:c6:c7:c5:30:60:bd:2a:ab:4e:5f:5c:3c: 0c:ef:d3:2f:28:93:46:6e:2b:7c:ff:29:ed:73:f4: 3e:0a:c0:c4:36:51:91:1d:38:31:26:a7:3b:ab:97: 08:26:1c:68:42:ee:49:8e:79:ab:47:0d:95:04:d7: f5:b7:4f:74:34:d1:00:a3:84:4e:43:72:7a:9b:31: 4f:4a:00:d3:99:a8:37:5a:78:95:cc:62:9a:5b:4c: 4b:d2:21:fe:81:07:bf:fa:30:42:37:b5:0b:e6:a3: a6:92:61:32:fc:85:35:69:17:44:bc:f3:2f:00:a5: fd:fa:b8:f6:1d:df:80:38:ae:b3:0c:36:b5:93:9c: 0c:85:d0:a6:b8:3d:5f:cd:44:84:a4:5d:e4:8b:41: 57:00:fe:fb:aa:05:e4:68:ed:3a:9f:f7:06:4e:02: f5:5d:9f:6e:f8:86:ae:65:2d:6a:33:a5:66:ef:2d: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:58:D7:05:2F:00:6D:07:0D:0C:5C:52:AF:31:59:BF:5D:E0:FE X509v3 Authority Key Identifier: keyid:15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:7e:79:62:74:cb:0f:3a:c5:bb:f2:d9:b1:d2:d0:19:57: 52:d0:1f:1c:07:a1:a0:10:38:1b:b7:db:55:9f:1a:98:86:56: 88:b5:7f:b9:51:77:f1:79:37:f2:8c:d8:5e:cc:cc:31:68:e7: ff:27:3a:57:e9:a2:9f:f5:d6:b6:2c:df:29:da:df:94:fc:03: 2f:a9:cb:49:07:ab:72:47:10:17:bc:30:16:50:bf:35:6b:23: 76:45:06:9e:00:bd:eb:0a:c0:16:8a:a4:d2:38:90:e7:73:66: 87:17:1e:72:39:b7:6d:7b:ce:58:a3:73:73:6e:72:71:55:e1: 52:db:be:0b:10:77:12:70:1f:98:a0:00:2f:28:29:b0:7a:eb: 23:04:f3:cd:21:af:68:0e:a3:c4:69:66:9e:87:de:54:b2:86: 93:dc:1b:75:dd:aa:09:c0:db:75:2c:af:23:77:84:12:19:94: 40:61:03:c9:83:73:86:1c:45:d1:8c:31:2c:4e:42:aa:cf:f5: 9d:19:3d:a1:0d:f4:26:59:36:9e:97:c6:88:21:23:c7:51:60: 0f:58:73:10:e9:45:97:ee:de:48:27:bb:79:f3:db:7f:79:f7: 94:e4:c4:95:b0:6d:c1:96:08:42:75:4f:a5:a5:e2:21:30:c7: d5:5e:95:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqQvDmb2X1+F7o+0UGymeNFGEnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2MDJB NEQzOEUzRDAeFw0yNTEyMTcwOTM2MzRaFw0yNTEyMjAxNTAwMzRaMDMxMTAvBgNV BAMTKEZFQjg1OEQ3MDUyRjAwNkQwNzBEMEM1QzUyQUYzMTU5QkY1REUwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ8Oba8Q/S4Bd+INRzhYEg9Bv FFTbAo7pB3qJZe59QoCHEgGgIHU9QMWTW5kSh+P/pxqqoinlGGG6q//qa7MWi1zd qYJMhu74K6zWX8bHxTBgvSqrTl9cPAzv0y8ok0ZuK3z/Ke1z9D4KwMQ2UZEdODEm pzurlwgmHGhC7kmOeatHDZUE1/W3T3Q00QCjhE5DcnqbMU9KANOZqDdaeJXMYppb TEvSIf6BB7/6MEI3tQvmo6aSYTL8hTVpF0S88y8Apf36uPYd34A4rrMMNrWTnAyF 0Ka4PV/NRISkXeSLQVcA/vuqBeRo7Tqf9wZOAvVdn274hq5lLWozpWbvLSbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rhY1wUvAG0HDQxcUq8xWb9d4P4wHwYDVR0j BBgwFoAUFbeqtINVqYx2HdJ6WJ32AqTTjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODY1OTlhNi1kODZiLTQ3MWEtYTA1Yi1hOWZhZmUzYmI2OWEvMC8xNUI3QUFCNDgz NTVBOThDNzYxREQyN0E1ODlERjYwMkE0RDM4RTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2MDJBNEQz OEUzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg2NTk5YTYtZDg2Yi00NzFhLWEw NWItYTlmYWZlM2JiNjlhLzAvMTVCN0FBQjQ4MzU1QTk4Qzc2MUREMjdBNTg5REY2 MDJBNEQzOEUzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4MfnlidMsPOsW78tmx0tAZV1LQHxwHoaAQ OBu321WfGpiGVoi1f7lRd/F5N/KM2F7MzDFo5/8nOlfpop/11rYs3yna35T8Ay+p y0kHq3JHEBe8MBZQvzVrI3ZFBp4AvesKwBaKpNI4kOdzZocXHnI5t217zlijc3Nu cnFV4VLbvgsQdxJwH5igAC8oKbB66yME880hr2gOo8RpZp6H3lSyhpPcG3XdqgnA 23UsryN3hBIZlEBhA8mDc4YcRdGMMSxOQqrP9Z0ZPaEN9CZZNp6XxoghI8dRYA9Y cxDpRZfu3kgnu3nz239595TkxJWwbcGWCEJ1T6Wl4iEwx9VelWU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:12 2025 by rpki-client