This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: ChuLVOtdCXQQ43Ayk2KAr1yhjf6NSnWS+gnyRwfmWzc= Subject key identifier: 3C:48:AC:E8:8B:11:4C:CF:7B:38:AE:60:B1:45:B2:FD:72:26:50:BF Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 437C1E0DCF8D7AE9FC9EE6293223923757EA072D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: 0111 Signing time: Tue 02 Dec 2025 11:11:54 +0000 Manifest this update: Tue 02 Dec 2025 11:06:54 +0000 Manifest next update: Fri 05 Dec 2025 19:37:54 +0000 Files and hashes: 1: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=) 2: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=) 3: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: Z3q6NXOywoLv0I7RW46to2iig3qqfDXTNmstio3IpNk=) 4: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7c:1e:0d:cf:8d:7a:e9:fc:9e:e6:29:32:23:92:37:57:ea:07:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Dec 2 11:06:54 2025 GMT Not After : Dec 5 19:37:54 2025 GMT Subject: CN=3C48ACE88B114CCF7B38AE60B145B2FD722650BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:d8:49:64:94:74:51:4c:79:44:29:48:00: 9d:74:69:2d:ca:09:fb:9b:94:66:ca:57:69:22:8f: f6:60:e8:b5:f7:e7:f6:54:14:b9:46:de:3d:b5:e4: 7c:5a:f1:b1:f3:81:66:15:ad:88:89:05:c7:16:06: 5d:08:35:57:d1:94:a4:4c:f0:80:7d:8b:79:9c:07: 95:2d:06:9c:64:17:39:45:ef:e6:6b:fb:2b:df:b2: 0c:d2:53:00:fb:31:98:31:aa:1c:24:9b:b8:14:43: 30:a0:07:be:57:4c:4d:f7:26:cb:f7:c3:d5:0d:3e: 3d:db:0e:1d:f8:13:37:20:9c:cf:c7:9c:3e:45:4f: 06:09:e2:f1:3b:0b:69:df:4e:c7:d7:cb:8f:6f:15: 6b:8a:c3:5b:78:88:a4:08:ac:33:45:30:4a:21:82: 4e:72:76:f8:dd:80:47:ce:60:b1:c3:f0:84:2d:07: 53:71:1e:06:e7:1d:87:83:10:6c:3a:aa:64:cd:5d: f3:95:52:80:4d:ba:bf:c1:4b:95:9e:81:6b:ab:8a: 99:07:5a:4f:d4:f3:48:30:c6:6c:cc:06:0d:34:1d: 9d:e7:23:8b:61:da:10:7e:de:24:49:f2:4b:5d:29: a5:54:25:aa:a5:7f:fd:ff:6b:b7:7a:41:ec:2b:08: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:AC:E8:8B:11:4C:CF:7B:38:AE:60:B1:45:B2:FD:72:26:50:BF X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:77:70:61:66:ba:70:7c:6f:6e:cc:42:d0:d9:5c:49:96:89: 9d:34:67:29:da:14:a4:98:c3:94:78:6f:fd:4f:a9:52:c9:da: 19:36:ce:f9:db:67:41:11:7f:16:57:27:4d:eb:ca:00:f8:a4: f1:cf:e4:d3:d8:42:43:e4:bc:60:7d:29:2a:1e:09:21:eb:50: 21:f2:e4:ea:04:2c:49:6f:39:85:1c:c8:a3:75:69:32:30:dd: f0:b0:6b:fe:e4:34:f5:63:bb:b4:38:44:b4:60:07:0d:9b:04: 60:99:fa:ea:58:bd:b7:4e:75:fc:d1:46:07:b0:ce:39:a0:dd: 71:07:6b:c5:b8:6d:c4:d4:6b:7e:b9:d1:f8:b6:40:d2:31:22: ce:14:2a:85:a1:6a:76:8f:59:01:17:2b:26:b8:f2:f8:b2:25: 64:96:05:fb:35:80:67:8b:41:eb:d1:52:7b:ea:09:80:d0:8c: 8d:5f:9e:5b:a8:45:20:da:e0:ee:f2:2c:6f:c7:55:29:a8:f3: 4a:13:0e:b6:9d:b5:72:8c:b4:0e:f3:84:d0:64:f7:07:b1:06: 2c:db:9f:57:57:7f:47:50:35:68:78:39:a8:67:c1:0b:5a:6e: c0:24:7a:67:cc:d0:c6:e8:61:18:68:d9:66:5d:78:8d:0f:b2: 75:84:1c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3weDc+Neun8nuYpMiOSN1fqBy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTEyMDIxMTA2NTRaFw0yNTEyMDUxOTM3NTRaMDMxMTAvBgNV BAMTKDNDNDhBQ0U4OEIxMTRDQ0Y3QjM4QUU2MEIxNDVCMkZENzIyNjUwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDNhJZJR0UUx5RClIAJ10aS3K CfublGbKV2kij/Zg6LX35/ZUFLlG3j215Hxa8bHzgWYVrYiJBccWBl0INVfRlKRM 8IB9i3mcB5UtBpxkFzlF7+Zr+yvfsgzSUwD7MZgxqhwkm7gUQzCgB75XTE33Jsv3 w9UNPj3bDh34EzcgnM/HnD5FTwYJ4vE7C2nfTsfXy49vFWuKw1t4iKQIrDNFMEoh gk5ydvjdgEfOYLHD8IQtB1NxHgbnHYeDEGw6qmTNXfOVUoBNur/BS5WegWuripkH Wk/U80gwxmzMBg00HZ3nI4th2hB+3iRJ8ktdKaVUJaqlf/3/a7d6QewrCGFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPEis6IsRTM97OK5gsUWy/XImUL8wHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR3cGFmunB8b27MQtDZXEmWiZ00ZynaFKSY w5R4b/1PqVLJ2hk2zvnbZ0ERfxZXJ03rygD4pPHP5NPYQkPkvGB9KSoeCSHrUCHy 5OoELElvOYUcyKN1aTIw3fCwa/7kNPVju7Q4RLRgBw2bBGCZ+upYvbdOdfzRRgew zjmg3XEHa8W4bcTUa3650fi2QNIxIs4UKoWhanaPWQEXKya48viyJWSWBfs1gGeL QevRUnvqCYDQjI1fnluoRSDa4O7yLG/HVSmo80oTDradtXKMtA7zhNBk9wexBizb n1dXf0dQNWh4OahnwQtabsAkemfM0MboYRho2WZdeI0PsnWEHJ8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:27 2025 by rpki-client