This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: MQAIxDEpHXEBvMttvQ7ygDZV+xneEZ9e6nDdnGiMjlo= Subject key identifier: 44:B9:E3:50:32:8C:97:0B:C4:AA:FD:D5:E1:47:5A:46:09:1B:8E:B9 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 1921491C095FB624982131FF1225D19AB367D22E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: FE Signing time: Tue 02 Dec 2025 12:42:29 +0000 Manifest this update: Tue 02 Dec 2025 12:37:29 +0000 Manifest next update: Fri 05 Dec 2025 14:29:29 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: fejSKDBHHNXwznk5lOjTQw6+6Gd+e6+Z5XPtXXuv6+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:49:1c:09:5f:b6:24:98:21:31:ff:12:25:d1:9a:b3:67:d2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Dec 2 12:37:29 2025 GMT Not After : Dec 5 14:29:29 2025 GMT Subject: CN=44B9E350328C970BC4AAFDD5E1475A46091B8EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:1e:e9:6d:49:d0:a3:dc:f6:dc:69:54:69: b6:c4:df:25:a6:ae:27:41:dd:49:c2:75:e3:7a:21: 14:8e:56:78:a4:c6:8b:b6:6a:3f:05:9d:d5:26:d6: f1:ea:f2:b2:57:12:62:bd:05:40:7d:8b:d3:43:81: ff:98:80:7d:e8:55:65:89:7f:af:98:cf:a1:0a:fd: f7:f3:fe:81:4b:6c:fd:72:0e:19:4a:b0:c9:58:26: d5:87:a9:84:9c:3c:7a:5b:65:ba:8b:80:33:11:77: 4d:40:d2:5c:d4:de:9b:2e:9f:1a:87:9a:0f:0d:77: ee:e1:22:06:19:eb:e4:8d:1f:2c:df:b3:a8:ca:98: bf:0b:1b:e1:58:5b:14:73:ed:06:b6:be:20:22:f1: c3:3c:97:eb:07:7e:11:f5:60:6c:c4:e9:75:56:25: 07:70:ed:5a:43:8e:29:e8:bb:d7:b5:e9:69:60:7e: 06:2a:ab:e5:93:83:b7:f4:ef:af:f6:cd:4c:29:58: 8a:51:ff:52:25:8c:44:92:01:80:74:22:4f:97:8c: ab:46:dc:c9:33:ae:15:44:a2:bb:25:39:aa:d2:07: b2:07:66:0b:a5:af:d8:bc:a3:3d:15:b5:2e:e5:a8: 55:15:f3:c4:26:46:64:f4:3d:58:9b:c8:2c:0e:0f: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B9:E3:50:32:8C:97:0B:C4:AA:FD:D5:E1:47:5A:46:09:1B:8E:B9 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:73:7a:7d:48:c1:48:8c:ad:20:25:b5:2b:0b:c2:82:76:85: 95:9f:8d:40:ec:eb:1f:57:e3:b0:4b:10:a0:a3:26:2b:dd:65: 27:e8:8d:2f:8a:dd:53:de:ac:db:6f:75:d5:09:5e:cf:ec:a7: dd:ff:72:5d:be:c3:a5:63:ef:dd:fa:40:bd:a3:21:08:28:f7: 70:ea:3c:a6:bd:01:c4:f0:5c:a2:e0:ed:eb:c4:f8:72:0d:6d: c7:5b:37:34:39:b6:3b:ff:fe:99:83:0a:50:6f:24:95:98:44: 91:26:aa:fc:39:63:c2:fc:a9:59:8e:88:be:b0:d8:0d:1f:c6: ea:77:e0:13:64:7b:54:0d:53:bd:a9:04:63:d7:22:af:ee:70: ab:82:23:ca:77:c6:87:92:45:ea:84:2d:4c:7d:57:c0:88:a7: 87:c3:7a:69:fb:bb:83:c9:47:5d:b9:fe:72:a3:3e:9a:6a:9d: 8e:29:3f:22:0d:9d:6d:4b:00:dc:87:0c:23:b3:cc:02:89:0e: 24:f5:16:e0:01:e0:55:84:a4:12:09:15:5f:b9:8d:3c:f9:e6: 69:d8:42:1d:08:aa:d2:cd:59:28:d2:ce:3f:dd:a3:cd:1e:53: 5d:cc:5f:54:f3:c6:f2:95:4a:be:c4:d9:c0:65:1b:7f:c4:61: 56:05:b8:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSFJHAlftiSYITH/EiXRmrNn0i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTEyMDIxMjM3MjlaFw0yNTEyMDUxNDI5MjlaMDMxMTAvBgNV BAMTKDQ0QjlFMzUwMzI4Qzk3MEJDNEFBRkRENUUxNDc1QTQ2MDkxQjhFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+R7pbUnQo9z23GlUabbE3yWm ridB3UnCdeN6IRSOVnikxou2aj8FndUm1vHq8rJXEmK9BUB9i9NDgf+YgH3oVWWJ f6+Yz6EK/ffz/oFLbP1yDhlKsMlYJtWHqYScPHpbZbqLgDMRd01A0lzU3psunxqH mg8Nd+7hIgYZ6+SNHyzfs6jKmL8LG+FYWxRz7Qa2viAi8cM8l+sHfhH1YGzE6XVW JQdw7VpDjinou9e16WlgfgYqq+WTg7f076/2zUwpWIpR/1IljESSAYB0Ik+XjKtG 3MkzrhVEorslOarSB7IHZgulr9i8oz0VtS7lqFUV88QmRmT0PVibyCwODwHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURLnjUDKMlwvEqv3V4UdaRgkbjrkwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFzen1IwUiMrSAltSsLwoJ2hZWfjUDs6x9X 47BLEKCjJivdZSfojS+K3VPerNtvddUJXs/sp93/cl2+w6Vj7936QL2jIQgo93Dq PKa9AcTwXKLg7evE+HINbcdbNzQ5tjv//pmDClBvJJWYRJEmqvw5Y8L8qVmOiL6w 2A0fxup34BNke1QNU72pBGPXIq/ucKuCI8p3xoeSReqELUx9V8CIp4fDemn7u4PJ R125/nKjPppqnY4pPyINnW1LANyHDCOzzAKJDiT1FuAB4FWEpBIJFV+5jTz55mnY Qh0IqtLNWSjSzj/do80eU13MX1TzxvKVSr7E2cBlG3/EYVYFuKI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:55 2025 by rpki-client