This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: VwuOpuvbpbrBli2NxY37MptNZZbbT1u1vkHcUYN6TOc= Subject key identifier: A7:21:CD:1F:C5:60:75:FE:06:A4:53:2A:C4:31:DC:07:B4:D0:52:02 Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 5499004A21D1C878BB379292AAC511D5B9F54BD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01BB Signing time: Tue 02 Dec 2025 02:51:36 +0000 Manifest this update: Tue 02 Dec 2025 02:46:36 +0000 Manifest next update: Fri 05 Dec 2025 06:53:36 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: B3A917KFVf0N/vkLhffdHvuwDCt4Tg3Z0ga6IccwZjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:99:00:4a:21:d1:c8:78:bb:37:92:92:aa:c5:11:d5:b9:f5:4b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Dec 2 02:46:36 2025 GMT Not After : Dec 5 06:53:36 2025 GMT Subject: CN=A721CD1FC56075FE06A4532AC431DC07B4D05202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:b8:d1:e8:47:c1:de:59:81:52:fc:96:eb: ae:15:71:62:bc:ef:db:fb:21:f6:27:f0:a7:4c:32: 44:45:48:cc:4d:b5:83:29:3a:71:79:84:28:77:dc: fc:20:c0:26:82:53:3c:82:90:45:a2:49:31:2c:1c: 7a:3d:9f:b1:2c:ef:61:df:49:47:ca:bd:e0:70:ad: 0c:b6:04:e8:28:41:fb:3e:12:df:8f:16:9a:b7:d1: 00:17:20:ec:b7:0a:48:b7:e0:f6:bb:69:e5:38:0e: 07:91:79:37:e2:d6:9e:7f:76:1c:75:93:2a:70:d9: db:b6:50:f1:2e:64:10:6b:fb:31:d7:bc:c8:1b:65: 77:20:61:c3:42:13:6b:eb:05:b0:23:69:5f:f4:3f: 93:37:4e:ff:ab:69:15:1c:56:97:8e:fe:d9:1f:93: 0c:22:17:7f:b6:df:2d:03:51:59:94:62:b6:88:44: 0d:4b:ec:a3:c2:93:d2:24:98:7d:44:a6:a4:4b:17: fc:66:02:af:5c:54:2d:2e:6d:7a:1c:bc:3f:d5:7b: 2a:aa:3e:cf:26:cc:f1:83:c5:d4:65:26:30:d3:7f: e6:aa:07:ac:b7:a4:e8:96:0a:b2:b3:4e:46:9c:3d: b7:93:45:e8:b6:a7:08:e6:c2:4e:44:fe:74:bf:f7: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:21:CD:1F:C5:60:75:FE:06:A4:53:2A:C4:31:DC:07:B4:D0:52:02 X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:24:90:c2:da:9d:ae:c3:48:cb:31:67:e0:90:45:14:fa: cb:86:d8:03:9e:e1:7c:8d:b5:dc:8c:39:59:11:f4:a6:3f:3b: ca:ef:18:e6:30:48:c5:42:af:2f:43:51:1a:b3:8c:3f:b5:6a: 34:39:e0:87:04:0d:fc:06:3e:66:75:63:ed:3b:7a:db:4b:31: 75:05:ce:a5:dc:e6:54:d1:4e:6d:71:23:45:9c:a1:d9:21:48: 9b:c6:5f:4b:08:25:e8:ff:65:15:0e:99:2c:ba:ac:bd:81:84: a1:1b:ca:93:f2:6c:3c:61:ae:9d:5d:4f:a8:ba:b5:2c:a7:a8: d4:e3:5e:4f:f5:e5:08:c3:6d:3d:ed:75:78:22:15:ab:c6:2f: 89:52:97:36:a5:c2:e4:31:b9:55:e2:0b:32:b2:07:9a:3e:c5: 5a:31:e9:45:82:ff:e3:ea:47:08:72:dc:c8:d7:d8:fc:02:74: 01:19:52:e9:4c:3e:65:db:ea:e0:2c:75:ac:b2:41:b6:09:8c: 56:55:d3:96:85:b8:87:ef:67:41:7a:6b:7f:1d:58:6c:0f:4c: 88:e8:b1:bb:2d:86:d8:5f:72:47:11:c7:85:26:3c:3f:29:2b: d5:d7:8b:19:5b:62:db:19:8a:69:8a:26:7e:49:a7:9f:f2:5c: 1b:6b:c4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJkASiHRyHi7N5KSqsUR1bn1S9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTEyMDIwMjQ2MzZaFw0yNTEyMDUwNjUzMzZaMDMxMTAvBgNV BAMTKEE3MjFDRDFGQzU2MDc1RkUwNkE0NTMyQUM0MzFEQzA3QjREMDUyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1urjR6EfB3lmBUvyW664VcWK8 79v7IfYn8KdMMkRFSMxNtYMpOnF5hCh33PwgwCaCUzyCkEWiSTEsHHo9n7Es72Hf SUfKveBwrQy2BOgoQfs+Et+PFpq30QAXIOy3Cki34Pa7aeU4DgeReTfi1p5/dhx1 kypw2du2UPEuZBBr+zHXvMgbZXcgYcNCE2vrBbAjaV/0P5M3Tv+raRUcVpeO/tkf kwwiF3+23y0DUVmUYraIRA1L7KPCk9IkmH1EpqRLF/xmAq9cVC0ubXocvD/Veyqq Ps8mzPGDxdRlJjDTf+aqB6y3pOiWCrKzTkacPbeTRei2pwjmwk5E/nS/9wbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpyHNH8Vgdf4GpFMqxDHcB7TQUgIwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe+JJDC2p2uw0jLMWfgkEUU+suG2AOe4XyN tdyMOVkR9KY/O8rvGOYwSMVCry9DURqzjD+1ajQ54IcEDfwGPmZ1Y+07ettLMXUF zqXc5lTRTm1xI0WcodkhSJvGX0sIJej/ZRUOmSy6rL2BhKEbypPybDxhrp1dT6i6 tSynqNTjXk/15QjDbT3tdXgiFavGL4lSlzalwuQxuVXiCzKyB5o+xVox6UWC/+Pq Rwhy3MjX2PwCdAEZUulMPmXb6uAsdayyQbYJjFZV05aFuIfvZ0F6a38dWGwPTIjo sbsththfckcRx4UmPD8pK9XXixlbYtsZimmKJn5Jp5/yXBtrxJ4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:26 2025 by rpki-client