This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: zMtiZ5lWIQQrFGTmHlLlShOjaatINDSp9pJoDp58J9U= Subject key identifier: E8:D0:6B:2C:1F:9C:BC:66:AC:54:D4:A0:73:73:50:CF:2A:FE:85:9F Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 624F64225942E7BC6F5D1B1C37FAB64D05668B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 029A Signing time: Tue 02 Dec 2025 13:10:58 +0000 Manifest this update: Tue 02 Dec 2025 13:05:58 +0000 Manifest next update: Fri 05 Dec 2025 21:55:58 +0000 Files and hashes: 1: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: r548anTS+kkP1FGqXVWQI9KEFQYxn3NmLfNP0Wq1fcw=) 2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 3: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) 4: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4f:64:22:59:42:e7:bc:6f:5d:1b:1c:37:fa:b6:4d:05:66:8b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Dec 2 13:05:58 2025 GMT Not After : Dec 5 21:55:58 2025 GMT Subject: CN=E8D06B2C1F9CBC66AC54D4A0737350CF2AFE859F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:e6:f6:29:cf:37:d1:b2:55:f3:6c:99:e2: 3c:b0:2f:46:38:07:ca:52:94:1b:ee:3b:b1:d0:ae: 40:be:cd:36:3e:00:ee:c5:16:65:eb:ba:ec:34:0a: 91:dd:28:9f:19:6c:85:d9:83:36:aa:8e:b7:01:6c: b3:65:47:17:48:72:93:e7:fe:88:10:e3:dd:1c:87: b3:19:c4:75:79:78:5b:c3:a1:6f:37:34:d9:dd:74: cf:ce:97:29:b4:ed:29:26:14:2e:4a:b5:6c:08:c7: ca:84:b8:8b:82:65:5c:ef:7b:56:5d:f7:fe:b3:a5: cb:0c:24:74:9a:12:1a:97:07:d0:3a:5e:7b:75:d2: bb:0f:a9:9f:4d:c4:03:57:1a:1f:39:6e:5c:dc:4c: ad:3a:bf:9e:61:4c:99:1d:26:f2:10:4e:14:5b:18: 6f:65:13:56:84:93:c4:af:9f:0b:b3:ac:01:80:b9: ac:d4:f5:e4:5c:63:bc:ce:17:09:44:fd:8e:dd:fb: ed:20:15:1f:0a:2a:90:21:72:8a:a7:fe:fb:d6:fe: 98:11:93:5e:99:0c:13:35:fd:92:18:ca:b8:bb:c6: 3b:8c:fb:37:df:70:0d:26:3d:b6:c6:70:f5:50:2d: ef:ab:1d:c7:81:15:5f:57:10:77:6e:97:94:66:94: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:6B:2C:1F:9C:BC:66:AC:54:D4:A0:73:73:50:CF:2A:FE:85:9F X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:95:67:78:bb:d1:8e:78:21:9e:24:53:85:c6:0b:c8:ce:7a: 69:82:06:40:df:64:05:82:1c:7f:ab:6d:d5:8e:b7:ef:db:40: 64:dc:3a:7c:33:cc:42:b0:f2:61:f3:23:54:d7:87:ec:de:6e: 35:70:67:a3:07:62:d0:3e:37:25:fe:67:9d:eb:48:cb:9d:62: b6:c3:47:a5:6f:fc:5d:93:e3:71:79:fb:f8:d2:b7:9c:80:a4: 87:af:28:8a:f6:6a:1d:d6:68:32:50:ab:85:7d:12:c1:a4:50: 82:fd:28:69:5e:96:43:b8:3e:7e:8f:d4:e3:40:1c:ec:f0:c1: 51:11:60:b2:14:42:a6:ec:46:48:d4:93:8f:94:f4:a8:76:40: cf:e1:74:31:c6:0c:ec:78:20:7a:91:93:58:2c:58:ae:82:89: 95:87:d8:d6:b2:65:fb:e3:87:36:2f:14:5b:17:4f:42:42:2a: 74:ca:0e:d7:db:f8:c4:79:39:96:ef:9e:7c:49:f2:d9:9a:63: ae:ea:65:ee:08:43:47:bf:8e:61:69:f9:08:f5:bc:bf:8f:02: 5f:8f:0f:0c:13:3b:8b:98:12:6b:24:dc:a6:5f:c8:bb:f7:28: ad:2e:3d:fb:88:fd:c2:59:40:2a:e4:4b:75:a5:95:ef:f3:15: b9:17:0a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYk9kIllC57xvXRscN/q2TQVmi4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTEyMDIxMzA1NThaFw0yNTEyMDUyMTU1NThaMDMxMTAvBgNV BAMTKEU4RDA2QjJDMUY5Q0JDNjZBQzU0RDRBMDczNzM1MENGMkFGRTg1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMeb2Kc830bJV82yZ4jywL0Y4 B8pSlBvuO7HQrkC+zTY+AO7FFmXruuw0CpHdKJ8ZbIXZgzaqjrcBbLNlRxdIcpPn /ogQ490ch7MZxHV5eFvDoW83NNnddM/Olym07SkmFC5KtWwIx8qEuIuCZVzve1Zd 9/6zpcsMJHSaEhqXB9A6Xnt10rsPqZ9NxANXGh85blzcTK06v55hTJkdJvIQThRb GG9lE1aEk8SvnwuzrAGAuazU9eRcY7zOFwlE/Y7d++0gFR8KKpAhcoqn/vvW/pgR k16ZDBM1/ZIYyri7xjuM+zffcA0mPbbGcPVQLe+rHceBFV9XEHdul5RmlIAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NBrLB+cvGasVNSgc3NQzyr+hZ8wHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWVZ3i70Y54IZ4kU4XGC8jOemmCBkDfZAWC HH+rbdWOt+/bQGTcOnwzzEKw8mHzI1TXh+zebjVwZ6MHYtA+NyX+Z53rSMudYrbD R6Vv/F2T43F5+/jSt5yApIevKIr2ah3WaDJQq4V9EsGkUIL9KGlelkO4Pn6P1ONA HOzwwVERYLIUQqbsRkjUk4+U9Kh2QM/hdDHGDOx4IHqRk1gsWK6CiZWH2NayZfvj hzYvFFsXT0JCKnTKDtfb+MR5OZbvnnxJ8tmaY67qZe4IQ0e/jmFp+Qj1vL+PAl+P DwwTO4uYEmsk3KZfyLv3KK0uPfuI/cJZQCrkS3Wlle/zFbkXCnU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:37 2025 by rpki-client