This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: ihhnnFX0HdV2DoXwvxew7MnkkDiXhbPrsT74lBTJGsA= Subject key identifier: D3:2D:1B:2A:3D:CD:D9:A9:5A:9C:43:B8:12:B0:5F:42:59:67:AF:14 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 657BC6ECBA758038AE3165F93C0AA14FF26BEB2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0265 Signing time: Sun 14 Dec 2025 02:30:39 +0000 Manifest this update: Sun 14 Dec 2025 02:25:39 +0000 Manifest next update: Wed 17 Dec 2025 12:37:39 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: 7eCZnxTAflmRg9Xzj7D6jH8/EXllurhZ2hg7ZlO109M=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 12:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7b:c6:ec:ba:75:80:38:ae:31:65:f9:3c:0a:a1:4f:f2:6b:eb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Dec 14 02:25:39 2025 GMT Not After : Dec 17 12:37:39 2025 GMT Subject: CN=D32D1B2A3DCDD9A95A9C43B812B05F425967AF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:83:39:b0:1a:dc:d7:fd:a0:6b:12:69:24: 3a:4f:fd:d0:6d:68:cb:21:e2:bb:b2:4e:5e:84:da: 8d:19:09:1d:2d:cc:83:81:d4:60:48:26:c0:c6:03: d7:d8:4f:32:d7:14:c1:bf:76:92:50:d8:3c:d3:5e: 30:27:b9:d3:40:fd:05:8f:99:8f:76:e5:4b:f2:8d: db:cd:2f:d3:46:43:52:1d:d1:f9:65:12:f6:0e:1d: 23:c3:8e:10:db:56:02:b5:f2:5f:1e:9d:db:f4:57: ca:be:86:1b:85:45:f0:c5:8c:54:07:5c:85:a8:72: 33:17:7c:9b:f7:d8:05:ce:14:7b:5f:9f:ed:e1:9f: 5b:d7:72:40:4e:d4:6e:c0:ab:8a:c2:86:71:ad:cf: ba:69:63:14:79:8e:10:be:53:e6:07:05:02:7f:5e: 05:b5:37:32:0b:84:60:e9:e8:ad:72:72:b8:f1:22: 81:8f:af:46:c2:fc:54:c8:88:09:a2:54:7d:39:0b: 50:c9:94:8c:fd:c3:a5:98:f8:9a:b1:0a:f4:d7:5a: 24:0c:56:5b:e8:71:3b:09:cc:ff:e2:43:f1:f4:51: c5:d5:43:cb:1f:73:06:ab:91:b4:07:97:7c:df:af: 73:14:8f:ab:05:43:62:38:b8:7f:94:fc:27:53:69: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:1B:2A:3D:CD:D9:A9:5A:9C:43:B8:12:B0:5F:42:59:67:AF:14 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:34:79:8a:9c:f4:87:95:08:b8:d7:a3:fe:28:4d:01:de:7d: 2c:3c:b3:4d:52:86:2d:33:e5:3a:00:bb:9c:12:f7:bd:8a:db: 0f:f2:05:e6:e4:38:8e:a5:70:a8:e4:f8:a0:fd:28:e4:59:5b: 19:27:2f:c4:e1:ed:47:ce:bf:90:ed:55:6a:a0:18:e2:77:53: 91:7c:3b:54:76:3a:87:53:cc:67:d5:50:e7:f3:05:98:2e:bc: 3c:12:2e:ef:af:fe:76:80:a2:5b:6a:ff:99:d6:86:1b:2b:95: b4:8d:58:80:ce:4b:20:00:45:da:d1:77:a8:61:66:bb:eb:bc: 54:c1:de:4f:fc:d9:ed:c5:03:d7:bd:fb:14:a9:bb:52:88:0b: 81:c9:d1:2a:2c:0f:be:0d:e4:76:af:08:2a:13:5b:d6:05:2e: 4a:ba:7e:ea:3f:ab:e6:e7:92:d0:13:53:3f:69:5e:ed:27:19: c8:5c:4c:60:7d:b1:6a:7d:81:15:1c:50:84:f5:a6:57:71:b0: 1e:e2:47:42:f1:d6:a6:a9:54:df:18:5f:38:7c:4a:5f:be:ee: 37:e1:5c:e2:22:7b:07:d5:96:92:5e:05:61:56:9e:f0:71:93: fe:9b:f1:3a:a0:75:a8:15:88:7a:89:98:d9:48:4e:42:55:07: b6:0a:60:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXvG7Lp1gDiuMWX5PAqhT/Jr6yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTEyMTQwMjI1MzlaFw0yNTEyMTcxMjM3MzlaMDMxMTAvBgNV BAMTKEQzMkQxQjJBM0RDREQ5QTk1QTlDNDNCODEyQjA1RjQyNTk2N0FGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOYM5sBrc1/2gaxJpJDpP/dBt aMsh4ruyTl6E2o0ZCR0tzIOB1GBIJsDGA9fYTzLXFMG/dpJQ2DzTXjAnudNA/QWP mY925UvyjdvNL9NGQ1Id0fllEvYOHSPDjhDbVgK18l8endv0V8q+hhuFRfDFjFQH XIWocjMXfJv32AXOFHtfn+3hn1vXckBO1G7Aq4rChnGtz7ppYxR5jhC+U+YHBQJ/ XgW1NzILhGDp6K1ycrjxIoGPr0bC/FTIiAmiVH05C1DJlIz9w6WY+JqxCvTXWiQM VlvocTsJzP/iQ/H0UcXVQ8sfcwarkbQHl3zfr3MUj6sFQ2I4uH+U/CdTaX9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0y0bKj3N2alanEO4ErBfQllnrxQwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB00eYqc9IeVCLjXo/4oTQHefSw8s01Shi0z 5ToAu5wS972K2w/yBebkOI6lcKjk+KD9KORZWxknL8Th7UfOv5DtVWqgGOJ3U5F8 O1R2OodTzGfVUOfzBZguvDwSLu+v/naAoltq/5nWhhsrlbSNWIDOSyAARdrRd6hh ZrvrvFTB3k/82e3FA9e9+xSpu1KIC4HJ0SosD74N5HavCCoTW9YFLkq6fuo/q+bn ktATUz9pXu0nGchcTGB9sWp9gRUcUIT1pldxsB7iR0Lx1qapVN8YXzh8Sl++7jfh XOIiewfVlpJeBWFWnvBxk/6b8TqgdagViHqJmNlITkJVB7YKYP4= -----END CERTIFICATE-----Generated at Tue Dec 16 13:30:47 2025 by rpki-client