This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: KZbaa8oEachqNZAeyhW1MVv6ZbOYVTu9jqnrxIUpMLs= Subject key identifier: 8E:04:DA:00:33:39:8C:AB:36:80:EA:14:21:BA:E8:2C:6E:9A:F9:0B Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 0F0CA64157FF9DB9EACC8DDA4D5902D4D96CA76E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: E1 Signing time: Tue 02 Dec 2025 06:11:34 +0000 Manifest this update: Tue 02 Dec 2025 06:06:34 +0000 Manifest next update: Fri 05 Dec 2025 07:22:34 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 2: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 3: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 4: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: gMIfOMmV+Po3gg0MeFRa1f8XWyz6sWbnkUzEJ++NcsM=) 5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) 7: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0c:a6:41:57:ff:9d:b9:ea:cc:8d:da:4d:59:02:d4:d9:6c:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Dec 2 06:06:34 2025 GMT Not After : Dec 5 07:22:34 2025 GMT Subject: CN=8E04DA0033398CAB3680EA1421BAE82C6E9AF90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:f6:6d:9e:4b:43:17:c6:1e:17:89:a0:a0: 0e:46:53:f7:81:67:b0:13:6b:59:c9:24:2d:8a:17: ef:4a:61:0d:53:76:bf:29:b3:d4:1f:1b:f4:02:aa: d3:64:7c:52:ec:f1:20:30:5c:54:e4:69:99:cc:9d: 7c:87:65:8f:9a:71:ad:55:46:da:b2:2e:3e:09:c7: 80:7f:d7:fe:bb:58:e0:15:bc:ae:7e:39:5f:99:89: ef:0b:bf:6d:20:d2:19:40:2d:51:4b:6d:bb:fd:c0: f9:6c:02:cb:6e:94:e3:07:16:dc:20:b2:38:ff:f7: 3f:26:1e:3d:e2:2f:3d:fa:f0:a0:f3:d4:15:9a:68: 3f:65:53:e7:15:7e:76:d5:76:1e:88:0b:83:28:dd: ea:16:74:b5:22:1f:66:e4:fe:b8:0c:7e:cd:27:9d: 86:94:4d:db:2c:b2:96:f1:46:a7:b5:52:62:cd:e3: b3:9c:4e:80:7a:08:4c:b2:5e:f5:92:74:f3:e6:02: d7:56:8d:64:ad:e2:ba:2f:ef:9d:2f:15:cc:98:c0: d8:dc:60:30:f6:fb:e1:d0:06:5e:16:f8:ac:82:5a: 25:2c:e8:08:e7:ca:0b:74:3d:16:eb:aa:40:99:f9: dc:a0:ca:30:46:d9:23:42:ba:f5:cd:37:4c:3e:b9: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:DA:00:33:39:8C:AB:36:80:EA:14:21:BA:E8:2C:6E:9A:F9:0B X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:db:9e:79:2d:cd:1e:48:54:11:f2:11:67:4e:7a:91:3e:87: 7c:ef:17:2b:7e:f1:85:a9:fb:62:b9:2d:8b:9c:ad:76:ae:22: f6:15:76:2c:dc:99:fd:57:fe:06:be:df:48:d9:2a:8c:36:5f: 14:f1:88:c2:8e:04:9a:0b:08:00:83:d0:de:66:cb:13:fb:32: 39:5a:7a:85:7f:37:11:61:e5:40:76:d8:89:13:c7:8d:22:56: 08:fb:b3:fa:50:07:bc:ec:e5:ad:6b:1d:08:a6:6c:a3:4a:41: c3:a9:ba:40:7b:b8:01:ff:d7:ed:3d:a6:41:13:a6:dd:77:93: d2:8e:aa:3f:bf:1f:d7:a2:c3:60:76:7a:33:ef:dd:ae:88:29: 75:03:b1:ef:ce:9b:25:32:49:49:c5:d8:15:8f:d1:8d:2e:66: 14:8e:26:27:bb:8d:d2:79:c6:d4:52:f8:8d:1f:44:b4:51:69: 39:db:4f:f7:08:98:e3:3a:c0:5e:2e:a3:46:14:32:ef:41:d9: 15:0a:59:30:78:c5:2d:04:16:b7:90:db:a3:1a:99:8a:da:59: b6:68:1c:ee:8c:a1:37:73:2e:cf:cf:86:00:f5:18:73:af:29: 75:30:93:7c:62:34:75:d2:ab:28:76:43:44:07:be:24:97:17: 39:c3:3b:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwymQVf/nbnqzI3aTVkC1Nlsp24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTEyMDIwNjA2MzRaFw0yNTEyMDUwNzIyMzRaMDMxMTAvBgNV BAMTKDhFMDREQTAwMzMzOThDQUIzNjgwRUExNDIxQkFFODJDNkU5QUY5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74/ZtnktDF8YeF4mgoA5GU/eB Z7ATa1nJJC2KF+9KYQ1Tdr8ps9QfG/QCqtNkfFLs8SAwXFTkaZnMnXyHZY+aca1V RtqyLj4Jx4B/1/67WOAVvK5+OV+Zie8Lv20g0hlALVFLbbv9wPlsAstulOMHFtwg sjj/9z8mHj3iLz368KDz1BWaaD9lU+cVfnbVdh6IC4Mo3eoWdLUiH2bk/rgMfs0n nYaUTdssspbxRqe1UmLN47OcToB6CEyyXvWSdPPmAtdWjWSt4rov750vFcyYwNjc YDD2++HQBl4W+KyCWiUs6Ajnygt0PRbrqkCZ+dygyjBG2SNCuvXNN0w+uTelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgTaADM5jKs2gOoUIbroLG6a+QswHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLbnnktzR5IVBHyEWdOepE+h3zvFyt+8YWp +2K5LYucrXauIvYVdizcmf1X/ga+30jZKow2XxTxiMKOBJoLCACD0N5myxP7Mjla eoV/NxFh5UB22IkTx40iVgj7s/pQB7zs5a1rHQimbKNKQcOpukB7uAH/1+09pkET pt13k9KOqj+/H9eiw2B2ejPv3a6IKXUDse/OmyUySUnF2BWP0Y0uZhSOJie7jdJ5 xtRS+I0fRLRRaTnbT/cImOM6wF4uo0YUMu9B2RUKWTB4xS0EFreQ26MamYraWbZo HO6MoTdzLs/PhgD1GHOvKXUwk3xiNHXSqyh2Q0QHviSXFznDO/g= -----END CERTIFICATE-----Generated at Wed Dec 3 16:36:19 2025 by rpki-client