This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: SoqH5dBu3QGlC+jgDrIUMz7YaHWT7xCnbLgEalRmBik= Subject key identifier: 2E:D0:C4:23:C1:1E:B4:69:89:B7:55:E9:87:1F:10:3F:65:7E:24:28 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 6AF9B6C50707E190036ADDCAC5F2A70CE990E02C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 04F8 Signing time: Tue 02 Dec 2025 14:02:08 +0000 Manifest this update: Tue 02 Dec 2025 13:57:08 +0000 Manifest next update: Fri 05 Dec 2025 14:07:08 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: tjyLJHnZpOAEz0INud8HbwXGIXcT2IYjFfjplPR0Bv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f9:b6:c5:07:07:e1:90:03:6a:dd:ca:c5:f2:a7:0c:e9:90:e0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Dec 2 13:57:08 2025 GMT Not After : Dec 5 14:07:08 2025 GMT Subject: CN=2ED0C423C11EB46989B755E9871F103F657E2428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:22:15:a9:cb:50:5e:23:9b:54:15:bc:e2: ce:62:95:c4:0c:3e:2b:62:07:bf:90:e7:5f:06:7e: 10:ad:73:1b:b3:50:da:c6:4f:b6:56:c3:04:6a:d4: b0:4d:20:fa:31:a1:59:40:cc:55:51:c9:4e:84:5e: 66:37:3d:a8:70:81:df:ad:89:f5:5c:71:a8:fc:a2: 47:0e:55:e7:ba:cb:b9:05:7d:b5:bb:6f:7c:09:2d: 91:f4:8e:6f:fc:20:a8:95:9f:55:aa:04:96:d6:5c: 3e:b8:8d:4d:7b:9f:2c:61:49:94:01:aa:a8:66:09: 28:33:37:c3:25:c7:19:43:fa:59:f6:73:85:9d:85: 13:2f:c3:25:35:a7:51:8b:b4:44:f5:36:33:5d:73: c1:6f:8c:b7:dd:1c:49:5a:6c:60:f3:81:26:87:99: 9a:a1:5c:07:26:bd:5f:11:3e:a3:62:65:6d:26:19: 3b:5e:eb:3d:1a:37:e7:4c:97:30:0a:24:a6:a5:09: 4b:fb:99:8c:53:c2:fe:db:5b:02:5a:a5:d4:5a:11: db:21:e0:85:12:4c:47:e1:98:a7:59:c1:81:d0:a4: bd:9e:79:cb:46:04:c8:e5:d3:ff:b5:68:11:8f:03: 49:b4:77:f3:db:96:6b:27:df:b4:12:12:1e:0d:72: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:C4:23:C1:1E:B4:69:89:B7:55:E9:87:1F:10:3F:65:7E:24:28 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:37:cf:06:16:48:36:92:1d:b6:c9:7a:12:af:ae:c9:6e: 7f:13:0f:32:0c:aa:81:a8:e6:89:b6:31:4a:60:aa:7f:1d:fe: b0:1f:d9:c7:a5:6c:22:50:04:56:c4:b3:9c:95:8b:76:b1:08: 6c:d8:a4:7c:bd:09:17:ff:15:eb:cc:d1:c8:a9:ae:71:c4:c3: f2:dc:90:60:2f:fb:6e:4b:d2:15:f0:4b:63:53:76:02:6e:3c: 0a:17:34:85:a4:1a:8f:5d:62:f9:6c:09:b5:74:c3:fb:68:ca: 41:23:06:b0:b9:62:4a:8d:90:da:98:04:25:6e:ef:4c:c9:f4: 3e:ce:af:0d:46:5f:f8:ee:4e:00:20:fc:5c:c5:b3:6e:e3:56: e0:ff:f5:f3:c2:09:02:5f:06:f8:7a:3f:51:3d:ef:5b:e7:e3: df:f2:b5:b9:c1:36:2e:e6:f7:89:4e:bd:41:47:75:8c:50:37: 4e:56:30:38:63:6a:4f:22:55:08:e5:d7:d8:77:de:6d:ee:e8: 4b:a5:3d:1a:5b:78:ef:3d:b9:a5:cd:88:f7:6d:8c:ae:78:6e: f2:9f:e9:82:3d:d6:b3:cd:09:0f:19:dd:0b:57:67:bc:a6:41: 44:6a:19:1a:38:10:ca:10:2e:d4:59:a3:8d:72:23:99:cf:2e: 68:dd:47:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavm2xQcH4ZADat3KxfKnDOmQ4CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTEyMDIxMzU3MDhaFw0yNTEyMDUxNDA3MDhaMDMxMTAvBgNV BAMTKDJFRDBDNDIzQzExRUI0Njk4OUI3NTVFOTg3MUYxMDNGNjU3RTI0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNSIVqctQXiObVBW84s5ilcQM PitiB7+Q518GfhCtcxuzUNrGT7ZWwwRq1LBNIPoxoVlAzFVRyU6EXmY3Pahwgd+t ifVccaj8okcOVee6y7kFfbW7b3wJLZH0jm/8IKiVn1WqBJbWXD64jU17nyxhSZQB qqhmCSgzN8MlxxlD+ln2c4WdhRMvwyU1p1GLtET1NjNdc8FvjLfdHElabGDzgSaH mZqhXAcmvV8RPqNiZW0mGTte6z0aN+dMlzAKJKalCUv7mYxTwv7bWwJapdRaEdsh 4IUSTEfhmKdZwYHQpL2eectGBMjl0/+1aBGPA0m0d/Pblmsn37QSEh4NcrHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtDEI8EetGmJt1Xphx8QP2V+JCgwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDBN88GFkg2kh22yXoSr67Jbn8TDzIMqoGo 5om2MUpgqn8d/rAf2celbCJQBFbEs5yVi3axCGzYpHy9CRf/FevM0ciprnHEw/Lc kGAv+25L0hXwS2NTdgJuPAoXNIWkGo9dYvlsCbV0w/toykEjBrC5YkqNkNqYBCVu 70zJ9D7Orw1GX/juTgAg/FzFs27jVuD/9fPCCQJfBvh6P1E971vn49/ytbnBNi7m 94lOvUFHdYxQN05WMDhjak8iVQjl19h33m3u6EulPRpbeO89uaXNiPdtjK54bvKf 6YI91rPNCQ8Z3QtXZ7ymQURqGRo4EMoQLtRZo41yI5nPLmjdRyM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:31 2025 by rpki-client