This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: dwRgyBzWkElepeaaXKZlgcoZ1133XNyOEqRNI8j25Bs= Subject key identifier: A3:F5:50:C7:15:93:5C:6F:B0:E9:3C:CA:60:98:2A:DD:19:32:20:61 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 387D451BB8AE8E2E71D8A483D9FDCB694FE28AEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: B8 Signing time: Mon 01 Dec 2025 19:31:45 +0000 Manifest this update: Mon 01 Dec 2025 19:26:45 +0000 Manifest next update: Fri 05 Dec 2025 01:57:45 +0000 Files and hashes: 1: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: HSGQJXythRbZW0WejIr3eu8cpvINsUXbBgpQ3Hdpzbo=) 2: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: 2j6v8C+iivwkY7VZ4Or1ruq+WBCgl09R9BovZj5Vjv4=) 3: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: lR/hW+eaZsPiXrhVudMo+pOinjFXG0anTiMBOASqmGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7d:45:1b:b8:ae:8e:2e:71:d8:a4:83:d9:fd:cb:69:4f:e2:8a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Dec 1 19:26:45 2025 GMT Not After : Dec 5 01:57:45 2025 GMT Subject: CN=A3F550C715935C6FB0E93CCA60982ADD19322061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:a4:4d:21:8a:51:00:97:53:01:45:0c:3c: 4d:e9:52:24:a3:0b:8a:82:16:88:41:05:24:9f:d4: 3a:d2:41:19:94:b1:4a:fa:00:51:74:85:50:fd:ae: 21:c2:e0:3f:e2:67:44:11:9b:b8:42:25:83:ca:62: 1a:62:bd:b2:50:22:3c:2d:ca:18:7b:da:28:47:28: c0:39:76:27:cd:22:d8:91:69:30:0d:7c:6b:8b:f7: b9:cf:c3:f4:9d:e9:4d:0a:96:33:dd:1d:8a:ae:98: f1:dc:3c:15:d2:8c:6d:f5:06:e5:29:3a:df:98:7a: 5e:21:8c:6a:83:a3:17:07:1f:aa:0b:61:1b:52:44: ad:55:98:d8:54:3d:dd:34:d4:78:ef:f3:11:08:9f: 23:4d:bd:e6:20:81:69:df:40:40:12:3d:52:35:36: 94:b2:1a:dd:b7:ea:b6:22:71:01:d0:54:24:92:69: b3:8b:a4:6e:56:f8:9c:c2:3f:9a:1d:dc:90:75:d6: 62:2f:de:a6:68:1e:c9:95:6e:b7:94:1c:a0:ab:8c: 2f:0b:d6:b2:c3:e2:bb:02:c5:cc:63:48:c7:2e:25: 72:71:36:f8:c3:3c:99:00:38:6b:83:8d:a9:81:f3: ee:5d:64:68:fb:2b:62:92:6b:75:c1:7f:d6:8a:df: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F5:50:C7:15:93:5C:6F:B0:E9:3C:CA:60:98:2A:DD:19:32:20:61 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:b3:66:33:1d:d0:13:9c:e8:f9:45:5a:05:05:aa:7f:e1: b2:82:df:b1:ac:c5:1e:16:57:23:f7:f7:13:16:4c:f8:d2:58: 90:20:7e:bc:7b:7a:48:ea:1d:d0:46:82:17:e4:0d:54:61:9d: 77:61:8a:8c:03:6a:88:00:5c:75:31:c1:f8:68:1a:c5:d5:c8: 61:29:9f:1f:5b:eb:3f:e8:b0:5d:68:ae:bd:7c:46:08:c2:41: 1f:6f:cc:26:03:d6:a2:45:8b:e5:22:fa:ee:0c:a5:56:ab:da: 48:d4:58:af:d3:d7:d1:09:ac:cd:e6:3c:5b:04:f9:1c:89:13: 9d:0e:9d:08:e1:a1:f8:dc:e0:06:c3:b7:b2:41:26:e4:02:30: ae:91:33:32:4a:e9:26:c7:73:9d:57:03:4e:7e:33:92:88:c0: 19:17:c2:66:6b:cc:16:b1:90:45:6c:1a:7d:26:64:fe:a8:f7: 69:8e:26:0f:b1:52:59:57:1a:22:4f:b1:2e:74:dc:5b:e3:a9: 3a:f7:fe:d1:18:f0:28:a7:80:98:2e:db:e8:de:f1:cb:cd:ee: f8:66:e8:b7:48:d9:30:50:9e:19:ac:a3:86:a3:8e:c8:6f:68: b7:89:2c:b3:88:d8:cc:c2:bd:4c:e5:98:f8:84:5c:51:aa:7c: 77:0d:f8:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH1FG7iuji5x2KSD2f3LaU/iiu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTEyMDExOTI2NDVaFw0yNTEyMDUwMTU3NDVaMDMxMTAvBgNV BAMTKEEzRjU1MEM3MTU5MzVDNkZCMEU5M0NDQTYwOTgyQUREMTkzMjIwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMaRNIYpRAJdTAUUMPE3pUiSj C4qCFohBBSSf1DrSQRmUsUr6AFF0hVD9riHC4D/iZ0QRm7hCJYPKYhpivbJQIjwt yhh72ihHKMA5difNItiRaTANfGuL97nPw/Sd6U0KljPdHYqumPHcPBXSjG31BuUp Ot+Yel4hjGqDoxcHH6oLYRtSRK1VmNhUPd001Hjv8xEInyNNveYggWnfQEASPVI1 NpSyGt236rYicQHQVCSSabOLpG5W+JzCP5od3JB11mIv3qZoHsmVbreUHKCrjC8L 1rLD4rsCxcxjSMcuJXJxNvjDPJkAOGuDjamB8+5dZGj7K2KSa3XBf9aK37U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/VQxxWTXG+w6TzKYJgq3RkyIGEwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGats2YzHdATnOj5RVoFBap/4bKC37GsxR4W VyP39xMWTPjSWJAgfrx7ekjqHdBGghfkDVRhnXdhiowDaogAXHUxwfhoGsXVyGEp nx9b6z/osF1orr18RgjCQR9vzCYD1qJFi+Ui+u4MpVar2kjUWK/T19EJrM3mPFsE +RyJE50OnQjhofjc4AbDt7JBJuQCMK6RMzJK6SbHc51XA05+M5KIwBkXwmZrzBax kEVsGn0mZP6o92mOJg+xUllXGiJPsS503FvjqTr3/tEY8CingJgu2+je8cvN7vhm 6LdI2TBQnhmso4ajjshvaLeJLLOI2MzCvUzlmPiEXFGqfHcN+E0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:51 2025 by rpki-client