This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: uZGIWT8xtVApiggCw2G8RfzQukMvfDzSi9W2aMjJwr0= Subject key identifier: 19:DB:82:C5:CD:56:74:85:DF:BA:5D:3F:50:D7:FB:34:28:84:48:96 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 7935D55C492D30DD94D50012DB66F786C4A48C02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 0223 Signing time: Tue 23 Dec 2025 23:44:39 +0000 Manifest this update: Tue 23 Dec 2025 23:39:39 +0000 Manifest next update: Sat 27 Dec 2025 02:46:39 +0000 Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: lpSwfmAmKL23RbErKtEZj4srMqeOQng2UqSoQbv0+GE=) 2: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) 3: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: guQAfIXh8K4pxknf9elyCH9kX5NZn0tltScbEZGy87o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:35:d5:5c:49:2d:30:dd:94:d5:00:12:db:66:f7:86:c4:a4:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Dec 23 23:39:39 2025 GMT Not After : Dec 27 02:46:39 2025 GMT Subject: CN=19DB82C5CD567485DFBA5D3F50D7FB3428844896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:9e:fd:8b:e6:9e:c5:70:b5:b2:83:db:d9: e6:50:e5:57:94:fa:0f:7d:d6:49:b7:80:88:00:4f: 1a:f9:40:7b:11:6b:31:0f:b5:3f:0f:7c:be:45:13: c6:4b:c6:7a:fc:7b:5b:1f:25:91:02:0e:2b:e8:40: 6b:a4:a0:c1:b8:b1:d7:45:6d:b1:02:ab:4f:71:fe: 9d:b5:6e:f1:33:62:70:4c:93:12:0d:3d:9d:f7:f2: 6c:34:6e:90:41:05:9b:56:95:12:31:c9:05:50:99: d8:9f:fc:04:54:66:8c:c3:85:d8:0b:92:d5:70:2f: 45:af:0f:c1:e0:22:b8:1a:e8:8f:fe:b1:89:ac:bf: 01:b9:63:ba:e6:9f:67:5c:2d:b0:08:68:c0:ff:16: a3:76:1e:fe:2f:e5:e0:7c:ca:5a:05:f5:9c:79:92: be:07:36:a9:6f:1c:60:08:9c:d9:15:e4:7a:c0:e3: bf:5f:a5:fc:95:3a:fa:03:36:2e:28:53:17:7b:6f: cb:99:e4:28:a1:e2:a6:d7:18:7b:58:83:e7:5a:1e: e1:5f:c7:87:34:d8:ff:31:bc:df:2d:cf:11:ae:8e: 55:16:5d:c8:9b:19:7d:1a:f7:0a:36:48:e8:b6:b8: 16:ef:3e:eb:55:8b:41:35:54:51:ef:cf:0b:c9:a0: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DB:82:C5:CD:56:74:85:DF:BA:5D:3F:50:D7:FB:34:28:84:48:96 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:af:b8:4e:26:85:fd:61:09:4d:1d:51:9b:75:95:9f:ee:c0: 63:94:00:8e:a8:fb:7c:2f:e1:e3:17:54:b3:ef:6c:d2:f6:fd: 04:22:5e:60:22:4d:94:d5:83:71:e9:70:64:ca:2b:9c:65:6f: 42:0f:6f:68:d9:89:84:30:76:38:9a:3b:18:73:fa:3f:21:ed: 78:66:4a:9e:0f:83:1a:c6:88:d0:e3:04:5c:82:29:70:e9:72: 9e:7f:87:bd:d5:b3:7e:ee:46:9e:77:b6:e6:30:a6:a1:8a:b7: 10:f6:69:84:e5:80:e4:b0:ce:95:ba:ee:20:9e:3b:89:77:17: df:95:c4:58:ab:b4:4c:43:70:23:07:ec:2e:92:f3:af:cc:22: 8e:cf:f9:d8:c2:6a:a5:13:f8:9d:66:58:5e:f6:1c:ea:7a:38: 2e:a5:97:71:15:10:d5:63:bb:90:4a:1f:f7:c3:a7:93:3b:c6: 7e:83:a8:4e:2c:3e:a6:e9:8d:21:b4:ca:55:f2:8f:a3:a8:c5: 2a:53:53:34:44:cd:ea:2f:65:14:9c:69:8c:6c:24:7e:88:b2: 34:3c:1e:31:93:98:88:33:56:52:95:97:7f:ff:08:a6:4d:2e: a3:20:c6:82:d4:1a:56:45:99:2f:29:ee:3b:a6:3d:66:ba:3f: 1e:7e:d4:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTXVXEktMN2U1QAS22b3hsSkjAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTEyMjMyMzM5MzlaFw0yNTEyMjcwMjQ2MzlaMDMxMTAvBgNV BAMTKDE5REI4MkM1Q0Q1Njc0ODVERkJBNUQzRjUwRDdGQjM0Mjg4NDQ4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjZ79i+aexXC1soPb2eZQ5VeU +g991km3gIgATxr5QHsRazEPtT8PfL5FE8ZLxnr8e1sfJZECDivoQGukoMG4sddF bbECq09x/p21bvEzYnBMkxINPZ338mw0bpBBBZtWlRIxyQVQmdif/ARUZozDhdgL ktVwL0WvD8HgIrga6I/+sYmsvwG5Y7rmn2dcLbAIaMD/FqN2Hv4v5eB8yloF9Zx5 kr4HNqlvHGAInNkV5HrA479fpfyVOvoDNi4oUxd7b8uZ5Cih4qbXGHtYg+daHuFf x4c02P8xvN8tzxGujlUWXcibGX0a9wo2SOi2uBbvPutVi0E1VFHvzwvJoLCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGduCxc1WdIXful0/UNf7NCiESJYwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2vuE4mhf1hCU0dUZt1lZ/uwGOUAI6o+3wv 4eMXVLPvbNL2/QQiXmAiTZTVg3HpcGTKK5xlb0IPb2jZiYQwdjiaOxhz+j8h7Xhm Sp4PgxrGiNDjBFyCKXDpcp5/h73Vs37uRp53tuYwpqGKtxD2aYTlgOSwzpW67iCe O4l3F9+VxFirtExDcCMH7C6S86/MIo7P+djCaqUT+J1mWF72HOp6OC6ll3EVENVj u5BKH/fDp5M7xn6DqE4sPqbpjSG0ylXyj6OoxSpTUzREzeovZRScaYxsJH6IsjQ8 HjGTmIgzVlKVl3//CKZNLqMgxoLUGlZFmS8p7jumPWa6Px5+1CQ= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:44 2025 by rpki-client