This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: RKH5mkA6iFRpCZY7dHysyvPAwr7x7fEHheumBYVPzdI= Subject key identifier: D1:44:1F:FC:34:C9:9D:57:21:56:A3:C4:27:7D:93:AC:10:89:86:41 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 4A62A1AD908D635C75F2E06C1F6E8F567E0416A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 021A Signing time: Wed 03 Dec 2025 12:22:23 +0000 Manifest this update: Wed 03 Dec 2025 12:17:23 +0000 Manifest next update: Sat 06 Dec 2025 16:33:23 +0000 Files and hashes: 1: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: lqeh2Q+WEb4odo4dnMe+/sE8HaN+Rjn+s8xw6df1FxU=) 2: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) 3: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: lpSwfmAmKL23RbErKtEZj4srMqeOQng2UqSoQbv0+GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:62:a1:ad:90:8d:63:5c:75:f2:e0:6c:1f:6e:8f:56:7e:04:16:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Dec 3 12:17:23 2025 GMT Not After : Dec 6 16:33:23 2025 GMT Subject: CN=D1441FFC34C99D572156A3C4277D93AC10898641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:8c:18:f1:2a:ea:26:54:bd:24:40:45:c7: 1a:0f:91:e9:c1:5e:6d:f0:b0:e5:02:08:f3:37:50: b4:e6:d4:ab:42:94:0a:c9:0e:b9:2e:92:12:25:9f: 00:ca:41:70:eb:95:f3:40:44:98:54:fd:02:91:18: bf:d8:25:f4:75:f4:fc:ba:e9:24:39:41:e6:8c:4f: 0b:7e:cf:be:5f:97:f4:f7:df:18:61:0a:17:52:a1: c4:00:75:9c:85:3f:32:69:4b:b8:94:68:e1:f2:9d: 14:eb:3c:09:de:87:f5:21:e8:25:aa:35:e1:8b:11: 32:b7:4b:3a:cc:7d:8a:f1:ac:28:08:99:03:8e:4b: ba:14:13:e5:72:46:9e:ce:05:d1:8f:9b:33:ba:d4: 2c:04:4b:ca:41:17:15:7b:d1:05:4a:57:96:26:d1: 2d:e4:5e:d7:ae:3a:b3:c5:19:56:40:97:1b:02:2b: bc:69:a7:7f:e4:a6:c8:8e:1a:a5:90:6d:c8:75:e9: 26:63:fd:c0:7b:1e:4f:ee:ac:88:c8:d3:7f:e1:cf: 8a:78:16:55:e7:78:be:9e:cd:1d:f9:4e:a8:8c:3b: a4:5a:53:e7:1c:f5:f1:a8:de:62:81:d4:63:1f:70: 1d:02:c0:6c:6d:75:5f:07:7e:71:f7:05:fa:98:11: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:44:1F:FC:34:C9:9D:57:21:56:A3:C4:27:7D:93:AC:10:89:86:41 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:06:e4:8e:b8:63:49:2a:48:02:88:a1:c9:1a:68:f2:b7:11: 8b:3f:1e:6b:72:84:9d:52:61:e8:51:84:ac:70:a0:05:11:b4: 3a:60:07:59:eb:db:62:e6:94:0d:44:f5:cc:88:0f:e5:ca:64: 37:77:32:70:9b:08:9e:77:ea:b9:33:6b:b0:89:d6:c4:06:04: 67:c4:16:fe:a3:df:c7:32:1a:9d:b1:fc:23:b0:08:42:83:e6: f3:4c:53:8c:b5:37:a3:86:75:6f:4b:68:15:b7:03:a2:68:b4: 1e:11:95:47:75:01:32:2d:9e:8e:42:e6:b9:74:a4:16:c2:a7: d1:ed:ff:fa:57:c7:f6:9f:89:e8:1b:59:cd:e9:49:fa:19:63: e4:6e:b0:08:d6:ad:df:34:93:dc:61:7c:d5:49:40:37:75:a9: 41:02:d1:1d:a9:bd:84:fb:02:5a:15:2d:10:e9:b6:f4:7f:9b: 1b:c3:17:cf:66:aa:55:bc:6f:35:bd:cd:e0:e7:a0:59:51:32: 9f:dc:fd:3d:39:7f:90:7c:27:ba:1e:e9:11:03:a4:e9:26:2d: 3f:81:36:cd:bc:b9:2d:a9:59:0b:d1:9f:5d:c5:ce:09:fd:7f: bd:59:41:c4:13:1f:f2:db:1e:65:97:04:56:1e:66:0e:8e:5a: 23:35:85:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSmKhrZCNY1x18uBsH26PVn4EFqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTEyMDMxMjE3MjNaFw0yNTEyMDYxNjMzMjNaMDMxMTAvBgNV BAMTKEQxNDQxRkZDMzRDOTlENTcyMTU2QTNDNDI3N0Q5M0FDMTA4OTg2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkowY8SrqJlS9JEBFxxoPkenB Xm3wsOUCCPM3ULTm1KtClArJDrkukhIlnwDKQXDrlfNARJhU/QKRGL/YJfR19Py6 6SQ5QeaMTwt+z75fl/T33xhhChdSocQAdZyFPzJpS7iUaOHynRTrPAneh/Uh6CWq NeGLETK3SzrMfYrxrCgImQOOS7oUE+VyRp7OBdGPmzO61CwES8pBFxV70QVKV5Ym 0S3kXteuOrPFGVZAlxsCK7xpp3/kpsiOGqWQbch16SZj/cB7Hk/urIjI03/hz4p4 FlXneL6ezR35TqiMO6RaU+cc9fGo3mKB1GMfcB0CwGxtdV8HfnH3BfqYEV/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UQf/DTJnVchVqPEJ32TrBCJhkEwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAG5I64Y0kqSAKIockaaPK3EYs/HmtyhJ1S YehRhKxwoAURtDpgB1nr22LmlA1E9cyID+XKZDd3MnCbCJ536rkza7CJ1sQGBGfE Fv6j38cyGp2x/COwCEKD5vNMU4y1N6OGdW9LaBW3A6JotB4RlUd1ATItno5C5rl0 pBbCp9Ht//pXx/afiegbWc3pSfoZY+RusAjWrd80k9xhfNVJQDd1qUEC0R2pvYT7 AloVLRDptvR/mxvDF89mqlW8bzW9zeDnoFlRMp/c/T05f5B8J7oe6REDpOkmLT+B Ns28uS2pWQvRn13Fzgn9f71ZQcQTH/LbHmWXBFYeZg6OWiM1hY0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:08 2025 by rpki-client