This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: nu4vsx9LGCR2s4tzAkOrX7C3w6tTF4YrZt+TBg6/REw= Subject key identifier: 4C:3C:81:3F:1C:99:E8:BC:6C:1A:74:F7:50:A4:7B:4B:BD:E4:96:BF Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 6A6FF2B0670122E1B98B7E2A8B6F44808A3EB981 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 0105 Signing time: Thu 18 Dec 2025 11:11:42 +0000 Manifest this update: Thu 18 Dec 2025 11:06:42 +0000 Manifest next update: Sun 21 Dec 2025 20:17:42 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 3: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: uUbWbH/BeUC4CFTn34pTSBdIb8Q/AT684spipWWjIH8=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6f:f2:b0:67:01:22:e1:b9:8b:7e:2a:8b:6f:44:80:8a:3e:b9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Dec 18 11:06:42 2025 GMT Not After : Dec 21 20:17:42 2025 GMT Subject: CN=4C3C813F1C99E8BC6C1A74F750A47B4BBDE496BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:23:fb:42:fd:19:fc:16:6a:0f:35:3e:43: c0:6c:b6:48:15:e9:9c:84:ff:73:fd:de:4c:44:80: 55:c1:cc:46:96:91:af:ec:e5:7b:a6:a5:3e:3e:dd: d6:66:ec:9e:c0:11:bf:4d:d3:dd:eb:c0:f6:c5:7e: 6e:92:f6:68:8c:37:0f:65:0b:81:af:da:82:d4:da: 00:3f:a1:0a:d3:65:8d:1e:68:b8:e3:80:a9:61:58: e4:a5:a2:be:21:3c:7d:48:76:ba:c1:ae:2e:9f:e7: a2:58:18:fd:08:6d:02:64:7d:62:d0:f3:fb:4f:0d: ab:8e:a5:43:8c:4e:0b:c7:59:92:cf:ab:19:1d:6c: fd:ab:f5:19:fc:b7:1c:ff:71:3a:60:29:4c:13:86: cc:0e:18:7b:1f:e2:b6:46:46:01:bb:ff:95:d6:a4: 9e:b4:ff:61:2c:41:44:7a:a4:0d:ca:a7:05:29:4d: 87:f5:9f:0e:2f:68:ad:81:59:40:4c:f6:22:a4:ed: bf:82:8d:c9:bf:38:2b:77:c8:6f:11:7a:8a:d0:aa: aa:b5:d5:63:28:a7:60:3e:37:57:c0:d2:2d:82:46: 59:4c:c8:c1:5f:6d:f6:1a:a0:27:d1:ca:de:25:a2: 4b:70:54:c1:77:c4:3c:02:1d:25:14:9e:8e:82:ff: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:81:3F:1C:99:E8:BC:6C:1A:74:F7:50:A4:7B:4B:BD:E4:96:BF X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:fa:37:dd:96:d5:82:64:49:4e:c6:df:33:01:72:04:52: 14:f2:73:5f:84:ee:09:d4:21:87:05:b4:cb:e3:25:3d:60:7a: a0:c9:63:55:69:81:af:5a:9e:7f:d5:72:ab:21:57:c2:ea:c5: 10:0a:ea:f2:81:16:1a:f9:de:30:22:4a:df:43:90:6d:1c:92: 96:57:f3:b4:f2:be:82:01:25:d3:46:4b:1b:f3:4a:66:72:a9: 06:f4:4b:2f:b6:87:a9:05:b8:e1:fe:f4:0e:f2:4a:7c:13:77: 7a:b3:d4:aa:43:75:a1:fd:1e:2b:38:1a:88:3f:e8:8d:0a:a7: 14:dc:92:dd:fe:61:94:71:bc:42:46:4e:4c:26:31:3a:73:c4: f2:9b:69:5b:b1:c3:d3:27:b1:73:db:70:0b:79:f0:71:c7:65: 7b:76:d9:ae:b8:6a:eb:98:e7:03:5a:cf:88:63:f1:b3:9f:9c: 33:0d:0f:40:2d:5f:b4:92:e7:94:32:d7:72:c0:8e:c5:c2:b1: 75:58:79:59:ef:87:ff:15:b5:e0:42:65:9f:63:4b:62:d5:54: d3:eb:87:18:1c:cb:49:38:ff:6c:41:c5:33:92:1a:9f:79:3a: 5f:79:42:32:c2:51:50:e7:bd:a6:88:5b:ff:aa:3b:a5:22:a8: 36:c2:cb:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUam/ysGcBIuG5i34qi29EgIo+uYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTEyMTgxMTA2NDJaFw0yNTEyMjEyMDE3NDJaMDMxMTAvBgNV BAMTKDRDM0M4MTNGMUM5OUU4QkM2QzFBNzRGNzUwQTQ3QjRCQkRFNDk2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTSP7Qv0Z/BZqDzU+Q8BstkgV 6ZyE/3P93kxEgFXBzEaWka/s5XumpT4+3dZm7J7AEb9N093rwPbFfm6S9miMNw9l C4Gv2oLU2gA/oQrTZY0eaLjjgKlhWOSlor4hPH1IdrrBri6f56JYGP0IbQJkfWLQ 8/tPDauOpUOMTgvHWZLPqxkdbP2r9Rn8txz/cTpgKUwThswOGHsf4rZGRgG7/5XW pJ60/2EsQUR6pA3KpwUpTYf1nw4vaK2BWUBM9iKk7b+Cjcm/OCt3yG8ReorQqqq1 1WMop2A+N1fA0i2CRllMyMFfbfYaoCfRyt4loktwVMF3xDwCHSUUno6C/4ErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDyBPxyZ6LxsGnT3UKR7S73klr8wHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIa+jfdltWCZElOxt8zAXIEUhTyc1+E7gnU IYcFtMvjJT1geqDJY1Vpga9ann/VcqshV8LqxRAK6vKBFhr53jAiSt9DkG0ckpZX 87TyvoIBJdNGSxvzSmZyqQb0Sy+2h6kFuOH+9A7ySnwTd3qz1KpDdaH9His4Gog/ 6I0KpxTckt3+YZRxvEJGTkwmMTpzxPKbaVuxw9MnsXPbcAt58HHHZXt22a64auuY 5wNaz4hj8bOfnDMND0AtX7SS55Qy13LAjsXCsXVYeVnvh/8VteBCZZ9jS2LVVNPr hxgcy0k4/2xBxTOSGp95Ol95QjLCUVDnvaaIW/+qO6UiqDbCyz4= -----END CERTIFICATE-----Generated at Sat Dec 20 22:30:03 2025 by rpki-client