This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: URTgJXR+IS92K7HMv/LOYhjN5tZ/OC1jy11gKkJVn5o= Subject key identifier: 41:1E:31:6F:89:3B:CF:85:C2:D6:23:A4:41:8E:7E:9E:E0:05:73:B4 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 244EFF8019C63DDDD60A0FDDB82F3DE4EE9A1913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 052D Signing time: Mon 01 Dec 2025 17:01:40 +0000 Manifest this update: Mon 01 Dec 2025 16:56:40 +0000 Manifest next update: Thu 04 Dec 2025 22:57:40 +0000 Files and hashes: 1: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: 9sD02fdNBjLfuMhW/wGjR+nG6jePBnHFGI34DsCoKDE=) 2: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) 3: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4e:ff:80:19:c6:3d:dd:d6:0a:0f:dd:b8:2f:3d:e4:ee:9a:19:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Dec 1 16:56:40 2025 GMT Not After : Dec 4 22:57:40 2025 GMT Subject: CN=411E316F893BCF85C2D623A4418E7E9EE00573B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:04:4e:0f:32:3f:5c:19:59:c8:53:c2:38: bf:85:91:00:0b:76:9e:6d:bc:e7:18:a6:09:cb:be: ef:6c:ab:48:ae:90:1e:d4:d3:bf:94:59:1e:44:51: 7b:57:79:eb:a3:92:99:a5:83:ea:c9:6a:13:ca:ef: 6f:ad:5f:0c:09:b3:da:63:75:60:ec:26:0b:45:67: c4:09:85:e4:ac:ca:7f:28:f6:10:86:11:05:f9:c5: f3:78:bb:28:c1:26:43:8b:30:5e:a6:4e:ff:c5:80: 37:12:dd:75:1e:32:3b:98:46:89:6c:19:3c:dc:9f: 9f:ce:6a:f3:37:b5:ea:93:04:7f:ea:52:a8:e2:c6: 1b:b9:7e:ac:00:79:b2:b3:60:77:3b:4d:c6:bc:93: 1a:dc:dd:f9:f4:f8:61:92:c5:51:f6:40:ee:a1:b1: 52:38:f1:4e:7c:0a:98:d1:a4:7f:a3:f2:11:2a:41: 99:2f:45:c0:2f:56:26:83:12:38:e9:21:d4:39:f3: ce:4b:47:21:38:7f:83:9e:44:89:39:e5:93:f9:76: 39:dc:91:d0:0e:90:5f:ff:bf:cb:74:c1:5e:3f:82: a5:29:0d:82:4f:2d:59:82:bd:36:d2:86:ad:8c:7f: 4c:1b:a7:ca:68:01:76:70:14:a6:c9:cd:f7:4f:d1: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:31:6F:89:3B:CF:85:C2:D6:23:A4:41:8E:7E:9E:E0:05:73:B4 X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:ec:d5:a5:71:37:80:6a:36:87:9d:01:b8:4e:4c:d5:5f: 75:4d:9e:cf:38:29:10:b5:43:e8:47:6f:cc:2b:36:ee:39:95: cf:8e:3c:f9:43:2c:22:71:a8:a8:d0:e3:de:68:c9:36:c1:49: 45:d7:9b:f8:0d:88:6f:da:4c:36:24:59:f8:be:26:e2:8e:c5: 29:69:f2:cb:37:da:62:97:93:d2:de:d4:71:dc:40:c6:af:b3: a3:d1:47:cb:58:13:97:56:7f:b2:f9:ab:21:27:a1:94:e6:69: 92:e8:fe:00:04:6a:25:ae:b4:b1:c8:65:8c:b9:e9:20:76:de: f2:2c:01:88:c7:a3:e3:95:f3:81:f4:91:52:50:4a:5b:03:94: 4d:e9:3b:47:4c:9c:4b:2d:8a:f7:d5:e1:5d:2e:ee:e4:f7:3a: 4f:13:7e:f1:81:25:6f:1d:93:b6:f4:0f:69:7f:4e:89:8c:b6: 79:5c:54:62:1a:e3:24:46:63:e6:ec:08:ea:e4:ac:af:89:8f: c1:ed:b3:b5:db:60:4e:1d:fe:77:fa:40:03:87:c8:22:94:40: 90:cc:d6:fc:1e:14:c7:25:5d:96:2a:43:dc:b5:a5:ee:c2:2b: 90:a1:44:a7:7b:f0:47:7d:28:8d:1c:67:a2:d4:b3:93:9f:86: 3a:2b:75:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJE7/gBnGPd3WCg/duC895O6aGRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTEyMDExNjU2NDBaFw0yNTEyMDQyMjU3NDBaMDMxMTAvBgNV BAMTKDQxMUUzMTZGODkzQkNGODVDMkQ2MjNBNDQxOEU3RTlFRTAwNTczQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DgRODzI/XBlZyFPCOL+FkQAL dp5tvOcYpgnLvu9sq0iukB7U07+UWR5EUXtXeeujkpmlg+rJahPK72+tXwwJs9pj dWDsJgtFZ8QJheSsyn8o9hCGEQX5xfN4uyjBJkOLMF6mTv/FgDcS3XUeMjuYRols GTzcn5/OavM3teqTBH/qUqjixhu5fqwAebKzYHc7Tca8kxrc3fn0+GGSxVH2QO6h sVI48U58CpjRpH+j8hEqQZkvRcAvViaDEjjpIdQ5885LRyE4f4OeRIk55ZP5djnc kdAOkF//v8t0wV4/gqUpDYJPLVmCvTbShq2Mf0wbp8poAXZwFKbJzfdP0Z/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQR4xb4k7z4XC1iOkQY5+nuAFc7QwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWc7NWlcTeAajaHnQG4TkzVX3VNns84KRC1 Q+hHb8wrNu45lc+OPPlDLCJxqKjQ495oyTbBSUXXm/gNiG/aTDYkWfi+JuKOxSlp 8ss32mKXk9Le1HHcQMavs6PRR8tYE5dWf7L5qyEnoZTmaZLo/gAEaiWutLHIZYy5 6SB23vIsAYjHo+OV84H0kVJQSlsDlE3pO0dMnEstivfV4V0u7uT3Ok8TfvGBJW8d k7b0D2l/TomMtnlcVGIa4yRGY+bsCOrkrK+Jj8Hts7XbYE4d/nf6QAOHyCKUQJDM 1vweFMclXZYqQ9y1pe7CK5ChRKd78Ed9KI0cZ6LUs5Ofhjorde8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:43 2025 by rpki-client