This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: YOxpuR+tQZES9CH2REAmdSac/tseyijv1b0nj4hveh0= Subject key identifier: 80:C8:88:9F:45:FC:79:5C:A3:8E:96:9C:E6:64:36:98:49:9C:FE:A0 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 4DE3A9FB5595DA395BA2BB472DC18193A329624C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0531 Signing time: Tue 16 Dec 2025 22:41:13 +0000 Manifest this update: Tue 16 Dec 2025 22:36:13 +0000 Manifest next update: Sat 20 Dec 2025 04:59:13 +0000 Files and hashes: 1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 2: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: AGOHuvgvkYuxXsidnMRUbd2C3HX2309WcHSso9P2U54=) 3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e3:a9:fb:55:95:da:39:5b:a2:bb:47:2d:c1:81:93:a3:29:62:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Dec 16 22:36:13 2025 GMT Not After : Dec 20 04:59:13 2025 GMT Subject: CN=80C8889F45FC795CA38E969CE6643698499CFEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:b3:17:37:a2:6f:e7:11:22:d3:f5:98:4a: 0c:51:aa:8d:82:79:f8:0c:ef:aa:87:03:a7:5d:79: 54:6e:cd:14:fe:6f:2a:ef:c5:ac:5b:1a:88:23:50: d5:70:1b:df:2c:25:47:88:31:dc:57:39:30:23:03: f0:c4:10:6a:3b:51:1e:cf:d6:18:9d:26:f3:1c:4b: a9:b1:03:b6:88:a4:f9:3e:ef:8b:54:be:02:49:0b: 4f:c5:10:06:de:82:17:92:39:2d:df:dc:9d:d1:2b: a4:d8:e4:ef:ee:45:80:6e:4a:a1:63:ed:bd:dc:fc: be:6f:1a:f7:8a:72:bb:4a:86:c5:35:ee:e4:61:29: b8:ec:94:03:6b:7c:30:55:15:8b:eb:8f:ab:75:64: ae:58:83:32:0e:32:89:fd:cf:61:c0:39:8d:a6:a5: bf:72:d1:cf:c3:99:e6:00:c5:8f:2e:ab:fd:fc:a3: e8:46:31:67:96:0e:03:cb:cd:8e:e5:af:1a:3c:35: 7d:76:07:12:49:3a:c8:b0:b9:7b:1c:11:1b:9a:25: 7d:a7:9a:08:f8:a2:4a:19:e8:5d:7f:a1:f8:3e:5d: 21:6e:3e:49:cb:3f:e1:ba:39:69:dd:ba:a7:83:5d: ec:c0:e8:69:5f:1b:c1:05:98:2a:37:9e:5a:bc:5e: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C8:88:9F:45:FC:79:5C:A3:8E:96:9C:E6:64:36:98:49:9C:FE:A0 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0b:8e:ba:5d:c9:72:65:5e:73:5e:1f:ae:75:a1:b6:33:d3: e7:95:db:9b:14:2f:3f:e4:17:97:d5:9c:12:fb:41:0f:62:3e: 61:9d:69:25:fb:68:0d:0e:16:6d:79:e5:0e:9f:9b:d6:f2:9c: 91:df:a4:af:1d:c3:57:3a:99:f8:3e:b9:89:62:8a:4f:01:b6: c0:d1:fb:e9:56:7d:4f:8b:02:a2:eb:4f:91:16:d9:e2:a9:b1: bd:cf:1f:35:65:6f:7f:9f:17:d5:00:c6:cf:3b:77:e3:fa:db: f6:35:df:b8:9a:5a:94:4c:27:a8:18:d2:e4:32:ee:9d:18:8d: bc:79:3e:bd:1b:4b:29:dd:83:0e:97:13:56:52:c1:67:5c:8e: 4c:25:e9:eb:19:df:54:de:65:71:90:7f:9b:20:69:db:95:11: 1d:c9:27:3e:90:0d:8e:30:ae:79:b7:72:63:fa:38:f9:27:33: 9c:03:ae:a2:d7:1f:d5:aa:eb:1c:87:b4:24:e0:36:cc:13:e6: 30:5a:81:53:01:a7:9b:44:0a:62:0c:3d:4d:5f:db:0e:60:2d: 74:27:67:35:fb:31:c7:2a:21:48:a2:d8:51:ea:1e:83:30:a9: 4a:49:3f:37:72:f1:cd:ed:a5:86:17:ed:e5:6c:e3:8e:7d:1d: fb:ec:0d:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeOp+1WV2jlbortHLcGBk6MpYkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTEyMTYyMjM2MTNaFw0yNTEyMjAwNDU5MTNaMDMxMTAvBgNV BAMTKDgwQzg4ODlGNDVGQzc5NUNBMzhFOTY5Q0U2NjQzNjk4NDk5Q0ZFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTurMXN6Jv5xEi0/WYSgxRqo2C efgM76qHA6ddeVRuzRT+byrvxaxbGogjUNVwG98sJUeIMdxXOTAjA/DEEGo7UR7P 1hidJvMcS6mxA7aIpPk+74tUvgJJC0/FEAbegheSOS3f3J3RK6TY5O/uRYBuSqFj 7b3c/L5vGveKcrtKhsU17uRhKbjslANrfDBVFYvrj6t1ZK5YgzIOMon9z2HAOY2m pb9y0c/DmeYAxY8uq/38o+hGMWeWDgPLzY7lrxo8NX12BxJJOsiwuXscERuaJX2n mgj4okoZ6F1/ofg+XSFuPknLP+G6OWnduqeDXezA6GlfG8EFmCo3nlq8Xnz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgMiIn0X8eVyjjpac5mQ2mEmc/qAwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAELjrpdyXJlXnNeH651obYz0+eV25sULz/k F5fVnBL7QQ9iPmGdaSX7aA0OFm155Q6fm9bynJHfpK8dw1c6mfg+uYliik8BtsDR ++lWfU+LAqLrT5EW2eKpsb3PHzVlb3+fF9UAxs87d+P62/Y137iaWpRMJ6gY0uQy 7p0Yjbx5Pr0bSyndgw6XE1ZSwWdcjkwl6esZ31TeZXGQf5sgaduVER3JJz6QDY4w rnm3cmP6OPknM5wDrqLXH9Wq6xyHtCTgNswT5jBagVMBp5tECmIMPU1f2w5gLXQn ZzX7MccqIUii2FHqHoMwqUpJPzdy8c3tpYYX7eVs4459HfvsDZI= -----END CERTIFICATE-----Generated at Thu Dec 18 02:56:33 2025 by rpki-client