This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: VqXof454EKAM30djC0axBXBjUXg8KIlj/2HzRxS4S7E= Subject key identifier: F2:98:93:29:D8:F5:58:31:69:5F:B7:C7:4C:8F:2C:F2:09:B2:4F:0A Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 6A85143F1D933477A952D56A7A0C273D93439E1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04FA Signing time: Thu 18 Dec 2025 14:41:41 +0000 Manifest this update: Thu 18 Dec 2025 14:36:41 +0000 Manifest next update: Sun 21 Dec 2025 14:55:41 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: 3VePHWprxddu7bnVZySOHmnKnZXehKhgvvssWqAiDs4=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:85:14:3f:1d:93:34:77:a9:52:d5:6a:7a:0c:27:3d:93:43:9e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Dec 18 14:36:41 2025 GMT Not After : Dec 21 14:55:41 2025 GMT Subject: CN=F2989329D8F55831695FB7C74C8F2CF209B24F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:18:93:12:05:25:26:e0:1a:2d:e1:9f:21: 63:95:65:a3:7a:25:60:2b:f1:22:85:67:eb:b6:13: 33:6a:b1:67:8c:8c:ab:5a:13:fc:dc:be:4f:1e:0a: 7c:ac:c7:93:24:30:94:5c:ca:55:4c:2a:28:d5:e1: 38:1c:cb:56:0a:22:24:a5:c8:41:b5:4e:9a:43:c0: b4:54:c8:84:f7:9d:06:36:fb:a3:81:e2:ff:19:6b: 65:04:a2:c9:c4:df:e7:2f:a2:ce:14:15:18:1e:cc: 03:f9:91:1c:b8:a8:c3:79:96:88:87:44:13:9a:5d: ad:8a:b3:32:a3:5d:8f:53:24:c6:e9:03:1f:35:03: 11:4c:f5:a1:ad:b5:ab:89:1d:91:af:d2:81:34:45: 0a:26:32:1a:1f:5d:6a:f2:c9:d6:81:21:96:1c:b1: ce:10:c3:88:37:a4:3d:ed:dc:21:f6:34:fc:0c:1f: b9:24:73:d0:dd:43:1b:a5:cc:4b:9e:58:3d:08:cc: 36:de:cc:48:ef:87:65:09:f2:57:b5:29:41:e3:70: d4:b9:52:4f:d2:1c:ed:e2:2e:27:c2:73:86:c2:68: be:3b:a4:22:92:9a:7b:3e:a7:4c:9f:43:d8:59:0a: 81:10:b3:63:71:8f:4d:8e:c0:aa:f6:21:46:ab:e8: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:98:93:29:D8:F5:58:31:69:5F:B7:C7:4C:8F:2C:F2:09:B2:4F:0A X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:07:8b:61:17:5d:41:a7:66:8f:b8:30:63:ec:8a:8c:89:cd: 7e:b4:fd:b9:16:71:85:c6:e2:34:dd:f1:5e:f8:ce:9c:5d:7d: 65:8c:90:61:88:cd:b3:51:b4:35:de:3e:43:55:67:03:e2:ed: f7:1d:b2:6a:cf:19:79:2c:8b:70:2e:bb:c3:c7:43:42:1c:1c: 71:26:d1:01:18:cb:50:2a:6e:c7:c6:97:67:a3:e9:51:ea:25: 79:d3:ae:ba:6d:1c:e5:ec:01:e5:43:e8:d3:1c:4b:c1:9a:92: e6:f0:47:5f:5e:ca:a3:69:1d:6b:5b:22:1e:6d:80:09:5f:c9: d6:fc:e6:a6:ab:24:94:4d:9f:13:a1:10:73:34:1b:79:f9:86: ac:07:b4:33:c1:bb:1a:c7:fd:4c:85:77:1e:0f:f8:d2:a3:8d: d0:cc:a1:ba:91:42:bf:a7:a6:28:37:0c:84:6f:0b:db:dc:14: 5c:ce:58:ba:19:06:1f:06:3d:e2:d5:fa:31:c9:39:c2:5b:c6: 0a:19:b7:95:4d:74:1f:43:85:8f:18:80:8a:ae:03:4a:e5:45: d2:69:70:8c:fa:d0:46:85:68:15:8c:51:03:72:2c:43:9c:87: 3a:2b:2b:5d:e2:d6:3b:df:0d:74:86:26:f2:03:7f:5d:81:aa: 27:98:21:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoUUPx2TNHepUtVqegwnPZNDnh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTEyMTgxNDM2NDFaFw0yNTEyMjExNDU1NDFaMDMxMTAvBgNV BAMTKEYyOTg5MzI5RDhGNTU4MzE2OTVGQjdDNzRDOEYyQ0YyMDlCMjRGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVxiTEgUlJuAaLeGfIWOVZaN6 JWAr8SKFZ+u2EzNqsWeMjKtaE/zcvk8eCnysx5MkMJRcylVMKijV4Tgcy1YKIiSl yEG1TppDwLRUyIT3nQY2+6OB4v8Za2UEosnE3+cvos4UFRgezAP5kRy4qMN5loiH RBOaXa2KszKjXY9TJMbpAx81AxFM9aGttauJHZGv0oE0RQomMhofXWryydaBIZYc sc4Qw4g3pD3t3CH2NPwMH7kkc9DdQxulzEueWD0IzDbezEjvh2UJ8le1KUHjcNS5 Uk/SHO3iLifCc4bCaL47pCKSmns+p0yfQ9hZCoEQs2Nxj02OwKr2IUar6COxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8piTKdj1WDFpX7fHTI8s8gmyTwowHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkHi2EXXUGnZo+4MGPsioyJzX60/bkWcYXG 4jTd8V74zpxdfWWMkGGIzbNRtDXePkNVZwPi7fcdsmrPGXksi3Auu8PHQ0IcHHEm 0QEYy1AqbsfGl2ej6VHqJXnTrrptHOXsAeVD6NMcS8GakubwR19eyqNpHWtbIh5t gAlfydb85qarJJRNnxOhEHM0G3n5hqwHtDPBuxrH/UyFdx4P+NKjjdDMobqRQr+n pig3DIRvC9vcFFzOWLoZBh8GPeLV+jHJOcJbxgoZt5VNdB9DhY8YgIquA0rlRdJp cIz60EaFaBWMUQNyLEOchzorK13i1jvfDXSGJvIDf12BqieYIXA= -----END CERTIFICATE-----Generated at Fri Dec 19 08:12:35 2025 by rpki-client