This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: 7oNm/sMYoeWMaqHpH1UxMxmqdeiPBbZ63QUleldF0HA= Subject key identifier: 26:54:5D:BF:B0:81:43:98:09:A4:BB:21:96:F2:09:61:59:88:95:03 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 059CAB8544C30960A0D390F387E2A93658C8D5E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 0508 Signing time: Wed 17 Dec 2025 02:00:56 +0000 Manifest this update: Wed 17 Dec 2025 01:55:56 +0000 Manifest next update: Sat 20 Dec 2025 10:43:56 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 2: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 4: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 5: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: f7J4QLDyBDwgF46cFJ2xUQ+ABgDRGgaOUELkWCKsVtk=) 6: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9c:ab:85:44:c3:09:60:a0:d3:90:f3:87:e2:a9:36:58:c8:d5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Dec 17 01:55:56 2025 GMT Not After : Dec 20 10:43:56 2025 GMT Subject: CN=26545DBFB081439809A4BB2196F2096159889503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:0c:1f:e0:75:85:02:5a:98:d9:5a:02:7a: 2b:b6:46:7a:2e:09:ce:00:77:ac:08:45:09:2c:80: f0:00:ad:05:90:78:54:fa:f3:3a:5d:43:20:46:c6: b7:f6:8b:81:3f:6a:7e:17:41:38:ad:2c:a3:14:af: 6e:5f:98:2c:e3:e0:99:58:ed:ce:d5:63:42:b1:36: a4:35:8d:76:56:a4:06:c4:4c:06:6e:17:5a:21:8b: fe:8f:e6:b1:0a:b2:cc:24:c9:33:be:e6:cf:79:c0: 95:d3:7a:ec:ab:92:5c:e7:4a:9f:6b:f9:3f:84:ac: 07:29:ca:91:11:53:5c:99:c2:af:a2:8e:78:90:d4: de:e7:a5:58:16:e2:5d:ce:59:a7:45:bd:11:dc:eb: 12:34:a3:66:3c:8f:45:e1:d7:ca:3f:1e:ac:29:2e: a0:4f:73:d9:f3:fa:93:24:ca:47:cc:b9:55:1a:92: bf:6c:eb:cd:87:1f:72:26:28:4d:01:59:c6:08:55: 30:a2:b0:b3:0a:e0:3b:f0:ba:d4:4e:5a:ad:ce:33: 1f:92:07:14:23:38:38:a8:50:fe:b4:7c:b6:80:36: a4:c6:ec:20:04:f7:89:72:4b:d2:27:c6:9b:44:58: a0:be:32:a6:cd:8c:a8:93:b2:2b:01:73:5a:ca:df: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:5D:BF:B0:81:43:98:09:A4:BB:21:96:F2:09:61:59:88:95:03 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d0:5e:a2:d4:7e:46:c6:80:87:46:01:58:3c:b0:53:ba:5a: e3:fc:14:ed:49:d0:ab:45:5c:fb:5c:71:8e:08:e5:1c:44:9f: 63:e0:d0:e4:f2:08:6f:3c:e8:59:89:7f:97:e3:37:83:9a:fc: c1:2b:7f:ed:07:0f:79:f9:9f:58:7d:ed:72:77:fa:69:ed:8b: 6e:4d:e2:ed:9a:73:24:89:9b:a8:13:31:83:63:3a:a1:d2:ed: 5c:e3:fd:42:d3:d6:54:1b:30:e5:0d:d5:39:db:1f:b1:52:4b: 43:5b:c6:ec:7e:8f:f3:c0:37:da:f2:37:07:02:8d:eb:4d:e7: d1:79:f8:4a:32:ad:9b:58:57:e1:23:09:0b:d6:6a:20:ad:af: 2a:46:74:32:a7:e6:91:7c:06:db:3e:e9:47:5e:08:e7:40:09: 76:1b:00:1f:99:d1:fc:45:7d:f5:91:f2:f7:37:86:84:25:81: 83:84:cb:91:2a:c6:3e:0c:c2:31:f1:f3:4d:dd:48:e9:85:09: c2:86:ae:93:23:7b:b3:78:5a:f6:c0:ce:5e:48:80:8d:c3:66: 27:bd:35:d0:73:2f:e4:0e:f8:c7:ef:e2:d2:49:18:45:7b:0c: bd:00:a7:fc:d6:c3:1a:31:df:b3:c7:ee:1e:25:7e:7c:22:18: e8:35:7a:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZyrhUTDCWCg05Dzh+KpNljI1ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTEyMTcwMTU1NTZaFw0yNTEyMjAxMDQzNTZaMDMxMTAvBgNV BAMTKDI2NTQ1REJGQjA4MTQzOTgwOUE0QkIyMTk2RjIwOTYxNTk4ODk1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/Awf4HWFAlqY2VoCeiu2Rnou Cc4Ad6wIRQksgPAArQWQeFT68zpdQyBGxrf2i4E/an4XQTitLKMUr25fmCzj4JlY 7c7VY0KxNqQ1jXZWpAbETAZuF1ohi/6P5rEKsswkyTO+5s95wJXTeuyrklznSp9r +T+ErAcpypERU1yZwq+ijniQ1N7npVgW4l3OWadFvRHc6xI0o2Y8j0Xh18o/Hqwp LqBPc9nz+pMkykfMuVUakr9s682HH3ImKE0BWcYIVTCisLMK4DvwutROWq3OMx+S BxQjODioUP60fLaANqTG7CAE94lyS9InxptEWKC+MqbNjKiTsisBc1rK38ZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJlRdv7CBQ5gJpLshlvIJYVmIlQMwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzQXqLUfkbGgIdGAVg8sFO6WuP8FO1J0KtF XPtccY4I5RxEn2Pg0OTyCG886FmJf5fjN4Oa/MErf+0HD3n5n1h97XJ3+mnti25N 4u2acySJm6gTMYNjOqHS7Vzj/ULT1lQbMOUN1TnbH7FSS0Nbxux+j/PAN9ryNwcC jetN59F5+EoyrZtYV+EjCQvWaiCtrypGdDKn5pF8Bts+6UdeCOdACXYbAB+Z0fxF ffWR8vc3hoQlgYOEy5Eqxj4MwjHx803dSOmFCcKGrpMje7N4WvbAzl5IgI3DZie9 NdBzL+QO+Mfv4tJJGEV7DL0Ap/zWwxox37PH7h4lfnwiGOg1eu4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:15 2025 by rpki-client