This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: 3av4Rg32Knvfu3wI/vTdIvIebcPWR8fcK16bNnkn3IE= Subject key identifier: AB:E7:E4:FC:D9:27:B4:DD:E8:BE:96:BE:01:DD:1C:1E:D2:C4:A6:F2 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 18A4B764E6D3E9081FCA49BDB8020C37584C6E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: BC Signing time: Tue 02 Dec 2025 17:31:27 +0000 Manifest this update: Tue 02 Dec 2025 17:26:27 +0000 Manifest next update: Sat 06 Dec 2025 05:20:27 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) 2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: bA8/qjtGEv2RgRmBDFv/QlSehkp04fBKcGhsRZKc99U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a4:b7:64:e6:d3:e9:08:1f:ca:49:bd:b8:02:0c:37:58:4c:6e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Dec 2 17:26:27 2025 GMT Not After : Dec 6 05:20:27 2025 GMT Subject: CN=ABE7E4FCD927B4DDE8BE96BE01DD1C1ED2C4A6F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:3d:ac:b2:65:c0:d5:bf:af:70:a2:c2:73: 05:3e:7e:c8:8d:74:01:1a:54:68:b2:de:47:da:e5: 9b:46:b0:c3:2e:28:40:78:fb:06:d2:ff:ad:94:e9: ba:07:0c:30:19:31:cf:a5:3f:2a:68:18:39:4f:00: d9:10:2d:b3:98:2b:d3:cb:a5:76:e5:28:85:38:5c: f8:6d:02:14:b7:d6:fb:65:e8:d0:b2:37:f5:24:81: 6b:2f:74:34:57:eb:f0:4c:8b:14:62:ad:62:29:02: 61:9b:c9:8d:4b:ca:11:05:20:6c:12:20:b6:9f:60: 17:77:13:3f:79:f9:8e:29:4f:c9:f7:42:76:62:ed: cd:10:6a:72:c0:67:20:eb:d9:60:58:d9:80:0e:79: 9d:34:c6:f9:ba:73:90:d9:2d:27:ca:e2:a8:74:32: 06:38:d1:a1:0c:b8:ac:e8:57:ff:a5:b1:9f:ae:71: da:51:e7:dd:e0:8c:67:a2:f2:2f:89:b1:4c:c0:ef: f4:67:f3:8e:e1:0a:17:c6:a9:c2:10:26:7d:a8:8b: 06:1b:1f:79:d0:12:c6:77:a4:65:ce:bb:7f:85:87: f2:d0:e5:1b:f7:b2:3d:13:e9:29:ff:cb:78:07:13: 32:c2:05:52:6d:21:5b:58:3f:67:4f:9d:fd:aa:64: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:E4:FC:D9:27:B4:DD:E8:BE:96:BE:01:DD:1C:1E:D2:C4:A6:F2 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f4:e1:0c:68:80:d5:f0:2f:53:79:16:c2:a5:90:6e:80:de: 6b:1a:d9:1c:d8:b7:ce:0f:67:30:5e:fa:f8:5f:96:05:a4:34: 79:95:08:a7:ac:d7:55:dc:64:59:64:cc:d5:e7:fc:19:be:f2: 17:36:33:e8:2f:04:33:ab:0a:f6:fc:1a:13:2c:6f:aa:73:46: fb:7c:75:af:ff:0e:8f:40:92:c9:38:96:fe:0e:db:96:78:46: fc:c0:30:81:b9:1b:10:55:fd:f6:12:3c:ae:cb:90:a6:15:88: 0d:e4:3c:ed:36:d2:45:63:ee:e3:96:b8:50:f6:92:2d:85:98: af:91:71:f5:6c:fa:aa:23:b9:46:c4:c3:22:21:12:a0:a8:b2: fb:d3:b8:f0:57:2d:75:76:dd:f2:f1:45:66:ff:6f:d3:7d:9d: 81:bf:b6:69:cd:30:c6:07:89:1c:96:40:3e:b1:2f:80:af:95: dc:7e:a7:0e:17:ee:ff:61:4c:c2:fe:ca:bc:87:cf:b1:3c:1e: 60:22:28:6a:5f:00:5e:f0:3f:e3:9f:1f:c0:f9:27:50:d1:cb: 81:0a:c1:75:11:9f:9b:c6:82:56:51:3a:22:97:a5:bb:3c:52: 1b:2f:75:5c:7f:e5:9c:3f:9c:0f:4b:6a:6a:4b:08:f5:a8:3e: b9:70:e8:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKS3ZObT6Qgfykm9uAIMN1hMbogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTEyMDIxNzI2MjdaFw0yNTEyMDYwNTIwMjdaMDMxMTAvBgNV BAMTKEFCRTdFNEZDRDkyN0I0RERFOEJFOTZCRTAxREQxQzFFRDJDNEE2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6j2ssmXA1b+vcKLCcwU+fsiN dAEaVGiy3kfa5ZtGsMMuKEB4+wbS/62U6boHDDAZMc+lPypoGDlPANkQLbOYK9PL pXblKIU4XPhtAhS31vtl6NCyN/UkgWsvdDRX6/BMixRirWIpAmGbyY1LyhEFIGwS ILafYBd3Ez95+Y4pT8n3QnZi7c0QanLAZyDr2WBY2YAOeZ00xvm6c5DZLSfK4qh0 MgY40aEMuKzoV/+lsZ+ucdpR593gjGei8i+JsUzA7/Rn847hChfGqcIQJn2oiwYb H3nQEsZ3pGXOu3+Fh/LQ5Rv3sj0T6Sn/y3gHEzLCBVJtIVtYP2dPnf2qZCwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+fk/NkntN3ovpa+Ad0cHtLEpvIwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj04QxogNXwL1N5FsKlkG6A3msa2RzYt84P ZzBe+vhflgWkNHmVCKes11XcZFlkzNXn/Bm+8hc2M+gvBDOrCvb8GhMsb6pzRvt8 da//Do9Aksk4lv4O25Z4RvzAMIG5GxBV/fYSPK7LkKYViA3kPO020kVj7uOWuFD2 ki2FmK+RcfVs+qojuUbEwyIhEqCosvvTuPBXLXV23fLxRWb/b9N9nYG/tmnNMMYH iRyWQD6xL4Cvldx+pw4X7v9hTML+yryHz7E8HmAiKGpfAF7wP+OfH8D5J1DRy4EK wXURn5vGglZROiKXpbs8UhsvdVx/5Zw/nA9LampLCPWoPrlw6NU= -----END CERTIFICATE-----Generated at Wed Dec 3 19:33:52 2025 by rpki-client