This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: T8RjK8bRGD4uQdTFk9I4strwGL1n4ZMsssql9YxOxNg= Subject key identifier: 09:45:4D:D7:FF:77:A7:28:E4:C1:8F:38:07:88:9F:EE:3B:23:73:D1 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 7FF25141AD925DC001A4EF5334D676D637FDE00D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: B9 Signing time: Sat 13 Dec 2025 10:51:30 +0000 Manifest this update: Sat 13 Dec 2025 10:46:30 +0000 Manifest next update: Tue 16 Dec 2025 12:42:30 +0000 Files and hashes: 1: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 2: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: 4uhE8u6dFeY4EEvm8+m061+E0JID8+g/b+iCmPRXqtg=) 3: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 4: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 5: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 7: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 8: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 12:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f2:51:41:ad:92:5d:c0:01:a4:ef:53:34:d6:76:d6:37:fd:e0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Dec 13 10:46:30 2025 GMT Not After : Dec 16 12:42:30 2025 GMT Subject: CN=09454DD7FF77A728E4C18F3807889FEE3B2373D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:3d:44:51:f8:dd:0d:ef:53:f6:08:eb:67: 9a:1f:ac:31:21:0f:ae:10:cc:22:7d:9c:d8:09:5e: 0a:ed:ac:a0:43:f3:70:bb:1f:13:f4:7f:02:42:e0: f2:21:82:6b:52:6d:11:b3:ff:94:53:0f:58:e8:8d: fc:d5:50:b9:d1:c9:f3:dc:0a:85:5f:b8:be:37:75: 71:18:63:ce:a5:0b:4f:e4:eb:f7:bc:e6:9e:49:a2: be:81:a0:e2:e5:aa:49:21:3f:57:c0:06:9a:44:ab: 1f:34:5b:08:bf:b1:55:91:9c:25:f5:c5:31:33:30: 42:08:d5:f3:16:5f:1a:3f:b4:93:79:d7:da:ab:78: d7:f8:84:9c:5e:68:50:94:2a:b5:27:8b:80:2c:8b: 59:0d:a5:96:00:fe:f2:99:b1:53:91:7d:f2:6a:f8: 6a:a5:01:58:21:3c:e6:0f:9c:56:3d:b7:f9:43:a9: af:3a:ef:48:61:17:4d:f2:67:c8:96:7c:1f:c2:a4: 36:4f:c4:8d:dd:47:c3:55:95:4b:bc:d3:44:57:06: ab:0e:31:4b:09:f9:97:e8:c5:c2:91:3e:0b:8b:66: 95:a6:e2:59:b5:0b:6b:56:4d:0e:3f:a7:29:f5:b7: b7:44:d7:0d:b9:43:73:1e:87:85:4f:61:7a:48:18: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:45:4D:D7:FF:77:A7:28:E4:C1:8F:38:07:88:9F:EE:3B:23:73:D1 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:ea:53:94:8f:b1:d5:24:55:66:01:42:ce:75:5e:b8:15: 1b:e7:17:66:d3:b3:34:a9:32:22:b1:ed:a8:f7:3e:80:9e:65: a1:22:76:c2:a5:73:90:04:84:c7:0f:6a:a8:97:71:07:72:0e: 42:cb:97:29:b1:b1:10:4c:a5:5f:6c:5b:b8:8b:d8:20:f6:09: 70:2e:d2:0c:8d:00:94:74:1e:c4:d8:8f:91:1e:13:20:24:73: 8d:85:42:37:b1:28:b6:1f:ac:d6:d6:44:aa:12:17:43:bc:80: ce:b6:99:71:83:07:ee:36:8d:24:d2:ab:45:50:a8:4b:a8:6a: 25:e3:a2:b6:05:3a:37:31:f3:a4:91:f6:81:e9:ac:2f:f3:e0: cb:9a:92:88:34:4c:f1:6a:e7:52:52:ea:90:98:06:31:cd:73: 77:f4:3b:a0:56:28:2c:33:36:7a:1e:c7:08:19:88:c7:72:b3: 95:4d:48:6a:10:e0:42:9c:45:8f:25:c7:55:de:a9:69:c1:6f: 04:64:25:a4:5d:49:73:d0:57:6a:ea:5e:86:44:03:af:d1:55: 32:59:86:6f:45:d9:e5:fc:89:46:a9:ea:a5:38:2f:ae:55:4a: 8d:9f:58:26:68:09:b5:95:6f:6f:26:5e:71:17:0d:a6:f2:bf: 6a:fd:8e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/JRQa2SXcABpO9TNNZ21jf94A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTEyMTMxMDQ2MzBaFw0yNTEyMTYxMjQyMzBaMDMxMTAvBgNV BAMTKDA5NDU0REQ3RkY3N0E3MjhFNEMxOEYzODA3ODg5RkVFM0IyMzczRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3T1EUfjdDe9T9gjrZ5ofrDEh D64QzCJ9nNgJXgrtrKBD83C7HxP0fwJC4PIhgmtSbRGz/5RTD1jojfzVULnRyfPc CoVfuL43dXEYY86lC0/k6/e85p5Jor6BoOLlqkkhP1fABppEqx80Wwi/sVWRnCX1 xTEzMEII1fMWXxo/tJN519qreNf4hJxeaFCUKrUni4Asi1kNpZYA/vKZsVORffJq +GqlAVghPOYPnFY9t/lDqa8670hhF03yZ8iWfB/CpDZPxI3dR8NVlUu800RXBqsO MUsJ+ZfoxcKRPguLZpWm4lm1C2tWTQ4/pyn1t7dE1w25Q3Meh4VPYXpIGA8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUVN1/93pyjkwY84B4if7jsjc9EwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo96lOUj7HVJFVmAULOdV64FRvnF2bTszSp MiKx7aj3PoCeZaEidsKlc5AEhMcPaqiXcQdyDkLLlymxsRBMpV9sW7iL2CD2CXAu 0gyNAJR0HsTYj5EeEyAkc42FQjexKLYfrNbWRKoSF0O8gM62mXGDB+42jSTSq0VQ qEuoaiXjorYFOjcx86SR9oHprC/z4Muakog0TPFq51JS6pCYBjHNc3f0O6BWKCwz NnoexwgZiMdys5VNSGoQ4EKcRY8lx1XeqWnBbwRkJaRdSXPQV2rqXoZEA6/RVTJZ hm9F2eX8iUap6qU4L65VSo2fWCZoCbWVb28mXnEXDabyv2r9jqY= -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:33 2025 by rpki-client