This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: /fqDnIkr2pTZlON3i+CpSSjp4jJb65ZAE+5RMo0A92k= Subject key identifier: 33:6F:3C:14:56:79:78:82:76:98:8B:E8:B6:B5:B5:4F:C4:15:A0:D3 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 68D2D4DCC47264ECE3E1C963A6C0B023C6F8CF50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0536 Signing time: Mon 01 Dec 2025 09:31:14 +0000 Manifest this update: Mon 01 Dec 2025 09:26:14 +0000 Manifest next update: Thu 04 Dec 2025 18:55:14 +0000 Files and hashes: 1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: 2X93f17ex3ZuA5cKoDtIhxYRHSlsOVoif6/wQjhDYNc=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 4: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d2:d4:dc:c4:72:64:ec:e3:e1:c9:63:a6:c0:b0:23:c6:f8:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Dec 1 09:26:14 2025 GMT Not After : Dec 4 18:55:14 2025 GMT Subject: CN=336F3C145679788276988BE8B6B5B54FC415A0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:aa:36:da:95:9c:f7:61:b0:80:af:56:ef: 60:4c:66:34:cc:11:ab:ad:d1:dc:e6:c8:7d:be:3e: c8:ea:5f:00:8a:61:cc:14:a1:31:cc:21:b3:75:97: b9:ff:7a:0f:39:c2:c3:ff:e5:f8:80:6b:db:e6:a3: 3b:d6:c9:39:5a:5b:80:e8:f1:d4:4f:ac:b8:c6:bc: d8:f2:f9:45:ad:02:8a:f4:7c:08:2b:e6:7f:be:7d: 02:f1:9c:1b:a4:19:81:9f:61:e3:8d:c2:17:92:7d: 02:f9:fe:c6:f8:8f:ba:e0:f3:33:a6:f5:65:8b:82: 74:b2:76:a1:7b:75:1d:d9:6e:4d:8a:02:7d:a7:4b: f5:7d:27:6d:c9:4d:88:92:95:50:77:6d:93:98:bf: a4:1f:7f:01:94:2e:d1:85:14:cc:08:af:dd:9d:20: fe:8d:5f:f2:50:2a:ae:30:ec:d5:26:da:39:69:dc: 23:5e:90:c5:ac:21:3e:d4:c0:62:3f:03:68:47:ac: 5c:d2:2f:bd:26:a7:4a:0f:f6:00:5f:fa:b1:5c:9e: 89:fd:c6:71:4e:8b:c1:8e:6b:ea:18:4c:f6:53:52: d6:0b:a9:26:9e:05:54:a4:2a:68:d1:7c:0f:88:17: 28:0b:16:15:49:cd:d3:f6:1c:6b:12:c2:99:ee:81: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:3C:14:56:79:78:82:76:98:8B:E8:B6:B5:B5:4F:C4:15:A0:D3 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:de:dc:20:52:7f:26:bc:59:3a:e2:e7:a0:85:36:d2:e7:a7: 6e:60:92:22:29:0c:ba:45:cb:e3:70:68:f7:21:a0:fc:f1:c5: a6:42:c6:51:74:63:61:8e:e6:de:bf:e9:03:19:a9:be:65:07: 3b:fe:be:27:86:d4:a3:34:5d:2a:b2:8c:85:45:95:bd:4a:0e: 6f:fb:e4:ca:0b:70:1d:81:24:98:ef:93:39:17:46:64:b4:89: 89:6e:c1:f8:81:53:38:0f:27:4e:95:36:43:ba:3a:c8:5d:8d: 20:c8:1d:0c:22:20:61:a1:45:22:6b:e6:0e:34:5c:83:25:5e: 6c:3c:bf:88:f0:c4:94:29:72:c6:ac:d9:ca:22:75:04:2a:7f: 22:0b:1e:4b:3a:fd:c2:cb:f3:b6:38:f7:1f:30:c9:c0:ef:9a: 16:1c:a1:27:b4:99:2f:eb:e4:c2:79:38:7a:6b:36:67:2f:66: 82:01:88:18:7e:d6:af:3a:1c:04:98:9a:92:ec:62:72:a4:bd: 40:4d:34:ae:b9:98:9d:37:a2:0f:ff:a7:cf:20:a1:f3:bb:0c: 41:48:c7:c0:84:7f:24:8d:cc:0e:db:06:21:2b:e0:fa:87:20: 55:92:e8:03:fc:0f:52:8f:b9:6b:ea:0e:91:b1:55:d3:a0:74: d6:47:83:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNLU3MRyZOzj4cljpsCwI8b4z1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTEyMDEwOTI2MTRaFw0yNTEyMDQxODU1MTRaMDMxMTAvBgNV BAMTKDMzNkYzQzE0NTY3OTc4ODI3Njk4OEJFOEI2QjVCNTRGQzQxNUEwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzao22pWc92GwgK9W72BMZjTM Eaut0dzmyH2+PsjqXwCKYcwUoTHMIbN1l7n/eg85wsP/5fiAa9vmozvWyTlaW4Do 8dRPrLjGvNjy+UWtAor0fAgr5n++fQLxnBukGYGfYeONwheSfQL5/sb4j7rg8zOm 9WWLgnSydqF7dR3Zbk2KAn2nS/V9J23JTYiSlVB3bZOYv6QffwGULtGFFMwIr92d IP6NX/JQKq4w7NUm2jlp3CNekMWsIT7UwGI/A2hHrFzSL70mp0oP9gBf+rFcnon9 xnFOi8GOa+oYTPZTUtYLqSaeBVSkKmjRfA+IFygLFhVJzdP2HGsSwpnugSF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM288FFZ5eIJ2mIvotrW1T8QVoNMwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANne3CBSfya8WTri56CFNtLnp25gkiIpDLpF y+NwaPchoPzxxaZCxlF0Y2GO5t6/6QMZqb5lBzv+vieG1KM0XSqyjIVFlb1KDm/7 5MoLcB2BJJjvkzkXRmS0iYluwfiBUzgPJ06VNkO6OshdjSDIHQwiIGGhRSJr5g40 XIMlXmw8v4jwxJQpcsas2coidQQqfyILHks6/cLL87Y49x8wycDvmhYcoSe0mS/r 5MJ5OHprNmcvZoIBiBh+1q86HASYmpLsYnKkvUBNNK65mJ03og//p88gofO7DEFI x8CEfySNzA7bBiEr4PqHIFWS6AP8D1KPuWvqDpGxVdOgdNZHgw8= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:23 2025 by rpki-client