This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: zmNRKr+sUIT/LUoiTSKrkziDwLLYMauJ77L/dROLOBw= Subject key identifier: A9:62:47:AC:0B:AF:29:E3:4A:AD:BB:A8:F8:68:F5:5E:92:A2:D8:D5 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 3052846D540BDED714861DFAEF0F52F7952DCCDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0240 Signing time: Mon 15 Dec 2025 15:31:20 +0000 Manifest this update: Mon 15 Dec 2025 15:26:20 +0000 Manifest next update: Thu 18 Dec 2025 19:17:20 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 3: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: tG0TMngc4mrYIZvPO9Rfm8pcJeTfBhZpF6kAWCiu+3c=) 4: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) 5: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 6: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 19:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:52:84:6d:54:0b:de:d7:14:86:1d:fa:ef:0f:52:f7:95:2d:cc:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Dec 15 15:26:20 2025 GMT Not After : Dec 18 19:17:20 2025 GMT Subject: CN=A96247AC0BAF29E34AADBBA8F868F55E92A2D8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:0e:56:f9:2a:80:e8:77:ed:ce:d3:85:a6: b3:34:66:7c:d8:da:cc:85:9d:fb:7c:e4:b0:37:13: ba:a8:9e:8a:6d:f9:95:eb:d6:46:bb:e1:2e:cb:02: e0:b8:c0:fd:48:42:05:99:ac:ef:16:d4:7d:26:cf: e6:28:de:47:59:a8:3f:41:14:aa:b4:cc:da:ed:de: e7:ff:c4:04:fe:35:49:ff:c6:45:60:0f:88:93:15: 22:ff:9d:fc:80:bb:47:47:08:2e:20:92:ba:a4:8b: df:d4:a9:e6:7d:34:97:4c:01:19:65:13:3b:56:0a: 9b:7f:ef:d1:40:bb:cf:1d:2d:e6:77:f9:c9:15:43: 65:a3:d7:10:99:04:15:a7:cd:87:e1:94:ce:be:b4: e3:8a:04:47:a5:89:78:15:5b:7a:d4:68:5a:44:a0: b1:64:ed:e5:fe:37:54:9e:ca:7e:2d:48:03:47:5d: 26:b1:25:f2:eb:e7:59:c6:9d:40:ee:b0:b3:4c:78: a8:e2:06:e0:ed:fa:29:11:b6:8c:f9:07:3d:84:e0: 8e:fd:fd:c3:18:84:03:2a:c3:ec:af:3d:43:53:44: c5:b2:d4:74:bf:9d:4b:e4:fc:52:f1:91:64:b4:89: 5e:00:07:49:2d:ab:bd:5d:48:32:ec:91:60:d0:52: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:62:47:AC:0B:AF:29:E3:4A:AD:BB:A8:F8:68:F5:5E:92:A2:D8:D5 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:3b:44:5d:28:fe:49:99:42:92:3f:9c:3e:4e:4f:50:5a: 3f:1b:18:5b:e5:fd:ba:12:a0:43:47:bb:f4:3a:55:91:51:43: 26:cd:ab:c7:d4:27:0f:1a:ba:e4:69:0a:66:ce:5c:69:40:93: 73:fe:d7:ef:0b:a1:c1:ac:66:05:4e:23:36:9d:7a:48:ab:45: df:e1:24:ae:ef:f4:7f:8b:3a:c7:7f:26:81:a9:2b:d4:38:db: d7:34:0c:d6:af:4f:e5:1c:3a:50:9d:5e:86:50:9c:99:80:93: d1:c8:0c:d4:ae:4a:9e:c4:6a:19:19:e9:f5:6a:a3:ae:f1:6b: 22:27:0b:af:09:76:63:fe:5a:13:61:ec:06:18:64:57:80:6f: f8:1d:5f:17:68:e8:83:59:2b:31:89:87:7a:eb:89:1d:a8:d0: 82:0a:4c:a2:16:0e:9e:1c:5c:2c:38:6e:99:0d:79:6b:4f:a0: 14:70:51:7b:4e:2c:98:2b:fd:82:b3:16:f2:fc:14:24:c7:e6: 28:36:08:56:5c:54:d0:2f:cf:f7:c5:7d:8a:32:a5:46:70:a1: 53:bb:6b:ea:35:9b:2d:3b:d0:1a:37:8b:a7:9c:7c:f0:a9:df: 71:45:db:ae:62:e8:29:88:06:d0:55:ce:a2:ea:2e:55:c0:21: e3:53:64:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFKEbVQL3tcUhh367w9S95UtzN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTEyMTUxNTI2MjBaFw0yNTEyMTgxOTE3MjBaMDMxMTAvBgNV BAMTKEE5NjI0N0FDMEJBRjI5RTM0QUFEQkJBOEY4NjhGNTVFOTJBMkQ4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WA5W+SqA6HftztOFprM0ZnzY 2syFnft85LA3E7qonopt+ZXr1ka74S7LAuC4wP1IQgWZrO8W1H0mz+Yo3kdZqD9B FKq0zNrt3uf/xAT+NUn/xkVgD4iTFSL/nfyAu0dHCC4gkrqki9/UqeZ9NJdMARll EztWCpt/79FAu88dLeZ3+ckVQ2Wj1xCZBBWnzYfhlM6+tOOKBEeliXgVW3rUaFpE oLFk7eX+N1Seyn4tSANHXSaxJfLr51nGnUDusLNMeKjiBuDt+ikRtoz5Bz2E4I79 /cMYhAMqw+yvPUNTRMWy1HS/nUvk/FLxkWS0iV4AB0ktq71dSDLskWDQUsJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWJHrAuvKeNKrbuo+Gj1XpKi2NUwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPBO0RdKP5JmUKSP5w+Tk9QWj8bGFvl/boS oENHu/Q6VZFRQybNq8fUJw8auuRpCmbOXGlAk3P+1+8LocGsZgVOIzadekirRd/h JK7v9H+LOsd/JoGpK9Q429c0DNavT+UcOlCdXoZQnJmAk9HIDNSuSp7EahkZ6fVq o67xayInC68JdmP+WhNh7AYYZFeAb/gdXxdo6INZKzGJh3rriR2o0IIKTKIWDp4c XCw4bpkNeWtPoBRwUXtOLJgr/YKzFvL8FCTH5ig2CFZcVNAvz/fFfYoypUZwoVO7 a+o1my070Bo3i6ecfPCp33FF265i6CmIBtBVzqLqLlXAIeNTZP4= -----END CERTIFICATE-----Generated at Tue Dec 16 19:34:45 2025 by rpki-client