This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: ADuowXpIYBDR/SuscBXOjZOL3DGhN5fgUs6wdXAUXks= Subject key identifier: 70:4E:76:F3:DB:F1:CD:3F:B9:D4:D3:4B:51:E2:86:27:22:8C:B3:02 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 3C712707BC7399F917188E8B515367A5F0A24885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0267 Signing time: Thu 18 Dec 2025 15:40:44 +0000 Manifest this update: Thu 18 Dec 2025 15:35:44 +0000 Manifest next update: Sun 21 Dec 2025 23:42:44 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: DLfPAqguML0RT+fcAK6FOj2EtE4AkxbXP+YgH5iwvjI=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:71:27:07:bc:73:99:f9:17:18:8e:8b:51:53:67:a5:f0:a2:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Dec 18 15:35:44 2025 GMT Not After : Dec 21 23:42:44 2025 GMT Subject: CN=704E76F3DBF1CD3FB9D4D34B51E28627228CB302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:dd:8d:82:32:92:97:fa:25:2d:81:51:47: 44:31:82:e6:f1:36:30:7b:2e:36:64:55:95:a2:c3: d9:bf:e7:9a:5e:6b:6e:c6:ee:0e:8b:5f:f3:e6:6b: f4:08:1a:c1:f8:94:b8:8e:4b:f9:f0:d6:22:4a:35: d9:fe:f2:05:fc:dc:5c:bf:7c:95:6e:27:08:cb:22: 9d:31:4b:d1:d5:c9:52:db:c3:01:26:e6:33:42:f3: 8b:83:af:5e:3d:69:ad:a0:58:ba:2e:b9:37:56:cd: fd:92:08:18:5d:d0:1f:64:6b:f0:e5:76:a0:2d:6c: 53:d1:9c:7a:3b:19:d0:56:cb:a5:ae:9e:49:da:2b: 15:01:34:14:fd:c2:8f:76:53:0f:a3:2b:75:66:b6: f5:dd:34:80:a3:95:af:38:f1:41:02:80:03:1b:dd: c9:67:db:65:4e:3d:5d:c6:80:49:7e:5c:21:a6:9c: db:01:ce:41:8c:90:a9:e8:f4:88:69:04:af:37:c3: 00:b8:5b:a7:f6:4b:1e:09:2b:92:26:4a:3c:ae:15: 08:7b:3c:5b:9b:14:d1:4d:37:fc:60:c2:48:33:b2: 97:0e:ca:2f:1d:33:2b:7c:4e:4b:08:b4:cd:bf:2f: 9b:01:0c:b4:4d:9e:d7:00:79:11:ad:33:14:e8:de: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:76:F3:DB:F1:CD:3F:B9:D4:D3:4B:51:E2:86:27:22:8C:B3:02 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:47:9a:15:83:95:78:6b:f4:53:b4:20:06:91:70:c7:b6:1b: 57:98:99:f3:ac:ae:11:6a:55:f3:40:89:e5:e8:06:31:94:42: 82:99:dc:fc:23:73:a3:18:fc:f8:a4:5b:9d:10:fc:eb:ec:be: 95:1c:15:39:78:4e:e0:08:8b:85:b6:d4:96:f5:f1:16:34:4d: b7:d9:9f:d4:cc:41:58:e6:8e:f4:2b:75:3f:42:a7:f3:96:b8: b9:34:c9:92:ac:f1:ad:5a:e3:78:36:d1:ad:20:d8:0f:ba:7b: f2:53:39:23:59:4b:0c:2d:28:f0:53:fb:6d:c5:4b:8b:64:30: 63:e8:72:37:15:86:69:18:94:9f:96:6a:c2:48:51:86:99:72: e3:80:f0:09:d1:fe:f6:e4:6c:ae:62:db:33:ba:59:75:2d:13: b5:b4:00:53:43:7e:d5:58:94:c6:b2:de:4e:ee:d7:ef:cc:59: 1f:3b:21:fc:5b:18:71:84:66:be:cf:69:2e:88:f7:84:5d:74: f3:b6:b4:20:bf:77:5a:03:d0:47:e9:ce:03:d8:9c:54:b6:b1: cb:3b:1c:4b:ac:01:62:c0:2b:f6:9b:e2:49:18:8a:7d:dd:b3: 48:2a:af:94:2e:e0:17:81:f7:b0:4e:b4:c6:1c:4a:94:db:45: c3:8f:dd:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHEnB7xzmfkXGI6LUVNnpfCiSIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTEyMTgxNTM1NDRaFw0yNTEyMjEyMzQyNDRaMDMxMTAvBgNV BAMTKDcwNEU3NkYzREJGMUNEM0ZCOUQ0RDM0QjUxRTI4NjI3MjI4Q0IzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMd2NgjKSl/olLYFRR0Qxgubx NjB7LjZkVZWiw9m/55pea27G7g6LX/Pma/QIGsH4lLiOS/nw1iJKNdn+8gX83Fy/ fJVuJwjLIp0xS9HVyVLbwwEm5jNC84uDr149aa2gWLouuTdWzf2SCBhd0B9ka/Dl dqAtbFPRnHo7GdBWy6WunknaKxUBNBT9wo92Uw+jK3VmtvXdNICjla848UECgAMb 3cln22VOPV3GgEl+XCGmnNsBzkGMkKno9IhpBK83wwC4W6f2Sx4JK5ImSjyuFQh7 PFubFNFNN/xgwkgzspcOyi8dMyt8TksItM2/L5sBDLRNntcAeRGtMxTo3hQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcE5289vxzT+51NNLUeKGJyKMswIwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBHmhWDlXhr9FO0IAaRcMe2G1eYmfOsrhFq VfNAieXoBjGUQoKZ3Pwjc6MY/PikW50Q/OvsvpUcFTl4TuAIi4W21Jb18RY0TbfZ n9TMQVjmjvQrdT9Cp/OWuLk0yZKs8a1a43g20a0g2A+6e/JTOSNZSwwtKPBT+23F S4tkMGPocjcVhmkYlJ+WasJIUYaZcuOA8AnR/vbkbK5i2zO6WXUtE7W0AFNDftVY lMay3k7u1+/MWR87IfxbGHGEZr7PaS6I94RddPO2tCC/d1oD0EfpzgPYnFS2scs7 HEusAWLAK/ab4kkYin3ds0gqr5Qu4BeB97BOtMYcSpTbRcOP3f4= -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:05 2025 by rpki-client