This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: XZ7SEDDhdUreW8U7VK8IttSeH0Z08q/FwTWMS4w8OeQ= Subject key identifier: 44:6A:28:B9:2A:63:4D:75:30:68:53:3C:64:97:DB:DF:2F:BF:4B:8B Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 639EE25B7AD8FFD99FA088024999CA0E7E67707B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 052C Signing time: Mon 01 Dec 2025 16:11:50 +0000 Manifest this update: Mon 01 Dec 2025 16:06:50 +0000 Manifest next update: Thu 04 Dec 2025 20:56:50 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: 0sS4skZtPdvr0ySykXXCkIbz5a197zDaER2Bn3knb5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9e:e2:5b:7a:d8:ff:d9:9f:a0:88:02:49:99:ca:0e:7e:67:70:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Dec 1 16:06:50 2025 GMT Not After : Dec 4 20:56:50 2025 GMT Subject: CN=446A28B92A634D753068533C6497DBDF2FBF4B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:0a:45:e7:33:6a:b0:df:35:72:62:25:ea: 57:78:cd:1a:47:a5:c8:35:ac:9b:bb:6b:c6:9b:d3: 94:e5:75:07:b1:b9:e5:ca:60:09:52:ca:e0:b3:61: 3b:ad:d5:d4:49:6f:8c:e0:ec:02:82:bd:a8:64:03: d2:2b:9c:9e:b2:76:93:dc:02:11:cb:f4:a6:c3:b6: b4:f6:b4:54:8e:a7:b6:6b:fe:43:86:e6:d8:ba:54: 01:18:d0:42:e1:64:e8:78:9b:00:b9:cc:15:45:71: 18:5b:46:ca:7e:d2:22:a5:08:f9:6f:3e:7c:27:97: 1c:c5:97:c5:f3:5f:76:28:e0:c0:69:d2:b1:91:7c: bc:a3:73:12:da:58:d3:26:57:6d:a8:d8:3d:1a:a5: f6:2a:3c:92:33:67:21:26:79:54:f9:bb:2e:47:b5: 06:06:3c:82:6c:84:5c:38:cb:3d:85:90:5c:89:c0: 07:1e:b8:f1:d4:d2:e9:97:c4:bd:b2:97:08:53:1b: 83:62:15:5c:90:6c:ee:5a:eb:e1:bc:20:3a:96:e4: 79:45:bb:cc:5b:49:90:09:56:14:06:b1:83:63:d1: 29:c3:f8:1f:a9:ce:ba:e0:9f:81:f9:f2:06:26:c3: 80:02:f4:f2:df:1a:ec:7b:3b:40:fe:99:48:eb:98: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:28:B9:2A:63:4D:75:30:68:53:3C:64:97:DB:DF:2F:BF:4B:8B X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:90:f8:91:b8:87:f3:77:37:f9:7a:0c:3c:04:8c:8e:6f:b3: d9:fd:d8:fa:79:1b:60:87:ed:dd:da:01:58:58:6b:39:09:bb: 52:b2:a3:1a:30:b7:d6:38:84:35:4c:74:26:67:98:aa:f2:d5: c9:63:bd:49:93:cd:ba:d9:be:67:f3:f9:5f:3d:8f:6b:a7:f5: 91:82:25:05:06:ad:bb:d1:30:0d:9e:17:3a:57:35:0f:c7:67: 01:7d:22:ce:f7:5d:bc:56:66:01:bb:45:26:80:76:21:c3:80: 3d:60:8b:ad:a0:eb:ec:72:c6:56:c2:6d:26:7c:34:0e:2c:29: 40:3a:d3:11:be:02:ec:1f:f1:7c:4f:2b:40:20:a8:4c:7e:f5: a8:cc:63:b6:d9:05:f8:73:20:c2:0b:18:ef:82:c1:cd:69:5c: b9:22:35:97:75:e2:50:dd:d8:50:78:d8:05:20:3e:d5:c5:ad: 52:27:37:bf:1f:e3:b7:e9:8f:a4:e2:36:bd:2b:87:48:37:60: 68:8a:a1:f2:01:95:ff:93:e6:83:1c:12:55:d0:cb:f3:d8:9c: 00:66:01:48:f2:2d:0b:7a:fd:6e:f1:71:c7:a2:b8:bc:0e:d1: f7:d3:8e:52:72:16:fb:54:79:f0:7e:b1:8d:e9:53:75:24:cd: 52:e7:13:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY57iW3rY/9mfoIgCSZnKDn5ncHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTEyMDExNjA2NTBaFw0yNTEyMDQyMDU2NTBaMDMxMTAvBgNV BAMTKDQ0NkEyOEI5MkE2MzRENzUzMDY4NTMzQzY0OTdEQkRGMkZCRjRCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60QpF5zNqsN81cmIl6ld4zRpH pcg1rJu7a8ab05TldQexueXKYAlSyuCzYTut1dRJb4zg7AKCvahkA9IrnJ6ydpPc AhHL9KbDtrT2tFSOp7Zr/kOG5ti6VAEY0ELhZOh4mwC5zBVFcRhbRsp+0iKlCPlv PnwnlxzFl8XzX3Yo4MBp0rGRfLyjcxLaWNMmV22o2D0apfYqPJIzZyEmeVT5uy5H tQYGPIJshFw4yz2FkFyJwAceuPHU0umXxL2ylwhTG4NiFVyQbO5a6+G8IDqW5HlF u8xbSZAJVhQGsYNj0SnD+B+pzrrgn4H58gYmw4AC9PLfGux7O0D+mUjrmGT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURGoouSpjTXUwaFM8ZJfb3y+/S4swHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaQ+JG4h/N3N/l6DDwEjI5vs9n92Pp5G2CH 7d3aAVhYazkJu1Kyoxowt9Y4hDVMdCZnmKry1cljvUmTzbrZvmfz+V89j2un9ZGC JQUGrbvRMA2eFzpXNQ/HZwF9Is73XbxWZgG7RSaAdiHDgD1gi62g6+xyxlbCbSZ8 NA4sKUA60xG+Auwf8XxPK0AgqEx+9ajMY7bZBfhzIMILGO+Cwc1pXLkiNZd14lDd 2FB42AUgPtXFrVInN78f47fpj6TiNr0rh0g3YGiKofIBlf+T5oMcElXQy/PYnABm AUjyLQt6/W7xcceiuLwO0ffTjlJyFvtUefB+sY3pU3UkzVLnE4M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:23 2025 by rpki-client