This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: G+kDl+1b3LbhcXW3iAvArdcF0X0KQ93+Qqfyrw3wNNA= Subject key identifier: C4:71:C7:52:52:24:4C:4E:CE:06:DD:94:1E:0C:A2:DB:93:18:96:D7 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 60ACB33ACB10416944D70D56903969045FBB0432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0195 Signing time: Tue 02 Dec 2025 04:51:48 +0000 Manifest this update: Tue 02 Dec 2025 04:46:48 +0000 Manifest next update: Fri 05 Dec 2025 08:32:48 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: gTlwi8DIC1PlTsbIlNjJhfbdgYxkxtfXS0nz314JL1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ac:b3:3a:cb:10:41:69:44:d7:0d:56:90:39:69:04:5f:bb:04:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Dec 2 04:46:48 2025 GMT Not After : Dec 5 08:32:48 2025 GMT Subject: CN=C471C75252244C4ECE06DD941E0CA2DB931896D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:c5:9c:36:81:82:f6:dc:e3:1a:e6:13:46: 64:62:64:72:fc:d4:ae:3a:4f:c2:57:87:64:74:d0: 2a:31:4e:a8:56:4b:7c:f3:58:c2:2c:b0:7f:56:5c: 15:86:62:3f:e1:65:74:58:45:6f:78:0b:73:a9:0b: 94:bb:e7:51:e9:5c:4b:5f:29:b6:77:bc:e3:3e:19: ad:37:ca:98:6d:e9:e0:75:16:7a:aa:02:78:f8:24: 99:6f:a9:ec:15:bb:91:c2:02:6e:f4:5a:cb:1f:1f: 0f:12:c3:a1:62:81:89:d3:82:73:ff:83:0b:f4:31: 67:86:61:73:42:1e:2e:94:33:a3:e7:88:3c:c5:f4: 43:62:25:91:1c:8a:6f:06:54:b0:99:b3:93:76:ae: 66:ca:11:a3:4b:28:4e:29:f1:49:99:7b:86:6a:3a: 50:69:5d:14:16:50:d9:91:5a:bf:ef:89:ea:98:de: 0a:4d:dd:10:3a:b9:00:c0:42:80:7f:16:13:13:10: ac:b4:1c:aa:18:b8:38:04:95:74:f3:c5:39:03:e1: 74:31:a8:c2:93:b0:de:47:86:20:3d:7b:31:e8:d9: 5e:56:c0:d7:c6:32:dc:f1:ef:97:b4:9d:3e:d6:c9: 3b:ed:ed:98:65:ae:c6:09:70:75:0a:62:24:96:50: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:C7:52:52:24:4C:4E:CE:06:DD:94:1E:0C:A2:DB:93:18:96:D7 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:34:ad:ac:f0:a7:ce:97:32:0a:b1:22:77:63:88:b6:f9:0e: 05:fd:02:89:53:15:a5:b0:74:45:84:9b:34:ee:78:da:77:89: 6a:7c:8c:f3:e2:cd:69:32:40:07:d4:32:6c:85:72:95:eb:5e: e0:7f:7c:59:58:c7:46:f3:91:23:04:8f:0b:c8:1f:3b:9d:32: d6:86:05:2c:56:b7:bf:de:66:00:a3:25:07:ca:de:27:13:03: 9e:ee:82:dc:d9:b5:3d:ed:b4:3c:f6:6c:98:af:0e:c5:eb:8d: fa:9c:8e:4a:0c:69:99:dc:ae:23:b2:97:80:b6:81:cb:5c:88: 24:9a:bf:db:a8:6f:90:54:67:70:40:cc:85:d4:a2:ec:a0:c1: b3:49:72:d4:9c:a1:6f:ac:4b:f5:83:1b:e9:43:87:c9:71:13: fc:ea:3f:18:f4:87:1c:3b:fe:9a:36:6b:db:1c:ab:63:44:f9: 34:74:5b:be:f9:c4:f7:e6:99:84:4e:59:33:75:6a:d9:3f:66: 40:88:4c:0c:6e:b0:17:f1:6f:6c:88:ec:cc:bc:02:8f:c8:1d: 21:14:13:eb:81:4d:46:ae:8b:b9:09:90:12:9d:4f:5a:4c:81: 4b:9c:18:42:a2:dd:54:30:eb:29:ea:76:df:17:5c:c8:5c:05: e8:9c:fb:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKyzOssQQWlE1w1WkDlpBF+7BDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTEyMDIwNDQ2NDhaFw0yNTEyMDUwODMyNDhaMDMxMTAvBgNV BAMTKEM0NzFDNzUyNTIyNDRDNEVDRTA2REQ5NDFFMENBMkRCOTMxODk2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPMWcNoGC9tzjGuYTRmRiZHL8 1K46T8JXh2R00CoxTqhWS3zzWMIssH9WXBWGYj/hZXRYRW94C3OpC5S751HpXEtf KbZ3vOM+Ga03ypht6eB1FnqqAnj4JJlvqewVu5HCAm70WssfHw8Sw6FigYnTgnP/ gwv0MWeGYXNCHi6UM6PniDzF9ENiJZEcim8GVLCZs5N2rmbKEaNLKE4p8UmZe4Zq OlBpXRQWUNmRWr/vieqY3gpN3RA6uQDAQoB/FhMTEKy0HKoYuDgElXTzxTkD4XQx qMKTsN5HhiA9ezHo2V5WwNfGMtzx75e0nT7WyTvt7ZhlrsYJcHUKYiSWUD6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHHHUlIkTE7OBt2UHgyi25MYltcwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE0razwp86XMgqxIndjiLb5DgX9AolTFaWw dEWEmzTueNp3iWp8jPPizWkyQAfUMmyFcpXrXuB/fFlYx0bzkSMEjwvIHzudMtaG BSxWt7/eZgCjJQfK3icTA57ugtzZtT3ttDz2bJivDsXrjfqcjkoMaZncriOyl4C2 gctciCSav9uob5BUZ3BAzIXUouygwbNJctScoW+sS/WDG+lDh8lxE/zqPxj0hxw7 /po2a9scq2NE+TR0W775xPfmmYROWTN1atk/ZkCITAxusBfxb2yI7My8Ao/IHSEU E+uBTUaui7kJkBKdT1pMgUucGEKi3VQw6ynqdt8XXMhcBeic+7U= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:43 2025 by rpki-client