This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: c9+Cg1D+f9FT6wM7L4WqJvj74Kt+aoQtR5NFkIhhk+g= Subject key identifier: 1B:EE:2E:5E:D5:98:83:40:3C:89:83:F3:95:35:9B:12:A6:44:8C:81 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 63C57261F2563AB5739DFF87DB2DFBDC5727D3C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: B5 Signing time: Wed 03 Dec 2025 12:01:33 +0000 Manifest this update: Wed 03 Dec 2025 11:56:33 +0000 Manifest next update: Sat 06 Dec 2025 23:09:33 +0000 Files and hashes: 1: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 2: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 4: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: IUaB54jzTwhBWmDuuo0qpws9dZ91fHajBk7IK24ZDTE=) 5: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 6: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 8: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c5:72:61:f2:56:3a:b5:73:9d:ff:87:db:2d:fb:dc:57:27:d3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Dec 3 11:56:33 2025 GMT Not After : Dec 6 23:09:33 2025 GMT Subject: CN=1BEE2E5ED59883403C8983F395359B12A6448C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e3:dd:c8:f7:50:60:54:df:fc:e4:90:74:28: 17:fa:13:c2:4c:dd:e5:39:c8:03:f9:03:eb:b1:7e: c1:5f:35:9d:d3:8e:f4:3e:e9:19:d1:93:12:36:89: 3b:ff:b7:45:41:01:59:b3:66:37:81:bf:3f:ec:9f: 72:b3:7d:f4:bb:1e:60:03:15:59:49:cd:8f:9e:a9: e6:9b:9d:99:15:d3:70:a0:e3:ec:58:e4:ea:a2:95: 52:6c:88:64:74:7a:88:58:fd:02:2d:59:62:5b:34: 46:1f:5b:7e:c2:5a:28:05:9c:59:80:2d:41:80:bd: 2b:06:71:e6:5e:59:ab:1f:f9:2e:de:ae:68:9c:f9: fc:2f:06:c3:bb:3a:16:65:5a:cc:dc:2e:7b:b5:4d: da:e8:38:5b:85:72:33:e7:ab:07:58:4a:45:ed:37: c9:e7:66:1c:e3:73:0a:8c:4a:34:54:d5:7e:8e:cb: 0e:e0:13:53:e7:bf:8c:85:f3:ef:aa:9b:94:29:d2: 71:3e:ad:92:9b:12:15:f7:39:37:7b:62:50:9d:d8: c3:a8:a5:2d:10:32:97:78:3c:af:2a:87:ab:d4:b6: 47:d4:8b:ec:d2:18:72:72:a7:b3:58:38:2d:a8:64: 73:b8:bf:84:f0:2b:22:13:76:73:d1:e9:a0:0c:94: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EE:2E:5E:D5:98:83:40:3C:89:83:F3:95:35:9B:12:A6:44:8C:81 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:03:e6:ff:ec:10:27:db:b0:66:22:33:79:33:dd:80:9f:1c: df:d1:a8:6a:7d:75:94:84:2d:3a:10:c6:cf:a5:f4:e1:8b:b0: 8e:88:0c:82:74:ac:9f:cf:6f:f5:14:89:18:25:9d:ac:05:33: e5:5a:cd:11:89:1d:bf:c1:a7:16:5f:f9:79:4b:5f:db:be:9e: 12:30:67:b5:98:21:fd:12:9a:b8:0c:b8:d5:94:d0:48:af:c9: b6:f5:b4:e5:57:70:59:80:f8:fa:26:b1:ce:9a:73:67:f9:d3: 2e:c8:7e:40:15:42:93:7a:35:65:40:57:89:6a:2c:22:a0:6b: b2:9d:76:03:6d:0e:73:50:c7:24:51:5a:31:08:8d:e8:03:94: a6:7e:7b:21:05:e3:c3:40:ba:87:e4:0d:a2:1f:06:96:3b:96: 9f:e5:af:ab:90:24:75:2e:f2:27:f3:d7:37:d0:37:89:25:7d: 6b:f5:fe:f7:22:ec:ea:d1:c4:6b:f2:98:e2:27:4d:40:e8:4a: 96:da:d0:2e:f0:1a:34:ca:09:c4:b5:8a:44:42:56:98:37:af: a3:69:20:ef:6e:36:8c:78:5b:1a:45:ac:16:eb:54:04:52:45: 0a:7f:6e:34:89:00:7a:f6:9e:85:a2:23:48:a1:bd:74:bb:0c: 20:57:5a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8VyYfJWOrVznf+H2y373Fcn08IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTEyMDMxMTU2MzNaFw0yNTEyMDYyMzA5MzNaMDMxMTAvBgNV BAMTKDFCRUUyRTVFRDU5ODgzNDAzQzg5ODNGMzk1MzU5QjEyQTY0NDhDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl493I91BgVN/85JB0KBf6E8JM 3eU5yAP5A+uxfsFfNZ3TjvQ+6RnRkxI2iTv/t0VBAVmzZjeBvz/sn3KzffS7HmAD FVlJzY+eqeabnZkV03Cg4+xY5OqilVJsiGR0eohY/QItWWJbNEYfW37CWigFnFmA LUGAvSsGceZeWasf+S7ermic+fwvBsO7OhZlWszcLnu1TdroOFuFcjPnqwdYSkXt N8nnZhzjcwqMSjRU1X6Oyw7gE1Pnv4yF8++qm5Qp0nE+rZKbEhX3OTd7YlCd2MOo pS0QMpd4PK8qh6vUtkfUi+zSGHJyp7NYOC2oZHO4v4TwKyITdnPR6aAMlIynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+4uXtWYg0A8iYPzlTWbEqZEjIEwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABED5v/sECfbsGYiM3kz3YCfHN/RqGp9dZSE LToQxs+l9OGLsI6IDIJ0rJ/Pb/UUiRglnawFM+VazRGJHb/BpxZf+XlLX9u+nhIw Z7WYIf0SmrgMuNWU0Eivybb1tOVXcFmA+Pomsc6ac2f50y7IfkAVQpN6NWVAV4lq LCKga7KddgNtDnNQxyRRWjEIjegDlKZ+eyEF48NAuofkDaIfBpY7lp/lr6uQJHUu 8ifz1zfQN4klfWv1/vci7OrRxGvymOInTUDoSpba0C7wGjTKCcS1ikRCVpg3r6Np IO9uNox4WxpFrBbrVARSRQp/bjSJAHr2noWiI0ihvXS7DCBXWmg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:56 2025 by rpki-client