This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: jZOvknFw8Tm1NqTjc0gzNmoPo2sbXVQ6IgU0sf2TfTE= Subject key identifier: B6:54:AA:16:F7:38:7F:4B:49:CB:9F:A4:4D:83:8B:2B:9F:9B:85:D4 Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: AF3A5E27EC67F444C88006C26B891BE424E150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 03A8 Signing time: Tue 02 Dec 2025 17:31:28 +0000 Manifest this update: Tue 02 Dec 2025 17:26:28 +0000 Manifest next update: Fri 05 Dec 2025 21:38:28 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: r18aMvt+dZTO542PmdJYciM4pg+l2e4s+Oc4lBrNFB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: af:3a:5e:27:ec:67:f4:44:c8:80:06:c2:6b:89:1b:e4:24:e1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Dec 2 17:26:28 2025 GMT Not After : Dec 5 21:38:28 2025 GMT Subject: CN=B654AA16F7387F4B49CB9FA44D838B2B9F9B85D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:31:46:7f:77:ed:f5:b9:4c:da:c3:83:fc: 62:77:40:8d:cc:e7:d1:19:a5:11:c8:38:71:c5:f8: 46:43:66:33:5f:43:c6:ec:67:fe:cc:19:b1:a0:bd: 51:9a:71:d9:87:59:72:7a:43:73:3f:72:2d:94:4f: fb:dd:50:c1:ca:a7:a1:14:d2:f6:db:29:e2:54:35: 8e:94:b2:bd:7c:db:7d:39:94:17:8d:71:af:ef:5f: d1:ec:4b:62:b4:26:96:b4:53:4c:82:21:34:9f:3a: 3f:f5:14:f8:28:11:a3:be:d6:e6:29:84:ba:8d:88: 70:3c:ab:52:98:b0:8f:5a:d4:14:30:c1:48:ee:6f: 13:57:6a:a6:18:b3:aa:6d:74:5c:05:d5:02:d7:c3: 5c:16:90:9e:8a:65:92:d4:88:4c:da:97:2e:bf:33: 4a:68:19:72:b8:a0:ae:63:32:e7:60:2c:50:ea:1a: 3a:f3:1d:92:1e:cb:71:ea:4c:5b:eb:7e:4e:57:ea: 05:29:bd:8e:95:4b:35:86:cf:79:3e:97:55:72:bc: d0:44:52:d1:ff:6f:df:2f:06:c6:a3:cd:4c:36:fc: 87:78:cc:bb:47:d7:9e:08:7e:02:2a:4e:b1:6e:34: 6f:c6:74:b3:34:cd:05:fe:a7:b0:f8:99:a9:f0:28: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:AA:16:F7:38:7F:4B:49:CB:9F:A4:4D:83:8B:2B:9F:9B:85:D4 X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:66:6c:04:6f:88:a0:30:7d:c9:f8:9c:94:18:b2:a0:6d:12: 80:ed:10:18:87:4e:07:70:f7:e8:4c:c1:75:a5:fd:f5:c1:ad: 14:db:5f:9f:b8:12:36:9b:8b:af:04:32:dd:6b:91:da:50:41: d0:db:c6:b7:0e:14:8d:d2:d2:22:70:ec:ba:19:1c:a4:3e:83: 42:f4:b4:bf:78:4c:18:08:74:47:63:40:11:2b:20:83:f7:14: 92:ba:7d:5f:45:6b:ee:b0:88:d4:3b:09:bd:15:3f:37:18:8e: b1:48:ee:f3:ee:e8:a1:23:33:66:27:14:f8:38:7e:db:25:89: e0:b8:6a:14:cf:e1:4d:18:a8:0f:2f:1a:78:26:a7:65:b4:3f: ae:54:b8:59:11:7c:62:74:7f:9f:5d:bf:71:22:f5:28:03:07: b3:ee:6e:58:45:ac:db:c4:73:19:a7:7f:c7:d1:13:0a:e5:5f: 72:69:17:5d:fb:76:ec:7b:da:5f:ab:22:ca:f5:3e:cf:87:b4: 94:11:e0:5d:fa:c5:d2:f9:0f:c1:40:09:93:bd:b2:3c:45:af: 4d:44:b6:c9:69:a7:f9:d1:ef:f6:88:fe:f7:ca:d1:8e:d5:3a: 63:b1:e9:57:ed:54:b5:d6:bf:0e:d6:0c:f8:9f:ea:b7:e6:67: f0:73:d9:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAK86XifsZ/REyIAGwmuJG+Qk4VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTEyMDIxNzI2MjhaFw0yNTEyMDUyMTM4MjhaMDMxMTAvBgNV BAMTKEI2NTRBQTE2RjczODdGNEI0OUNCOUZBNDREODM4QjJCOUY5Qjg1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oTFGf3ft9blM2sOD/GJ3QI3M 59EZpRHIOHHF+EZDZjNfQ8bsZ/7MGbGgvVGacdmHWXJ6Q3M/ci2UT/vdUMHKp6EU 0vbbKeJUNY6Usr182305lBeNca/vX9HsS2K0Jpa0U0yCITSfOj/1FPgoEaO+1uYp hLqNiHA8q1KYsI9a1BQwwUjubxNXaqYYs6ptdFwF1QLXw1wWkJ6KZZLUiEzaly6/ M0poGXK4oK5jMudgLFDqGjrzHZIey3HqTFvrfk5X6gUpvY6VSzWGz3k+l1VyvNBE UtH/b98vBsajzUw2/Id4zLtH154IfgIqTrFuNG/GdLM0zQX+p7D4manwKHv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlSqFvc4f0tJy5+kTYOLK5+bhdQwHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhmbARviKAwfcn4nJQYsqBtEoDtEBiHTgdw 9+hMwXWl/fXBrRTbX5+4Ejabi68EMt1rkdpQQdDbxrcOFI3S0iJw7LoZHKQ+g0L0 tL94TBgIdEdjQBErIIP3FJK6fV9Fa+6wiNQ7Cb0VPzcYjrFI7vPu6KEjM2YnFPg4 ftslieC4ahTP4U0YqA8vGngmp2W0P65UuFkRfGJ0f59dv3Ei9SgDB7PublhFrNvE cxmnf8fREwrlX3JpF137dux72l+rIsr1Ps+HtJQR4F36xdL5D8FACZO9sjxFr01E tslpp/nR7/aI/vfK0Y7VOmOx6VftVLXWvw7WDPif6rfmZ/Bz2Wo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:31 2025 by rpki-client