This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: TEbnxKFSS26WdDV3fy9JZudEJlI/QTGgb8bqfEfHVrI= Subject key identifier: 7C:9E:A4:10:C6:46:A5:95:B9:C6:89:91:67:40:5D:82:E4:04:B2:1D Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 1CCED8AE51ABDA0D7BA8FE4A5FEC67ED00E140A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 0102 Signing time: Tue 02 Dec 2025 01:00:48 +0000 Manifest this update: Tue 02 Dec 2025 00:55:48 +0000 Manifest next update: Fri 05 Dec 2025 11:47:48 +0000 Files and hashes: 1: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 2: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 3: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: xmnLw7nkS54NmyRmLl9dUeMys5Tg54bOlzWw42H3Soo=) 4: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 5: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 6: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ce:d8:ae:51:ab:da:0d:7b:a8:fe:4a:5f:ec:67:ed:00:e1:40:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Dec 2 00:55:48 2025 GMT Not After : Dec 5 11:47:48 2025 GMT Subject: CN=7C9EA410C646A595B9C6899167405D82E404B21D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:17:68:ff:71:f6:74:5d:e5:d8:fa:3a:2d: 57:bb:1c:9a:01:5c:35:5d:0e:2d:a5:97:2c:3b:0a: cb:ee:28:ed:57:7e:a6:60:bb:00:cf:4d:76:16:89: 1e:8f:fa:c6:68:8e:43:c8:aa:87:e4:e0:bb:ea:dc: c0:8a:91:13:9a:f7:84:05:34:46:5d:9d:b2:79:9d: 7e:b7:00:84:74:ca:a0:7c:3c:29:0f:21:9a:33:cd: 4f:bf:f0:af:86:a3:4c:4b:d4:d8:6b:74:04:81:28: 9e:b1:40:c3:c4:78:e6:6f:f4:fe:00:49:66:dd:2f: 05:6a:d9:c9:71:82:93:45:64:03:81:b7:ff:de:ee: b8:80:b2:48:40:1f:63:00:96:a0:74:41:4c:00:55: b0:65:2c:cf:f0:64:b1:72:8e:9a:b8:0f:2b:79:6e: ec:cc:56:dc:de:22:49:3b:81:ec:7e:b6:20:8d:08: 33:a3:14:05:e6:9a:03:04:e2:a6:3b:19:fb:b2:89: 03:cd:81:f1:6b:b1:3b:7d:69:e8:1c:17:64:f6:92: 4f:f9:c9:bc:bb:03:80:bb:57:eb:57:a5:49:98:7b: 68:ea:57:ef:af:49:12:68:0b:e6:84:09:fd:68:11: 99:97:e2:ea:61:40:75:18:e2:45:d9:26:a0:10:0f: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:A4:10:C6:46:A5:95:B9:C6:89:91:67:40:5D:82:E4:04:B2:1D X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8d:d0:c8:c3:2d:70:9c:29:dc:4a:86:72:bb:84:e9:e0:dd: 34:1d:02:b0:cd:ff:82:71:3d:c6:8f:9d:89:32:b3:7c:32:bf: d5:48:ae:aa:91:9e:aa:8c:b9:e5:7f:d1:91:35:4f:e9:91:7c: 92:84:d6:5b:20:3a:7a:c0:4f:62:a6:e5:61:a9:d4:df:bd:9e: 3f:96:d0:28:9f:29:86:fe:15:f3:9f:89:5d:4f:ef:08:90:41: 01:2f:74:ea:7e:63:10:dc:d7:66:b8:a5:ef:18:36:93:50:5e: 8b:32:f9:19:c4:f0:a0:74:e2:63:ae:4c:0c:7b:a2:69:16:91: 09:e6:bf:0d:0e:79:d5:6c:0a:82:f4:30:17:01:a3:31:4c:86: 83:de:57:54:db:b7:d2:79:9f:1a:34:f2:72:a4:f0:36:a2:1c: c6:94:89:9f:09:5c:2e:a4:a7:bc:16:14:37:94:cd:99:3e:26: 5d:14:76:12:fb:80:ce:f9:84:d2:c0:8d:af:73:b8:ab:f7:a4: 86:f7:e6:a4:ed:ed:9c:29:6f:06:cd:32:8d:53:c8:e8:1e:71: 43:3d:5d:e4:9f:29:e9:6a:e1:22:dd:ca:f5:6b:df:8e:a5:32: a5:b5:9c:95:d7:e5:0a:73:df:3a:5d:89:bb:e4:07:c0:5b:be: fd:1f:29:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM7YrlGr2g17qP5KX+xn7QDhQKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTEyMDIwMDU1NDhaFw0yNTEyMDUxMTQ3NDhaMDMxMTAvBgNV BAMTKDdDOUVBNDEwQzY0NkE1OTVCOUM2ODk5MTY3NDA1RDgyRTQwNEIyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIRdo/3H2dF3l2Po6LVe7HJoB XDVdDi2llyw7CsvuKO1XfqZguwDPTXYWiR6P+sZojkPIqofk4Lvq3MCKkROa94QF NEZdnbJ5nX63AIR0yqB8PCkPIZozzU+/8K+Go0xL1NhrdASBKJ6xQMPEeOZv9P4A SWbdLwVq2clxgpNFZAOBt//e7riAskhAH2MAlqB0QUwAVbBlLM/wZLFyjpq4Dyt5 buzMVtzeIkk7gex+tiCNCDOjFAXmmgME4qY7GfuyiQPNgfFrsTt9aegcF2T2kk/5 yby7A4C7V+tXpUmYe2jqV++vSRJoC+aECf1oEZmX4uphQHUY4kXZJqAQD3BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJ6kEMZGpZW5xomRZ0BdguQEsh0wHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmN0MjDLXCcKdxKhnK7hOng3TQdArDN/4Jx PcaPnYkys3wyv9VIrqqRnqqMueV/0ZE1T+mRfJKE1lsgOnrAT2Km5WGp1N+9nj+W 0CifKYb+FfOfiV1P7wiQQQEvdOp+YxDc12a4pe8YNpNQXosy+RnE8KB04mOuTAx7 omkWkQnmvw0OedVsCoL0MBcBozFMhoPeV1Tbt9J5nxo08nKk8DaiHMaUiZ8JXC6k p7wWFDeUzZk+Jl0UdhL7gM75hNLAja9zuKv3pIb35qTt7ZwpbwbNMo1TyOgecUM9 XeSfKelq4SLdyvVr346lMqW1nJXX5Qpz3zpdibvkB8Bbvv0fKfY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:23 2025 by rpki-client