This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: JUb//JT51oxYh2jpqpjBoVV+ZdN9wui0e6Hh8tvaK/A= Subject key identifier: 97:5C:94:67:FD:D2:96:73:15:0E:10:53:5C:E3:98:D9:FA:83:56:A7 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 777E49615D1DBAD7B8A4780BD447EFC607FE0ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 0239 Signing time: Mon 01 Dec 2025 19:11:15 +0000 Manifest this update: Mon 01 Dec 2025 19:06:15 +0000 Manifest next update: Thu 04 Dec 2025 21:46:15 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: N6CHNcWifBWegsZB1f4NXzeK6V4wV6zNW8opNpIEAK8=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7e:49:61:5d:1d:ba:d7:b8:a4:78:0b:d4:47:ef:c6:07:fe:0a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Dec 1 19:06:15 2025 GMT Not After : Dec 4 21:46:15 2025 GMT Subject: CN=975C9467FDD29673150E10535CE398D9FA8356A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:67:ff:10:2e:b2:40:42:c3:8e:15:97:87: 4c:91:12:11:5a:50:5b:7b:e7:71:b0:04:ae:f7:7e: f6:ce:5d:36:c0:78:8a:a5:19:b3:9b:11:24:3d:87: a7:13:ff:35:63:e1:ee:95:ff:cc:5e:7b:36:5f:b7: 9e:f9:01:95:33:84:78:f1:38:8b:6c:14:84:4c:a0: 4c:21:63:2d:9b:73:d7:02:12:04:a6:93:35:a8:ae: be:d5:ba:a5:ff:05:5c:8e:4d:34:ee:9f:37:6d:06: 4f:62:c5:13:52:81:48:1d:d1:36:72:cb:b6:02:ce: 62:3d:c6:ac:93:62:31:e1:1f:58:76:6d:19:6b:e1: 87:3c:c7:29:78:36:05:0e:c0:7a:cf:89:8e:87:58: 0e:1f:b9:3e:31:08:9c:7f:4b:70:fd:ff:aa:75:41: cb:57:dd:bc:a7:15:8d:21:e1:5f:89:94:c4:79:fc: 50:0f:83:0f:eb:92:4b:af:0e:71:1b:13:09:91:4a: ad:e4:82:aa:f5:f6:ef:86:cb:a7:d0:e0:45:37:20: 1a:b7:a5:9c:f3:e2:11:c8:c0:1e:77:88:44:30:c7: 38:b6:92:76:8c:f5:29:c2:54:ab:9e:94:7b:a1:b7: 7a:f0:a2:09:8a:88:6f:01:01:e6:0a:15:1e:f8:ff: 32:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:94:67:FD:D2:96:73:15:0E:10:53:5C:E3:98:D9:FA:83:56:A7 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:56:98:b8:10:c1:3a:b0:46:a0:df:1f:5d:60:ad:43:73:03: 4f:0a:41:e7:86:3b:04:00:ce:a8:c4:b2:56:76:a4:cf:47:87: 6d:f2:72:87:d1:f6:a2:ca:f8:dc:52:f8:84:c7:ec:10:9f:b9: cf:2c:54:a6:10:8e:d9:e5:aa:d5:db:1d:4f:6c:28:f9:e0:a1: 09:1b:ec:61:e2:a5:e7:6d:86:91:ca:53:d6:82:23:73:3b:ad: 24:7a:ec:81:be:3a:56:a7:64:df:cf:be:b1:14:a0:d5:25:ed: 46:c6:d6:31:7c:92:30:22:19:ce:3b:dc:ea:af:e4:4a:05:2f: d3:0c:ce:d4:9f:a6:34:83:8b:2f:0a:1f:91:d5:77:96:ec:50: cf:d7:ae:b9:31:4d:20:f1:25:a8:23:47:12:f0:7f:54:0c:8c: 49:78:2c:26:ff:ab:5b:5e:0b:ca:e6:c0:91:ad:33:af:a1:7d: b3:0e:44:0a:55:f0:07:9b:26:8c:8d:a3:5d:4c:17:8a:ae:19: a7:71:b7:a8:bd:72:b7:3a:fd:56:ba:f3:a6:da:c7:b6:ff:81: aa:8a:ee:24:8d:67:15:93:6a:8d:49:36:f9:13:20:ff:20:e5: 2a:e2:78:5b:84:2d:02:28:00:84:5f:4e:30:c0:ad:ac:37:88: 1a:e7:1d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd35JYV0dute4pHgL1Efvxgf+Cs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTEyMDExOTA2MTVaFw0yNTEyMDQyMTQ2MTVaMDMxMTAvBgNV BAMTKDk3NUM5NDY3RkREMjk2NzMxNTBFMTA1MzVDRTM5OEQ5RkE4MzU2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnS2f/EC6yQELDjhWXh0yREhFa UFt753GwBK73fvbOXTbAeIqlGbObESQ9h6cT/zVj4e6V/8xeezZft575AZUzhHjx OItsFIRMoEwhYy2bc9cCEgSmkzWorr7VuqX/BVyOTTTunzdtBk9ixRNSgUgd0TZy y7YCzmI9xqyTYjHhH1h2bRlr4Yc8xyl4NgUOwHrPiY6HWA4fuT4xCJx/S3D9/6p1 QctX3bynFY0h4V+JlMR5/FAPgw/rkkuvDnEbEwmRSq3kgqr19u+Gy6fQ4EU3IBq3 pZzz4hHIwB53iEQwxzi2knaM9SnCVKuelHuht3rwogmKiG8BAeYKFR74/zKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1yUZ/3SlnMVDhBTXOOY2fqDVqcwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxWmLgQwTqwRqDfH11grUNzA08KQeeGOwQA zqjEslZ2pM9Hh23ycofR9qLK+NxS+ITH7BCfuc8sVKYQjtnlqtXbHU9sKPngoQkb 7GHipedthpHKU9aCI3M7rSR67IG+OlanZN/PvrEUoNUl7UbG1jF8kjAiGc473Oqv 5EoFL9MMztSfpjSDiy8KH5HVd5bsUM/XrrkxTSDxJagjRxLwf1QMjEl4LCb/q1te C8rmwJGtM6+hfbMORApV8AebJoyNo11MF4quGadxt6i9crc6/Va686bax7b/gaqK 7iSNZxWTao1JNvkTIP8g5SrieFuELQIoAIRfTjDAraw3iBrnHag= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:09 2025 by rpki-client