This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: DBQ5qEdF3olxpj8pwJGWdTGO3K4r8kVwewxhq7nxw2w= Subject key identifier: 4C:0C:AA:D7:74:6D:57:51:B3:1E:B1:33:F8:ED:55:05:D3:60:1D:41 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 2E6FC547993A3B3B82D5A9DB8FF3083C4FA0F99F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 012B Signing time: Sun 07 Dec 2025 01:22:06 +0000 Manifest this update: Sun 07 Dec 2025 01:17:06 +0000 Manifest next update: Wed 10 Dec 2025 11:10:06 +0000 Files and hashes: 1: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: PdYroNrZqEC4xjb9o/EsPLkPjKP1D9Ztzr7asekIS7E=) 3: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) 4: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:c5:47:99:3a:3b:3b:82:d5:a9:db:8f:f3:08:3c:4f:a0:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Dec 7 01:17:06 2025 GMT Not After : Dec 10 11:10:06 2025 GMT Subject: CN=4C0CAAD7746D5751B31EB133F8ED5505D3601D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:5a:ff:2a:fa:b5:e7:9e:f7:2c:5d:cf:8c: 6c:39:d4:3a:d1:b0:71:6b:08:77:2d:3a:2b:45:fc: ef:e9:b1:6b:af:4e:55:e3:1e:6e:5c:5f:c9:30:41: 24:54:e8:0d:62:cd:c0:28:a1:aa:f4:0a:be:7a:69: 6c:88:8f:6e:c7:d2:40:34:70:40:d7:d6:7a:9c:14: 0b:13:e5:03:d3:c3:08:6c:ad:11:f0:d5:b9:27:55: 0b:d1:69:e9:b9:80:f1:39:94:68:88:f2:23:ff:51: 18:b4:29:62:67:63:6e:04:a2:42:ad:32:4b:f0:0e: 2e:e6:03:43:c8:d5:24:c1:8b:be:e1:72:56:23:12: 68:6c:89:e7:a7:da:b6:92:c5:62:cb:a7:f9:0e:6c: 3b:99:d3:f9:e4:86:d5:6b:4c:6b:fd:79:99:2d:23: 80:84:ff:0d:4b:ac:93:05:29:0c:c4:cb:2a:a2:87: 6e:f3:29:e5:83:8d:da:b5:cc:e5:d2:a6:33:c3:3f: 77:8b:3f:cd:5e:b3:93:9e:7c:cb:3b:da:49:a1:94: 3c:00:18:0e:1d:a3:17:f0:22:50:01:b4:cb:b4:19: 7a:d6:0c:0a:cb:50:49:c2:ca:50:4e:b0:b8:cc:d2: 8a:42:df:9a:79:f4:6f:0a:94:bd:eb:78:f3:f5:f4: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:AA:D7:74:6D:57:51:B3:1E:B1:33:F8:ED:55:05:D3:60:1D:41 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:41:15:01:02:24:38:ab:f1:3a:6f:9e:73:0a:d5:9a:dc:4a: 6a:a0:2a:12:c1:d6:82:65:26:14:0d:98:66:97:46:f0:17:8d: e9:bc:20:bd:28:c8:36:d5:43:ad:06:55:b3:6f:97:41:c7:bc: 39:d9:75:f2:8f:12:51:b9:42:e0:85:01:8c:e6:89:b8:3a:dc: 46:90:52:36:3e:b0:2e:a8:e5:7a:2d:8f:6a:50:2f:b9:c1:b8: e3:d2:92:03:2d:e8:d1:68:19:1f:06:d6:6a:37:f1:40:b6:7d: 1e:58:1c:35:6a:39:d6:0f:c0:1e:83:0e:e2:5a:0d:9f:0a:11: 87:73:29:3a:12:6d:d8:55:43:4e:c6:59:bf:b8:a2:21:48:44: 08:93:db:a6:98:79:b9:49:5d:f4:75:49:3f:92:75:04:ed:f2: fd:4f:08:c6:1b:bb:40:3e:ff:0c:df:fd:be:6d:73:65:39:69: d3:59:21:93:d4:fc:07:9d:39:13:39:09:a6:a6:b7:3d:1b:53: 67:ec:11:2d:8b:26:b4:d8:26:9d:67:4b:c5:bb:91:29:47:a7: 20:91:a8:14:b8:15:61:a1:51:38:b4:9c:9f:a0:d6:17:f2:d4: 1c:f5:4f:1d:95:0c:f5:0d:84:4a:9f:75:41:e6:0f:4b:ba:b2: ed:28:f2:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm/FR5k6OzuC1anbj/MIPE+g+Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTEyMDcwMTE3MDZaFw0yNTEyMTAxMTEwMDZaMDMxMTAvBgNV BAMTKDRDMENBQUQ3NzQ2RDU3NTFCMzFFQjEzM0Y4RUQ1NTA1RDM2MDFENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYVr/Kvq15573LF3PjGw51DrR sHFrCHctOitF/O/psWuvTlXjHm5cX8kwQSRU6A1izcAooar0Cr56aWyIj27H0kA0 cEDX1nqcFAsT5QPTwwhsrRHw1bknVQvRaem5gPE5lGiI8iP/URi0KWJnY24EokKt MkvwDi7mA0PI1STBi77hclYjEmhsieen2raSxWLLp/kObDuZ0/nkhtVrTGv9eZkt I4CE/w1LrJMFKQzEyyqih27zKeWDjdq1zOXSpjPDP3eLP81es5OefMs72kmhlDwA GA4doxfwIlABtMu0GXrWDArLUEnCylBOsLjM0opC35p59G8KlL3rePP19CBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAyq13RtV1GzHrEz+O1VBdNgHUEwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpBFQECJDir8TpvnnMK1ZrcSmqgKhLB1oJl JhQNmGaXRvAXjem8IL0oyDbVQ60GVbNvl0HHvDnZdfKPElG5QuCFAYzmibg63EaQ UjY+sC6o5Xotj2pQL7nBuOPSkgMt6NFoGR8G1mo38UC2fR5YHDVqOdYPwB6DDuJa DZ8KEYdzKToSbdhVQ07GWb+4oiFIRAiT26aYeblJXfR1ST+SdQTt8v1PCMYbu0A+ /wzf/b5tc2U5adNZIZPU/AedORM5Caamtz0bU2fsES2LJrTYJp1nS8W7kSlHpyCR qBS4FWGhUTi0nJ+g1hfy1Bz1Tx2VDPUNhEqfdUHmD0u6su0o8kc= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:06 2025 by rpki-client