This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: HuDYQi0WACmjxXRB+bgmw29WSRWKsvERi/BksGiNC2w= Subject key identifier: 91:83:96:91:EF:54:03:AB:75:25:72:1E:31:F9:26:90:73:0E:68:75 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 4036211F490EE8E9DE0CD0295FF137D5C3505A2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: BB Signing time: Wed 17 Dec 2025 14:11:31 +0000 Manifest this update: Wed 17 Dec 2025 14:06:31 +0000 Manifest next update: Sat 20 Dec 2025 23:32:31 +0000 Files and hashes: 1: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 3: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 4: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 5: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 7: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 8: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: wEaqeDRo33TDYGB7d+Igm56vV4LkHaHSUfwoUFMOAQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:36:21:1f:49:0e:e8:e9:de:0c:d0:29:5f:f1:37:d5:c3:50:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Dec 17 14:06:31 2025 GMT Not After : Dec 20 23:32:31 2025 GMT Subject: CN=91839691EF5403AB7525721E31F92690730E6875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:bb:6c:7c:c8:4e:75:42:8c:6f:28:43:1a: c2:b5:da:cb:96:94:51:6c:f6:7a:83:be:83:76:33: 36:dc:87:4c:cc:b1:4d:a9:56:74:66:17:e8:35:00: 3e:21:b8:39:a6:c4:81:ac:f3:86:7f:d2:e0:a8:de: 9c:ff:ec:e1:dd:09:2c:22:0a:de:04:95:95:16:76: 04:b9:8d:1b:7b:04:04:ad:26:31:86:52:4a:f8:48: 82:b4:eb:fe:63:58:0c:d6:59:9e:c1:eb:73:03:2e: 8d:28:03:7e:e8:9d:5c:c4:a4:00:72:aa:eb:f6:91: 23:13:29:f5:d8:9d:b3:48:be:8b:0a:ca:da:6f:e7: 54:27:66:4d:0a:47:e3:23:e7:04:6d:16:bd:24:b8: 4c:06:04:b6:6a:7a:a5:05:31:d2:97:74:df:d9:1c: 28:83:d9:cf:65:8e:59:c6:7d:45:7d:9a:b8:03:b5: d8:52:41:e8:be:48:b5:87:43:7c:4e:b5:8f:90:53: 0c:e7:d0:ef:99:76:ae:1a:a2:43:ce:5b:5a:37:4c: b0:de:da:14:62:ad:21:05:45:c3:25:1f:8d:68:17: 8e:f8:cf:59:54:f7:b5:8e:c5:88:f7:2e:6b:ef:62: ef:84:e0:0e:15:2c:3c:b9:21:fc:95:7f:82:b2:b4: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:96:91:EF:54:03:AB:75:25:72:1E:31:F9:26:90:73:0E:68:75 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4a:9e:a5:a6:a5:eb:94:b4:89:59:b4:19:96:c6:f9:ca:87: c2:b8:1f:e3:a4:4c:be:53:99:3f:09:d3:6d:91:87:5d:e2:bf: e2:fd:e2:fb:13:3e:e3:cb:34:c0:42:5c:5f:59:2a:97:79:2d: a1:b2:79:bf:37:c6:10:d8:4f:17:91:db:d7:24:cb:dc:4b:fe: 5f:f4:0e:96:a6:b5:9f:38:45:ff:3f:eb:33:08:95:da:66:ba: d9:81:47:db:10:9c:d7:12:04:e5:37:f9:39:08:c4:dc:4c:a7: 5a:9f:c1:26:de:17:26:ce:a1:ee:10:4a:c6:e1:cb:8d:96:4d: 5e:da:9f:81:eb:6b:9f:e4:7c:86:fc:1a:9d:96:89:9e:e1:b5: f2:74:dd:60:f5:3d:49:fb:17:f3:5b:c8:3d:42:02:29:b2:8f: e9:0f:42:8a:3a:f7:1f:c4:25:30:86:71:03:90:96:41:03:6f: d5:4c:08:96:23:1b:b9:83:e9:05:89:0d:45:12:74:bd:ec:ad: 7e:aa:8e:4f:57:99:50:32:49:a8:7f:17:36:4a:6c:9c:11:b4: f2:2c:fe:eb:ef:9f:fc:c6:71:35:90:0a:50:70:29:0d:ce:85: 29:ce:8f:9d:ad:09:a9:04:7c:8b:22:ea:fe:84:27:55:89:fe: 7f:75:4f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDYhH0kO6OneDNApX/E31cNQWiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTEyMTcxNDA2MzFaFw0yNTEyMjAyMzMyMzFaMDMxMTAvBgNV BAMTKDkxODM5NjkxRUY1NDAzQUI3NTI1NzIxRTMxRjkyNjkwNzMwRTY4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIbtsfMhOdUKMbyhDGsK12suW lFFs9nqDvoN2Mzbch0zMsU2pVnRmF+g1AD4huDmmxIGs84Z/0uCo3pz/7OHdCSwi Ct4ElZUWdgS5jRt7BAStJjGGUkr4SIK06/5jWAzWWZ7B63MDLo0oA37onVzEpABy quv2kSMTKfXYnbNIvosKytpv51QnZk0KR+Mj5wRtFr0kuEwGBLZqeqUFMdKXdN/Z HCiD2c9ljlnGfUV9mrgDtdhSQei+SLWHQ3xOtY+QUwzn0O+Zdq4aokPOW1o3TLDe 2hRirSEFRcMlH41oF474z1lU97WOxYj3LmvvYu+E4A4VLDy5IfyVf4KytNkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYOWke9UA6t1JXIeMfkmkHMOaHUwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5KnqWmpeuUtIlZtBmWxvnKh8K4H+OkTL5T mT8J022Rh13iv+L94vsTPuPLNMBCXF9ZKpd5LaGyeb83xhDYTxeR29cky9xL/l/0 DpamtZ84Rf8/6zMIldpmutmBR9sQnNcSBOU3+TkIxNxMp1qfwSbeFybOoe4QSsbh y42WTV7an4Hra5/kfIb8Gp2WiZ7htfJ03WD1PUn7F/NbyD1CAimyj+kPQoo69x/E JTCGcQOQlkEDb9VMCJYjG7mD6QWJDUUSdL3srX6qjk9XmVAySah/FzZKbJwRtPIs /uvvn/zGcTWQClBwKQ3OhSnOj52tCakEfIsi6v6EJ1WJ/n91T58= -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:05 2025 by rpki-client