This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: IZyku5C1LxH1F4/7AigB5Gu5RTk9UGmGCugL7gJTe/Y= Subject key identifier: 66:66:E0:2C:66:A5:BA:17:A1:1B:11:37:6F:A2:8B:C6:6B:17:65:74 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 3559251EAAA3FE844011380BEE0EDD7C7ED005B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 0313 Signing time: Sat 31 Jan 2026 22:42:30 +0000 Manifest this update: Sat 31 Jan 2026 22:37:30 +0000 Manifest next update: Wed 04 Feb 2026 08:39:30 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: X4kLEG63SkZyKHAh+7izPld93pBxxK8ypnQLz+Bb+mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:59:25:1e:aa:a3:fe:84:40:11:38:0b:ee:0e:dd:7c:7e:d0:05:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Jan 31 22:37:30 2026 GMT Not After : Feb 4 08:39:30 2026 GMT Subject: CN=6666E02C66A5BA17A11B11376FA28BC66B176574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:a2:82:02:a8:6e:a0:e2:1c:3c:3e:59:3d: 4e:17:42:3e:9a:3b:a9:dc:c0:43:25:23:c6:8f:a7: d9:79:7a:8f:16:69:ba:37:77:19:80:6c:3f:d1:70: f2:31:92:1a:b3:eb:1b:bf:c5:0d:b6:c1:c2:5d:cf: ca:a0:e3:7a:1a:f1:de:ae:8f:2b:42:62:e1:bb:5e: 1c:cb:3a:00:0e:b8:5c:98:7f:c5:fe:b2:00:d8:b7: 97:8c:d1:78:2f:f7:cd:e1:85:19:22:6a:f8:96:c7: 6e:4a:6e:77:4e:6e:c5:ce:70:38:c9:95:d2:97:8c: 07:95:c9:b3:31:f5:1e:b5:d3:66:8b:f8:b6:20:7c: b4:4e:1f:2f:c9:0f:19:50:00:6f:3f:53:68:99:93: 09:cf:46:16:62:a4:d4:ff:f5:fc:f9:37:2e:e1:a5: be:91:dd:9b:5d:8d:8f:bd:75:d5:76:89:9e:00:5a: 5a:e0:bd:52:23:de:11:ca:03:8e:5e:6e:e7:e4:2f: 80:bd:72:a5:45:25:e1:1a:cd:ac:d0:6e:d8:d4:e7: f0:c1:31:0a:1e:71:00:e3:9a:e7:12:5e:09:f0:f7: 78:56:20:23:03:98:33:35:94:da:51:29:99:99:7c: 79:2b:54:5c:91:99:1d:27:2f:1f:44:51:8a:58:6b: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:66:E0:2C:66:A5:BA:17:A1:1B:11:37:6F:A2:8B:C6:6B:17:65:74 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:35:18:c0:3f:51:85:db:8d:54:bd:ac:a9:26:ff:e3:31:46: f0:6b:e2:0a:44:02:54:2d:d6:b2:fc:e4:0b:02:89:3c:34:53: 6c:c4:b7:82:1e:ed:95:a2:1d:6e:ef:e2:4b:dc:70:ad:a3:40: eb:ee:90:08:52:ee:1f:16:9f:97:ad:fb:94:56:d2:bc:44:9f: f9:e8:6a:bd:fb:1c:2d:79:9b:ed:98:9d:27:28:02:67:fb:3b: 81:ce:5a:8a:0f:3b:93:74:1f:9b:a0:b9:a4:b7:0b:77:e8:e6: f5:67:83:26:c9:35:28:20:7a:ea:0e:e4:14:43:e6:d9:54:61: 46:62:b3:de:66:60:4b:95:32:bc:b5:25:e7:bc:e2:82:cf:43: 8b:de:cd:8d:9a:f3:31:d1:e8:5a:9d:6b:41:19:aa:a3:25:6b: e6:7a:fd:4e:fe:f9:9c:bd:82:72:2a:c9:5e:0e:49:f1:d1:56: d8:90:be:87:03:30:28:07:6b:d0:81:5e:36:58:55:af:10:44: 9c:48:0e:02:de:c1:24:7f:03:3d:fb:f8:d6:55:84:18:84:15: ac:84:16:fe:8b:94:c7:d0:76:c2:47:04:72:68:ad:b2:ea:2e: 35:a3:9b:ee:f1:cb:b4:82:1b:1f:3b:84:5a:a8:f1:b4:06:76: b9:5f:83:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVklHqqj/oRAETgL7g7dfH7QBbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNjAxMzEyMjM3MzBaFw0yNjAyMDQwODM5MzBaMDMxMTAvBgNV BAMTKDY2NjZFMDJDNjZBNUJBMTdBMTFCMTEzNzZGQTI4QkM2NkIxNzY1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4h6KCAqhuoOIcPD5ZPU4XQj6a O6ncwEMlI8aPp9l5eo8Wabo3dxmAbD/RcPIxkhqz6xu/xQ22wcJdz8qg43oa8d6u jytCYuG7XhzLOgAOuFyYf8X+sgDYt5eM0Xgv983hhRkiaviWx25KbndObsXOcDjJ ldKXjAeVybMx9R6102aL+LYgfLROHy/JDxlQAG8/U2iZkwnPRhZipNT/9fz5Ny7h pb6R3ZtdjY+9ddV2iZ4AWlrgvVIj3hHKA45ebufkL4C9cqVFJeEazazQbtjU5/DB MQoecQDjmucSXgnw93hWICMDmDM1lNpRKZmZfHkrVFyRmR0nLx9EUYpYa0sZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmbgLGaluhehGxE3b6KLxmsXZXQwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ01GMA/UYXbjVS9rKkm/+MxRvBr4gpEAlQt 1rL85AsCiTw0U2zEt4Ie7ZWiHW7v4kvccK2jQOvukAhS7h8Wn5et+5RW0rxEn/no ar37HC15m+2YnScoAmf7O4HOWooPO5N0H5uguaS3C3fo5vVngybJNSggeuoO5BRD 5tlUYUZis95mYEuVMry1Jee84oLPQ4vezY2a8zHR6Fqda0EZqqMla+Z6/U7++Zy9 gnIqyV4OSfHRVtiQvocDMCgHa9CBXjZYVa8QRJxIDgLewSR/Az37+NZVhBiEFayE Fv6LlMfQdsJHBHJorbLqLjWjm+7xy7SCGx87hFqo8bQGdrlfg84= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:53 2026 by rpki-client