This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: xRzrAiZpumrf4UfrD9NEyOaOMH43R2BanVniK9KGVE4= Subject key identifier: BF:E7:84:62:C3:4A:F0:D9:13:D8:46:64:AC:9D:DA:80:8D:F3:72:A6 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 4BFBA75132CE6FC786C37FE583F04B24BA119A10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03DA Signing time: Tue 02 Dec 2025 20:01:15 +0000 Manifest this update: Tue 02 Dec 2025 19:56:15 +0000 Manifest next update: Sat 06 Dec 2025 02:09:15 +0000 Files and hashes: 1: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: PFJgOGS+IA4Ou841U4XCmhJl0mVbiSkqhH86dRuCBcQ=) 2: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fb:a7:51:32:ce:6f:c7:86:c3:7f:e5:83:f0:4b:24:ba:11:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Dec 2 19:56:15 2025 GMT Not After : Dec 6 02:09:15 2025 GMT Subject: CN=BFE78462C34AF0D913D84664AC9DDA808DF372A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:88:a6:f7:a8:b5:22:f2:8f:53:04:00:87: d3:4e:ad:44:05:fe:c2:12:d4:76:51:da:4c:d1:24: ed:83:91:a4:1d:12:7d:bb:b0:e3:8b:d4:74:d8:73: 15:ea:87:1e:fb:93:6f:d0:22:a5:c4:e2:b3:11:91: 2a:1a:b3:c0:55:98:55:5c:8a:c8:59:4e:1d:08:10: ef:1a:44:62:53:3e:5f:49:46:7a:fa:45:51:c8:53: a3:c3:1f:3f:42:f5:db:b0:2f:91:72:2f:93:73:e5: 69:d4:f2:d5:16:9c:30:8d:e9:7d:8b:d0:f5:91:fb: aa:03:20:0f:55:ee:4d:e3:da:0d:51:22:6e:fc:92: 64:80:97:91:e3:b1:b0:7b:d7:30:91:77:67:1d:fe: 7d:b6:b3:ae:b5:45:7e:1b:a5:37:7b:2b:b3:ad:02: 50:09:ca:9d:f9:46:89:0c:eb:e3:b4:03:04:57:dc: 5c:08:04:0e:01:e5:98:a2:08:e7:40:82:38:5c:83: ef:2e:48:0c:1d:2a:5a:ec:7b:b6:6b:27:4b:b6:cc: b9:3e:bb:8b:e3:67:3e:b7:e2:4b:be:26:a5:42:98: 09:c6:92:d8:49:ea:1c:98:d2:ba:73:b6:e6:3f:3b: 85:8a:07:2f:54:7a:5b:8e:b5:aa:4a:0e:43:e8:1e: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E7:84:62:C3:4A:F0:D9:13:D8:46:64:AC:9D:DA:80:8D:F3:72:A6 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:1d:b4:0f:98:53:8a:0b:52:11:ad:81:d7:cb:6c:a5:7f: fb:a6:43:e5:5b:f4:d5:be:b3:5a:9a:72:49:ce:0b:d6:fb:b2: c7:89:30:9a:cf:12:8d:5b:21:c2:45:5f:8a:12:a4:c1:a5:12: 01:e2:89:3e:30:e3:a4:e5:95:9d:16:c3:1c:81:b6:97:ef:07: 18:45:75:91:fa:fd:51:59:42:a4:6c:ac:9c:f7:b9:c1:c8:95: 14:b2:e3:bb:d0:a1:40:b2:fb:84:eb:2e:f0:dd:a1:ad:8a:11: db:e8:a1:0b:33:55:9c:6b:a0:72:2e:5e:99:b7:53:c2:bb:53: 5e:2b:38:10:3f:26:be:a1:a4:7e:45:6b:f1:1b:d7:7f:09:7e: a5:68:a8:1c:a3:2b:65:e3:6b:c2:2a:df:af:7c:c4:a5:de:93: f2:79:22:1b:4d:80:13:4f:a6:e4:2e:8a:77:41:13:80:72:2a: 8e:36:aa:14:8f:37:a0:60:40:b4:a4:ce:d9:bd:9e:13:d5:25: 6d:1f:4f:26:33:62:e3:8e:1c:f2:99:46:38:b9:9d:f7:bb:d4: c3:90:76:15:5f:9e:fb:bf:43:47:9e:c7:f7:cf:76:ff:d8:89: a0:5c:f8:8c:27:aa:98:6d:bb:c0:d7:e3:22:a9:ba:8f:03:2a: f4:fd:06:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/unUTLOb8eGw3/lg/BLJLoRmhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTEyMDIxOTU2MTVaFw0yNTEyMDYwMjA5MTVaMDMxMTAvBgNV BAMTKEJGRTc4NDYyQzM0QUYwRDkxM0Q4NDY2NEFDOUREQTgwOERGMzcyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghoim96i1IvKPUwQAh9NOrUQF /sIS1HZR2kzRJO2DkaQdEn27sOOL1HTYcxXqhx77k2/QIqXE4rMRkSoas8BVmFVc ishZTh0IEO8aRGJTPl9JRnr6RVHIU6PDHz9C9duwL5FyL5Nz5WnU8tUWnDCN6X2L 0PWR+6oDIA9V7k3j2g1RIm78kmSAl5HjsbB71zCRd2cd/n22s661RX4bpTd7K7Ot AlAJyp35RokM6+O0AwRX3FwIBA4B5ZiiCOdAgjhcg+8uSAwdKlrse7ZrJ0u2zLk+ u4vjZz634ku+JqVCmAnGkthJ6hyY0rpztuY/O4WKBy9UeluOtapKDkPoHoHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+eEYsNK8NkT2EZkrJ3agI3zcqYwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/xHbQPmFOKC1IRrYHXy2ylf/umQ+Vb9NW+ s1qacknOC9b7sseJMJrPEo1bIcJFX4oSpMGlEgHiiT4w46TllZ0WwxyBtpfvBxhF dZH6/VFZQqRsrJz3ucHIlRSy47vQoUCy+4TrLvDdoa2KEdvooQszVZxroHIuXpm3 U8K7U14rOBA/Jr6hpH5Fa/Eb138JfqVoqByjK2Xja8Iq3698xKXek/J5IhtNgBNP puQuindBE4ByKo42qhSPN6BgQLSkztm9nhPVJW0fTyYzYuOOHPKZRji5nfe71MOQ dhVfnvu/Q0eex/fPdv/YiaBc+Iwnqphtu8DX4yKpuo8DKvT9Brc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:47 2025 by rpki-client