This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: qmygeWuehIbeRTc880ACAGXxJlbkPqBZSut1ZAWTCoQ= Subject key identifier: A9:23:39:A0:32:20:44:B6:49:EC:70:88:F3:79:ED:B8:E4:5F:4E:97 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 44E1829DB53B62F2BC4905E8AF278D0A11BAAFE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 029B Signing time: Wed 03 Dec 2025 03:41:56 +0000 Manifest this update: Wed 03 Dec 2025 03:36:56 +0000 Manifest next update: Sat 06 Dec 2025 05:10:56 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: 2mQPqtbBtw2Y5tXBCE3uEx3jE64ErukmwKI43C9AWrs=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e1:82:9d:b5:3b:62:f2:bc:49:05:e8:af:27:8d:0a:11:ba:af:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Dec 3 03:36:56 2025 GMT Not After : Dec 6 05:10:56 2025 GMT Subject: CN=A92339A0322044B649EC7088F379EDB8E45F4E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:f0:15:24:c6:6e:20:78:75:1b:07:d7:99: 3c:17:e8:85:e7:b5:59:d0:e2:1a:5c:3d:80:82:fa: 5a:8c:40:c7:72:e8:e5:12:eb:8d:3f:d6:27:e5:97: fd:ac:22:ab:60:a5:49:3b:a6:35:26:ca:46:17:82: fb:66:61:20:98:f2:14:2c:47:c2:0c:21:23:16:70: 4b:0e:dd:1b:68:79:a8:62:ac:93:89:46:28:1e:65: 58:84:61:20:fb:5d:33:cf:79:db:22:aa:c1:c3:72: 37:fb:f4:6c:7d:57:78:7a:ab:97:55:d2:49:e6:74: 60:3b:e9:6a:43:a2:23:b1:bd:38:e3:91:da:ed:50: 44:3b:a8:32:d3:63:f2:d6:b7:74:dd:1e:a1:78:71: 64:22:fc:5d:c0:f1:8c:46:64:06:10:56:3b:41:21: 71:69:bb:bb:0b:87:03:28:00:8f:70:cd:82:bb:16: 51:05:21:33:cc:45:f3:95:c3:eb:a3:c6:57:01:31: 31:cc:6f:1b:67:52:cf:61:5c:1c:fa:64:66:48:62: 77:a5:25:70:6e:26:be:a7:da:d5:1e:97:39:db:13: f7:79:b3:13:70:85:69:8f:9b:67:00:88:3d:48:e1: 12:7f:79:ae:1f:52:bf:73:62:45:17:ad:30:f9:30: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:39:A0:32:20:44:B6:49:EC:70:88:F3:79:ED:B8:E4:5F:4E:97 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e7:52:47:7a:5a:20:bf:08:6e:76:23:94:b0:eb:be:97:6f: 18:55:cb:92:70:3a:2e:71:1e:c8:23:d4:c5:29:fd:02:b4:6c: c8:f1:0a:b4:49:33:94:32:8d:05:20:3f:0e:2c:45:0b:21:6b: eb:67:35:00:ba:75:b5:38:9f:c5:c6:c5:ed:d0:a9:a8:50:dd: 06:0e:99:c9:ac:29:52:2f:e3:21:ea:32:5a:9f:e4:b7:39:05: 41:94:e2:f6:f5:d1:98:15:f8:c0:0b:9b:63:56:2b:fe:11:21: 3e:1d:5d:d0:2b:0b:a9:63:f0:1c:e9:82:40:4f:62:6a:8d:a5: af:cc:5e:9b:c4:69:d8:1d:bc:04:02:79:98:31:80:a1:5b:bd: cc:3d:f7:29:0c:b2:06:74:64:42:d0:e3:28:d3:11:e6:74:0b: 31:32:df:bc:6d:09:e1:09:04:79:c4:45:2e:5d:b8:67:fe:c2: 5a:8c:71:3e:ed:2d:38:7c:fd:00:88:e6:6e:25:67:b1:83:00: 16:95:14:e7:33:26:d5:b2:93:66:85:14:c2:08:b8:74:cb:1a: 91:58:bc:b8:44:4d:79:b6:a0:10:fd:a7:d5:ad:b7:fb:76:e4: 36:f0:bf:80:e0:da:0d:86:46:19:91:5c:45:d6:0c:78:79:5f: 09:0b:2a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROGCnbU7YvK8SQXoryeNChG6r+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTEyMDMwMzM2NTZaFw0yNTEyMDYwNTEwNTZaMDMxMTAvBgNV BAMTKEE5MjMzOUEwMzIyMDQ0QjY0OUVDNzA4OEYzNzlFREI4RTQ1RjRFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1d/AVJMZuIHh1GwfXmTwX6IXn tVnQ4hpcPYCC+lqMQMdy6OUS640/1ifll/2sIqtgpUk7pjUmykYXgvtmYSCY8hQs R8IMISMWcEsO3RtoeahirJOJRigeZViEYSD7XTPPedsiqsHDcjf79Gx9V3h6q5dV 0knmdGA76WpDoiOxvTjjkdrtUEQ7qDLTY/LWt3TdHqF4cWQi/F3A8YxGZAYQVjtB IXFpu7sLhwMoAI9wzYK7FlEFITPMRfOVw+ujxlcBMTHMbxtnUs9hXBz6ZGZIYnel JXBuJr6n2tUelznbE/d5sxNwhWmPm2cAiD1I4RJ/ea4fUr9zYkUXrTD5MNX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSM5oDIgRLZJ7HCI83ntuORfTpcwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/nUkd6WiC/CG52I5Sw676XbxhVy5JwOi5x Hsgj1MUp/QK0bMjxCrRJM5QyjQUgPw4sRQsha+tnNQC6dbU4n8XGxe3QqahQ3QYO mcmsKVIv4yHqMlqf5Lc5BUGU4vb10ZgV+MALm2NWK/4RIT4dXdArC6lj8BzpgkBP YmqNpa/MXpvEadgdvAQCeZgxgKFbvcw99ykMsgZ0ZELQ4yjTEeZ0CzEy37xtCeEJ BHnERS5duGf+wlqMcT7tLTh8/QCI5m4lZ7GDABaVFOczJtWyk2aFFMIIuHTLGpFY vLhETXm2oBD9p9Wtt/t25Dbwv4Dg2g2GRhmRXEXWDHh5XwkLKl8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:32 2025 by rpki-client