This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: JFoLCVh/n6Cz/gKHCHayyV8CcH365FYsz0qU72UyaM4= Subject key identifier: B4:AA:91:77:FA:45:00:6C:04:20:16:C3:B8:C5:C3:E9:0D:1C:76:1D Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 10B4A4B352BE12F7D970AEA1016DD4FC3DB1B0BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0104 Signing time: Sat 20 Dec 2025 03:53:08 +0000 Manifest this update: Sat 20 Dec 2025 03:48:08 +0000 Manifest next update: Tue 23 Dec 2025 09:27:08 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: Q5fmYL5LNXIVDER6N9uJ3fGpg4MZWgd5Lf4nAm/jHz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b4:a4:b3:52:be:12:f7:d9:70:ae:a1:01:6d:d4:fc:3d:b1:b0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Dec 20 03:48:08 2025 GMT Not After : Dec 23 09:27:08 2025 GMT Subject: CN=B4AA9177FA45006C042016C3B8C5C3E90D1C761D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:50:83:2a:41:8a:56:63:7b:c1:bf:f5:af: ab:55:c3:ee:58:40:34:97:76:ac:43:00:de:98:c7: b6:24:65:8a:b9:db:3a:be:33:27:0d:04:ba:1a:bc: 68:ee:7c:4e:77:f5:0f:5f:05:96:6c:7c:1e:39:8d: 4a:be:49:3d:e8:c6:79:53:55:e3:9d:bc:27:ef:0a: e2:5d:47:86:ad:c6:e9:fa:ab:c3:ad:95:b3:e0:bf: 86:e8:ee:45:70:dc:8f:60:9f:fb:d8:6f:36:24:fe: a6:03:c4:58:33:79:e2:5c:79:e3:4c:df:50:5c:bc: da:7a:52:9f:1e:7d:45:b8:7c:bd:64:3b:d8:6a:44: 9f:2c:cc:c2:03:28:44:2c:f7:44:f7:d6:32:f2:b3: 29:bb:e0:d4:1e:46:92:80:67:5f:94:be:ab:74:bd: 07:b1:2d:9e:5c:7e:85:2d:80:64:0c:a9:fa:b6:15: 76:e8:e3:9e:76:13:96:b1:2d:6f:94:ce:69:ec:aa: 4b:26:39:fc:9e:5f:e2:84:b4:c9:a9:a7:27:ba:68: b6:73:9a:1a:8e:c7:ae:8c:01:da:cb:dd:af:5a:2f: fd:5c:eb:ca:08:b9:37:ac:dd:52:9b:32:fd:e3:8c: 6b:e5:c6:8a:7c:b6:27:10:73:18:b2:0b:d3:8b:fc: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:91:77:FA:45:00:6C:04:20:16:C3:B8:C5:C3:E9:0D:1C:76:1D X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f1:56:81:b6:d8:5b:fa:25:a6:fa:f2:8a:73:4d:e7:40:17: 16:44:8c:ba:d4:28:65:21:d3:d7:9d:5c:a9:86:5d:26:7b:5b: 99:1e:72:e1:0a:99:1c:63:c3:f2:09:1d:75:0a:d7:86:7c:be: 11:fc:6e:36:2a:ae:6a:84:af:d4:15:7d:90:aa:ec:12:06:b1: 40:58:b7:0e:3c:b3:3b:f6:32:1a:69:15:eb:57:0d:63:19:9d: 27:84:73:73:e5:a5:1b:ab:5f:b4:2f:52:20:82:9f:b4:02:03: bf:8b:23:6d:0f:8c:39:e2:20:41:92:01:e1:eb:fd:c5:33:8b: 82:ce:0f:c2:25:8e:76:67:c6:5d:e4:99:4e:d7:e2:4a:e4:ba: e0:db:24:8f:f0:f4:b8:25:ca:5f:42:66:42:09:54:20:f9:9e: 7b:c1:6f:e7:25:4a:ef:2e:4e:ee:4e:6f:2d:3c:fb:99:3e:d3: 8a:f1:24:f3:52:e2:3f:5f:53:cc:e7:b2:51:7e:64:ee:5d:f5: 16:7e:37:1c:aa:67:11:28:6f:fe:cb:9e:ca:98:cc:5b:18:08: e6:46:e5:ee:cd:98:fd:c5:b9:d5:49:16:2b:ca:03:93:41:58: 3c:90:94:c9:fb:07:d6:fa:02:39:4d:5a:c0:a5:6f:0e:df:b1: 64:e6:40:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELSks1K+EvfZcK6hAW3U/D2xsLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTEyMjAwMzQ4MDhaFw0yNTEyMjMwOTI3MDhaMDMxMTAvBgNV BAMTKEI0QUE5MTc3RkE0NTAwNkMwNDIwMTZDM0I4QzVDM0U5MEQxQzc2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkVCDKkGKVmN7wb/1r6tVw+5Y QDSXdqxDAN6Yx7YkZYq52zq+MycNBLoavGjufE539Q9fBZZsfB45jUq+ST3oxnlT VeOdvCfvCuJdR4atxun6q8OtlbPgv4bo7kVw3I9gn/vYbzYk/qYDxFgzeeJceeNM 31BcvNp6Up8efUW4fL1kO9hqRJ8szMIDKEQs90T31jLysym74NQeRpKAZ1+Uvqt0 vQexLZ5cfoUtgGQMqfq2FXbo4552E5axLW+UzmnsqksmOfyeX+KEtMmppye6aLZz mhqOx66MAdrL3a9aL/1c68oIuTes3VKbMv3jjGvlxop8ticQcxiyC9OL/AsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKqRd/pFAGwEIBbDuMXD6Q0cdh0wHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvxVoG22Fv6Jab68opzTedAFxZEjLrUKGUh 09edXKmGXSZ7W5kecuEKmRxjw/IJHXUK14Z8vhH8bjYqrmqEr9QVfZCq7BIGsUBY tw48szv2MhppFetXDWMZnSeEc3PlpRurX7QvUiCCn7QCA7+LI20PjDniIEGSAeHr /cUzi4LOD8IljnZnxl3kmU7X4krkuuDbJI/w9Lglyl9CZkIJVCD5nnvBb+clSu8u Tu5Oby08+5k+04rxJPNS4j9fU8znslF+ZO5d9RZ+NxyqZxEob/7LnsqYzFsYCOZG 5e7NmP3FudVJFivKA5NBWDyQlMn7B9b6AjlNWsClbw7fsWTmQIY= -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:08 2025 by rpki-client