This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json) Hash identifier: z7RyFq1aCZv7eiGx/6UANJ4RnBVGf2cCZLseRpYs9zI= Subject key identifier: 10:A6:01:17:14:80:0C:8C:48:B6:6E:6A:B9:60:62:03:77:90:D9:BB Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Certificate serial: 1B6B9EFD51C36CCCC8AAD30DE875E6C76789AD7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft Manifest number: 0155 Signing time: Tue 02 Dec 2025 03:02:57 +0000 Manifest this update: Tue 02 Dec 2025 02:57:57 +0000 Manifest next update: Fri 05 Dec 2025 10:15:57 +0000 Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: LEvXa86n4gaZnuVDpQpz5Qgc86vdjJgFOjEk6RYjgmY=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:9e:fd:51:c3:6c:cc:c8:aa:d3:0d:e8:75:e6:c7:67:89:ad:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5 Validity Not Before: Dec 2 02:57:57 2025 GMT Not After : Dec 5 10:15:57 2025 GMT Subject: CN=10A6011714800C8C48B66E6AB96062037790D9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:32:0a:e4:3a:f4:6f:72:45:d2:bd:3e:c9: 3d:bf:a2:55:3b:df:cc:0c:47:c6:25:14:9b:37:99: 12:43:bf:50:22:b1:82:50:e9:f7:d4:99:a8:ee:ca: c1:06:cc:45:1c:68:fc:45:dc:fd:82:81:a7:9b:74: f5:ca:c7:c1:72:0d:50:af:b3:bf:c6:46:f3:a4:4d: e8:97:03:34:b5:87:69:c6:42:ec:e5:1b:fa:a5:5d: e5:02:0f:49:5f:51:23:d5:44:40:49:3c:78:bf:ab: 44:d5:39:69:c9:95:75:03:0b:74:ff:28:81:a9:80: 76:a2:46:72:c0:f3:88:c5:cf:b4:b2:60:04:d2:13: 33:f8:b3:1c:f6:62:ce:53:02:85:68:84:32:a1:74: 95:de:c0:8b:c1:2a:ee:6d:b5:b1:47:fa:61:53:17: 29:84:ec:b1:8f:e0:b6:51:8f:ff:ef:13:51:f3:11: d9:a2:3c:77:07:06:0a:89:aa:99:fa:34:ee:f2:e8: 81:cc:63:95:c5:08:36:36:ef:be:5d:13:51:cc:36: 6f:1f:4e:f9:ba:c3:7a:13:8c:e7:c2:7c:53:5b:fb: 6b:fa:32:91:91:cf:5b:85:75:7f:26:6a:2a:93:a3: 2a:b7:00:46:30:eb:0a:2e:70:d3:d2:f0:4e:c8:f0: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:01:17:14:80:0C:8C:48:B6:6E:6A:B9:60:62:03:77:90:D9:BB X509v3 Authority Key Identifier: keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b0:c4:7d:0a:ff:4d:f5:87:31:76:52:f2:c0:45:bc:37:75: 51:c8:3c:41:82:b7:5e:d7:9c:2b:d5:0f:6f:e9:58:a3:d1:1b: 68:ce:cb:78:46:b1:23:dc:be:b2:f0:c0:6e:e6:57:dd:6b:fd: 73:d3:76:77:39:58:44:3c:e1:58:2d:6d:f1:71:69:44:5c:ea: aa:5d:8a:8e:8d:e3:40:ae:6c:17:a8:e0:fb:82:0e:f0:b9:12: 81:72:84:77:9d:b3:15:5f:72:27:4e:95:65:c6:6b:a5:b9:51: 85:e6:be:36:a6:98:d7:81:c7:a5:74:ad:df:7a:b6:53:c0:fa: 7c:89:e5:a0:7b:6b:b7:e5:bf:7e:b2:86:e5:28:ed:00:9c:47: b0:78:01:51:4b:cc:22:c5:ec:12:f1:9e:6f:63:47:16:08:92: 07:61:2d:45:af:c2:24:ab:19:47:0b:39:56:ae:ec:24:15:2d: 0c:07:12:f5:cb:a6:63:a5:e2:84:5e:08:12:0a:34:fc:11:7e: 5b:de:f7:1e:15:f6:6e:ef:25:47:d6:60:13:3b:1c:4b:7b:25: 7a:3a:6b:42:98:77:05:cb:ba:06:2a:93:9b:83:ab:13:bd:54: e8:40:d1:c2:12:4d:f1:c4:aa:49:72:31:5a:a6:3d:c2:0b:84: 29:aa:50:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2ue/VHDbMzIqtMN6HXmx2eJrXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2 RjU3MTZGNTAeFw0yNTEyMDIwMjU3NTdaFw0yNTEyMDUxMDE1NTdaMDMxMTAvBgNV BAMTKDEwQTYwMTE3MTQ4MDBDOEM0OEI2NkU2QUI5NjA2MjAzNzc5MEQ5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6DIK5Dr0b3JF0r0+yT2/olU7 38wMR8YlFJs3mRJDv1AisYJQ6ffUmajuysEGzEUcaPxF3P2CgaebdPXKx8FyDVCv s7/GRvOkTeiXAzS1h2nGQuzlG/qlXeUCD0lfUSPVREBJPHi/q0TVOWnJlXUDC3T/ KIGpgHaiRnLA84jFz7SyYATSEzP4sxz2Ys5TAoVohDKhdJXewIvBKu5ttbFH+mFT FymE7LGP4LZRj//vE1HzEdmiPHcHBgqJqpn6NO7y6IHMY5XFCDY2775dE1HMNm8f Tvm6w3oTjOfCfFNb+2v6MpGRz1uFdX8maiqToyq3AEYw6woucNPS8E7I8LmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKYBFxSADIxItm5quWBiA3eQ2bswHwYDVR0j BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3 MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2 QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiwxH0K/031hzF2UvLARbw3dVHIPEGCt17X nCvVD2/pWKPRG2jOy3hGsSPcvrLwwG7mV91r/XPTdnc5WEQ84VgtbfFxaURc6qpd io6N40CubBeo4PuCDvC5EoFyhHedsxVfcidOlWXGa6W5UYXmvjammNeBx6V0rd96 tlPA+nyJ5aB7a7flv36yhuUo7QCcR7B4AVFLzCLF7BLxnm9jRxYIkgdhLUWvwiSr GUcLOVau7CQVLQwHEvXLpmOl4oReCBIKNPwRflve9x4V9m7vJUfWYBM7HEt7JXo6 a0KYdwXLugYqk5uDqxO9VOhA0cISTfHEqklyMVqmPcILhCmqUEc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:52 2025 by rpki-client