This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: c+S/z9I+RbKFSbVbGII9AS1U8oUzcOmgzRsiehL/ldQ= Subject key identifier: C6:68:49:CE:A2:8C:5E:8D:6F:5D:B7:74:16:DD:AD:2F:BC:19:25:8D Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 54E1816FC70FDD301C11F81CFE5B1C64154B93C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0127 Signing time: Thu 18 Dec 2025 09:02:07 +0000 Manifest this update: Thu 18 Dec 2025 08:57:07 +0000 Manifest next update: Sun 21 Dec 2025 17:38:07 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: bPpABcfrN3JKjjpNsYANFg032D3MdLXdjVBQvnt525U=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e1:81:6f:c7:0f:dd:30:1c:11:f8:1c:fe:5b:1c:64:15:4b:93:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Dec 18 08:57:07 2025 GMT Not After : Dec 21 17:38:07 2025 GMT Subject: CN=C66849CEA28C5E8D6F5DB77416DDAD2FBC19258D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:1a:18:81:f5:d3:a9:09:db:d2:e5:a8:49: f1:a1:39:1b:27:ff:0d:e3:6c:30:90:ab:4d:9f:17: 32:e6:e1:3c:fd:7e:13:41:e1:7a:03:86:e6:72:c9: fd:63:cf:12:bb:fd:11:6d:c8:b8:88:14:38:d3:b1: c9:81:28:2d:68:22:f6:99:84:0b:cc:e3:ab:6c:6d: d1:84:e7:ac:f1:be:36:f0:1d:be:c1:ff:e1:65:92: 26:70:8b:62:03:b7:55:91:6c:4e:26:42:dd:c7:77: 9d:ed:ca:51:43:28:fa:4e:01:e3:59:4a:15:3c:5b: 34:f6:1c:86:a6:72:d9:75:65:da:17:7e:e9:f3:35: e4:52:a6:a4:c3:2e:74:a9:51:7e:50:64:f5:b6:e7: 46:cb:56:66:ae:9b:fc:32:32:6b:3c:17:58:96:16: a8:67:8d:36:e0:db:97:08:98:c3:75:c2:7e:ef:cb: ce:f4:76:ef:32:b2:22:aa:2e:d1:b6:b0:aa:8e:2f: d7:5b:10:1f:8a:81:57:4d:40:b2:da:39:cd:96:f4: 95:a5:64:a4:85:45:cd:7b:73:51:41:1a:be:ea:3d: 4a:42:12:c8:55:3e:52:37:0c:2e:fd:e5:ab:5e:48: 0d:fe:99:6b:50:bf:87:14:b9:ba:e9:9a:af:38:8e: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:68:49:CE:A2:8C:5E:8D:6F:5D:B7:74:16:DD:AD:2F:BC:19:25:8D X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2b:ed:2d:7a:7b:cc:73:5a:bb:4f:c8:44:0e:f6:41:50:5e: 1a:8f:90:cd:88:32:82:65:8c:59:8f:c7:b1:6c:88:a9:65:a5: 35:4e:84:3f:a5:40:ad:ea:d6:47:be:fc:ef:e7:d0:7c:74:93: c3:da:9d:23:f3:49:e5:89:7b:a2:ae:68:08:77:cd:a6:f8:f0: 2c:a2:6e:79:8b:f1:5d:69:9a:96:07:44:84:60:fc:63:d0:46: c8:01:ea:2c:cf:ee:65:2a:b5:1c:25:96:c6:ed:e7:87:d4:e3: 7f:cd:06:76:50:94:87:d0:fb:65:dc:f5:73:ad:fc:65:35:a3: d6:1e:9f:6f:7b:c4:3a:a6:2e:2f:af:f0:01:71:94:b5:af:7c: 57:0a:ff:13:8b:fd:60:a4:16:64:30:2c:e2:d4:b1:0f:41:2e: c2:95:e8:c9:eb:d0:22:2d:ab:a3:cd:75:28:a6:51:d1:bf:61: b3:0a:37:4f:af:ce:16:8e:6d:4a:25:a3:ee:83:22:7d:5c:e8: 54:04:5f:c4:ac:38:22:3a:42:61:c7:be:be:61:15:f1:5b:54: 5f:a5:bd:46:9b:f3:f9:d2:ab:54:16:d2:88:a2:55:85:e2:35: fe:18:2b:cf:3b:cc:23:04:61:a2:ab:d1:ac:8f:10:38:05:f7: 5d:27:c1:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOGBb8cP3TAcEfgc/lscZBVLk8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTEyMTgwODU3MDdaFw0yNTEyMjExNzM4MDdaMDMxMTAvBgNV BAMTKEM2Njg0OUNFQTI4QzVFOEQ2RjVEQjc3NDE2RERBRDJGQkMxOTI1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZxoYgfXTqQnb0uWoSfGhORsn /w3jbDCQq02fFzLm4Tz9fhNB4XoDhuZyyf1jzxK7/RFtyLiIFDjTscmBKC1oIvaZ hAvM46tsbdGE56zxvjbwHb7B/+FlkiZwi2IDt1WRbE4mQt3Hd53tylFDKPpOAeNZ ShU8WzT2HIamctl1ZdoXfunzNeRSpqTDLnSpUX5QZPW250bLVmaum/wyMms8F1iW FqhnjTbg25cImMN1wn7vy870du8ysiKqLtG2sKqOL9dbEB+KgVdNQLLaOc2W9JWl ZKSFRc17c1FBGr7qPUpCEshVPlI3DC795ateSA3+mWtQv4cUubrpmq84jmJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmhJzqKMXo1vXbd0Ft2tL7wZJY0wHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkr7S16e8xzWrtPyEQO9kFQXhqPkM2IMoJl jFmPx7FsiKllpTVOhD+lQK3q1ke+/O/n0Hx0k8PanSPzSeWJe6KuaAh3zab48Cyi bnmL8V1pmpYHRIRg/GPQRsgB6izP7mUqtRwllsbt54fU43/NBnZQlIfQ+2Xc9XOt /GU1o9Yen297xDqmLi+v8AFxlLWvfFcK/xOL/WCkFmQwLOLUsQ9BLsKV6Mnr0CIt q6PNdSimUdG/YbMKN0+vzhaObUolo+6DIn1c6FQEX8SsOCI6QmHHvr5hFfFbVF+l vUab8/nSq1QW0oiiVYXiNf4YK887zCMEYaKr0ayPEDgF910nwR8= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:05 2025 by rpki-client