This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: 4guBv+/AvSHlboCe5Mn9WIJE6LwNOPX6EYPD3d/N8j4= Subject key identifier: 91:E5:F1:B7:4C:17:94:7F:B0:D3:17:74:7B:D1:EE:0D:B4:8E:A1:5D Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 56A6C3B3DA6039B4F024838E63CB7D5E2591D9BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 021F Signing time: Mon 01 Dec 2025 21:52:27 +0000 Manifest this update: Mon 01 Dec 2025 21:47:27 +0000 Manifest next update: Thu 04 Dec 2025 22:01:27 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: RLLPWay/lhXrflo+pw5Y/g/BNFy9zwqnaVw0kW83RLE=) 4: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a6:c3:b3:da:60:39:b4:f0:24:83:8e:63:cb:7d:5e:25:91:d9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Dec 1 21:47:27 2025 GMT Not After : Dec 4 22:01:27 2025 GMT Subject: CN=91E5F1B74C17947FB0D317747BD1EE0DB48EA15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:14:9c:a1:2c:0f:67:e0:11:48:50:a2:ca: 4d:93:5e:09:a8:c4:99:7c:08:0c:67:3c:c6:e9:b0: fc:6d:32:ba:0f:2c:33:db:88:a9:86:2e:7f:40:71: 0d:9b:63:bd:5f:ea:b0:74:2c:49:24:ad:f3:cd:b3: 2f:72:5f:a4:ef:2b:11:21:0a:35:e8:4e:4a:8e:d3: 93:8f:15:37:2b:7c:ed:fe:38:a1:20:3e:8b:53:da: 56:1a:6a:0f:aa:cd:50:c3:0f:be:18:a9:98:e8:e7: 60:61:b6:0a:2a:0b:5d:0c:2e:8b:ee:ae:11:57:48: ee:bb:a6:2a:4e:48:b2:6c:59:12:1c:c8:60:78:87: 03:a3:07:e4:32:38:69:c8:86:40:e8:37:40:46:18: bf:fe:35:e6:76:90:f8:9e:0d:d4:e7:fc:fd:a7:13: ac:a6:3c:63:db:dd:db:6e:af:e1:a9:7b:87:3a:45: 5c:4e:1d:4d:a8:ea:b6:f4:20:fa:08:30:ca:e7:8b: 22:96:3d:11:b1:bb:6f:a9:32:64:98:e8:40:90:ab: 55:fb:97:a2:2e:88:62:bb:ee:47:e1:d4:a4:69:6c: 5e:71:d9:a6:d5:16:6c:db:4e:63:d4:b0:83:e5:80: d8:10:a9:8d:91:31:41:37:71:9d:2b:a6:4e:cd:24: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:F1:B7:4C:17:94:7F:B0:D3:17:74:7B:D1:EE:0D:B4:8E:A1:5D X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:36:10:d9:01:56:51:f9:24:4b:46:94:c8:5a:5b:9a:a6:5f: 6f:f2:a0:fe:0a:33:6b:3f:52:45:23:a9:a4:c9:dd:ee:f5:68: 23:ee:8f:73:c0:ef:7a:24:99:49:15:b3:62:a6:e8:22:82:fd: c0:fe:e4:91:ec:e9:19:bc:a5:d0:1f:bf:df:5d:65:13:09:4d: 8a:e7:6d:bc:96:49:7d:fb:4b:fb:ea:c6:9c:b5:13:d3:9d:b3: e5:c9:25:c6:ed:2e:a2:4e:e2:ad:aa:42:30:f9:78:ce:53:59: 41:12:8e:75:bc:be:a6:9b:d4:b0:17:02:eb:b4:b4:c4:df:2c: 3d:d1:46:07:21:b6:93:27:5c:06:f6:3b:03:6d:50:1a:77:93: 97:23:7a:c0:ac:2b:be:b3:62:3c:32:b2:81:a6:b5:7a:61:87: f2:27:25:53:c8:cf:f3:26:ea:8f:2d:09:04:27:36:8d:0a:1a: fa:de:87:59:55:dc:53:2e:e4:3f:14:05:ea:1f:ab:d1:4e:ca: 6a:d7:c5:18:1a:1c:ad:f6:ba:1f:6b:d6:3e:20:82:9f:9a:c3: e8:7d:de:15:8d:51:09:c4:c9:03:e2:f2:17:30:16:59:5d:6e: ac:d0:23:26:91:b1:a6:99:67:4e:72:d3:25:6d:31:f4:ee:9f: 34:cc:34:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqbDs9pgObTwJIOOY8t9XiWR2bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTEyMDEyMTQ3MjdaFw0yNTEyMDQyMjAxMjdaMDMxMTAvBgNV BAMTKDkxRTVGMUI3NEMxNzk0N0ZCMEQzMTc3NDdCRDFFRTBEQjQ4RUExNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZxScoSwPZ+ARSFCiyk2TXgmo xJl8CAxnPMbpsPxtMroPLDPbiKmGLn9AcQ2bY71f6rB0LEkkrfPNsy9yX6TvKxEh CjXoTkqO05OPFTcrfO3+OKEgPotT2lYaag+qzVDDD74YqZjo52BhtgoqC10MLovu rhFXSO67pipOSLJsWRIcyGB4hwOjB+QyOGnIhkDoN0BGGL/+NeZ2kPieDdTn/P2n E6ymPGPb3dtur+Gpe4c6RVxOHU2o6rb0IPoIMMrniyKWPRGxu2+pMmSY6ECQq1X7 l6IuiGK77kfh1KRpbF5x2abVFmzbTmPUsIPlgNgQqY2RMUE3cZ0rpk7NJJYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeXxt0wXlH+w0xd0e9HuDbSOoV0wHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk2ENkBVlH5JEtGlMhaW5qmX2/yoP4KM2s/ UkUjqaTJ3e71aCPuj3PA73okmUkVs2Km6CKC/cD+5JHs6Rm8pdAfv99dZRMJTYrn bbyWSX37S/vqxpy1E9Ods+XJJcbtLqJO4q2qQjD5eM5TWUESjnW8vqab1LAXAuu0 tMTfLD3RRgchtpMnXAb2OwNtUBp3k5cjesCsK76zYjwysoGmtXphh/InJVPIz/Mm 6o8tCQQnNo0KGvreh1lV3FMu5D8UBeofq9FOymrXxRgaHK32uh9r1j4ggp+aw+h9 3hWNUQnEyQPi8hcwFlldbqzQIyaRsaaZZ05y0yVtMfTunzTMNAE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:44 2025 by rpki-client