This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: hcQffqV1ZS1e/wo5MGaXxSZ4ooKhCti3C1RjPKDBJPM= Subject key identifier: AD:02:BE:29:B2:B3:9B:CC:65:AA:95:2C:E3:D5:3A:0A:86:D6:5F:6A Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 77164D7005385085F37BA5128BA0E2156A05E139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 0100 Signing time: Sun 07 Dec 2025 00:11:41 +0000 Manifest this update: Sun 07 Dec 2025 00:06:41 +0000 Manifest next update: Wed 10 Dec 2025 02:17:41 +0000 Files and hashes: 1: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: wjXgggsZgR4kRwq6BNbVanwpGuzefpczGYet7y62iBQ=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:16:4d:70:05:38:50:85:f3:7b:a5:12:8b:a0:e2:15:6a:05:e1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Dec 7 00:06:41 2025 GMT Not After : Dec 10 02:17:41 2025 GMT Subject: CN=AD02BE29B2B39BCC65AA952CE3D53A0A86D65F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:90:8c:09:04:2e:a4:c7:41:34:dc:a1:1f: 23:65:a5:12:99:3f:c2:fc:f5:22:82:35:fe:14:5c: 12:3a:b9:15:8f:de:5f:36:1c:8e:47:63:9e:bd:2d: a8:96:74:8a:ce:b4:c7:58:74:78:4c:73:82:ff:98: 64:53:59:4a:33:52:bf:ad:90:f2:cd:69:83:6b:3d: 4b:69:1d:10:87:3c:e4:26:f1:3c:4d:31:5e:6d:9f: e4:0d:37:53:db:e2:b4:bf:43:5d:6d:3b:d8:fe:09: a1:00:58:01:d8:bf:07:10:07:77:1b:1d:49:3c:b3: 96:7c:35:69:c3:da:87:3b:f6:20:02:15:97:c2:85: d6:aa:5f:fd:83:dd:fd:19:7c:cb:d6:c4:b0:2c:c2: d0:ce:80:dd:af:de:85:c1:16:79:5f:e2:00:7b:c3: c5:23:57:87:37:26:0f:93:de:10:78:4d:a2:8b:85: 97:b4:51:42:95:01:2b:99:00:c1:57:26:84:a5:2a: bf:ab:59:e3:04:2c:1b:e0:9f:20:49:8a:d9:b7:8a: e8:4c:0b:3a:5a:4d:c0:e4:65:6d:12:11:b8:18:c8: 9a:19:5f:ea:e3:1c:a9:f7:f7:ec:7c:fa:13:2a:47: 1f:96:e3:2f:03:13:be:e2:c7:00:f5:78:95:69:7c: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:BE:29:B2:B3:9B:CC:65:AA:95:2C:E3:D5:3A:0A:86:D6:5F:6A X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8c:7f:b3:47:ce:4d:94:8a:08:1a:2d:f8:ec:39:43:c5:96: 1b:17:3f:a0:a0:18:b0:57:c4:a4:ee:2a:49:7f:c3:0b:eb:8c: 36:0c:2c:83:f5:9c:be:03:e8:b2:a5:23:6b:59:3c:c9:3a:81: 22:5a:0a:7d:8c:b8:3d:fb:8e:5e:1d:13:f1:59:d3:60:55:df: 2b:f5:ba:50:68:e4:f4:95:e4:d2:c4:6d:8f:ef:13:af:35:20: 33:0d:7f:8e:06:60:b9:10:6b:b2:67:6d:f8:e5:1a:c6:74:70: 81:55:ba:33:da:ec:56:6c:ab:0d:4d:ad:eb:b7:fb:8e:3f:8b: 94:83:1a:40:a2:5c:8d:3d:31:43:cc:13:6b:34:a6:3a:9e:8e: 98:99:01:05:9d:55:bf:f9:09:3f:36:89:97:38:13:70:be:4d: ba:c9:a2:65:97:ef:43:71:e8:5c:30:f4:1e:a4:02:c1:a4:bd: d6:6e:73:90:8b:1e:91:42:2b:41:1f:5e:a5:3d:c0:fa:05:8a: 43:46:f2:7c:f7:8d:34:14:9f:18:7c:c6:30:aa:b5:a7:71:46: d6:02:df:23:d1:2d:a6:54:b9:aa:b2:8d:1c:29:e3:2a:e4:8d: 65:66:b9:3f:3b:e2:dc:fd:e4:63:f3:c5:cf:2e:2d:d7:34:74: d2:3c:3b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxZNcAU4UIXze6USi6DiFWoF4TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTEyMDcwMDA2NDFaFw0yNTEyMTAwMjE3NDFaMDMxMTAvBgNV BAMTKEFEMDJCRTI5QjJCMzlCQ0M2NUFBOTUyQ0UzRDUzQTBBODZENjVGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmJCMCQQupMdBNNyhHyNlpRKZ P8L89SKCNf4UXBI6uRWP3l82HI5HY569LaiWdIrOtMdYdHhMc4L/mGRTWUozUr+t kPLNaYNrPUtpHRCHPOQm8TxNMV5tn+QNN1Pb4rS/Q11tO9j+CaEAWAHYvwcQB3cb HUk8s5Z8NWnD2oc79iACFZfChdaqX/2D3f0ZfMvWxLAswtDOgN2v3oXBFnlf4gB7 w8UjV4c3Jg+T3hB4TaKLhZe0UUKVASuZAMFXJoSlKr+rWeMELBvgnyBJitm3iuhM CzpaTcDkZW0SEbgYyJoZX+rjHKn39+x8+hMqRx+W4y8DE77ixwD1eJVpfFrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQK+KbKzm8xlqpUs49U6CobWX2owHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuMf7NHzk2UiggaLfjsOUPFlhsXP6CgGLBX xKTuKkl/wwvrjDYMLIP1nL4D6LKlI2tZPMk6gSJaCn2MuD37jl4dE/FZ02BV3yv1 ulBo5PSV5NLEbY/vE681IDMNf44GYLkQa7JnbfjlGsZ0cIFVujPa7FZsqw1Nreu3 +44/i5SDGkCiXI09MUPME2s0pjqejpiZAQWdVb/5CT82iZc4E3C+TbrJomWX70Nx 6Fww9B6kAsGkvdZuc5CLHpFCK0EfXqU9wPoFikNG8nz3jTQUnxh8xjCqtadxRtYC 3yPRLaZUuaqyjRwp4yrkjWVmuT874tz95GPzxc8uLdc0dNI8O6s= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:47 2025 by rpki-client