This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: sQkBNT5XvVKZfY9kdV2rqn6s0YqfiaQTseyzLlEDMDw= Subject key identifier: FB:C0:DE:5F:6D:07:77:93:5F:12:48:4E:C1:95:2C:B8:59:D8:C9:BE Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 7D877DAE4F27320235E1064DE6F0C7E7D0332FF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 021D Signing time: Tue 02 Dec 2025 01:12:31 +0000 Manifest this update: Tue 02 Dec 2025 01:07:31 +0000 Manifest next update: Fri 05 Dec 2025 05:56:31 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: vgVx10nW9XHWGKd2Rxm1j0xZofdlpP3fQUho1SDAyIg=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:87:7d:ae:4f:27:32:02:35:e1:06:4d:e6:f0:c7:e7:d0:33:2f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Dec 2 01:07:31 2025 GMT Not After : Dec 5 05:56:31 2025 GMT Subject: CN=FBC0DE5F6D0777935F12484EC1952CB859D8C9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:1a:89:fe:42:98:9f:ad:2a:da:db:fe:52: 57:b8:13:ba:96:6e:93:46:28:c2:91:e7:74:1b:ba: c5:8b:cc:27:f9:d6:79:dc:fe:62:a1:d2:69:42:2e: 3e:8f:18:77:b9:e7:04:17:44:68:be:58:0e:f7:ac: 84:a6:52:c4:d3:cc:f7:11:e0:55:f4:f7:21:22:9f: 50:7d:0d:ac:7c:9b:5f:a7:fe:56:e4:2a:3c:ad:52: 3c:e6:82:88:39:1e:4d:ba:ea:52:00:48:32:bb:71: b8:50:f3:9e:c3:f0:35:47:22:9e:34:f3:9b:50:ad: 9c:ca:d0:3b:97:cd:7e:1f:3c:e3:0e:3f:d3:8e:68: 78:83:d7:04:cc:40:4e:9c:92:f4:05:30:d2:8e:1c: 4d:b5:63:0a:2b:2b:06:ac:06:53:32:a6:2b:3b:68: 51:60:a5:24:57:1c:1f:7f:25:83:e7:8c:68:9f:9b: 2f:e8:e6:7f:f1:5e:f6:e1:f5:85:ea:0d:30:11:94: 10:66:e6:7b:37:12:81:51:6c:81:7d:ce:f6:d1:c8: fa:c4:4c:46:8f:ed:6e:95:a6:45:ae:be:a4:88:43: dd:da:2b:61:82:36:51:81:9f:50:65:f4:4d:03:d2: 8a:d6:c5:5a:4f:71:2b:70:18:98:ee:d5:80:99:8a: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C0:DE:5F:6D:07:77:93:5F:12:48:4E:C1:95:2C:B8:59:D8:C9:BE X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9c:c3:9c:9d:de:32:4c:23:ab:a4:68:4a:8f:42:91:f4:41: c4:a5:98:6c:fc:71:2e:54:63:88:16:12:67:30:2b:b9:52:94: 94:58:02:b5:c9:8b:d3:77:6b:f6:9e:df:13:5b:bb:d2:e1:4b: 25:a0:38:31:b0:9f:fc:d1:1d:78:91:3a:cd:2f:1f:ee:af:76: ba:7b:20:fa:4b:41:ac:0d:7a:1b:d0:0d:91:a8:4f:a5:3b:c4: 8c:47:03:46:90:0f:8b:53:55:a0:31:5d:84:9f:85:2d:b9:07: 32:ab:b1:eb:d3:f8:c3:f8:74:2a:73:df:49:7a:e9:5f:32:52: d6:34:f8:34:c1:96:ab:b9:9c:d0:bf:78:5b:09:b9:e4:ef:92: 25:69:3c:c2:87:26:58:c7:10:0b:eb:03:8f:c8:60:d6:3f:1e: 45:ca:33:05:e9:5f:b4:ee:1c:c4:b3:ae:ea:be:9c:47:e8:1a: 8d:f0:f4:66:56:ef:35:ea:4f:61:20:0d:4e:7d:37:21:0a:56: aa:f0:fe:06:d9:40:f4:a1:8a:b4:33:a7:4b:b9:98:49:de:e0: 33:c7:2f:90:0a:f1:ce:bd:61:1b:ad:a2:6c:2d:7d:4e:45:13: 35:fd:e3:5e:9b:fd:52:e6:4d:de:1a:5f:7f:3e:2c:93:1c:1e: 0c:77:89:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYd9rk8nMgI14QZN5vDH59AzL/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTEyMDIwMTA3MzFaFw0yNTEyMDUwNTU2MzFaMDMxMTAvBgNV BAMTKEZCQzBERTVGNkQwNzc3OTM1RjEyNDg0RUMxOTUyQ0I4NTlEOEM5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7BqJ/kKYn60q2tv+Ule4E7qW bpNGKMKR53QbusWLzCf51nnc/mKh0mlCLj6PGHe55wQXRGi+WA73rISmUsTTzPcR 4FX09yEin1B9Dax8m1+n/lbkKjytUjzmgog5Hk266lIASDK7cbhQ857D8DVHIp40 85tQrZzK0DuXzX4fPOMOP9OOaHiD1wTMQE6ckvQFMNKOHE21YworKwasBlMypis7 aFFgpSRXHB9/JYPnjGifmy/o5n/xXvbh9YXqDTARlBBm5ns3EoFRbIF9zvbRyPrE TEaP7W6VpkWuvqSIQ93aK2GCNlGBn1Bl9E0D0orWxVpPcStwGJju1YCZisNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+8DeX20Hd5NfEkhOwZUsuFnYyb4wHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAacw5yd3jJMI6ukaEqPQpH0QcSlmGz8cS5U Y4gWEmcwK7lSlJRYArXJi9N3a/ae3xNbu9LhSyWgODGwn/zRHXiROs0vH+6vdrp7 IPpLQawNehvQDZGoT6U7xIxHA0aQD4tTVaAxXYSfhS25BzKrsevT+MP4dCpz30l6 6V8yUtY0+DTBlqu5nNC/eFsJueTvkiVpPMKHJljHEAvrA4/IYNY/HkXKMwXpX7Tu HMSzruq+nEfoGo3w9GZW7zXqT2EgDU59NyEKVqrw/gbZQPShirQzp0u5mEne4DPH L5AK8c69YRutomwtfU5FEzX9416b/VLmTd4aX38+LJMcHgx3iX4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:30 2025 by rpki-client