This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: sjDHkJqJmh2B4ohckg683a9otzA1BoDvYix+vLtkY2w= Subject key identifier: E4:71:28:86:D7:11:BB:DB:98:BA:10:E8:F6:5F:95:38:2B:C7:CA:4C Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 7E54BFCEBB034ACAA1B362C117F981FFA4265B9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01B8 Signing time: Wed 17 Dec 2025 23:01:01 +0000 Manifest this update: Wed 17 Dec 2025 22:56:01 +0000 Manifest next update: Sun 21 Dec 2025 08:23:01 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: 9bd//g79PhVBv4tg5bp0KvRejaq7wJAXURXa/MhGl7U=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 3: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:54:bf:ce:bb:03:4a:ca:a1:b3:62:c1:17:f9:81:ff:a4:26:5b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Dec 17 22:56:01 2025 GMT Not After : Dec 21 08:23:01 2025 GMT Subject: CN=E4712886D711BBDB98BA10E8F65F95382BC7CA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:f3:c9:8c:b4:4a:62:cc:54:b0:cc:59:3a: d6:59:4f:f2:17:ab:7a:98:1f:4a:d2:e7:ed:d5:ef: ed:f6:83:04:57:3e:3f:14:3c:15:72:bb:70:c1:87: 34:dd:4b:c7:48:8e:b5:d5:5c:92:83:dd:d6:1a:b4: 33:e8:41:df:fd:4a:1c:ac:f4:6a:3a:28:b8:88:5e: 49:b5:29:da:e2:ba:5b:9f:02:e0:83:01:c6:33:77: 5f:18:a8:f3:f4:60:c9:8a:30:9c:88:d9:b4:23:9f: 52:12:e5:7b:e8:da:dd:e2:9e:01:98:75:a8:71:26: 12:f1:ef:e5:bc:e1:27:1d:f7:91:11:86:fb:d3:b1: aa:03:ec:8b:14:e3:da:2b:5b:7b:76:e2:e2:bf:68: fb:1e:f6:bf:fa:c6:52:50:72:48:49:f9:1c:10:99: 33:f5:e7:15:a4:34:d6:8e:7e:c9:22:4f:8a:87:ec: 41:20:c9:28:73:57:a7:95:90:d6:a3:2a:d6:65:25: 09:1b:b8:b1:e1:ee:59:70:55:4f:83:eb:76:c2:d3: e9:c1:84:15:9c:11:e7:7d:de:56:b1:d2:35:67:87: 1a:84:c6:d7:55:7a:f4:b5:e3:94:78:45:6f:cf:d9: 0f:fb:40:eb:69:f9:35:b4:d4:47:11:f3:8b:88:ab: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:28:86:D7:11:BB:DB:98:BA:10:E8:F6:5F:95:38:2B:C7:CA:4C X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c9:8a:21:79:fa:9a:14:ef:7a:16:8d:99:5b:76:36:cd:3a: 3c:42:a6:4e:78:88:b6:84:93:44:a3:cc:cd:86:b9:86:06:62: a4:b5:4a:40:83:1b:8c:f6:dc:fb:d8:a3:97:c4:69:da:90:81: 37:77:db:72:a8:64:28:2c:f1:04:af:93:07:83:9b:c2:ce:2c: a0:07:05:5a:9b:11:bf:50:cb:5a:44:3a:f2:19:2f:b7:0f:e2: 21:8a:43:31:be:0d:9c:f4:40:6a:cf:99:ae:e9:eb:29:7a:e1: 01:ca:9f:1f:95:d9:f3:40:7b:6c:0f:cd:8e:f0:fa:1d:fc:02: b3:00:79:d7:8e:5b:15:10:55:0c:ac:3d:92:bb:71:ec:fb:1d: e0:ea:cb:7e:65:8b:6d:62:da:73:f7:90:55:5f:30:76:0a:f9: 9b:f4:33:8a:c5:29:0e:10:d5:b4:a6:ca:8a:0e:63:00:dd:70: 5d:ea:2f:2a:42:fa:94:8a:e2:68:07:89:a7:fb:cd:86:12:e8: 06:e6:48:50:09:30:7f:f9:e3:80:3c:23:e8:9a:6e:25:6d:16: c6:33:47:b5:d7:03:22:c2:8f:1d:ca:96:ec:a0:bf:d3:90:a1: 77:9f:4e:db:89:1c:fa:d4:f5:0b:86:2f:d4:d8:a8:24:6f:76: 9b:57:47:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflS/zrsDSsqhs2LBF/mB/6QmW5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTEyMTcyMjU2MDFaFw0yNTEyMjEwODIzMDFaMDMxMTAvBgNV BAMTKEU0NzEyODg2RDcxMUJCREI5OEJBMTBFOEY2NUY5NTM4MkJDN0NBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKvPJjLRKYsxUsMxZOtZZT/IX q3qYH0rS5+3V7+32gwRXPj8UPBVyu3DBhzTdS8dIjrXVXJKD3dYatDPoQd/9Shys 9Go6KLiIXkm1KdriulufAuCDAcYzd18YqPP0YMmKMJyI2bQjn1IS5Xvo2t3ingGY dahxJhLx7+W84Scd95ERhvvTsaoD7IsU49orW3t24uK/aPse9r/6xlJQckhJ+RwQ mTP15xWkNNaOfskiT4qH7EEgyShzV6eVkNajKtZlJQkbuLHh7llwVU+D63bC0+nB hBWcEed93lax0jVnhxqExtdVevS145R4RW/P2Q/7QOtp+TW01EcR84uIq42RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5HEohtcRu9uYuhDo9l+VOCvHykwwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArJiiF5+poU73oWjZlbdjbNOjxCpk54iLaE k0SjzM2GuYYGYqS1SkCDG4z23PvYo5fEadqQgTd323KoZCgs8QSvkweDm8LOLKAH BVqbEb9Qy1pEOvIZL7cP4iGKQzG+DZz0QGrPma7p6yl64QHKnx+V2fNAe2wPzY7w +h38ArMAedeOWxUQVQysPZK7cez7HeDqy35li21i2nP3kFVfMHYK+Zv0M4rFKQ4Q 1bSmyooOYwDdcF3qLypC+pSK4mgHiaf7zYYS6AbmSFAJMH/544A8I+iabiVtFsYz R7XXAyLCjx3Kluygv9OQoXefTtuJHPrU9QuGL9TYqCRvdptXR9w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:17 2025 by rpki-client