This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: 7WrykPBozWaMTngx0Djlzs6lsqVtaQCdvLkSZ1nEs1U= Subject key identifier: 0C:B3:5B:D9:1B:87:46:51:3A:0D:06:55:25:FC:D7:AC:62:BF:4B:03 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 3EA99D996C53DFC1280A5D3ACF05335959E6C93A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 025A Signing time: Fri 19 Dec 2025 20:41:03 +0000 Manifest this update: Fri 19 Dec 2025 20:36:03 +0000 Manifest next update: Mon 22 Dec 2025 22:52:03 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: QXe2lSIz/WeNqD5vsgbqqrlUtEo67uVBcvJ8Y291yVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a9:9d:99:6c:53:df:c1:28:0a:5d:3a:cf:05:33:59:59:e6:c9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Dec 19 20:36:03 2025 GMT Not After : Dec 22 22:52:03 2025 GMT Subject: CN=0CB35BD91B8746513A0D065525FCD7AC62BF4B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:25:23:cc:37:71:4a:f0:d9:fe:08:b5:82: 02:c5:eb:25:c7:ad:77:56:5c:66:3d:dd:5a:01:6b: c4:08:34:4f:fe:80:c4:bb:5d:d8:db:2e:b4:bd:a7: 62:53:5c:bb:f7:16:07:e9:54:ec:a2:76:72:1a:fb: d5:a0:e4:c0:85:fd:43:d9:c0:81:0e:72:e2:f9:34: dd:8f:b6:29:d3:f8:8e:1c:2a:60:5f:ff:fb:3a:10: b3:b8:e6:24:ab:ca:7a:74:c6:86:c1:0c:8d:54:c2: be:27:e5:0b:ef:c9:19:80:d1:29:29:02:aa:2d:22: 57:e7:27:b6:32:16:85:40:bb:8a:07:ec:c0:d5:fe: a0:21:81:79:71:da:2e:d6:7c:96:18:53:e1:40:d8: bb:fa:27:a5:70:1e:39:e2:57:c3:6c:8b:1c:ed:0a: 3e:ef:4a:86:2a:bf:19:c4:ad:ed:6d:a0:1b:f7:25: 66:c1:52:68:a3:c5:de:c7:81:ce:cb:83:61:1a:6e: 8c:2e:4e:ba:47:17:ef:3a:d9:20:32:e2:84:b8:ce: 69:be:75:d6:c3:e6:e4:6f:5c:d0:8a:96:4d:e6:c4: e7:c4:5e:25:0b:d8:29:13:66:da:5d:b2:43:cf:62: dd:ec:e3:7a:73:b1:8e:51:fe:26:0a:a3:04:a5:30: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:5B:D9:1B:87:46:51:3A:0D:06:55:25:FC:D7:AC:62:BF:4B:03 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:df:a3:0a:bf:32:92:e3:6a:cc:5f:08:7e:7c:1b:8d:41:49: a9:09:c1:89:3b:00:1f:27:34:37:0d:86:dc:e3:a4:31:79:5f: 15:12:81:1c:09:55:cb:bf:ab:5b:2e:09:af:d1:da:8e:62:95: 04:29:9f:e7:33:36:3a:5c:3e:c4:9d:c1:5f:27:56:af:6c:2b: 8a:3a:74:15:c4:7d:06:74:99:36:af:f2:2b:f3:e8:12:be:78: 91:c7:7d:f8:2a:42:ca:1d:38:c4:7a:f4:d6:09:c7:48:c4:e9: eb:e6:22:f7:ca:35:fa:0e:47:34:fc:0a:ac:e3:20:27:a7:8f: 74:50:79:08:2f:d1:03:16:2c:32:77:ee:67:94:cf:56:93:28: 69:b3:8f:ef:91:c9:79:07:d6:0d:62:b7:5d:7b:68:34:7b:7e: 99:50:f1:53:27:72:c2:b6:bf:2c:01:b7:93:79:c5:24:f9:51: 30:b1:c2:38:8e:18:27:96:4b:b1:c7:94:1b:de:ab:0e:ae:d0: f2:d6:88:57:20:f9:7f:6f:12:e4:39:16:de:da:02:f4:66:45: c6:20:46:5d:0b:b3:62:6c:68:ac:6a:fd:3a:1c:df:eb:84:14: e9:bf:8b:dd:21:41:97:82:f8:4d:af:11:74:ee:36:b1:63:2b: 29:10:e8:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqmdmWxT38EoCl06zwUzWVnmyTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTEyMTkyMDM2MDNaFw0yNTEyMjIyMjUyMDNaMDMxMTAvBgNV BAMTKDBDQjM1QkQ5MUI4NzQ2NTEzQTBEMDY1NTI1RkNEN0FDNjJCRjRCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LSUjzDdxSvDZ/gi1ggLF6yXH rXdWXGY93VoBa8QINE/+gMS7XdjbLrS9p2JTXLv3FgfpVOyidnIa+9Wg5MCF/UPZ wIEOcuL5NN2PtinT+I4cKmBf//s6ELO45iSrynp0xobBDI1Uwr4n5QvvyRmA0Skp AqotIlfnJ7YyFoVAu4oH7MDV/qAhgXlx2i7WfJYYU+FA2Lv6J6VwHjniV8Nsixzt Cj7vSoYqvxnEre1toBv3JWbBUmijxd7Hgc7Lg2EabowuTrpHF+862SAy4oS4zmm+ ddbD5uRvXNCKlk3mxOfEXiUL2CkTZtpdskPPYt3s43pzsY5R/iYKowSlMJFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLNb2RuHRlE6DQZVJfzXrGK/SwMwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHfowq/MpLjasxfCH58G41BSakJwYk7AB8n NDcNhtzjpDF5XxUSgRwJVcu/q1suCa/R2o5ilQQpn+czNjpcPsSdwV8nVq9sK4o6 dBXEfQZ0mTav8ivz6BK+eJHHffgqQsodOMR69NYJx0jE6evmIvfKNfoORzT8Cqzj ICenj3RQeQgv0QMWLDJ37meUz1aTKGmzj++RyXkH1g1it117aDR7fplQ8VMncsK2 vywBt5N5xST5UTCxwjiOGCeWS7HHlBveqw6u0PLWiFcg+X9vEuQ5Ft7aAvRmRcYg Rl0Ls2JsaKxq/Toc3+uEFOm/i90hQZeC+E2vEXTuNrFjKykQ6C8= -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:17 2025 by rpki-client