This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: EWFc7bJbxmTN47DWq5hSh25WzlxsG7Auo+SN0D045IA= Subject key identifier: 4F:F4:D1:3A:56:47:FD:32:9D:9D:1D:C9:53:02:C0:9B:B6:D7:1B:7C Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 15F736A0CB90AEA1F9D7DDCFE8D7970A3350FC85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01B7 Signing time: Wed 17 Dec 2025 13:20:38 +0000 Manifest this update: Wed 17 Dec 2025 13:15:38 +0000 Manifest next update: Sun 21 Dec 2025 00:05:38 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 2: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 4: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: X4Yw3//VpFu/kIMJoEST7Rwc5jF5TdqE1aGResmrK1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:36:a0:cb:90:ae:a1:f9:d7:dd:cf:e8:d7:97:0a:33:50:fc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Dec 17 13:15:38 2025 GMT Not After : Dec 21 00:05:38 2025 GMT Subject: CN=4FF4D13A5647FD329D9D1DC95302C09BB6D71B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:b2:21:dc:81:6f:e5:5f:4d:fb:fe:70:76: 80:11:1c:bb:2a:20:78:c4:6a:e3:a8:55:1e:9a:ae: b4:1d:47:67:27:4a:dc:83:a7:9d:ee:16:12:62:bf: 41:c7:cd:45:70:76:fc:44:cf:4e:ac:bb:8c:3c:08: 4c:c5:35:11:b2:d6:4d:21:0d:ad:3b:92:d8:be:61: 1b:c1:d7:a1:2b:c3:5d:f1:b7:26:a6:65:f8:ae:f8: 20:6c:ae:1b:56:56:11:1c:dc:1d:55:ec:07:09:de: 71:69:03:84:c6:4e:15:e3:15:53:5a:93:06:e1:34: 0a:0f:88:74:05:98:c5:6c:2d:d9:f1:26:e8:3e:13: 07:8e:2f:41:b7:b8:8f:63:16:52:6f:55:1c:48:4c: ba:b6:64:ad:3f:20:9a:dc:07:7f:8e:8b:08:7e:01: 0d:43:5c:53:0c:a1:ea:75:9c:2d:a5:12:62:53:b7: 29:c8:48:e8:2c:77:c1:2e:65:9e:af:ec:be:81:cd: 2c:0c:86:d9:69:13:90:99:5c:34:d7:38:08:37:dc: f9:84:1a:2a:8b:e0:2b:da:ab:06:ef:d7:db:33:2d: d3:a7:3b:61:d6:d5:15:bb:79:32:6c:d8:b4:73:30: a9:b9:30:c8:6a:79:66:de:03:12:24:b1:18:15:52: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F4:D1:3A:56:47:FD:32:9D:9D:1D:C9:53:02:C0:9B:B6:D7:1B:7C X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8c:9a:35:37:7f:6b:29:a7:63:2b:fb:af:99:13:80:53:66: cc:3c:e4:0f:de:81:49:24:89:66:64:bf:00:ad:ce:1f:4f:5f: 78:d4:d2:a5:ab:55:51:64:e9:3e:d4:db:ad:dd:2e:55:08:4c: b8:57:b6:e2:ce:a2:1e:e2:2b:e1:c4:70:12:c7:cf:d5:ef:ff: 82:d6:90:13:14:74:ae:1d:2f:07:a7:59:17:79:19:85:b2:27: 63:37:db:6f:df:42:04:9d:90:ad:58:3d:a0:7c:de:c4:b7:76: 67:97:17:e0:28:f9:8f:a0:ee:d9:7f:1f:ae:30:a3:bc:3d:7a: 48:1b:7e:ec:4b:ab:f0:a4:24:19:e5:2d:1c:43:ce:e9:df:65: a6:49:28:9c:8f:12:5e:9a:20:bd:df:b1:85:2c:72:42:06:af: bd:c9:16:a5:4a:48:a1:56:27:9f:d4:e8:89:d9:cf:8a:28:ce: 89:b3:4b:4b:16:21:c0:64:fe:ea:6c:79:fe:ca:64:f9:93:23: c8:f8:94:3a:0a:ce:46:00:54:2c:56:26:d2:55:a6:bc:1b:74: e6:2f:1d:99:17:ea:7d:4a:80:96:c2:73:43:c1:7c:63:59:64: e9:4e:e1:2e:cf:fd:01:e2:ef:c5:44:92:d5:45:59:91:7a:eb: 34:e4:78:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfc2oMuQrqH5193P6NeXCjNQ/IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTEyMTcxMzE1MzhaFw0yNTEyMjEwMDA1MzhaMDMxMTAvBgNV BAMTKDRGRjREMTNBNTY0N0ZEMzI5RDlEMURDOTUzMDJDMDlCQjZENzFCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0bIh3IFv5V9N+/5wdoARHLsq IHjEauOoVR6arrQdR2cnStyDp53uFhJiv0HHzUVwdvxEz06su4w8CEzFNRGy1k0h Da07kti+YRvB16Erw13xtyamZfiu+CBsrhtWVhEc3B1V7AcJ3nFpA4TGThXjFVNa kwbhNAoPiHQFmMVsLdnxJug+EweOL0G3uI9jFlJvVRxITLq2ZK0/IJrcB3+Oiwh+ AQ1DXFMMoep1nC2lEmJTtynISOgsd8EuZZ6v7L6BzSwMhtlpE5CZXDTXOAg33PmE GiqL4Cvaqwbv19szLdOnO2HW1RW7eTJs2LRzMKm5MMhqeWbeAxIksRgVUjy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/TROlZH/TKdnR3JUwLAm7bXG3wwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOMmjU3f2spp2Mr+6+ZE4BTZsw85A/egUkk iWZkvwCtzh9PX3jU0qWrVVFk6T7U263dLlUITLhXtuLOoh7iK+HEcBLHz9Xv/4LW kBMUdK4dLwenWRd5GYWyJ2M322/fQgSdkK1YPaB83sS3dmeXF+Ao+Y+g7tl/H64w o7w9ekgbfuxLq/CkJBnlLRxDzunfZaZJKJyPEl6aIL3fsYUsckIGr73JFqVKSKFW J5/U6InZz4oozomzS0sWIcBk/upsef7KZPmTI8j4lDoKzkYAVCxWJtJVprwbdOYv HZkX6n1KgJbCc0PBfGNZZOlO4S7P/QHi78VEktVFWZF66zTkeDU= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:42 2025 by rpki-client