This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: 31ZKE+xLnV9G2+5WjYxm+ANv8Z1xP6i7vv2Z7dSX7rA= Subject key identifier: B0:E8:D1:4B:0D:B8:25:41:F2:D1:82:06:E6:1D:4E:23:25:BC:10:AC Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 429EEE0A86085CE2C663F24CA8A493E18A5F613B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0412 Signing time: Wed 03 Dec 2025 00:41:03 +0000 Manifest this update: Wed 03 Dec 2025 00:36:03 +0000 Manifest next update: Sat 06 Dec 2025 11:37:03 +0000 Files and hashes: 1: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: btb0pngLdLqzDBge/e9sHYkBap7jk+DLuqfiOgGiQn8=) 2: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=) 3: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=) 4: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=) 5: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9e:ee:0a:86:08:5c:e2:c6:63:f2:4c:a8:a4:93:e1:8a:5f:61:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Dec 3 00:36:03 2025 GMT Not After : Dec 6 11:37:03 2025 GMT Subject: CN=B0E8D14B0DB82541F2D18206E61D4E2325BC10AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:00:e6:1b:0a:65:d9:d4:52:b8:4a:e5:1c: 0b:49:3c:12:a7:99:28:97:a4:24:d9:ad:c1:51:15: 7a:e8:ed:01:2e:95:1d:e3:2e:a8:51:59:02:c3:d0: a2:a6:42:c5:91:ba:2a:fd:e6:de:14:e7:7e:cc:76: b4:40:12:91:0b:70:25:b7:b0:b0:aa:06:e9:24:d1: ec:34:19:96:d8:e9:b2:1f:71:ed:53:5c:81:4e:69: 99:27:62:eb:ab:0f:09:15:ac:e4:d6:0c:c1:43:c7: 71:cb:a8:55:d8:48:2d:5a:a7:b7:b5:87:5e:df:e4: ff:a9:82:4a:00:79:3b:55:f9:e8:fd:ea:55:9f:2c: b5:1f:86:03:f9:1a:b5:c7:3e:21:5d:46:74:48:32: 61:b6:19:4a:12:24:6f:1b:3a:07:4c:de:67:ad:e2: 68:ee:8e:36:13:a7:9e:7c:ed:d0:dc:ed:32:60:4c: 70:e7:f9:00:bd:82:26:be:cb:fe:fc:d0:f0:f6:21: e0:24:2c:b6:dc:ab:61:92:81:a5:fa:41:04:6f:b9: d9:de:8e:5a:b4:93:fa:56:c4:e0:be:1a:8c:03:c5: f5:a0:09:8e:32:d5:7f:e6:d9:e9:af:99:7c:38:51: f3:4a:4e:ae:c9:75:b9:91:38:51:b8:4b:d6:ca:51: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:D1:4B:0D:B8:25:41:F2:D1:82:06:E6:1D:4E:23:25:BC:10:AC X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:96:4b:ff:0f:42:e8:6b:2f:99:f7:f8:1d:5d:04:bb:ec:13: 31:2f:01:11:f3:fd:2a:fa:1d:e7:e0:be:c9:2f:8d:12:67:40: cf:05:27:7a:09:2e:80:db:ee:5e:3f:fa:21:cc:86:b3:e3:46: 21:6b:c4:b1:c6:ad:19:36:46:fa:16:95:36:12:5c:6f:23:4e: 48:3d:35:ac:b8:4c:c0:c7:f2:52:14:42:e1:a1:96:b5:29:c2: a0:e6:d8:fa:1a:41:ac:c3:8a:85:7b:4b:1b:27:45:95:a9:ed: 9c:65:43:35:41:15:c3:64:74:06:21:ba:67:60:ef:bd:d7:0c: 72:4d:f3:a6:9f:1d:e2:50:fa:fe:93:52:cb:9f:b6:b4:82:a2: 01:fe:75:5b:23:3b:06:ab:53:2a:df:5d:eb:85:98:ec:8f:81: cc:20:23:95:ba:c2:d6:35:c3:cd:47:e4:69:f0:5f:06:c9:1a: bd:c4:28:23:4d:c2:e4:bf:df:74:2e:88:47:22:c9:57:10:36: d4:e6:75:32:47:51:a8:8a:5d:c6:70:11:2f:bb:38:5d:98:e2: 59:41:ab:bd:0d:fb:00:9f:9d:23:9e:a3:ed:d0:ea:fa:4f:d3: f6:df:56:eb:4b:ec:3c:97:aa:f0:85:d5:01:3a:3c:0e:5b:f6: 21:18:9c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp7uCoYIXOLGY/JMqKST4YpfYTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTEyMDMwMDM2MDNaFw0yNTEyMDYxMTM3MDNaMDMxMTAvBgNV BAMTKEIwRThEMTRCMERCODI1NDFGMkQxODIwNkU2MUQ0RTIzMjVCQzEwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeQDmGwpl2dRSuErlHAtJPBKn mSiXpCTZrcFRFXro7QEulR3jLqhRWQLD0KKmQsWRuir95t4U537MdrRAEpELcCW3 sLCqBukk0ew0GZbY6bIfce1TXIFOaZknYuurDwkVrOTWDMFDx3HLqFXYSC1ap7e1 h17f5P+pgkoAeTtV+ej96lWfLLUfhgP5GrXHPiFdRnRIMmG2GUoSJG8bOgdM3met 4mjujjYTp5587dDc7TJgTHDn+QC9gia+y/780PD2IeAkLLbcq2GSgaX6QQRvudne jlq0k/pWxOC+GowDxfWgCY4y1X/m2emvmXw4UfNKTq7JdbmROFG4S9bKUZuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOjRSw24JUHy0YIG5h1OIyW8EKwwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCWS/8PQuhrL5n3+B1dBLvsEzEvARHz/Sr6 HefgvskvjRJnQM8FJ3oJLoDb7l4/+iHMhrPjRiFrxLHGrRk2RvoWlTYSXG8jTkg9 Nay4TMDH8lIUQuGhlrUpwqDm2PoaQazDioV7SxsnRZWp7ZxlQzVBFcNkdAYhumdg 773XDHJN86afHeJQ+v6TUsuftrSCogH+dVsjOwarUyrfXeuFmOyPgcwgI5W6wtY1 w81H5GnwXwbJGr3EKCNNwuS/33QuiEciyVcQNtTmdTJHUaiKXcZwES+7OF2Y4llB q70N+wCfnSOeo+3Q6vpP0/bfVutL7DyXqvCF1QE6PA5b9iEYnJY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:24 2025 by rpki-client