This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: R2+2WB4f95PIH/Fw2yXGBsLMDlQFEH0J2MLx8k0Pcwo= Subject key identifier: F1:37:E8:0D:12:A4:3E:A1:47:E9:65:EA:C4:0D:1A:FB:C4:7C:83:0A Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 014E7CEAE00F0F3FFA5B765A3440ABC3ABEF77A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 01C3 Signing time: Tue 02 Dec 2025 09:31:34 +0000 Manifest this update: Tue 02 Dec 2025 09:26:34 +0000 Manifest next update: Fri 05 Dec 2025 20:40:34 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: 0krbsaRXLF7hhh/0+kJdsVsdN97iwgE+irNWTCAqAI8=) 2: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: 1aKuOLZIAFfW1+Cqdr1xm8xWMdWqMvn5lk2N7M8OzCk=) 3: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) 4: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) 5: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 6: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: I1eMGkofitxFBUkKIJAAEKHOmSas6t5BDo8K12fS+ps=) 7: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: 5M2ICyTrsom4Avj7CrVlpZwUTqgA3l2d0ujN3Smk7TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4e:7c:ea:e0:0f:0f:3f:fa:5b:76:5a:34:40:ab:c3:ab:ef:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Dec 2 09:26:34 2025 GMT Not After : Dec 5 20:40:34 2025 GMT Subject: CN=F137E80D12A43EA147E965EAC40D1AFBC47C830A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:05:4d:ec:24:48:e3:40:97:4b:b9:e3:37: 23:64:55:90:59:fa:10:fd:8d:31:1c:2b:bd:43:21: d6:84:c1:64:9b:9a:07:e8:d3:1b:91:26:69:a4:01: 3d:5a:44:82:1a:c8:6c:73:59:65:6e:94:56:8d:43: ec:80:b3:ae:21:87:35:d0:90:ed:d5:03:e3:5b:7c: f9:c2:2c:52:48:76:7d:5c:d1:01:49:02:9a:60:93: 99:fa:de:95:44:f0:ad:15:25:7c:5e:f4:82:7f:03: 8a:39:40:ee:0f:1a:8f:55:52:22:9f:75:af:06:bd: 36:b1:46:a2:7c:9a:8b:01:c2:a2:94:dd:eb:0a:b7: 41:38:f3:28:06:bf:86:42:9a:73:12:40:f7:af:aa: c1:73:4b:4c:69:e1:bc:d9:93:b6:3a:c7:cb:9a:a0: e4:89:a2:9f:77:c9:50:63:13:d8:71:b2:06:ff:ab: c4:45:89:ce:19:aa:d8:78:94:c9:82:0a:f6:83:9f: 15:f9:57:20:7a:fd:08:f9:35:cb:b5:3e:5b:4c:fd: 2b:7e:cc:21:78:9b:97:8f:2c:13:5b:05:65:e3:6f: dc:05:65:e6:cf:cb:5e:8b:06:ad:64:29:e2:da:ae: 55:98:68:4e:6e:3e:e7:e4:6b:9b:8b:35:f4:61:ec: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:E8:0D:12:A4:3E:A1:47:E9:65:EA:C4:0D:1A:FB:C4:7C:83:0A X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:16:57:36:8f:cc:95:0f:e2:aa:33:a4:6f:77:e2:77:4c:b4: 92:bf:2a:62:53:cc:28:b8:9a:f8:a8:fc:2e:8e:8c:fa:6b:15: 9a:78:08:f1:40:47:d2:fb:a8:7e:da:54:db:3c:62:dc:89:ef: a2:8e:76:59:1a:57:60:b9:e3:26:a3:83:79:77:e8:3f:20:da: d3:97:03:fa:87:91:c2:18:60:ab:ef:53:e9:e6:23:66:8e:05: f8:c5:34:af:a2:b5:cd:05:b6:95:14:67:58:25:af:55:31:6c: bf:b2:ef:8d:9d:ab:27:ab:ad:63:13:60:bf:db:31:9c:85:52: 39:cf:4b:1a:16:2d:b1:21:84:28:2d:9c:22:de:9d:05:8f:49: dd:e7:00:42:19:f9:e2:1b:e5:04:f4:f8:7c:d7:2d:56:88:32: e9:66:91:c6:a0:cb:c8:95:c2:1d:a8:f5:db:d9:23:f0:b2:b8: 8e:05:c8:c4:6f:2d:d6:00:61:3b:1f:eb:80:12:80:ae:4d:05: 4f:84:1b:31:ae:d3:b5:32:86:f6:c9:86:95:4f:a3:2c:04:08: e9:ab:e6:85:10:50:39:6a:80:97:39:5f:92:7e:d2:50:69:eb: 70:ca:30:c8:75:2e:5a:31:37:60:c6:67:48:21:3f:0a:5a:f0: 39:f3:db:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAU586uAPDz/6W3ZaNECrw6vvd6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTEyMDIwOTI2MzRaFw0yNTEyMDUyMDQwMzRaMDMxMTAvBgNV BAMTKEYxMzdFODBEMTJBNDNFQTE0N0U5NjVFQUM0MEQxQUZCQzQ3QzgzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbQVN7CRI40CXS7njNyNkVZBZ +hD9jTEcK71DIdaEwWSbmgfo0xuRJmmkAT1aRIIayGxzWWVulFaNQ+yAs64hhzXQ kO3VA+NbfPnCLFJIdn1c0QFJAppgk5n63pVE8K0VJXxe9IJ/A4o5QO4PGo9VUiKf da8GvTaxRqJ8mosBwqKU3esKt0E48ygGv4ZCmnMSQPevqsFzS0xp4bzZk7Y6x8ua oOSJop93yVBjE9hxsgb/q8RFic4Zqth4lMmCCvaDnxX5VyB6/Qj5Ncu1PltM/St+ zCF4m5ePLBNbBWXjb9wFZebPy16LBq1kKeLarlWYaE5uPufka5uLNfRh7Nb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8TfoDRKkPqFH6WXqxA0a+8R8gwowHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAWVzaPzJUP4qozpG934ndMtJK/KmJTzCi4 mvio/C6OjPprFZp4CPFAR9L7qH7aVNs8YtyJ76KOdlkaV2C54yajg3l36D8g2tOX A/qHkcIYYKvvU+nmI2aOBfjFNK+itc0FtpUUZ1glr1UxbL+y742dqyerrWMTYL/b MZyFUjnPSxoWLbEhhCgtnCLenQWPSd3nAEIZ+eIb5QT0+HzXLVaIMulmkcagy8iV wh2o9dvZI/CyuI4FyMRvLdYAYTsf64ASgK5NBU+EGzGu07UyhvbJhpVPoywECOmr 5oUQUDlqgJc5X5J+0lBp63DKMMh1LloxN2DGZ0ghPwpa8Dnz24E= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:25 2025 by rpki-client