This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: FkXXLffkFw7uGGcwy6ZPm5W8tqTbIXusaelrO5zOa1k= Subject key identifier: 23:0B:9B:13:34:01:E6:27:AE:3D:35:44:F1:24:B6:F8:42:3C:70:AC Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 212CE3A2EB7847B23995DDB218BB7409F2263693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 03B1 Signing time: Wed 17 Dec 2025 18:32:18 +0000 Manifest this update: Wed 17 Dec 2025 18:27:18 +0000 Manifest next update: Sat 20 Dec 2025 23:30:18 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) 2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: c+TMtQD27OCNaEoMhv5tSpK4WGd0cVxFSaDjtjf/Uyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2c:e3:a2:eb:78:47:b2:39:95:dd:b2:18:bb:74:09:f2:26:36:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Dec 17 18:27:18 2025 GMT Not After : Dec 20 23:30:18 2025 GMT Subject: CN=230B9B133401E627AE3D3544F124B6F8423C70AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:b0:35:33:a9:31:90:c1:ca:4e:0c:70:b0: d9:ee:fd:fc:d8:ea:86:2c:e2:e8:a3:27:5d:00:03: 83:4d:5b:b3:c8:b3:28:9c:d6:7c:af:73:aa:be:86: b5:e0:cc:77:de:5b:54:21:2e:f5:86:a8:35:11:cc: 80:c7:11:73:a9:96:30:73:7f:e3:e8:2c:bb:d8:58: 6f:fa:00:ee:46:a3:ba:b4:31:19:cf:50:2c:b4:72: 85:44:e2:00:5c:a5:34:16:35:a6:0c:8c:65:67:7f: 86:ce:1d:04:09:2d:f5:2c:81:5e:88:6e:4d:c6:36: 67:b1:0a:ca:01:fd:0c:2b:d1:5f:eb:51:b6:94:8c: b4:fc:d2:ca:3f:11:f8:0c:14:6b:2f:4e:37:0b:4a: 6a:11:52:e0:32:9b:90:fd:61:35:c0:d5:d9:75:39: fc:a9:bf:eb:d9:89:7d:11:41:0d:48:a9:dd:05:69: 69:6a:e2:af:8c:a2:35:49:7a:b0:3e:17:73:4d:b4: 72:f9:19:ee:81:95:ff:78:b7:31:d7:47:69:c9:c3: a2:d9:96:91:5a:89:ee:01:13:cf:c6:7c:07:b1:6c: d9:10:17:e8:42:b4:62:8b:5e:b7:af:f0:b6:23:c6: f3:d7:72:e5:f0:b3:8c:a2:e8:b7:b6:d8:84:99:1a: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:9B:13:34:01:E6:27:AE:3D:35:44:F1:24:B6:F8:42:3C:70:AC X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:65:02:b8:30:b0:2a:3f:1e:e7:5b:63:c5:84:92:1f:25:e9: 00:bc:f2:10:ba:4f:53:9c:c1:77:0e:63:d6:ca:fa:d0:52:08: 26:17:c8:b8:2e:bd:a5:08:73:1d:bf:de:68:8c:57:26:7d:ef: 34:58:50:58:1a:21:97:d1:0e:88:ab:4c:e2:b2:82:ec:de:a5: 09:c9:66:66:aa:bf:81:21:9d:7d:73:fa:21:b6:47:86:4e:26: a5:09:06:a4:e9:de:6c:30:af:42:a5:50:1e:41:e6:23:7a:3b: 23:9d:b3:58:d7:8d:16:45:bd:9c:9c:be:07:5f:4f:86:61:7f: 0f:94:14:74:2b:bb:f7:77:91:b8:2a:b0:fd:2f:f5:38:36:d8: 1a:cf:b0:eb:b6:1c:6d:40:a9:a0:32:7e:01:f6:a3:7c:7f:94: 92:c2:b0:48:e9:37:d0:16:31:53:8c:8a:31:51:0c:6d:42:55: 68:a1:fc:d2:c1:7c:c5:28:bb:3d:27:0f:f0:2f:7e:24:9c:58: 64:1b:02:bb:42:56:47:aa:0f:04:fc:00:6e:7c:9d:62:2e:65: df:3e:91:a2:f0:87:05:65:b0:e9:14:37:8d:a5:49:6c:f8:7f: 7d:8b:9d:fe:87:c2:5f:07:da:e7:f3:65:a1:b9:6b:d2:de:0f: 73:4b:a4:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISzjout4R7I5ld2yGLt0CfImNpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTEyMTcxODI3MThaFw0yNTEyMjAyMzMwMThaMDMxMTAvBgNV BAMTKDIzMEI5QjEzMzQwMUU2MjdBRTNEMzU0NEYxMjRCNkY4NDIzQzcwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4LA1M6kxkMHKTgxwsNnu/fzY 6oYs4uijJ10AA4NNW7PIsyic1nyvc6q+hrXgzHfeW1QhLvWGqDURzIDHEXOpljBz f+PoLLvYWG/6AO5Go7q0MRnPUCy0coVE4gBcpTQWNaYMjGVnf4bOHQQJLfUsgV6I bk3GNmexCsoB/Qwr0V/rUbaUjLT80so/EfgMFGsvTjcLSmoRUuAym5D9YTXA1dl1 Ofypv+vZiX0RQQ1Iqd0FaWlq4q+MojVJerA+F3NNtHL5Ge6Blf94tzHXR2nJw6LZ lpFaie4BE8/GfAexbNkQF+hCtGKLXrev8LYjxvPXcuXws4yi6Le22ISZGnx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIwubEzQB5ieuPTVE8SS2+EI8cKwwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhlArgwsCo/HudbY8WEkh8l6QC88hC6T1Oc wXcOY9bK+tBSCCYXyLguvaUIcx2/3miMVyZ97zRYUFgaIZfRDoirTOKyguzepQnJ Zmaqv4EhnX1z+iG2R4ZOJqUJBqTp3mwwr0KlUB5B5iN6OyOds1jXjRZFvZycvgdf T4Zhfw+UFHQru/d3kbgqsP0v9Tg22BrPsOu2HG1AqaAyfgH2o3x/lJLCsEjpN9AW MVOMijFRDG1CVWih/NLBfMUouz0nD/AvfiScWGQbArtCVkeqDwT8AG58nWIuZd8+ kaLwhwVlsOkUN42lSWz4f32Lnf6Hwl8H2ufzZaG5a9LeD3NLpKU= -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:35 2025 by rpki-client