This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: Wf2ll22ZqbWu68xNXBxcH4eP4HBwNSURbcqRKyeX7ug= Subject key identifier: 1A:10:6D:63:3D:07:8C:2C:97:7D:4A:29:DA:54:A3:84:0A:2A:37:7C Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 69A20B4EFCA9423C5D01F20137BFA14257622BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 024B Signing time: Mon 01 Dec 2025 19:21:07 +0000 Manifest this update: Mon 01 Dec 2025 19:16:07 +0000 Manifest next update: Fri 05 Dec 2025 04:53:07 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: TMUtiCqdxSo3pbFTnNG5npRl6cr6o4ufFShI2562WQc=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:0b:4e:fc:a9:42:3c:5d:01:f2:01:37:bf:a1:42:57:62:2b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Dec 1 19:16:07 2025 GMT Not After : Dec 5 04:53:07 2025 GMT Subject: CN=1A106D633D078C2C977D4A29DA54A3840A2A377C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:d0:3d:87:c6:dc:a1:6b:36:d4:40:b7:27: 8b:6e:00:21:32:a8:03:cf:c9:c2:57:34:96:0b:ac: 94:c8:9a:cf:43:62:40:c9:eb:16:8c:89:40:1d:92: 5e:95:73:e8:59:f2:99:33:3b:4f:05:23:ea:ce:1b: 9d:d4:fe:26:14:5b:f1:5b:cd:92:d5:50:5f:a7:90: f8:95:6c:bd:a1:9a:45:3e:f9:fe:d4:08:92:83:c8: e5:fb:19:af:10:00:ac:15:25:c9:77:d5:9f:c1:2a: 7b:69:ef:e9:87:23:77:14:ef:0a:1a:eb:8a:ef:1c: 74:9d:63:2b:e2:a3:05:a3:f6:4c:5d:9a:d6:74:43: c7:36:54:b0:68:f4:83:5d:e3:6d:a6:f4:ef:4a:d3: f8:3b:5a:8d:90:53:bd:c9:1b:69:84:5a:bc:7c:83: 3e:6f:eb:fd:ed:3b:eb:1a:2a:13:64:1b:71:86:47: dd:a2:d1:5e:56:3b:a4:f9:a1:a3:fc:09:76:7e:27: 5e:29:80:74:06:bd:b6:a9:5e:1d:ab:21:aa:35:01: dd:2b:32:44:5c:46:8e:7d:cb:03:8f:e5:ad:e3:df: 6a:54:77:51:54:64:29:83:4e:67:8c:7a:03:23:3c: 43:84:14:6d:2a:df:4b:2b:97:39:03:06:48:2b:fc: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:6D:63:3D:07:8C:2C:97:7D:4A:29:DA:54:A3:84:0A:2A:37:7C X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:3f:75:33:9b:ea:83:2a:6e:c4:bb:47:85:95:c4:08:8f: d3:67:d3:47:98:52:a4:27:2f:b0:af:ba:78:07:93:c8:c9:c7: 1b:47:02:fc:7b:57:fa:4a:28:1f:61:c0:17:c0:b5:ae:2c:0d: 17:a5:30:0a:bb:ec:54:e4:3f:21:09:f9:52:3c:9f:c1:2b:44: fa:4c:bd:cc:56:90:73:73:0c:3f:fc:c6:b2:c6:36:03:26:e9: 3e:96:63:80:b4:4f:00:4e:bf:34:c0:7d:61:ef:a0:de:02:3b: 2e:ff:ab:ef:c5:27:04:54:27:dc:12:74:c1:4c:53:1e:c0:09: 6b:90:05:d1:a6:b8:5c:a8:34:02:a0:b1:6a:7b:02:a1:ba:2a: 61:5e:c6:b9:ae:33:12:74:b3:3c:17:ba:af:e5:7a:4a:51:80: 67:37:e4:50:ed:cb:95:cb:99:c4:08:1f:a3:cb:5e:78:df:36: c2:1a:f2:07:d7:6f:5e:3c:04:15:fa:87:e8:66:c1:cb:6e:7f: 14:77:73:d8:48:32:90:2b:e8:ca:4b:b3:60:df:ee:a0:89:6e: 16:33:5c:a0:4d:9c:83:15:91:16:32:a9:9f:82:a9:22:b7:6d: 20:47:ec:3e:a7:4d:42:bc:0e:e7:3c:9e:3f:48:8d:04:0b:04: a1:0e:aa:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaILTvypQjxdAfIBN7+hQldiK+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTEyMDExOTE2MDdaFw0yNTEyMDUwNDUzMDdaMDMxMTAvBgNV BAMTKDFBMTA2RDYzM0QwNzhDMkM5NzdENEEyOURBNTRBMzg0MEEyQTM3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHNA9h8bcoWs21EC3J4tuACEy qAPPycJXNJYLrJTIms9DYkDJ6xaMiUAdkl6Vc+hZ8pkzO08FI+rOG53U/iYUW/Fb zZLVUF+nkPiVbL2hmkU++f7UCJKDyOX7Ga8QAKwVJcl31Z/BKntp7+mHI3cU7woa 64rvHHSdYyviowWj9kxdmtZ0Q8c2VLBo9INd422m9O9K0/g7Wo2QU73JG2mEWrx8 gz5v6/3tO+saKhNkG3GGR92i0V5WO6T5oaP8CXZ+J14pgHQGvbapXh2rIao1Ad0r MkRcRo59ywOP5a3j32pUd1FUZCmDTmeMegMjPEOEFG0q30srlzkDBkgr/E17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhBtYz0HjCyXfUop2lSjhAoqN3wwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRhP3Uzm+qDKm7Eu0eFlcQIj9Nn00eYUqQn L7CvungHk8jJxxtHAvx7V/pKKB9hwBfAta4sDRelMAq77FTkPyEJ+VI8n8ErRPpM vcxWkHNzDD/8xrLGNgMm6T6WY4C0TwBOvzTAfWHvoN4COy7/q+/FJwRUJ9wSdMFM Ux7ACWuQBdGmuFyoNAKgsWp7AqG6KmFexrmuMxJ0szwXuq/lekpRgGc35FDty5XL mcQIH6PLXnjfNsIa8gfXb148BBX6h+hmwctufxR3c9hIMpAr6MpLs2Df7qCJbhYz XKBNnIMVkRYyqZ+CqSK3bSBH7D6nTUK8Duc8nj9IjQQLBKEOqoc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:20 2025 by rpki-client