This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: HI5TJGHUWdpbRoACA+60YVGeARw/JSh8br79cGho9NE= Subject key identifier: 2A:42:A4:18:D0:70:5B:CA:0B:55:64:31:C4:4D:C6:F3:13:E5:0E:E4 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 3EE50DD9D0A6247096F1A8409D19D2EEBC30C113 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 02AB Signing time: Tue 02 Dec 2025 22:01:07 +0000 Manifest this update: Tue 02 Dec 2025 21:56:07 +0000 Manifest next update: Sat 06 Dec 2025 05:39:07 +0000 Files and hashes: 1: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) 2: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: KR0GvAUFCzbDHeU4ebTA9DBkSl0mL7fZrNB5gVSzuVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e5:0d:d9:d0:a6:24:70:96:f1:a8:40:9d:19:d2:ee:bc:30:c1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Dec 2 21:56:07 2025 GMT Not After : Dec 6 05:39:07 2025 GMT Subject: CN=2A42A418D0705BCA0B556431C44DC6F313E50EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:47:15:1a:f2:d8:b3:50:32:75:9e:0c:55: 06:d9:12:a1:6c:30:fd:f1:36:8a:01:22:54:d8:45: db:d2:54:50:f4:7f:a1:00:97:f4:ee:c9:75:50:d8: 21:3a:4a:61:7f:22:91:ee:e0:b1:fb:f8:bb:f1:98: 25:26:c8:bd:a4:35:04:20:b0:fc:9e:4e:c6:ad:df: e4:fe:55:27:da:22:df:04:74:72:75:56:db:92:d6: a3:2f:47:b9:e5:b8:a4:c8:21:85:fe:ae:db:b1:33: 48:89:13:4e:f2:1d:81:f8:52:cf:be:3e:8a:91:69: aa:e2:26:f2:3f:bc:ee:e2:eb:33:94:7b:97:51:92: b8:57:b9:64:19:1b:6c:01:c7:30:ab:33:3d:db:1c: 9f:d4:37:80:5f:62:b7:b6:0c:62:36:2c:ff:b0:ee: 6c:28:f0:1f:ff:45:07:c6:9f:d5:25:0e:64:51:4c: 6b:89:29:1a:03:90:c4:de:10:03:f8:47:f2:e2:b6: 8a:b0:88:71:5e:64:0d:3c:e4:2e:84:7d:9f:cf:d5: 80:42:57:4a:c9:9d:87:04:54:fa:27:e0:fd:8a:9a: 81:72:12:1e:e8:fb:d7:1b:75:f6:4a:21:d0:0c:6c: 21:bb:6e:6e:f8:14:28:f8:80:41:09:26:6b:f2:98: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:42:A4:18:D0:70:5B:CA:0B:55:64:31:C4:4D:C6:F3:13:E5:0E:E4 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:df:9d:66:60:d8:a1:c8:a1:9f:9a:36:8d:a8:7a:a0:8c:f8: 79:0f:ca:44:8d:28:02:54:40:5a:0e:78:8a:68:93:96:00:96: db:f0:3f:c7:e1:0a:b4:de:28:21:db:aa:97:96:ad:e4:8f:99: e4:fb:73:e0:73:15:54:d0:c7:cd:e2:73:99:92:1b:74:0f:a4: fd:d9:f9:63:61:e2:41:4c:a8:e1:eb:96:77:80:9f:e9:46:fb: 0c:3f:be:5c:c7:b8:30:71:c5:3d:66:de:e7:e9:ef:1b:a3:e5: 5c:2a:ce:1a:ad:c1:40:d6:bf:0b:ba:eb:a1:b4:fe:2b:cb:89: b4:67:78:8a:72:0e:39:79:a3:a6:78:8b:83:63:0a:62:50:84: 2c:56:62:01:0b:2b:fd:1d:08:66:0e:9e:4b:6a:a7:b3:0b:be: b5:6e:7c:39:66:d8:ef:15:04:0c:80:1a:ba:14:ef:22:c0:9e: f4:dc:2d:65:be:d0:d9:bc:2e:ea:f9:8a:e7:b3:34:47:f3:9a: 58:61:4f:c1:da:6a:18:5e:98:33:04:6b:43:2f:11:1f:e9:dd: d3:8c:b9:a3:b0:ff:16:03:33:7f:1a:c1:67:3e:80:c4:92:78: 2a:88:99:33:b7:a7:eb:61:57:e4:a2:cb:1f:7f:1a:31:38:c4: 66:95:e9:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuUN2dCmJHCW8ahAnRnS7rwwwRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTEyMDIyMTU2MDdaFw0yNTEyMDYwNTM5MDdaMDMxMTAvBgNV BAMTKDJBNDJBNDE4RDA3MDVCQ0EwQjU1NjQzMUM0NERDNkYzMTNFNTBFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1kcVGvLYs1AydZ4MVQbZEqFs MP3xNooBIlTYRdvSVFD0f6EAl/TuyXVQ2CE6SmF/IpHu4LH7+LvxmCUmyL2kNQQg sPyeTsat3+T+VSfaIt8EdHJ1VtuS1qMvR7nluKTIIYX+rtuxM0iJE07yHYH4Us++ PoqRaariJvI/vO7i6zOUe5dRkrhXuWQZG2wBxzCrMz3bHJ/UN4BfYre2DGI2LP+w 7mwo8B//RQfGn9UlDmRRTGuJKRoDkMTeEAP4R/LitoqwiHFeZA085C6EfZ/P1YBC V0rJnYcEVPon4P2KmoFyEh7o+9cbdfZKIdAMbCG7bm74FCj4gEEJJmvymB4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkKkGNBwW8oLVWQxxE3G8xPlDuQwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7fnWZg2KHIoZ+aNo2oeqCM+HkPykSNKAJU QFoOeIpok5YAltvwP8fhCrTeKCHbqpeWreSPmeT7c+BzFVTQx83ic5mSG3QPpP3Z +WNh4kFMqOHrlneAn+lG+ww/vlzHuDBxxT1m3ufp7xuj5VwqzhqtwUDWvwu666G0 /ivLibRneIpyDjl5o6Z4i4NjCmJQhCxWYgELK/0dCGYOnktqp7MLvrVufDlm2O8V BAyAGroU7yLAnvTcLWW+0Nm8Lur5iuezNEfzmlhhT8HaahhemDMEa0MvER/p3dOM uaOw/xYDM38awWc+gMSSeCqImTO3p+thV+Siyx9/GjE4xGaV6ck= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:43 2025 by rpki-client