This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: UtMPXsUMdKQUVB+nvOMOWzqsUD7UkVYRDBpxKhDcJsQ= Subject key identifier: 59:09:01:2D:DC:BA:6B:89:98:74:49:15:D2:0D:2E:83:A5:6D:17:93 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 75D72D0E12F14264C542E162883130A950E3748F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0344 Signing time: Sun 01 Feb 2026 01:00:49 +0000 Manifest this update: Sun 01 Feb 2026 00:55:49 +0000 Manifest next update: Wed 04 Feb 2026 01:26:49 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 3: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: kTf6MyIwCHuVoga/RZ6iDRYNpYbd2eb/UtmrtXIZ79Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d7:2d:0e:12:f1:42:64:c5:42:e1:62:88:31:30:a9:50:e3:74:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Feb 1 00:55:49 2026 GMT Not After : Feb 4 01:26:49 2026 GMT Subject: CN=5909012DDCBA6B8998744915D20D2E83A56D1793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:6e:fd:75:37:d2:34:72:14:61:a5:1c:db: 4a:4c:87:81:7f:cd:f7:0f:6f:88:6f:e4:d1:8b:91: a8:b4:46:67:13:50:dc:6f:be:c1:45:a4:48:ac:97: e9:fa:5f:43:91:67:1c:ac:d5:fc:6c:91:d1:ca:43: a0:fc:03:55:2d:eb:54:2a:62:7d:1f:c7:28:80:18: 1b:6b:5b:81:9a:00:ce:30:70:8a:85:15:a5:02:fb: 52:af:dd:b3:ed:20:a0:10:56:d6:6a:2b:91:0f:60: 62:d5:79:55:1b:82:40:5a:2d:13:a4:09:aa:7f:63: f2:f3:e9:df:79:e6:2f:cd:3f:11:8c:c3:69:00:42: ef:3b:07:f1:f8:75:3f:02:1c:5d:a4:99:a3:ac:10: 12:1e:c9:b4:ed:1d:29:e9:a7:ed:6f:c1:5e:66:25: 2c:4d:ae:24:b4:8a:a3:a4:bb:6d:1a:71:a2:cf:01: 9f:58:c8:76:c0:9a:f1:76:38:15:cf:82:f7:dd:32: cd:a5:15:96:b4:71:7f:27:a6:d4:a4:de:86:cd:51: d3:73:25:9b:b0:60:7c:a1:00:19:bb:23:aa:56:27: 09:6e:4a:c2:24:b7:2e:6b:5e:47:4e:90:41:85:bc: 43:65:bd:67:47:91:e2:53:25:67:8f:0a:e4:aa:fb: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:09:01:2D:DC:BA:6B:89:98:74:49:15:D2:0D:2E:83:A5:6D:17:93 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b0:84:c6:3b:46:4b:32:f5:39:dd:af:60:ed:e7:ed:55:9d: 0d:81:6c:ef:92:66:af:2d:ee:ba:87:09:cc:4d:ea:a7:02:d6: 7e:5f:72:bb:a4:e6:ce:9f:b1:19:05:b6:12:9d:cf:bc:5d:6e: c8:01:58:40:1b:1a:e3:48:f1:23:30:42:2c:cd:e4:ac:5d:b2: 66:ef:e3:51:e5:dd:f6:4a:34:42:e0:ed:53:bb:90:be:ae:1f: 40:19:36:66:fe:4d:36:73:37:e7:4b:22:f5:3e:61:8a:4d:b2: dc:02:af:92:82:a3:d0:63:a9:61:d3:a4:14:9e:38:93:5d:10: b1:45:25:63:98:47:99:32:74:57:45:37:64:2c:d0:1d:a6:5f: 69:a8:fc:37:79:41:5f:86:71:20:a6:59:a5:57:af:75:c0:03: 8d:b5:f6:54:0c:d6:b6:4c:63:7d:75:2a:89:78:ad:36:d7:f5: b9:94:d4:e0:25:10:47:42:74:95:7d:21:0f:dc:56:72:13:bb: 01:cf:76:1d:a8:f4:21:27:44:9e:e6:dc:63:67:c6:fc:2b:a3: 65:59:5f:4a:8d:5d:ef:7d:dd:03:82:66:3f:5f:df:58:c9:86: 96:cd:05:0d:4c:67:b0:ad:9b:9f:f8:91:3b:6e:af:ed:4e:a5: 9a:d4:77:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddctDhLxQmTFQuFiiDEwqVDjdI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNjAyMDEwMDU1NDlaFw0yNjAyMDQwMTI2NDlaMDMxMTAvBgNV BAMTKDU5MDkwMTJERENCQTZCODk5ODc0NDkxNUQyMEQyRTgzQTU2RDE3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+279dTfSNHIUYaUc20pMh4F/ zfcPb4hv5NGLkai0RmcTUNxvvsFFpEisl+n6X0ORZxys1fxskdHKQ6D8A1Ut61Qq Yn0fxyiAGBtrW4GaAM4wcIqFFaUC+1Kv3bPtIKAQVtZqK5EPYGLVeVUbgkBaLROk Cap/Y/Lz6d955i/NPxGMw2kAQu87B/H4dT8CHF2kmaOsEBIeybTtHSnpp+1vwV5m JSxNriS0iqOku20acaLPAZ9YyHbAmvF2OBXPgvfdMs2lFZa0cX8nptSk3obNUdNz JZuwYHyhABm7I6pWJwluSsIkty5rXkdOkEGFvENlvWdHkeJTJWePCuSq+6F1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWQkBLdy6a4mYdEkV0g0ug6VtF5MwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6whMY7Rksy9Tndr2Dt5+1VnQ2BbO+SZq8t 7rqHCcxN6qcC1n5fcruk5s6fsRkFthKdz7xdbsgBWEAbGuNI8SMwQizN5Kxdsmbv 41Hl3fZKNELg7VO7kL6uH0AZNmb+TTZzN+dLIvU+YYpNstwCr5KCo9BjqWHTpBSe OJNdELFFJWOYR5kydFdFN2Qs0B2mX2mo/Dd5QV+GcSCmWaVXr3XAA4219lQM1rZM Y311Kol4rTbX9bmU1OAlEEdCdJV9IQ/cVnITuwHPdh2o9CEnRJ7m3GNnxvwro2VZ X0qNXe993QOCZj9f31jJhpbNBQ1MZ7Ctm5/4kTtur+1OpZrUd8M= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:46 2026 by rpki-client