This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: biHB2bHPwJ9VkEU8mdQ1o3+Alhsf39axcMYY4jN9v3s= Subject key identifier: D7:9B:F1:BC:F9:02:EA:46:9B:24:92:1D:69:63:62:4C:D7:AF:BD:54 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 69D491CB4247F639E664B527CB2C5D89CD8F33F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0156 Signing time: Wed 03 Dec 2025 08:12:09 +0000 Manifest this update: Wed 03 Dec 2025 08:07:09 +0000 Manifest next update: Sat 06 Dec 2025 10:31:09 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: TuuJqRK4E3yAzaAvDe/nHStrC+3gp1il0lIAiM49AYw=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:91:cb:42:47:f6:39:e6:64:b5:27:cb:2c:5d:89:cd:8f:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Dec 3 08:07:09 2025 GMT Not After : Dec 6 10:31:09 2025 GMT Subject: CN=D79BF1BCF902EA469B24921D6963624CD7AFBD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:e7:dd:a2:b3:91:01:97:5d:f1:6d:17:1d: f7:d6:8b:1e:69:89:cb:65:db:03:fd:0a:33:bb:f6: 01:11:de:c7:2c:c2:d5:3a:b9:bb:e0:c9:f0:f7:9a: c7:44:ab:28:89:ac:06:bb:59:12:ec:e2:c0:d0:28: dd:f6:f4:ee:a7:9d:4b:38:e3:e0:1a:9e:44:2e:24: e3:1c:d6:d0:7c:c4:31:2c:42:8c:39:92:16:44:12: b3:31:ad:b7:48:c0:1a:0a:92:1e:57:67:62:47:b4: c9:dd:fe:1d:9b:79:c3:af:b8:b5:f6:07:e2:63:16: fc:fc:22:a4:b5:54:94:79:71:e2:a5:67:38:82:67: e8:89:0c:b5:53:dc:3d:02:2f:96:bb:97:46:94:1a: e8:aa:c7:29:65:f3:bd:ac:71:46:02:3b:3e:af:e9: 4e:87:2a:08:00:9a:d0:52:e9:ab:52:5d:4d:c4:4d: f6:d0:1a:d6:3e:26:a7:86:01:cf:09:7a:0f:75:1a: 81:90:b6:e3:ed:ff:50:91:02:ae:48:b8:83:af:37: a8:9e:d3:e1:5c:12:b1:d6:ab:6a:1e:88:68:f3:cf: 68:02:c2:b0:bb:2c:cf:d3:4e:db:7a:b4:b7:7b:53: 60:99:aa:f9:f9:a0:43:24:21:50:17:ca:85:ef:a3: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:F1:BC:F9:02:EA:46:9B:24:92:1D:69:63:62:4C:D7:AF:BD:54 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:69:85:f6:67:42:0b:67:24:e3:e6:35:e0:0e:09:c8:ff: 1e:8c:44:2f:da:b3:d9:52:8c:fe:57:74:b0:04:fe:dd:15:8f: 83:0e:2a:8b:22:d0:b4:15:a3:0c:df:0b:8a:09:8b:7d:1a:f5: 40:de:84:a7:1c:5d:13:33:69:55:43:21:fc:2a:52:43:1b:c5: bf:3a:d9:f6:e0:59:44:ba:e9:48:6d:af:93:c8:d0:19:c8:12: 75:75:1d:69:ef:f3:3e:36:bb:5d:1b:44:32:d7:e3:f8:9e:1e: 73:ba:9a:07:93:d7:b4:82:f9:dd:f6:ef:52:4d:22:32:7a:6b: 42:78:99:63:34:96:b8:94:b2:cb:b6:e3:e4:b5:08:ea:21:cf: 40:97:54:6b:7a:d0:9f:91:ff:0f:83:e3:20:f6:b7:bc:2c:74: ab:71:44:55:4a:99:58:f3:fe:0c:11:7f:3f:39:72:fb:ff:2c: 01:20:61:ee:ab:2f:a1:0a:51:c2:56:a5:af:25:93:79:9b:cc: 2f:1d:56:94:1c:89:77:56:01:6c:7d:88:01:e6:d1:af:9b:6d: 79:62:7c:76:58:ee:9e:54:34:c3:ee:44:1e:a4:1c:89:56:c6: f8:3a:e8:b1:ba:a4:45:58:bb:44:5d:fe:84:33:44:f7:22:69: 85:6c:35:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadSRy0JH9jnmZLUnyyxdic2PM/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTEyMDMwODA3MDlaFw0yNTEyMDYxMDMxMDlaMDMxMTAvBgNV BAMTKEQ3OUJGMUJDRjkwMkVBNDY5QjI0OTIxRDY5NjM2MjRDRDdBRkJENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlefdorORAZdd8W0XHffWix5p ictl2wP9CjO79gER3scswtU6ubvgyfD3msdEqyiJrAa7WRLs4sDQKN329O6nnUs4 4+AankQuJOMc1tB8xDEsQow5khZEErMxrbdIwBoKkh5XZ2JHtMnd/h2becOvuLX2 B+JjFvz8IqS1VJR5ceKlZziCZ+iJDLVT3D0CL5a7l0aUGuiqxyll872scUYCOz6v 6U6HKggAmtBS6atSXU3ETfbQGtY+JqeGAc8Jeg91GoGQtuPt/1CRAq5IuIOvN6ie 0+FcErHWq2oeiGjzz2gCwrC7LM/TTtt6tLd7U2CZqvn5oEMkIVAXyoXvowMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15vxvPkC6kabJJIdaWNiTNevvVQwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBBaYX2Z0ILZyTj5jXgDgnI/x6MRC/as9lS jP5XdLAE/t0Vj4MOKosi0LQVowzfC4oJi30a9UDehKccXRMzaVVDIfwqUkMbxb86 2fbgWUS66Uhtr5PI0BnIEnV1HWnv8z42u10bRDLX4/ieHnO6mgeT17SC+d3271JN IjJ6a0J4mWM0lriUssu24+S1COohz0CXVGt60J+R/w+D4yD2t7wsdKtxRFVKmVjz /gwRfz85cvv/LAEgYe6rL6EKUcJWpa8lk3mbzC8dVpQciXdWAWx9iAHm0a+bbXli fHZY7p5UNMPuRB6kHIlWxvg66LG6pEVYu0Rd/oQzRPciaYVsNfk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:24 2025 by rpki-client