This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: ub/V61Z/GA4Bhvbq5nRa8l8qPCHO/T/wHyJ3TvLRuV4= Subject key identifier: F1:BA:39:2D:2C:C2:FC:DD:B0:05:1A:3B:EB:BC:52:33:56:09:9C:A6 Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 2BF6C63889D39856DB46B3E8F18BBD8136A3D02A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 0113 Signing time: Thu 18 Dec 2025 11:32:25 +0000 Manifest this update: Thu 18 Dec 2025 11:27:25 +0000 Manifest next update: Sun 21 Dec 2025 15:39:25 +0000 Files and hashes: 1: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 2: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) 3: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 4: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 5: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) 7: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 8: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 9: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: Kfydd4ag6alkSh/Ks6mlJaYZbjPsMf/pC0RPCvCervA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:c6:38:89:d3:98:56:db:46:b3:e8:f1:8b:bd:81:36:a3:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Dec 18 11:27:25 2025 GMT Not After : Dec 21 15:39:25 2025 GMT Subject: CN=F1BA392D2CC2FCDDB0051A3BEBBC523356099CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:7f:79:f4:d9:75:eb:e9:5e:6d:c3:03:6d: 3f:da:0b:a9:9b:01:fd:14:b5:f6:b0:80:e7:15:69: 4a:9b:75:a2:2a:71:e8:54:7f:40:5b:b4:5d:18:e6: 55:10:fe:da:f5:af:4e:81:26:e0:68:da:b3:59:be: cf:00:cf:80:d6:65:49:43:8c:32:70:ee:a3:75:26: 63:56:39:3b:6c:eb:fc:1f:41:0e:8d:a4:f6:38:b4: d7:38:dd:a4:4a:20:e0:2e:8f:ef:39:fa:72:f8:cd: 85:6f:fd:78:6b:2e:4e:62:31:ba:29:d4:6b:66:84: 18:3e:27:74:ae:58:9a:d0:52:a7:cc:86:be:c0:be: 69:4b:9a:52:48:53:0c:00:e1:75:bc:a4:0f:80:ae: ae:e4:87:b8:f6:68:01:ca:d6:d8:f4:f5:a3:1a:ae: e1:3d:bd:5b:fc:7f:02:15:06:33:75:7f:eb:7e:bb: a9:ac:d0:b4:f9:45:ff:76:c7:c3:e7:fc:61:95:40: 4c:95:fe:a0:d7:5e:46:db:74:00:e2:72:c4:4d:3d: bc:1c:bf:03:72:48:c1:0c:96:ea:6d:25:1a:b5:e7: db:db:50:04:7c:c7:ab:db:d6:d2:b2:3b:20:1b:aa: 03:41:59:0a:51:0f:ca:01:87:68:43:e7:08:e0:8f: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BA:39:2D:2C:C2:FC:DD:B0:05:1A:3B:EB:BC:52:33:56:09:9C:A6 X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ab:1e:37:ee:66:d6:d1:d4:ec:0e:96:83:81:f6:cd:a4:cf: 6d:61:99:54:dd:58:5e:8b:6e:cb:77:13:b2:9b:8f:f8:29:b6: df:26:9b:59:b5:08:76:08:1b:b8:40:9d:78:d1:61:b7:bb:9b: 75:d3:3a:08:34:7b:b0:fa:8e:ac:95:62:f9:74:1d:f3:01:45: e0:01:f8:92:d9:c5:bf:0a:72:18:85:12:8f:c0:fa:cb:fd:9f: b3:7f:17:4b:73:e5:44:96:d2:3f:f9:19:ce:07:67:6f:5a:77: c4:2f:30:d5:0a:28:1f:74:1d:6d:67:6f:b8:96:aa:b1:36:39: e1:a6:20:55:32:6b:b4:c7:3b:c7:d8:20:69:50:e1:6f:84:11: b2:7d:c9:5b:2b:51:ce:1c:0c:e0:4e:a9:da:03:c1:d2:7e:ff: 03:b6:45:26:45:3d:1c:be:dc:43:c8:06:a4:98:90:99:b8:17: 2b:68:14:04:d6:f2:bc:41:64:d5:7f:64:eb:c1:16:21:20:b6: ba:b9:1a:5b:f2:75:21:54:a9:e9:78:3f:ae:43:69:45:02:7a: 30:8b:91:5a:ee:e6:d3:a2:7d:f3:77:69:49:53:e7:9b:3f:21: a6:65:aa:f9:95:9b:b5:9b:83:0c:63:93:df:ae:77:50:bb:20: 93:ab:5c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/bGOInTmFbbRrPo8Yu9gTaj0CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTEyMTgxMTI3MjVaFw0yNTEyMjExNTM5MjVaMDMxMTAvBgNV BAMTKEYxQkEzOTJEMkNDMkZDRERCMDA1MUEzQkVCQkM1MjMzNTYwOTlDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGH959Nl16+lebcMDbT/aC6mb Af0UtfawgOcVaUqbdaIqcehUf0BbtF0Y5lUQ/tr1r06BJuBo2rNZvs8Az4DWZUlD jDJw7qN1JmNWOTts6/wfQQ6NpPY4tNc43aRKIOAuj+85+nL4zYVv/XhrLk5iMbop 1GtmhBg+J3SuWJrQUqfMhr7AvmlLmlJIUwwA4XW8pA+Arq7kh7j2aAHK1tj09aMa ruE9vVv8fwIVBjN1f+t+u6ms0LT5Rf92x8Pn/GGVQEyV/qDXXkbbdADicsRNPbwc vwNySMEMluptJRq159vbUAR8x6vb1tKyOyAbqgNBWQpRD8oBh2hD5wjgj3hJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bo5LSzC/N2wBRo767xSM1YJnKYwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyrHjfuZtbR1OwOloOB9s2kz21hmVTdWF6L bst3E7Kbj/gptt8mm1m1CHYIG7hAnXjRYbe7m3XTOgg0e7D6jqyVYvl0HfMBReAB +JLZxb8KchiFEo/A+sv9n7N/F0tz5USW0j/5Gc4HZ29ad8QvMNUKKB90HW1nb7iW qrE2OeGmIFUya7THO8fYIGlQ4W+EEbJ9yVsrUc4cDOBOqdoDwdJ+/wO2RSZFPRy+ 3EPIBqSYkJm4FytoFATW8rxBZNV/ZOvBFiEgtrq5GlvydSFUqel4P65DaUUCejCL kVru5tOiffN3aUlT55s/IaZlqvmVm7Wbgwxjk9+ud1C7IJOrXB0= -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:32 2025 by rpki-client