This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: VjNdqfijTJ0KHkkkXJVclnSj9WR1fnnDcaReZTf5eP0= Subject key identifier: 73:33:E2:16:32:DD:F8:68:C8:42:28:14:1A:81:7F:8F:76:2C:B2:89 Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 66B6A103F60CE29E8C8545125BA0E7B29E0C78EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04D2 Signing time: Fri 12 Dec 2025 09:21:21 +0000 Manifest this update: Fri 12 Dec 2025 09:16:21 +0000 Manifest next update: Mon 15 Dec 2025 20:07:21 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) 2: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: bjmi8bcTAx2XbvcPMFNW05ZPSO5a0qcE67iShrJ9ra4=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) 4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 20:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b6:a1:03:f6:0c:e2:9e:8c:85:45:12:5b:a0:e7:b2:9e:0c:78:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Dec 12 09:16:21 2025 GMT Not After : Dec 15 20:07:21 2025 GMT Subject: CN=7333E21632DDF868C84228141A817F8F762CB289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:57:7e:b8:94:a1:01:e1:ef:d1:a1:d1:71: f5:c6:46:f6:d3:59:24:db:ba:ca:0b:33:17:15:29: c3:6a:f8:04:dd:1e:b6:27:47:c9:28:d4:2a:5f:97: 68:df:c6:93:5f:f2:2e:4f:3f:56:4b:15:02:c0:d9: 2e:ed:7a:73:2a:9a:da:1b:6a:6a:7a:9f:b9:fd:ee: 9a:ae:47:7d:de:d5:4f:37:03:b6:42:81:84:12:6a: 9e:85:04:c9:ce:64:e9:29:3f:0b:77:2e:fa:0f:bc: 3e:a0:fa:a6:ec:45:a3:cd:08:7d:23:a3:22:86:eb: 85:57:d8:a5:64:c8:65:4c:47:a2:f3:22:09:fd:06: e7:b8:45:af:55:c8:2b:5b:fe:88:24:7c:fe:a8:ed: 2d:38:e6:5e:48:5c:ab:ec:8a:e3:89:2d:93:77:c8: 4a:38:76:c4:29:e4:a1:c5:6e:ba:0b:44:79:60:da: 7f:e4:54:04:a0:f9:9a:b0:29:b7:a6:04:ee:36:dc: bf:95:93:c1:43:bc:47:48:99:b4:0a:98:6c:21:25: 4c:15:af:c1:22:35:2a:6c:95:62:c5:dd:26:96:83: 40:90:5c:3d:14:64:6e:06:c4:b2:4c:a5:bf:c4:13: 39:0b:31:08:8d:b4:ce:79:81:d2:9b:64:57:4c:38: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:33:E2:16:32:DD:F8:68:C8:42:28:14:1A:81:7F:8F:76:2C:B2:89 X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:e9:ab:9d:ed:e9:7f:64:25:57:85:02:e9:7c:99:c6:d6: 31:eb:34:e7:ab:0d:13:32:bb:49:d2:01:b7:da:c4:5c:0c:d8: 40:b6:66:c0:4c:85:cc:57:46:1d:68:ba:2a:37:19:7c:02:2d: 7e:a9:2d:5f:2d:7a:96:ce:5d:65:56:16:3f:3e:41:90:0e:c0: 4d:3f:40:54:ac:1d:7d:dd:d2:4c:25:6a:18:45:f2:37:15:7a: 25:73:9e:2a:35:d4:ff:c1:dd:5f:6e:5a:b2:fe:9c:00:61:0c: 0b:50:ec:55:ae:bc:be:aa:e7:75:55:1b:a7:9d:48:c9:5b:76: e3:ed:9d:a0:36:29:0e:8f:4c:ac:10:51:f8:b1:b9:9e:01:01: fe:49:96:68:42:97:86:30:e0:67:21:1e:dc:0f:61:c3:3b:b0: 41:54:40:21:34:3a:05:5b:91:60:95:9f:88:82:2d:3e:22:e5: 0f:90:37:f9:f4:6c:e1:38:db:7a:d4:a0:ae:7a:60:bb:45:4c: 9b:a5:f3:67:c4:b9:41:78:73:ca:bf:6b:0f:e9:c4:aa:14:f2: 28:14:34:03:78:11:85:3a:33:9f:8f:f3:c9:e0:f7:0f:51:da: 01:92:a8:ef:af:ec:3f:96:5a:c1:fb:3e:2f:49:40:9e:77:cd: 8e:6f:f2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrahA/YM4p6MhUUSW6Dnsp4MeO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTEyMTIwOTE2MjFaFw0yNTEyMTUyMDA3MjFaMDMxMTAvBgNV BAMTKDczMzNFMjE2MzJEREY4NjhDODQyMjgxNDFBODE3RjhGNzYyQ0IyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYG1d+uJShAeHv0aHRcfXGRvbT WSTbusoLMxcVKcNq+ATdHrYnR8ko1Cpfl2jfxpNf8i5PP1ZLFQLA2S7tenMqmtob amp6n7n97pquR33e1U83A7ZCgYQSap6FBMnOZOkpPwt3LvoPvD6g+qbsRaPNCH0j oyKG64VX2KVkyGVMR6LzIgn9Bue4Ra9VyCtb/ogkfP6o7S045l5IXKvsiuOJLZN3 yEo4dsQp5KHFbroLRHlg2n/kVASg+ZqwKbemBO423L+Vk8FDvEdImbQKmGwhJUwV r8EiNSpslWLF3SaWg0CQXD0UZG4GxLJMpb/EEzkLMQiNtM55gdKbZFdMOKZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczPiFjLd+GjIQigUGoF/j3YssokwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC686aud7el/ZCVXhQLpfJnG1jHrNOerDRMy u0nSAbfaxFwM2EC2ZsBMhcxXRh1ouio3GXwCLX6pLV8tepbOXWVWFj8+QZAOwE0/ QFSsHX3d0kwlahhF8jcVeiVznio11P/B3V9uWrL+nABhDAtQ7FWuvL6q53VVG6ed SMlbduPtnaA2KQ6PTKwQUfixuZ4BAf5JlmhCl4Yw4GchHtwPYcM7sEFUQCE0OgVb kWCVn4iCLT4i5Q+QN/n0bOE423rUoK56YLtFTJul82fEuUF4c8q/aw/pxKoU8igU NAN4EYU6M5+P88ng9w9R2gGSqO+v7D+WWsH7Pi9JQJ53zY5v8kU= -----END CERTIFICATE-----Generated at Sun Dec 14 18:55:37 2025 by rpki-client