This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: OEkYk1VQkG5EBlXP8GMSgdNjsZp13HzDO4vCdQHPBao= Subject key identifier: 73:BB:89:E6:3D:48:71:F2:35:C0:7C:69:1A:EF:02:92:A0:EA:AC:11 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 7710FC2C3A76467C3F90DCCB0DF15C8C58961DDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 019F Signing time: Wed 24 Dec 2025 16:01:48 +0000 Manifest this update: Wed 24 Dec 2025 15:56:48 +0000 Manifest next update: Sat 27 Dec 2025 20:50:48 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 2: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: tjvv0eQDpl6UOww5FjvTpw3SmUhi7djAbdm29gewpVU=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:10:fc:2c:3a:76:46:7c:3f:90:dc:cb:0d:f1:5c:8c:58:96:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Dec 24 15:56:48 2025 GMT Not After : Dec 27 20:50:48 2025 GMT Subject: CN=73BB89E63D4871F235C07C691AEF0292A0EAAC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:54:ec:5b:02:8e:33:24:5d:78:b6:7c:bf: cf:d3:94:55:f2:38:e0:27:6a:00:e7:4d:13:4d:47: 0e:c4:a6:88:c0:66:1b:eb:e1:a1:03:5f:04:ba:e9: 3b:b1:de:20:89:b7:8a:dd:05:84:c6:e8:53:ab:f1: 71:24:65:5a:94:17:da:41:fb:5a:d3:86:68:fe:10: 3a:9c:11:5c:18:3e:5a:1e:f1:5c:10:4d:c2:91:fe: 03:6f:9d:69:34:ff:e9:56:6f:2c:6b:1e:7e:6e:7b: 93:65:f9:83:a6:74:23:2c:aa:bd:bb:86:22:aa:99: 36:8f:16:5d:3c:ff:da:0c:cc:1c:73:7e:e9:7c:ed: 0f:36:4a:fe:9c:7f:0e:ae:ff:fa:ae:65:d3:b6:18: 59:95:27:31:54:c7:2f:a6:66:a2:2f:63:eb:5c:c8: 18:ab:8d:59:e5:0c:1d:d7:c7:83:39:f3:bc:ae:92: e4:e6:22:0b:08:67:6c:23:b2:b5:ef:b1:af:09:0c: 98:4a:67:d2:02:09:87:d3:7c:79:7d:9a:4b:59:79: b3:16:b4:eb:8b:da:bf:6d:37:4d:97:e1:c0:75:1a: d7:69:cf:bc:18:a1:df:4e:9b:02:14:6f:9e:2c:14: f4:fc:51:13:93:d9:77:09:ee:f0:93:56:b8:c1:e4: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BB:89:E6:3D:48:71:F2:35:C0:7C:69:1A:EF:02:92:A0:EA:AC:11 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:73:5a:20:a6:0a:f4:a5:d5:96:fe:26:59:5c:9d:28:f8:ec: 81:b3:ed:3a:06:ee:af:b5:1c:93:d8:18:3b:c4:60:d7:6d:e6: 04:9e:4d:22:b4:58:01:e2:74:ac:37:1b:a0:7c:25:aa:80:eb: 7f:87:20:d5:e5:22:51:9f:6e:ff:09:29:3f:fe:a2:bd:2d:16: 03:ff:ca:34:b6:9b:22:8a:fb:3e:29:be:20:93:45:94:70:43: 8f:4d:05:2c:e9:20:f3:24:15:ed:d1:11:b2:da:b0:f7:b1:4c: a9:f7:3e:58:e7:91:8d:2d:de:e3:3d:2f:e2:28:43:4c:07:71: 28:a2:ff:fb:fc:07:e5:44:3f:1f:4f:da:2a:bd:31:ad:3c:51: 01:79:28:67:22:db:ac:8c:f7:a9:80:4e:76:20:d4:dc:2c:01: 25:39:2a:60:05:87:b0:8b:82:fa:f2:5c:68:fc:22:57:d6:85: d8:8f:74:fa:61:6c:09:ab:94:15:04:17:f5:5c:51:95:2a:91: 4f:63:c1:54:5b:02:ee:0a:20:cc:6d:88:b2:b2:1d:f6:af:74: 80:da:eb:34:4a:fa:56:c5:b4:40:78:ad:eb:47:a8:f4:1e:06: 85:32:6e:73:c2:36:a4:af:a5:cd:6d:2a:ef:72:40:be:ea:9d: a1:0b:81:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxD8LDp2Rnw/kNzLDfFcjFiWHdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTEyMjQxNTU2NDhaFw0yNTEyMjcyMDUwNDhaMDMxMTAvBgNV BAMTKDczQkI4OUU2M0Q0ODcxRjIzNUMwN0M2OTFBRUYwMjkyQTBFQUFDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI1TsWwKOMyRdeLZ8v8/TlFXy OOAnagDnTRNNRw7EpojAZhvr4aEDXwS66Tux3iCJt4rdBYTG6FOr8XEkZVqUF9pB +1rThmj+EDqcEVwYPloe8VwQTcKR/gNvnWk0/+lWbyxrHn5ue5Nl+YOmdCMsqr27 hiKqmTaPFl08/9oMzBxzful87Q82Sv6cfw6u//quZdO2GFmVJzFUxy+mZqIvY+tc yBirjVnlDB3Xx4M587yukuTmIgsIZ2wjsrXvsa8JDJhKZ9ICCYfTfHl9mktZebMW tOuL2r9tN02X4cB1Gtdpz7wYod9OmwIUb54sFPT8UROT2XcJ7vCTVrjB5CunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7uJ5j1IcfI1wHxpGu8CkqDqrBEwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxzWiCmCvSl1Zb+JllcnSj47IGz7ToG7q+1 HJPYGDvEYNdt5gSeTSK0WAHidKw3G6B8JaqA63+HINXlIlGfbv8JKT/+or0tFgP/ yjS2myKK+z4pviCTRZRwQ49NBSzpIPMkFe3REbLasPexTKn3PljnkY0t3uM9L+Io Q0wHcSii//v8B+VEPx9P2iq9Ma08UQF5KGci26yM96mATnYg1NwsASU5KmAFh7CL gvryXGj8IlfWhdiPdPphbAmrlBUEF/VcUZUqkU9jwVRbAu4KIMxtiLKyHfavdIDa 6zRK+lbFtEB4retHqPQeBoUybnPCNqSvpc1tKu9yQL7qnaELgW8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:25 2025 by rpki-client