This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: lxk0J0VQ8ZrhppRdAMlj7LnL8A19J8MN5lVVUdN9G0M= Subject key identifier: A2:33:47:20:1D:FA:FF:0A:05:6F:05:F1:7D:26:E0:57:86:B0:56:79 Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 48BB95E5F5582D4BAF3A836036C56445C0A5AF6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 010C Signing time: Tue 02 Dec 2025 23:52:26 +0000 Manifest this update: Tue 02 Dec 2025 23:47:26 +0000 Manifest next update: Sat 06 Dec 2025 07:28:26 +0000 Files and hashes: 1: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 2: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 3: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 4: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 5: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: 4uIejvCmFkzpJwi/YOd7UsKIAHw1Ux+OTz19gOPcT/E=) 6: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) 7: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 8: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 9: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:95:e5:f5:58:2d:4b:af:3a:83:60:36:c5:64:45:c0:a5:af:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Dec 2 23:47:26 2025 GMT Not After : Dec 6 07:28:26 2025 GMT Subject: CN=A23347201DFAFF0A056F05F17D26E05786B05679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:a4:ac:57:e1:72:17:b0:f3:b0:a4:36:e8: 98:93:20:af:60:3c:19:bb:fe:50:92:47:c4:c0:a2: 3c:51:4c:45:f4:44:ae:39:10:1a:9f:c4:6b:21:fb: f3:7c:a5:fd:54:0e:c0:0c:2d:0d:3a:5a:6b:4c:c3: bf:e1:bc:c8:79:79:99:90:4d:0e:e9:b3:af:2a:52: a3:43:99:bf:74:7a:ed:3e:53:4a:65:32:62:31:18: fa:62:95:b2:f6:c2:80:81:9a:6c:2b:7e:83:2c:07: b7:1e:f3:de:9d:27:1f:49:23:f1:8e:22:00:0e:a4: 54:22:53:f5:42:13:2c:34:18:a2:6f:81:21:94:55: b4:d7:94:94:c4:0b:74:bd:d1:c3:e3:37:ea:cf:fd: 34:ff:54:88:5c:e8:11:d5:55:0c:e1:7a:33:77:55: e3:68:0f:6b:16:cb:8b:c2:1f:00:b2:3e:00:99:35: 24:e9:74:99:c4:e6:c7:f8:46:a6:98:cf:6e:6c:d0: aa:de:b4:31:a2:70:59:fa:4c:75:10:2c:63:ae:89: be:9a:75:40:24:76:08:b2:f8:c3:1a:5c:34:3d:30: 9a:66:b3:94:4d:3e:ea:11:33:a6:c4:e6:a7:fb:17: 9d:44:98:91:67:26:5c:96:6b:54:a7:68:50:b6:bf: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:47:20:1D:FA:FF:0A:05:6F:05:F1:7D:26:E0:57:86:B0:56:79 X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:97:ce:bd:96:6b:7f:b3:62:cf:ea:dc:75:fe:ea:92:a1: 6b:af:5c:a6:f9:a4:de:87:41:1f:e6:cb:44:70:d0:28:9e:8a: 2f:a8:0f:d2:8a:4b:ac:9a:17:1f:f0:8c:b1:47:f1:28:5d:e8: 75:9b:fa:53:5f:8e:c9:eb:82:33:f7:fd:fb:ec:17:59:2f:f3: 74:c8:79:a6:3e:7a:b0:00:3b:36:22:a6:e0:01:0b:50:a6:21: 80:d5:4c:bf:9b:21:15:e4:43:ba:0c:fa:2f:72:4c:f4:83:01: d9:02:a2:d2:86:c2:bf:0f:32:bc:6c:55:b2:a7:38:09:d6:b7: 75:52:fb:a6:42:c2:7a:c1:3f:4f:3f:b8:a5:9e:84:3e:af:91: be:04:1d:79:d1:7d:18:f7:12:d4:7a:d0:1f:36:d0:3a:32:50: 74:49:fe:85:e7:6b:ae:db:6c:a2:50:97:a4:a0:8c:38:03:fb: 04:b1:fb:5e:20:b8:6b:59:bd:9d:5d:a8:2a:e6:32:03:78:2e: 10:f2:13:67:8d:0d:46:71:71:45:63:54:a8:69:72:f6:46:78: 66:ba:4a:b5:82:7e:4f:08:21:d9:9a:5f:36:02:a4:f6:b2:3a: 3e:18:9f:d4:b4:0d:5e:71:c2:2d:fa:68:84:06:b1:0f:2e:fa: af:dc:75:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLuV5fVYLUuvOoNgNsVkRcClr24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTEyMDIyMzQ3MjZaFw0yNTEyMDYwNzI4MjZaMDMxMTAvBgNV BAMTKEEyMzM0NzIwMURGQUZGMEEwNTZGMDVGMTdEMjZFMDU3ODZCMDU2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiI6SsV+FyF7DzsKQ26JiTIK9g PBm7/lCSR8TAojxRTEX0RK45EBqfxGsh+/N8pf1UDsAMLQ06WmtMw7/hvMh5eZmQ TQ7ps68qUqNDmb90eu0+U0plMmIxGPpilbL2woCBmmwrfoMsB7ce896dJx9JI/GO IgAOpFQiU/VCEyw0GKJvgSGUVbTXlJTEC3S90cPjN+rP/TT/VIhc6BHVVQzhejN3 VeNoD2sWy4vCHwCyPgCZNSTpdJnE5sf4RqaYz25s0KretDGicFn6THUQLGOuib6a dUAkdgiy+MMaXDQ9MJpms5RNPuoRM6bE5qf7F51EmJFnJlyWa1SnaFC2v3GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUojNHIB36/woFbwXxfSbgV4awVnkwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIrl869lmt/s2LP6tx1/uqSoWuvXKb5pN6H QR/my0Rw0Cieii+oD9KKS6yaFx/wjLFH8Shd6HWb+lNfjsnrgjP3/fvsF1kv83TI eaY+erAAOzYipuABC1CmIYDVTL+bIRXkQ7oM+i9yTPSDAdkCotKGwr8PMrxsVbKn OAnWt3VS+6ZCwnrBP08/uKWehD6vkb4EHXnRfRj3EtR60B820DoyUHRJ/oXna67b bKJQl6SgjDgD+wSx+14guGtZvZ1dqCrmMgN4LhDyE2eNDUZxcUVjVKhpcvZGeGa6 SrWCfk8IIdmaXzYCpPayOj4Yn9S0DV5xwi36aIQGsQ8u+q/cddY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client