This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: 5UEJ4l10u/6bM4t4c0kYwgrnrEv7YUP57A5j1cGZtzU= Subject key identifier: 04:1E:C9:96:91:DA:B1:5F:6C:A5:D9:6C:DC:BA:73:FE:B1:17:11:34 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 4E7EA4F52152F175AB957F52137D58E03E3E711E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 0224 Signing time: Wed 03 Dec 2025 03:20:00 +0000 Manifest this update: Wed 03 Dec 2025 03:15:00 +0000 Manifest next update: Sat 06 Dec 2025 04:07:00 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) 2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: oSCvSNMzFKUFOQg9i36apdb7KE56UmwyFaTsdD7dMbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7e:a4:f5:21:52:f1:75:ab:95:7f:52:13:7d:58:e0:3e:3e:71:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Dec 3 03:15:00 2025 GMT Not After : Dec 6 04:07:00 2025 GMT Subject: CN=041EC99691DAB15F6CA5D96CDCBA73FEB1171134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:4f:c4:fb:7f:31:e8:e3:f5:45:74:9e:60: f0:d1:1c:09:e4:e1:7e:5d:e4:8a:43:a1:2f:86:9b: bb:af:0c:7b:18:be:aa:cb:fc:5e:81:70:06:17:7e: 74:08:cb:16:26:eb:c2:d9:61:74:64:af:5a:88:32: b4:2c:97:12:a9:1c:f4:16:5e:3d:01:d2:6f:c7:35: dd:e9:41:bf:1c:4c:2a:30:83:4f:16:e9:ad:68:af: c7:23:62:de:2c:a5:dc:3e:95:49:e3:7e:32:78:56: 4e:2c:9d:00:e6:50:cc:18:0c:52:41:8b:12:56:74: b5:46:d1:cd:cb:cb:05:60:0c:96:2a:1b:77:7b:59: cf:d9:2d:8b:75:77:68:b3:fd:28:26:e9:b3:28:b0: 97:65:45:c9:67:30:86:41:aa:6a:3b:31:6e:93:13: 30:c5:0c:aa:d3:11:b7:13:9e:fa:c4:e0:6a:77:b5: 75:60:ef:aa:f4:58:25:9f:a8:e2:7b:bf:b2:ac:d2: 50:4b:43:3a:94:26:59:d3:df:65:2c:c7:0c:50:40: 19:ed:e7:8f:29:30:b4:8c:0c:24:18:33:cd:e9:2f: a7:43:2a:af:5b:59:b3:08:94:93:15:25:f0:49:84: d9:cf:f7:fc:e5:8b:71:44:27:e9:ea:e3:1f:09:80: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1E:C9:96:91:DA:B1:5F:6C:A5:D9:6C:DC:BA:73:FE:B1:17:11:34 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:67:53:a0:21:3c:54:b0:9e:8c:f4:b3:fc:e8:18:c0:21:2a: d3:60:e5:70:79:ec:d4:7f:22:12:dd:bc:60:9f:7f:1a:21:8d: 3b:32:95:17:00:11:00:cf:f1:d9:18:51:06:58:da:c8:3f:5c: 61:c8:ca:06:c0:be:4f:9c:29:62:ac:3e:1e:62:f6:17:2d:9d: 28:54:69:ad:c6:65:a9:31:c0:03:d8:36:e0:c0:2b:85:f9:82: 09:23:c5:6f:3b:7e:38:78:02:07:0c:b0:c0:6b:be:6c:34:dc: 96:83:fa:6e:1b:e9:a2:4b:85:ee:74:e6:f7:2e:e6:a9:2b:b1: f9:47:67:1e:be:4a:01:41:44:75:50:98:79:69:31:f6:0e:2e: 0b:33:49:6a:3c:c6:43:28:82:98:48:8b:60:1e:e4:b3:d9:3e: 91:55:23:9b:45:ba:ab:fc:1d:fd:53:8d:73:25:43:ff:55:c6: 0f:87:da:f0:bf:69:1c:39:40:16:1c:c5:be:d5:fd:f1:98:c3: f1:bb:4d:9c:e6:e6:03:e3:50:a2:8a:5d:9f:b1:ae:57:82:ee: 93:ef:05:e3:21:d6:4c:a3:b7:f4:e3:77:1b:ba:bb:12:09:14: 5f:62:89:1a:c9:b3:98:79:34:1e:45:77:fa:85:86:73:8c:f6: e0:71:78:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTn6k9SFS8XWrlX9SE31Y4D4+cR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNTEyMDMwMzE1MDBaFw0yNTEyMDYwNDA3MDBaMDMxMTAvBgNV BAMTKDA0MUVDOTk2OTFEQUIxNUY2Q0E1RDk2Q0RDQkE3M0ZFQjExNzExMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWE/E+38x6OP1RXSeYPDRHAnk 4X5d5IpDoS+Gm7uvDHsYvqrL/F6BcAYXfnQIyxYm68LZYXRkr1qIMrQslxKpHPQW Xj0B0m/HNd3pQb8cTCowg08W6a1or8cjYt4spdw+lUnjfjJ4Vk4snQDmUMwYDFJB ixJWdLVG0c3LywVgDJYqG3d7Wc/ZLYt1d2iz/Sgm6bMosJdlRclnMIZBqmo7MW6T EzDFDKrTEbcTnvrE4Gp3tXVg76r0WCWfqOJ7v7Ks0lBLQzqUJlnT32UsxwxQQBnt 548pMLSMDCQYM83pL6dDKq9bWbMIlJMVJfBJhNnP9/zli3FEJ+nq4x8JgPH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBB7JlpHasV9spdls3Lpz/rEXETQwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxnU6AhPFSwnoz0s/zoGMAhKtNg5XB57NR/ IhLdvGCffxohjTsylRcAEQDP8dkYUQZY2sg/XGHIygbAvk+cKWKsPh5i9hctnShU aa3GZakxwAPYNuDAK4X5ggkjxW87fjh4AgcMsMBrvmw03JaD+m4b6aJLhe505vcu 5qkrsflHZx6+SgFBRHVQmHlpMfYOLgszSWo8xkMogphIi2Ae5LPZPpFVI5tFuqv8 Hf1TjXMlQ/9Vxg+H2vC/aRw5QBYcxb7V/fGYw/G7TZzm5gPjUKKKXZ+xrleC7pPv BeMh1kyjt/Tjdxu6uxIJFF9iiRrJs5h5NB5Fd/qFhnOM9uBxeLA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:07 2025 by rpki-client