This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft (raw, json) Hash identifier: xq6tgH7RZ7Tk+ivIvw+HkiR7/yzWJSdLRp0e/zHOWf8= Subject key identifier: 24:C4:AA:FE:A9:55:A7:88:E5:1A:68:5E:6A:9B:53:5B:34:09:72:A5 Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Certificate serial: 59B1137A601A5201EE2894FFA381F39F4342049B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft Manifest number: 01B6 Signing time: Wed 03 Dec 2025 08:11:55 +0000 Manifest this update: Wed 03 Dec 2025 08:06:55 +0000 Manifest next update: Sat 06 Dec 2025 19:18:55 +0000 Files and hashes: 1: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl (hash: 1uffpTRr9D3FJYXqsEhAXj0YFixJE22r7QSLq2b3LL8=) 2: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: 50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b1:13:7a:60:1a:52:01:ee:28:94:ff:a3:81:f3:9f:43:42:04:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Validity Not Before: Dec 3 08:06:55 2025 GMT Not After : Dec 6 19:18:55 2025 GMT Subject: CN=24C4AAFEA955A788E51A685E6A9B535B340972A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:97:a8:70:c3:a6:ff:c1:2c:b5:2e:15:39: 53:de:5a:e9:97:d7:af:ab:d8:8f:db:f5:11:d0:f1: 88:2b:f7:12:c6:d1:9d:71:88:6c:dd:15:15:34:1d: 8b:87:ff:ef:fd:cc:f2:57:6e:af:47:9c:93:e3:a0: 92:39:0f:09:ff:30:b6:71:35:ae:80:de:65:32:fc: 7b:83:eb:37:7e:02:d0:94:c2:4e:b9:47:c0:d4:c6: 71:c6:1d:6d:14:62:9c:ef:e7:3c:0f:20:46:3f:7a: bf:75:12:73:9c:53:8d:8f:2f:1e:e1:e7:cd:27:8f: df:41:8d:92:29:ac:67:d2:9b:82:29:30:19:0a:58: be:f7:6e:20:70:2e:d9:82:f0:56:d6:f8:2a:8a:40: 4c:16:6a:fb:ce:b1:b5:97:85:02:42:18:a0:6f:6d: 87:0a:76:ae:55:7f:22:83:55:c0:e4:fa:fe:33:45: 78:25:ce:cb:81:68:3e:96:d6:26:09:da:aa:69:97: 55:6a:85:9f:8b:8e:d2:3d:e4:44:5b:8b:22:ae:bb: 1d:88:35:ad:ef:ac:4d:07:34:fa:21:f5:83:d7:6f: ad:7c:40:5e:82:2a:cf:35:d9:d4:33:bb:23:c3:ee: 94:c2:f0:e2:bb:3a:5b:54:16:b8:cf:89:9d:e4:0e: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:AA:FE:A9:55:A7:88:E5:1A:68:5E:6A:9B:53:5B:34:09:72:A5 X509v3 Authority Key Identifier: keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:22:69:f3:4f:e8:14:1b:8c:f7:e8:f5:2c:d6:c7:e6:dd:92: c2:67:bf:70:79:55:97:4f:6b:86:f7:ff:e0:89:fe:c6:c8:70: ff:29:c2:06:ad:19:ec:30:ad:5e:38:d9:f5:4e:6e:f8:03:72: 38:01:e8:c9:c8:aa:97:6c:13:bb:1b:e5:fd:b9:0b:48:de:35: 05:53:54:6e:d6:b5:cb:25:24:e9:58:d5:c7:bd:4e:75:04:66: 8e:10:92:db:f9:c7:45:a1:aa:f3:8c:a9:f8:2d:18:83:ee:33: d0:66:28:80:86:f5:5d:69:e9:ac:3f:6c:31:db:b2:b8:cf:bd: 9f:6d:4f:52:6e:e8:55:da:d6:8c:d0:93:76:b7:93:1e:25:a7: eb:da:ad:77:1f:27:84:54:d6:d1:89:b1:e0:7f:0b:c5:ba:ed: f8:1e:31:80:be:ce:21:96:76:11:43:8f:ee:67:49:eb:a8:c2: 33:86:44:31:f4:e8:e5:a1:ec:96:57:95:98:56:77:7a:a9:ab: 2f:5e:34:98:50:7b:5a:9f:56:1f:ec:6d:49:d0:7f:45:34:ef: 97:3e:83:f1:ba:0e:5c:01:76:6a:81:eb:8b:69:95:41:2b:b1: ad:f4:3e:29:9d:89:7d:f1:dd:db:68:a5:ae:69:dd:04:23:6c: 6f:7a:1b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbETemAaUgHuKJT/o4Hzn0NCBJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG NDZDOEE4NTAeFw0yNTEyMDMwODA2NTVaFw0yNTEyMDYxOTE4NTVaMDMxMTAvBgNV BAMTKDI0QzRBQUZFQTk1NUE3ODhFNTFBNjg1RTZBOUI1MzVCMzQwOTcyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTJeocMOm/8EstS4VOVPeWumX 16+r2I/b9RHQ8Ygr9xLG0Z1xiGzdFRU0HYuH/+/9zPJXbq9HnJPjoJI5Dwn/MLZx Na6A3mUy/HuD6zd+AtCUwk65R8DUxnHGHW0UYpzv5zwPIEY/er91EnOcU42PLx7h 580nj99BjZIprGfSm4IpMBkKWL73biBwLtmC8FbW+CqKQEwWavvOsbWXhQJCGKBv bYcKdq5VfyKDVcDk+v4zRXglzsuBaD6W1iYJ2qppl1VqhZ+LjtI95ERbiyKuux2I Na3vrE0HNPoh9YPXb618QF6CKs812dQzuyPD7pTC8OK7OltUFrjPiZ3kDh4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMSq/qlVp4jlGmheaptTWzQJcqUwHwYDVR0j BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD OEE4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTkwMjM0ZmUtYTcxNS00M2U1LThh YTQtZDk3OWNkMzU3ZDM5LzAvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4 QUZGNDZDOEE4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoiafNP6BQbjPfo9SzWx+bdksJnv3B5VZdP a4b3/+CJ/sbIcP8pwgatGewwrV442fVObvgDcjgB6MnIqpdsE7sb5f25C0jeNQVT VG7WtcslJOlY1ce9TnUEZo4Qktv5x0WhqvOMqfgtGIPuM9BmKICG9V1p6aw/bDHb srjPvZ9tT1Ju6FXa1ozQk3a3kx4lp+varXcfJ4RU1tGJseB/C8W67fgeMYC+ziGW dhFDj+5nSeuowjOGRDH06OWh7JZXlZhWd3qpqy9eNJhQe1qfVh/sbUnQf0U075c+ g/G6DlwBdmqB64tplUErsa30PimdiX3x3dtopa5p3QQjbG96G6k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:26 2025 by rpki-client