This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: jvA+YjNxZmzLr/LdVlqOT4VlX7YABNBWw+npr0HeG0s= Subject key identifier: C6:8D:45:4F:7A:DC:9E:87:E9:6A:A2:7A:09:EC:11:CE:DE:24:09:5F Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 0FAD006189CDE994485FE206F2E27A7E865BA11B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0329 Signing time: Mon 01 Dec 2025 10:50:49 +0000 Manifest this update: Mon 01 Dec 2025 10:45:49 +0000 Manifest next update: Thu 04 Dec 2025 15:52:49 +0000 Files and hashes: 1: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: 5uqsr8nOdFr5xaw7DK1rLBYt42+uGvhNr3CkX8+uehU=) 2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ad:00:61:89:cd:e9:94:48:5f:e2:06:f2:e2:7a:7e:86:5b:a1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Dec 1 10:45:49 2025 GMT Not After : Dec 4 15:52:49 2025 GMT Subject: CN=C68D454F7ADC9E87E96AA27A09EC11CEDE24095F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:88:4d:ad:46:1f:1c:bb:df:48:a2:10:bc: 97:b0:cb:53:11:7b:b1:3d:89:54:b3:fe:f0:2e:06: 75:de:3c:a9:f9:ec:71:e9:e4:13:ab:24:46:d7:da: bc:d4:61:37:72:9d:3e:25:1f:f5:aa:f1:60:a8:d1: ec:a6:c6:10:a7:e5:a3:97:e2:23:a2:1c:60:89:2e: 9c:4d:3d:8e:d9:c7:a3:66:5b:0a:ba:2d:bb:95:6e: 36:50:95:fe:9c:60:8c:42:fb:2c:16:d7:a4:a1:12: 0c:13:1b:18:2a:26:40:13:e9:7e:48:3d:78:a6:d2: 01:9d:ab:e2:f2:34:dc:b7:6a:b8:82:16:5a:e6:d4: 6d:70:38:7e:bd:e4:6b:68:b6:64:b5:ac:d6:49:75: 4b:9b:5b:c7:92:7d:20:13:00:4d:36:3e:39:5d:ae: 52:f2:53:e9:cc:72:53:97:d1:54:a2:63:89:06:9e: 1b:44:24:14:97:07:4f:67:a9:b5:1f:ca:ef:4b:8b: bc:ad:5f:6d:a0:f8:12:72:f5:a8:a2:be:e1:c1:c2: 39:b4:03:02:3d:75:5c:fe:20:2e:9f:a9:54:86:e3: b7:d9:01:a4:cd:cc:ce:c6:3b:cd:c4:f5:5b:14:51: 2f:d7:3a:66:08:9b:0e:a5:5b:2b:97:da:4a:b2:98: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8D:45:4F:7A:DC:9E:87:E9:6A:A2:7A:09:EC:11:CE:DE:24:09:5F X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:72:c7:6e:1a:5c:7f:7a:c8:0c:26:e9:2b:dd:9d:46:b5:ac: 5e:d9:87:ec:d7:68:55:ae:a9:42:06:4e:ed:92:ae:2b:3f:53: b0:0e:01:a0:0c:a5:9d:f9:d1:82:06:d2:10:50:4b:dd:17:9a: 48:b2:c9:5b:4f:4a:0a:bd:c4:3f:fc:0e:6c:3f:7d:5f:bf:f7: d7:70:be:28:9a:4a:34:54:34:4e:fb:45:82:ae:2a:dc:54:de: 48:51:60:ad:73:8b:af:c0:a5:3b:01:da:0b:b3:a6:49:29:17: 08:5d:18:a6:ad:2d:40:65:83:11:a8:80:3f:af:3a:76:d3:c8: 27:02:80:55:49:bb:d7:54:c3:1e:e6:c8:2f:34:d0:e7:b0:ba: 73:48:43:14:4b:7d:6a:89:49:37:70:aa:8d:c9:d4:45:3d:d4: 8e:93:4a:34:3d:0b:b2:38:71:9a:44:77:f4:ae:91:63:53:98: 71:d1:87:fe:17:f1:6b:46:63:ee:e0:48:65:46:04:6a:6e:5e: c3:0f:70:1a:cf:d8:40:61:cb:25:8f:bc:5e:24:3f:4c:97:e2: 47:9f:97:ea:ca:69:64:e6:c9:c4:8b:14:1c:44:75:9f:15:a7: 05:7d:cf:d9:73:7c:d4:ee:13:f3:7f:c1:37:7b:c3:27:f0:f9: 25:24:3b:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD60AYYnN6ZRIX+IG8uJ6foZboRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTEyMDExMDQ1NDlaFw0yNTEyMDQxNTUyNDlaMDMxMTAvBgNV BAMTKEM2OEQ0NTRGN0FEQzlFODdFOTZBQTI3QTA5RUMxMUNFREUyNDA5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2YhNrUYfHLvfSKIQvJewy1MR e7E9iVSz/vAuBnXePKn57HHp5BOrJEbX2rzUYTdynT4lH/Wq8WCo0eymxhCn5aOX 4iOiHGCJLpxNPY7Zx6NmWwq6LbuVbjZQlf6cYIxC+ywW16ShEgwTGxgqJkAT6X5I PXim0gGdq+LyNNy3ariCFlrm1G1wOH695GtotmS1rNZJdUubW8eSfSATAE02Pjld rlLyU+nMclOX0VSiY4kGnhtEJBSXB09nqbUfyu9Li7ytX22g+BJy9aiivuHBwjm0 AwI9dVz+IC6fqVSG47fZAaTNzM7GO83E9VsUUS/XOmYImw6lWyuX2kqymJMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxo1FT3rcnofpaqJ6CewRzt4kCV8wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9yx24aXH96yAwm6SvdnUa1rF7Zh+zXaFWu qUIGTu2Sris/U7AOAaAMpZ350YIG0hBQS90XmkiyyVtPSgq9xD/8Dmw/fV+/99dw viiaSjRUNE77RYKuKtxU3khRYK1zi6/ApTsB2guzpkkpFwhdGKatLUBlgxGogD+v OnbTyCcCgFVJu9dUwx7myC800OewunNIQxRLfWqJSTdwqo3J1EU91I6TSjQ9C7I4 cZpEd/SukWNTmHHRh/4X8WtGY+7gSGVGBGpuXsMPcBrP2EBhyyWPvF4kP0yX4kef l+rKaWTmycSLFBxEdZ8VpwV9z9lzfNTuE/N/wTd7wyfw+SUkOzc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:20 2025 by rpki-client