This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: JepiQDwrUKuHScUYbv7wZLzmd7FKkFBbM+++X21TOSc= Subject key identifier: 7A:AB:B5:E4:32:5A:92:F7:4A:7B:AB:64:18:5E:34:91:E7:95:1E:DE Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 382A27943FB93ADA3292963ABE114419950728C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03E4 Signing time: Wed 24 Dec 2025 18:51:13 +0000 Manifest this update: Wed 24 Dec 2025 18:46:13 +0000 Manifest next update: Sat 27 Dec 2025 21:42:13 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: AGtlkNLxgGFzvfsq1yj2VkmqqJc58VglLqEEmCdkkxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2a:27:94:3f:b9:3a:da:32:92:96:3a:be:11:44:19:95:07:28:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Dec 24 18:46:13 2025 GMT Not After : Dec 27 21:42:13 2025 GMT Subject: CN=7AABB5E4325A92F74A7BAB64185E3491E7951EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:90:6c:69:f3:1e:cb:d2:f2:63:da:f6:73: 08:7b:f1:bb:58:be:2c:30:0d:9b:ed:59:0d:91:28: 88:29:c7:82:b1:72:78:59:3c:86:9c:ff:54:92:a9: 5b:82:4c:49:75:47:84:86:7f:67:83:67:32:31:21: 0b:4c:13:3f:25:8c:e2:5b:d2:89:be:8e:b8:23:7c: 16:45:99:5c:dd:a6:a8:09:54:4e:26:29:9e:48:73: f7:ad:73:b4:c4:33:4e:a7:e4:3a:05:23:c8:a9:ea: 06:9f:0e:04:5b:e9:f5:39:57:4d:53:17:8c:f4:8f: 58:64:a1:fd:7e:bc:ab:f5:1d:33:a3:3c:c0:c7:c2: c4:3c:78:51:e5:62:79:0e:d5:b5:fe:9e:30:bc:21: 38:bd:ed:51:11:92:65:30:5b:45:40:8a:ab:6e:29: fd:f7:d2:85:79:e2:ef:2b:d7:01:48:dd:2a:8c:5a: 42:54:f4:c4:50:87:43:b8:76:b5:42:60:71:bc:46: 04:0c:52:8a:c2:b7:b8:c7:ae:84:0f:1c:e2:1d:23: 1b:24:0d:e2:6b:03:ca:5a:81:d9:fe:64:cf:7a:14: 6c:5d:67:66:04:04:07:bb:31:a1:2a:7c:2c:01:f0: 21:42:14:86:2d:58:50:ca:1c:4c:08:b8:22:ce:0c: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:B5:E4:32:5A:92:F7:4A:7B:AB:64:18:5E:34:91:E7:95:1E:DE X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1a:44:68:5f:53:6a:20:c3:d5:c1:65:43:0b:d4:27:c2:47: 69:dc:e7:01:55:11:b6:65:cd:96:bd:94:a8:4c:b3:91:12:44: 2e:86:40:57:1a:3c:cc:e9:b0:9f:53:82:87:cb:4d:79:66:b0: 62:a1:2f:9f:12:bd:de:c5:a2:b1:ed:fc:85:1c:62:de:86:48: f8:ae:a2:26:d7:5e:1f:5f:41:c7:28:46:8f:ce:a2:aa:23:c4: 60:c4:08:83:08:ca:ba:a6:20:d6:d7:f1:b5:75:6b:be:8c:b4: bb:c1:1a:48:b9:52:6a:f0:5f:b1:82:b9:35:1c:6f:ec:f1:6a: 06:11:bc:44:b3:b1:7b:98:ac:02:ca:66:30:0f:10:74:0f:77: ec:35:17:64:f5:28:85:5f:dd:dd:45:d3:9b:80:9f:e8:2e:80: bf:c2:ee:ec:31:83:eb:15:ef:09:6f:8a:83:f2:e1:e8:77:64: 8d:55:71:46:b8:4e:70:42:cc:6b:48:e4:8b:db:3d:d1:db:0e: 15:d2:06:4d:6b:60:14:85:07:e7:6e:17:54:80:d0:e7:72:04: 1b:ae:4f:b9:31:a0:a4:f1:e8:60:e2:73:94:8e:39:6b:01:07: 67:5c:bc:5c:8c:c8:a1:0b:6d:2a:ab:02:e8:9b:0e:9b:ee:6f: e8:8a:e3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOConlD+5OtoykpY6vhFEGZUHKMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTEyMjQxODQ2MTNaFw0yNTEyMjcyMTQyMTNaMDMxMTAvBgNV BAMTKDdBQUJCNUU0MzI1QTkyRjc0QTdCQUI2NDE4NUUzNDkxRTc5NTFFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiD5BsafMey9LyY9r2cwh78btY viwwDZvtWQ2RKIgpx4KxcnhZPIac/1SSqVuCTEl1R4SGf2eDZzIxIQtMEz8ljOJb 0om+jrgjfBZFmVzdpqgJVE4mKZ5Ic/etc7TEM06n5DoFI8ip6gafDgRb6fU5V01T F4z0j1hkof1+vKv1HTOjPMDHwsQ8eFHlYnkO1bX+njC8ITi97VERkmUwW0VAiqtu Kf330oV54u8r1wFI3SqMWkJU9MRQh0O4drVCYHG8RgQMUorCt7jHroQPHOIdIxsk DeJrA8pagdn+ZM96FGxdZ2YEBAe7MaEqfCwB8CFCFIYtWFDKHEwIuCLODE2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUequ15DJakvdKe6tkGF40keeVHt4wHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcaRGhfU2ogw9XBZUML1CfCR2nc5wFVEbZl zZa9lKhMs5ESRC6GQFcaPMzpsJ9TgofLTXlmsGKhL58Svd7ForHt/IUcYt6GSPiu oibXXh9fQccoRo/OoqojxGDECIMIyrqmINbX8bV1a76MtLvBGki5UmrwX7GCuTUc b+zxagYRvESzsXuYrALKZjAPEHQPd+w1F2T1KIVf3d1F05uAn+gugL/C7uwxg+sV 7wlvioPy4eh3ZI1VcUa4TnBCzGtI5IvbPdHbDhXSBk1rYBSFB+duF1SA0OdyBBuu T7kxoKTx6GDic5SOOWsBB2dcvFyMyKELbSqrAuibDpvub+iK4wo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:39 2025 by rpki-client