This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: GMXQmqBRi3cEuiHM/923AnRlexcpVSwj1iWWDePJn2Q= Subject key identifier: 7F:39:B5:78:FA:F3:10:E5:E5:F0:4C:3D:A0:01:64:B4:C9:48:FB:F6 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 279E64A8BD06F019FB2A943D98EA801C6D66A2A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02F8 Signing time: Wed 03 Dec 2025 07:02:30 +0000 Manifest this update: Wed 03 Dec 2025 06:57:30 +0000 Manifest next update: Sat 06 Dec 2025 16:47:30 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: r8c0g7Qayoh4sqMvpEmVOPQHpXDxRqwUWJAaUWEuPTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9e:64:a8:bd:06:f0:19:fb:2a:94:3d:98:ea:80:1c:6d:66:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Dec 3 06:57:30 2025 GMT Not After : Dec 6 16:47:30 2025 GMT Subject: CN=7F39B578FAF310E5E5F04C3DA00164B4C948FBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bf:39:e2:d9:e4:7d:55:0d:4c:c6:dc:0d:7b: c9:89:e0:98:79:25:7b:41:43:d2:45:cf:67:28:71: e8:2f:b4:a3:58:fb:80:72:8f:a1:86:bf:6c:ba:10: c1:38:f7:05:95:0a:a6:dc:3c:2d:d9:7a:a9:3b:1a: 62:6d:10:d3:a5:a9:65:84:99:f2:cc:a8:38:d0:ca: 00:47:82:ac:10:21:50:42:a7:87:35:34:c9:9a:91: 05:68:ac:9d:2e:c7:48:10:4b:d8:1c:ac:b5:c5:8e: c2:0c:82:29:83:c3:71:f9:0e:e1:d1:5c:3d:69:e5: c9:56:87:e2:8e:b5:18:80:6c:7a:79:b4:96:66:a2: 05:bc:51:3d:72:66:aa:dd:27:6f:35:bc:53:d9:61: d8:c6:7c:62:e5:dc:61:f0:9d:92:e6:3d:11:ed:0c: 2f:b6:37:28:dd:03:b5:4c:12:c2:b6:03:1e:14:49: 01:66:4d:4f:87:d5:58:1e:a9:6f:f7:18:50:c0:62: db:66:12:b9:8c:9e:b1:f4:37:9f:44:2c:1b:33:c2: 47:32:10:ae:db:8c:2e:23:35:c5:28:3f:34:a7:ef: 03:13:2e:c3:e0:46:ae:42:be:18:f4:83:ba:22:94: b3:3c:f0:70:1b:38:0a:52:b9:47:f6:a1:50:74:91: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:B5:78:FA:F3:10:E5:E5:F0:4C:3D:A0:01:64:B4:C9:48:FB:F6 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ab:ff:22:d6:1d:76:06:f7:c1:93:89:b3:9b:47:5d:b7:86: da:9e:70:98:22:6a:13:32:96:3d:4c:20:b4:af:50:76:5d:fd: e1:27:ef:d7:4f:ad:61:26:55:5d:3c:da:1a:62:98:27:18:cc: 35:0a:2c:c9:f7:db:70:9b:e3:ed:e7:1e:6f:1d:c8:5f:84:46: a3:dc:b6:c6:76:0e:a3:a3:4c:de:06:43:00:fa:7d:0e:ae:29: c6:f2:d9:08:52:90:b0:0f:ce:01:7b:be:3c:03:0d:3f:f1:85: 39:50:6f:74:c9:26:21:89:fd:eb:73:ca:9c:8d:6f:54:b1:77: 53:ce:79:26:b0:5c:47:70:8a:b5:b1:8e:19:90:da:91:23:bd: 09:40:ef:a3:9f:49:e7:1e:e6:94:b4:50:aa:bb:7f:28:55:ce: e7:6b:b0:f5:b8:a5:fe:76:99:2c:97:5a:70:59:2a:9e:be:13: 3a:f0:e1:3c:c3:b9:f9:c5:72:5a:75:23:da:6d:e0:aa:b5:f0: c3:f4:19:cf:ba:6b:57:11:46:cb:b7:56:d7:46:e5:98:7f:12: 60:25:b1:32:9c:be:70:7a:39:4b:16:2e:c3:64:db:32:4b:e9: 60:af:09:bc:d5:a7:0c:c2:bf:a4:12:b6:d8:a1:31:ab:99:39: 14:43:89:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ55kqL0G8Bn7KpQ9mOqAHG1moqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTEyMDMwNjU3MzBaFw0yNTEyMDYxNjQ3MzBaMDMxMTAvBgNV BAMTKDdGMzlCNTc4RkFGMzEwRTVFNUYwNEMzREEwMDE2NEI0Qzk0OEZCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsvzni2eR9VQ1MxtwNe8mJ4Jh5 JXtBQ9JFz2cocegvtKNY+4Byj6GGv2y6EME49wWVCqbcPC3Zeqk7GmJtENOlqWWE mfLMqDjQygBHgqwQIVBCp4c1NMmakQVorJ0ux0gQS9gcrLXFjsIMgimDw3H5DuHR XD1p5clWh+KOtRiAbHp5tJZmogW8UT1yZqrdJ281vFPZYdjGfGLl3GHwnZLmPRHt DC+2NyjdA7VMEsK2Ax4USQFmTU+H1VgeqW/3GFDAYttmErmMnrH0N59ELBszwkcy EK7bjC4jNcUoPzSn7wMTLsPgRq5Cvhj0g7oilLM88HAbOApSuUf2oVB0ka9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzm1ePrzEOXl8Ew9oAFktMlI+/YwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACr/yLWHXYG98GTibObR123htqecJgiahMy lj1MILSvUHZd/eEn79dPrWEmVV082hpimCcYzDUKLMn323Cb4+3nHm8dyF+ERqPc tsZ2DqOjTN4GQwD6fQ6uKcby2QhSkLAPzgF7vjwDDT/xhTlQb3TJJiGJ/etzypyN b1Sxd1POeSawXEdwirWxjhmQ2pEjvQlA76OfSece5pS0UKq7fyhVzudrsPW4pf52 mSyXWnBZKp6+Ezrw4TzDufnFclp1I9pt4Kq18MP0Gc+6a1cRRsu3VtdG5Zh/EmAl sTKcvnB6OUsWLsNk2zJL6WCvCbzVpwzCv6QSttihMauZORRDidQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:32 2025 by rpki-client