This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: /iecouq5oC/8lElE1YCdlblSNbwnpezj8Z9kJbJWLvw= Subject key identifier: 2F:A4:38:01:18:F9:76:33:39:6C:3A:4A:A8:A8:B9:0A:E4:9A:6A:7E Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 258B7B60BFE55D7B3E72F4BC1821A3A3A44B191B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 03AD Signing time: Sun 14 Dec 2025 01:21:30 +0000 Manifest this update: Sun 14 Dec 2025 01:16:30 +0000 Manifest next update: Wed 17 Dec 2025 01:54:30 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: XW/wiFeiJZlUXZFPG7kImY6BFR1snhMFvTG8369PlSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 01:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8b:7b:60:bf:e5:5d:7b:3e:72:f4:bc:18:21:a3:a3:a4:4b:19:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Dec 14 01:16:30 2025 GMT Not After : Dec 17 01:54:30 2025 GMT Subject: CN=2FA4380118F97633396C3A4AA8A8B90AE49A6A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:5c:83:5a:3a:a9:0f:a5:9f:8c:00:0b:cd: 29:b9:58:60:26:fd:14:4b:aa:2c:1f:17:7b:a2:19: 4f:c4:74:01:8e:2c:9d:fd:ce:28:4e:2a:43:20:cf: d0:a5:6d:84:ff:c9:e6:4e:a3:04:87:72:8a:e0:6d: f1:ef:34:a4:40:00:53:01:11:35:fa:5b:fd:af:b9: 8d:be:86:2f:fc:74:f7:e9:1f:6e:b8:6f:d9:c9:e1: 4e:84:d0:f7:9a:f7:c8:25:7f:53:64:f3:9b:e8:d9: 15:a1:91:27:f6:ce:ac:cf:78:75:82:b0:d1:e8:ca: 30:82:ae:9b:78:0c:13:d1:33:d6:64:64:a4:c7:65: e3:42:d7:73:07:de:a8:e8:cf:2f:ec:93:5d:06:d3: a1:2f:a0:73:1e:8e:07:8a:f2:b9:4d:c8:d5:f4:4f: 57:55:f4:fc:50:74:0a:cc:b8:cc:e4:c2:27:95:89: f3:c2:81:bf:5a:2a:d2:bd:ae:ff:87:84:cd:38:6c: 0c:d4:52:88:e7:cd:30:db:f2:c9:df:90:cc:46:2e: 78:9f:7b:fd:3d:30:95:11:a7:16:f3:a3:18:ec:d5: 34:45:de:5d:47:11:ac:7b:19:ab:b5:c1:10:75:31: bf:6c:a7:9e:c2:ba:c1:6a:53:44:13:69:f3:e5:e2: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A4:38:01:18:F9:76:33:39:6C:3A:4A:A8:A8:B9:0A:E4:9A:6A:7E X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:92:52:92:7c:25:72:72:01:c1:1b:1f:fe:92:49:a4:47:c5: 69:e8:ae:e6:6a:09:16:ad:cf:81:59:f7:40:cd:09:16:62:c3: b5:e9:13:7b:f1:5c:df:6a:47:85:b7:fd:d0:70:b6:37:a1:31: 41:04:ec:99:76:4f:09:5b:0d:b2:ae:4b:05:3f:be:59:19:a1: 85:9d:ea:5e:a1:a0:03:5f:f1:09:74:f1:60:79:6a:ae:d3:0b: fe:8d:23:e9:fd:d8:c1:de:6d:7f:05:cb:19:fe:d3:c6:30:4b: e3:e5:5a:cb:34:7f:b8:10:a6:6b:3a:31:2f:ba:9e:8c:a3:0a: 98:0d:62:e8:94:51:1a:2a:41:da:11:f7:7c:f5:20:43:6c:22: b6:76:6d:35:9a:0c:1f:65:6c:df:c2:05:66:3d:04:7b:2a:6d: a8:e4:f2:59:de:80:4a:50:52:28:c6:29:7a:d4:56:8b:bd:3f: 42:8b:d8:59:a5:c8:c1:71:13:0a:0b:d1:d4:61:0b:a2:85:df: 4c:4c:fc:e8:d2:be:37:01:fc:58:64:40:6e:f2:25:90:f7:36: 9e:fd:b3:b5:42:4b:24:51:d6:26:03:55:a2:9e:dc:20:a0:be: 8c:c1:2e:9b:8f:84:d0:f0:4e:b1:13:44:d0:a9:cf:e2:9d:4c: 81:1e:9b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYt7YL/lXXs+cvS8GCGjo6RLGRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTEyMTQwMTE2MzBaFw0yNTEyMTcwMTU0MzBaMDMxMTAvBgNV BAMTKDJGQTQzODAxMThGOTc2MzMzOTZDM0E0QUE4QThCOTBBRTQ5QTZBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmG1yDWjqpD6WfjAALzSm5WGAm /RRLqiwfF3uiGU/EdAGOLJ39zihOKkMgz9ClbYT/yeZOowSHcorgbfHvNKRAAFMB ETX6W/2vuY2+hi/8dPfpH264b9nJ4U6E0Pea98glf1Nk85vo2RWhkSf2zqzPeHWC sNHoyjCCrpt4DBPRM9ZkZKTHZeNC13MH3qjozy/sk10G06EvoHMejgeK8rlNyNX0 T1dV9PxQdArMuMzkwieVifPCgb9aKtK9rv+HhM04bAzUUojnzTDb8snfkMxGLnif e/09MJURpxbzoxjs1TRF3l1HEax7Gau1wRB1Mb9sp57CusFqU0QTafPl4lktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6Q4ARj5djM5bDpKqKi5CuSaan4wHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSSUpJ8JXJyAcEbH/6SSaRHxWnoruZqCRat z4FZ90DNCRZiw7XpE3vxXN9qR4W3/dBwtjehMUEE7Jl2TwlbDbKuSwU/vlkZoYWd 6l6hoANf8Ql08WB5aq7TC/6NI+n92MHebX8Fyxn+08YwS+PlWss0f7gQpms6MS+6 noyjCpgNYuiUURoqQdoR93z1IENsIrZ2bTWaDB9lbN/CBWY9BHsqbajk8lnegEpQ UijGKXrUVou9P0KL2FmlyMFxEwoL0dRhC6KF30xM/OjSvjcB/FhkQG7yJZD3Np79 s7VCSyRR1iYDVaKe3CCgvozBLpuPhNDwTrETRNCpz+KdTIEem8g= -----END CERTIFICATE-----Generated at Mon Dec 15 13:36:10 2025 by rpki-client