This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: Vkyp3P0F/HM2/qNZeAqif9L+2+slaQ9H5jeL2Bkwp1I= Subject key identifier: 25:DD:ED:23:CF:51:EF:7C:AF:A8:C7:06:A6:80:7C:27:15:46:37:36 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 62ED05E6E175537422D31E6352667A45DF2B36B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: FA Signing time: Mon 01 Dec 2025 08:42:27 +0000 Manifest this update: Mon 01 Dec 2025 08:37:27 +0000 Manifest next update: Thu 04 Dec 2025 18:36:27 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: 28VrlULhfLJHoELwcO3uPND+lQQ8VHFDyFqvNDeaIkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ed:05:e6:e1:75:53:74:22:d3:1e:63:52:66:7a:45:df:2b:36:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Dec 1 08:37:27 2025 GMT Not After : Dec 4 18:36:27 2025 GMT Subject: CN=25DDED23CF51EF7CAFA8C706A6807C2715463736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:c1:45:84:21:79:b9:7f:92:1b:b6:1b:89: 68:0d:a5:dd:6d:21:a8:81:75:7e:36:51:6f:7b:c0: fc:5e:df:8d:41:de:03:88:4d:d9:4a:02:18:90:85: 19:0e:a6:d7:b6:8b:a3:49:09:85:66:22:50:e8:c1: 4b:28:aa:eb:6b:f9:95:b0:1d:10:ef:ff:7f:de:f5: ac:6b:14:40:45:7b:fd:31:32:78:e1:cd:17:e3:a0: c1:f0:48:3c:a9:66:67:b0:1f:14:dc:47:59:12:9f: c1:2b:33:cd:66:2c:e9:a0:29:7e:7c:63:9b:50:75: 5c:0a:9e:81:45:cd:56:e9:51:64:1a:fd:7c:c5:8c: d1:94:ee:8f:c9:4d:6b:4b:bc:5f:49:05:ba:74:e8: b3:f3:2e:61:54:5a:7f:bd:85:eb:95:94:72:d9:28: 85:33:d7:42:ab:6a:84:56:0f:0c:b7:e0:cd:e2:03: 98:3b:8b:10:0a:07:08:e5:67:18:47:10:35:02:51: 0c:0a:db:01:81:d2:2a:32:3b:a8:3f:17:0c:06:e7: 09:82:e1:66:e9:d1:53:0e:4a:48:00:1c:f4:90:42: 19:6b:1e:f6:eb:5f:c1:ad:de:4d:4c:57:85:de:12: 93:cb:25:d9:b3:75:ef:f7:20:6a:d8:6f:df:ef:56: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DD:ED:23:CF:51:EF:7C:AF:A8:C7:06:A6:80:7C:27:15:46:37:36 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:07:e0:ee:18:f2:95:f8:c1:ec:8d:19:5d:e4:dd:0b:18:e3: 64:cb:98:6d:83:44:39:b2:10:5e:dd:14:fa:79:57:95:ed:21: cc:dd:50:29:f0:74:df:ab:fc:fd:69:13:e3:d8:06:f6:08:af: 75:a2:d0:33:b1:33:0d:97:e6:53:32:72:61:c9:83:85:f5:25: 8d:78:ea:0a:de:75:2f:c9:d7:9c:98:1a:29:1d:d4:e6:6c:ae: 67:e2:a4:31:a4:02:19:6d:2a:06:3c:b2:85:a8:a1:f2:08:75: 48:c8:c5:a3:2b:ec:b9:41:04:6f:5f:22:e2:7a:4f:7d:de:bb: 8a:f2:78:2c:d9:b7:5c:62:02:7c:3a:9f:e8:d8:b2:67:92:e8: ba:24:c8:3d:53:20:b1:1e:e9:10:41:57:dd:09:d9:b4:39:e8: 2d:b4:2a:c9:b4:21:3e:df:b5:4d:c6:16:02:14:38:81:a5:01: 97:b2:2e:07:41:e2:24:35:f9:6f:5b:1a:9a:3d:10:0e:15:8a: 43:b1:83:2b:eb:d0:57:5f:61:04:48:f3:65:6c:83:06:53:cd: 09:8a:18:45:2c:22:cc:c2:bb:fd:84:9b:79:94:09:fb:5b:55: f2:58:20:09:a7:f2:42:94:4b:84:12:b2:97:b6:e2:18:05:38: 8d:ee:1c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYu0F5uF1U3Qi0x5jUmZ6Rd8rNrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTEyMDEwODM3MjdaFw0yNTEyMDQxODM2MjdaMDMxMTAvBgNV BAMTKDI1RERFRDIzQ0Y1MUVGN0NBRkE4QzcwNkE2ODA3QzI3MTU0NjM3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdo8FFhCF5uX+SG7YbiWgNpd1t IaiBdX42UW97wPxe341B3gOITdlKAhiQhRkOpte2i6NJCYVmIlDowUsoqutr+ZWw HRDv/3/e9axrFEBFe/0xMnjhzRfjoMHwSDypZmewHxTcR1kSn8ErM81mLOmgKX58 Y5tQdVwKnoFFzVbpUWQa/XzFjNGU7o/JTWtLvF9JBbp06LPzLmFUWn+9heuVlHLZ KIUz10KraoRWDwy34M3iA5g7ixAKBwjlZxhHEDUCUQwK2wGB0ioyO6g/FwwG5wmC 4Wbp0VMOSkgAHPSQQhlrHvbrX8Gt3k1MV4XeEpPLJdmzde/3IGrYb9/vVvKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJd3tI89R73yvqMcGpoB8JxVGNzYwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEH4O4Y8pX4weyNGV3k3QsY42TLmG2DRDmy EF7dFPp5V5XtIczdUCnwdN+r/P1pE+PYBvYIr3Wi0DOxMw2X5lMycmHJg4X1JY14 6gredS/J15yYGikd1OZsrmfipDGkAhltKgY8soWoofIIdUjIxaMr7LlBBG9fIuJ6 T33eu4ryeCzZt1xiAnw6n+jYsmeS6LokyD1TILEe6RBBV90J2bQ56C20Ksm0IT7f tU3GFgIUOIGlAZeyLgdB4iQ1+W9bGpo9EA4VikOxgyvr0FdfYQRI82VsgwZTzQmK GEUsIszCu/2Em3mUCftbVfJYIAmn8kKUS4QSspe24hgFOI3uHF8= -----END CERTIFICATE-----Generated at Wed Dec 3 17:14:42 2025 by rpki-client