This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: /dffWMUGIhyAq0IaPXQV77hONUyJgWDR7i7Ke1yYwg0= Subject key identifier: FB:EB:D1:44:FF:40:04:8B:A0:89:BE:49:A7:4A:98:69:A1:80:A7:53 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 41493AFF3770043F3A835E4B21466F4578621EBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 053D Signing time: Fri 12 Dec 2025 21:41:47 +0000 Manifest this update: Fri 12 Dec 2025 21:36:47 +0000 Manifest next update: Tue 16 Dec 2025 09:29:47 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 2: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 3: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 4: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 5: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 6: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: gGLqSi7z1Fvalnc7wmSBQW3CbydecBM1m5k5CL6xLb0=) 7: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 8: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 9: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 10: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 11: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 12: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 13: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:49:3a:ff:37:70:04:3f:3a:83:5e:4b:21:46:6f:45:78:62:1e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Dec 12 21:36:47 2025 GMT Not After : Dec 16 09:29:47 2025 GMT Subject: CN=FBEBD144FF40048BA089BE49A74A9869A180A753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:49:22:14:86:cd:d8:86:dd:7f:3d:fc:e9: b0:9b:5f:cd:a6:a2:fd:1a:a8:f1:4c:5a:5c:eb:bb: 9c:ea:c7:2e:8b:90:16:76:dc:69:46:6a:11:71:5d: 8d:a6:ab:05:49:9f:81:3a:94:03:b1:b5:2a:7c:ac: d7:6d:e4:42:61:9f:ba:2d:cf:85:d6:01:f6:c3:91: a6:3c:52:22:8d:4c:41:5d:a6:85:9d:80:5b:74:4a: 95:09:cd:8a:df:b6:bf:be:98:e3:d8:1c:8a:31:3e: e1:5b:58:8e:22:11:5a:85:bf:05:76:9d:0a:e9:ff: ad:2b:c1:ce:21:68:84:09:c1:77:b5:fb:75:04:22: 79:b6:59:ae:e6:0e:75:68:20:43:df:32:36:57:39: 2a:f8:24:2d:21:dc:5f:4d:68:7c:ae:6a:5e:3c:be: 30:c9:c4:a8:af:83:17:d3:ef:6f:78:e1:ab:4a:14: 7a:ed:dc:27:f5:cc:c9:8f:92:ee:95:3a:89:8d:87: e5:84:7d:b7:df:86:95:fa:83:df:8b:72:e1:c1:9c: e2:88:a8:0f:02:33:0e:a1:fa:7f:12:f5:c8:c9:04: c1:04:80:6e:85:0b:4d:6d:62:10:30:29:97:43:08: f9:6d:3c:92:32:98:fe:e3:95:2d:68:34:98:44:b2: 27:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EB:D1:44:FF:40:04:8B:A0:89:BE:49:A7:4A:98:69:A1:80:A7:53 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4b:8c:ac:db:83:40:94:b7:9f:ee:cc:b1:77:e2:b3:1a:91: ff:aa:5f:cc:81:07:1a:80:93:61:b3:8f:62:c4:36:a9:1e:2b: b6:ec:8c:b8:67:0f:c6:28:19:c4:f8:7e:4c:41:99:b6:d5:52: 41:72:f2:ca:1b:aa:de:21:7b:d2:3c:f8:ae:c6:c8:4a:01:f7: 8a:b5:2d:da:32:20:7d:c8:e7:b1:fa:60:6b:78:ea:80:9c:47: bb:df:44:ec:54:ea:38:04:e3:7e:a9:08:72:7a:cc:d1:22:7c: b5:b8:42:6c:d3:da:b6:03:be:aa:90:cb:d5:b3:73:5a:22:64: e6:a6:85:7f:8c:ed:c1:da:4d:68:5a:08:87:ca:0c:ca:22:c8: ff:2a:a8:db:e0:44:ca:6e:e2:1e:de:fe:29:f3:45:29:c3:67: ab:33:18:7c:c4:d4:ed:9b:47:6d:07:e6:22:85:cc:72:38:ec: 28:db:4c:b4:60:d8:fc:86:31:8e:9c:83:95:10:7d:85:a4:5b: 38:cc:f3:99:ae:19:1d:8c:51:7a:43:63:79:5a:93:4f:df:9b: d4:72:3d:ec:4d:0f:a0:54:42:46:f7:68:8b:a2:ff:cb:b8:98: 23:7d:80:c1:51:d2:e6:a5:c1:42:f8:29:d5:75:a5:85:e1:39: 29:98:09:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUk6/zdwBD86g15LIUZvRXhiHrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEyMTIyMTM2NDdaFw0yNTEyMTYwOTI5NDdaMDMxMTAvBgNV BAMTKEZCRUJEMTQ0RkY0MDA0OEJBMDg5QkU0OUE3NEE5ODY5QTE4MEE3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UkkiFIbN2Ibdfz386bCbX82m ov0aqPFMWlzru5zqxy6LkBZ23GlGahFxXY2mqwVJn4E6lAOxtSp8rNdt5EJhn7ot z4XWAfbDkaY8UiKNTEFdpoWdgFt0SpUJzYrftr++mOPYHIoxPuFbWI4iEVqFvwV2 nQrp/60rwc4haIQJwXe1+3UEInm2Wa7mDnVoIEPfMjZXOSr4JC0h3F9NaHyual48 vjDJxKivgxfT72944atKFHrt3Cf1zMmPku6VOomNh+WEfbffhpX6g9+LcuHBnOKI qA8CMw6h+n8S9cjJBMEEgG6FC01tYhAwKZdDCPltPJIymP7jlS1oNJhEsicnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++vRRP9ABIugib5Jp0qYaaGAp1MwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVLjKzbg0CUt5/uzLF34rMakf+qX8yBBxqA k2Gzj2LENqkeK7bsjLhnD8YoGcT4fkxBmbbVUkFy8sobqt4he9I8+K7GyEoB94q1 LdoyIH3I57H6YGt46oCcR7vfROxU6jgE436pCHJ6zNEifLW4QmzT2rYDvqqQy9Wz c1oiZOamhX+M7cHaTWhaCIfKDMoiyP8qqNvgRMpu4h7e/inzRSnDZ6szGHzE1O2b R20H5iKFzHI47CjbTLRg2PyGMY6cg5UQfYWkWzjM85muGR2MUXpDY3lak0/fm9Ry PexND6BUQkb3aIui/8u4mCN9gMFR0ualwUL4KdV1pYXhOSmYCeM= -----END CERTIFICATE-----Generated at Mon Dec 15 02:18:25 2025 by rpki-client