This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: RdfcbQzZrcTq8TeSZApFz6KFut1NrTxycUyi47Q5wwY= Subject key identifier: 14:3E:4B:BC:AD:A4:2B:0C:FE:51:50:FC:6C:38:64:1F:EC:9D:29:FB Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 49DEDEC554D8552716FEF282128C95B391E29061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0545 Signing time: Sat 31 Jan 2026 07:41:14 +0000 Manifest this update: Sat 31 Jan 2026 07:36:14 +0000 Manifest next update: Tue 03 Feb 2026 10:37:14 +0000 Files and hashes: 1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 2: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: zx8Y8JOhe7r2OZNyCrJhR0kMvKJoz7ecds6cnWBN2K4=) 3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:de:de:c5:54:d8:55:27:16:fe:f2:82:12:8c:95:b3:91:e2:90:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Jan 31 07:36:14 2026 GMT Not After : Feb 3 10:37:14 2026 GMT Subject: CN=143E4BBCADA42B0CFE5150FC6C38641FEC9D29FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:f0:43:8e:bb:f5:25:3e:59:2a:d6:11:d7: 23:fd:f1:b3:16:3c:49:9e:26:e2:c8:05:f8:0a:89: 19:4c:72:62:80:45:d6:19:ad:26:fd:2a:31:2d:e9: ec:24:35:05:11:eb:27:a8:09:2a:93:64:c4:36:8c: e8:6c:7e:2f:22:97:f5:62:c3:81:8a:82:1c:7c:41: 50:f1:c1:74:8d:d7:4b:c8:72:38:00:36:6e:67:c4: 46:5b:90:04:5e:59:4f:d7:8a:8c:7d:9a:50:12:1c: b2:a8:cf:12:bc:76:04:d4:32:1f:57:71:b3:6a:6f: f6:2e:25:f7:b7:3d:6c:86:0e:4c:39:e3:3e:1d:6d: 4c:09:49:30:11:dd:a8:34:41:9f:66:a9:a7:af:83: 16:c1:96:d2:1c:50:23:8e:55:48:f9:48:41:b7:c3: a7:91:32:75:48:00:a5:29:2e:40:80:61:ab:5b:9c: 60:51:13:3d:67:1a:8f:13:ae:38:46:d3:11:e2:f3: ae:f4:9d:6f:74:a4:7a:51:df:2f:0d:22:7e:9f:ff: 49:19:0e:b5:eb:b7:b8:c2:9d:81:26:93:22:cf:55: b4:30:e9:f9:96:37:43:dd:4a:31:2c:90:d5:a8:8a: 7e:ca:a9:f2:3e:fa:c9:ae:2b:85:c7:6c:5f:d3:42: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3E:4B:BC:AD:A4:2B:0C:FE:51:50:FC:6C:38:64:1F:EC:9D:29:FB X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d2:db:c9:1a:bb:ab:c0:ca:15:9c:2a:3a:a0:c1:21:d9:0d: ca:a7:18:35:f8:13:5e:bb:c7:41:3c:96:3d:fd:32:87:3f:73: df:f5:cd:60:35:c8:fa:d1:69:73:b4:a1:34:4e:77:ff:5a:94: 92:58:01:97:bb:35:fc:95:e5:6a:e6:99:fe:10:81:4a:78:92: d5:79:26:0d:0d:67:70:b1:e8:f8:ae:b4:bc:3b:ed:39:72:56: b1:af:17:ab:1f:df:99:52:44:3e:20:5f:9f:f9:a6:56:62:ce: af:51:10:f2:1d:eb:3a:80:f7:16:6c:d1:bd:d2:dd:7a:3f:97: 7d:11:3f:97:8a:81:97:56:2a:58:f6:63:37:c9:b8:cf:88:2c: f3:23:d1:d0:90:41:67:b9:5b:f9:df:5a:db:c2:93:f5:aa:23: ea:22:a4:98:bf:87:ad:16:15:1e:c9:67:1e:61:e6:b2:37:d1: 7f:a2:42:83:96:bd:ce:b7:67:38:ac:e0:36:c4:de:a3:5a:e7: 3e:06:bb:4c:41:bd:a8:8a:cc:71:5c:5b:9c:ca:1f:b8:fa:31: 77:df:76:2e:f5:3f:93:c2:17:4b:b8:7a:db:90:5a:23:6d:77: 86:8e:5b:09:df:d9:53:18:4d:16:cf:06:6a:fd:29:71:f7:1a: b8:74:b9:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSd7exVTYVScW/vKCEoyVs5HikGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNjAxMzEwNzM2MTRaFw0yNjAyMDMxMDM3MTRaMDMxMTAvBgNV BAMTKDE0M0U0QkJDQURBNDJCMENGRTUxNTBGQzZDMzg2NDFGRUM5RDI5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq/BDjrv1JT5ZKtYR1yP98bMW PEmeJuLIBfgKiRlMcmKARdYZrSb9KjEt6ewkNQUR6yeoCSqTZMQ2jOhsfi8il/Vi w4GKghx8QVDxwXSN10vIcjgANm5nxEZbkAReWU/Xiox9mlASHLKozxK8dgTUMh9X cbNqb/YuJfe3PWyGDkw54z4dbUwJSTAR3ag0QZ9mqaevgxbBltIcUCOOVUj5SEG3 w6eRMnVIAKUpLkCAYatbnGBREz1nGo8TrjhG0xHi8670nW90pHpR3y8NIn6f/0kZ DrXrt7jCnYEmkyLPVbQw6fmWN0PdSjEskNWoin7KqfI++smuK4XHbF/TQkb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFD5LvK2kKwz+UVD8bDhkH+ydKfswHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXS28kau6vAyhWcKjqgwSHZDcqnGDX4E167 x0E8lj39Moc/c9/1zWA1yPrRaXO0oTROd/9alJJYAZe7NfyV5Wrmmf4QgUp4ktV5 Jg0NZ3Cx6PiutLw77TlyVrGvF6sf35lSRD4gX5/5plZizq9REPId6zqA9xZs0b3S 3Xo/l30RP5eKgZdWKlj2YzfJuM+ILPMj0dCQQWe5W/nfWtvCk/WqI+oipJi/h60W FR7JZx5h5rI30X+iQoOWvc63Zzis4DbE3qNa5z4Gu0xBvaiKzHFcW5zKH7j6MXff di71P5PCF0u4etuQWiNtd4aOWwnf2VMYTRbPBmr9KXH3Grh0uU4= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:54 2026 by rpki-client