This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: SK45PzrRP48ajFgE/X4xWJ9FfyBe4l5FWmmzSRwk+iQ= Subject key identifier: 46:B2:F2:0C:47:D6:B4:21:A2:33:24:AD:53:B0:CC:41:F9:35:2E:12 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 2A1E40661D7359C7CD1697A09135E01ADFD4D09C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 0220 Signing time: Wed 17 Dec 2025 02:12:22 +0000 Manifest this update: Wed 17 Dec 2025 02:07:22 +0000 Manifest next update: Sat 20 Dec 2025 11:31:22 +0000 Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: lpSwfmAmKL23RbErKtEZj4srMqeOQng2UqSoQbv0+GE=) 2: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: n6BdXrsRWxVORiQcam9uAEWpkYAz46DmQZr/UGRNHPw=) 3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1e:40:66:1d:73:59:c7:cd:16:97:a0:91:35:e0:1a:df:d4:d0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Dec 17 02:07:22 2025 GMT Not After : Dec 20 11:31:22 2025 GMT Subject: CN=46B2F20C47D6B421A23324AD53B0CC41F9352E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:d7:40:5d:e1:46:84:57:ca:12:82:f8:8a: 87:95:f3:0f:11:1b:47:b1:56:18:b8:09:85:ca:fc: 4b:d9:cb:d1:26:55:0f:7c:c7:4e:5e:cf:d8:f4:1d: 1a:d6:a1:3d:6e:5e:86:31:fa:32:90:73:57:f7:a4: ed:61:c8:73:f3:4a:9e:90:18:11:65:dc:33:62:6a: 9c:67:2d:d2:58:e7:c1:16:31:a8:65:cc:22:c4:45: 64:35:13:4f:ab:9a:d1:92:44:2e:c0:cf:2a:f6:68: da:56:0a:e1:f0:fe:08:1a:5b:79:cd:81:82:61:89: 3a:9f:6e:d9:27:67:63:58:a0:e4:f5:61:89:84:60: aa:47:7a:17:56:3e:86:96:ff:bb:9a:7e:c7:8b:9c: 8b:22:a4:28:e1:9b:5b:36:3f:8f:e5:0d:68:6b:69: 37:1b:60:2f:13:27:f3:f5:b2:13:db:07:f7:f8:9d: 4b:db:4b:f0:80:82:91:db:e4:bd:de:4e:d0:ba:21: e7:c3:37:f4:86:47:c6:97:28:7a:9d:cd:c3:3d:74: 4b:eb:f4:98:0b:13:5f:55:01:c2:69:5a:cc:d6:63: 5b:6c:21:25:5d:9f:66:4c:80:1f:ce:33:14:7d:08: f3:c0:e4:23:8b:e7:b8:d1:6b:f9:96:ba:0b:77:cd: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B2:F2:0C:47:D6:B4:21:A2:33:24:AD:53:B0:CC:41:F9:35:2E:12 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5f:5b:0c:00:83:4b:e9:a0:fd:f3:12:c7:54:b5:bc:03:19: 17:26:06:11:99:e8:28:68:c7:4b:a4:e2:dc:7c:57:27:d1:b6: 66:55:e1:b8:c6:3e:20:97:be:a3:e7:16:73:cf:83:fc:4f:c3: e3:07:24:3f:52:e3:41:74:5a:26:87:b8:b9:57:33:06:ab:2f: 5a:37:8b:da:ec:fa:5e:a1:83:d9:d1:63:dd:69:a6:fe:91:f8: 45:6b:b3:a5:42:53:c7:7b:95:b0:87:3e:f6:af:bd:28:2a:8a: e8:57:4f:dd:bf:8e:cd:7e:32:2f:5c:aa:0c:8c:3d:f4:4d:d9: 37:76:93:88:b3:26:79:b8:f6:63:51:39:4e:e7:58:81:86:97: 56:04:39:1f:76:3b:b9:17:a7:ea:93:57:94:db:6b:99:1f:0d: cc:d7:a3:56:b7:f7:b4:a7:ea:09:bb:3b:be:2c:a6:87:9f:c1: 43:55:22:05:68:fc:cc:e5:de:ee:27:be:a3:bc:22:98:02:9e: 90:e4:4b:b5:5f:55:1c:65:71:4c:12:97:82:db:7a:e9:8f:85: a2:8e:17:9d:70:45:49:e6:11:fd:83:c9:d5:fd:f2:c1:98:8e: e9:0b:fd:a2:b9:b9:f8:88:51:17:a5:98:06:21:cd:b3:a7:1e: 98:53:cb:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKh5AZh1zWcfNFpegkTXgGt/U0JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTEyMTcwMjA3MjJaFw0yNTEyMjAxMTMxMjJaMDMxMTAvBgNV BAMTKDQ2QjJGMjBDNDdENkI0MjFBMjMzMjRBRDUzQjBDQzQxRjkzNTJFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqB9dAXeFGhFfKEoL4ioeV8w8R G0exVhi4CYXK/EvZy9EmVQ98x05ez9j0HRrWoT1uXoYx+jKQc1f3pO1hyHPzSp6Q GBFl3DNiapxnLdJY58EWMahlzCLERWQ1E0+rmtGSRC7Azyr2aNpWCuHw/ggaW3nN gYJhiTqfbtknZ2NYoOT1YYmEYKpHehdWPoaW/7uafseLnIsipCjhm1s2P4/lDWhr aTcbYC8TJ/P1shPbB/f4nUvbS/CAgpHb5L3eTtC6IefDN/SGR8aXKHqdzcM9dEvr 9JgLE19VAcJpWszWY1tsISVdn2ZMgB/OMxR9CPPA5COL57jRa/mWugt3zY2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrLyDEfWtCGiMyStU7DMQfk1LhIwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5fWwwAg0vpoP3zEsdUtbwDGRcmBhGZ6Cho x0uk4tx8VyfRtmZV4bjGPiCXvqPnFnPPg/xPw+MHJD9S40F0WiaHuLlXMwarL1o3 i9rs+l6hg9nRY91ppv6R+EVrs6VCU8d7lbCHPvavvSgqiuhXT92/js1+Mi9cqgyM PfRN2Td2k4izJnm49mNROU7nWIGGl1YEOR92O7kXp+qTV5Tba5kfDczXo1a397Sn 6gm7O74spoefwUNVIgVo/Mzl3u4nvqO8IpgCnpDkS7VfVRxlcUwSl4LbeumPhaKO F51wRUnmEf2DydX98sGYjukL/aK5ufiIURelmAYhzbOnHphTyyo= -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:23 2025 by rpki-client