This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: c9s483aSMFxTPOghCHi4BTmiOVObE3ob9ycM5PY0BPk= Subject key identifier: D5:72:FF:1A:A2:1D:28:DA:A5:04:3E:95:5B:AC:89:C8:99:4C:10:3E Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 4E66A49346C6BB0E914A6E8090791C61EB69F2D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 0358 Signing time: Mon 01 Dec 2025 22:01:46 +0000 Manifest this update: Mon 01 Dec 2025 21:56:46 +0000 Manifest next update: Thu 04 Dec 2025 22:58:46 +0000 Files and hashes: 1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: NZ19vL/ER1tktopBh8ckJIuweLEBOHFAVXpyU1Kiv8s=) 2: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:66:a4:93:46:c6:bb:0e:91:4a:6e:80:90:79:1c:61:eb:69:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Dec 1 21:56:46 2025 GMT Not After : Dec 4 22:58:46 2025 GMT Subject: CN=D572FF1AA21D28DAA5043E955BAC89C8994C103E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:98:97:00:fb:d6:b0:ff:85:6b:96:0f:4e: 02:b4:fa:b6:2f:62:35:0a:ec:33:ad:0b:b0:c4:8c: 58:6d:ef:86:97:ed:7a:4a:97:19:92:5e:e0:1d:2d: 81:58:3c:0b:b5:e3:02:16:82:9d:b6:a1:bc:c5:ef: 67:51:22:46:19:c3:a4:ef:9c:1f:af:b4:35:a9:f1: 6d:79:60:17:aa:99:56:a0:fa:a7:1c:54:9b:6b:3a: 9f:b4:6a:b2:53:6d:a2:a9:56:ae:8d:c6:24:dd:e4: ab:3c:cc:4d:43:0a:a6:93:bc:d7:71:f1:cd:1d:0e: bb:2d:78:0c:9e:44:72:32:59:e8:69:4c:a2:c8:7a: fb:67:a5:b9:d1:fc:6d:68:74:72:25:d8:84:0a:ab: b5:f1:8e:a2:44:66:8f:a1:fb:c6:bd:34:04:e5:35: 8a:aa:b1:3b:62:ba:1f:63:72:16:8a:28:db:72:29: 4a:e9:31:9c:b8:79:74:ea:f8:0a:bb:99:ef:05:16: 1b:47:c1:20:6a:df:68:bd:4a:04:23:c0:18:39:42: 57:92:5b:c1:e5:fa:71:4c:52:7d:0f:49:b2:a1:c6: 45:60:05:77:08:ed:35:73:7a:ad:98:c2:a9:27:2e: ad:5d:54:4b:46:dd:7b:12:4a:1d:17:84:25:4c:d2: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:72:FF:1A:A2:1D:28:DA:A5:04:3E:95:5B:AC:89:C8:99:4C:10:3E X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:8d:77:59:51:7e:bd:13:17:d4:d1:8b:49:3c:0c:64:17:53: 89:65:af:62:c2:04:11:53:6e:ec:ab:6b:d9:95:cd:26:ab:8e: 5d:dc:2d:07:4b:6c:4b:42:c3:3c:ba:10:93:4c:1f:91:5a:ed: 3c:cc:62:f7:77:33:79:49:2b:00:7c:f9:86:da:34:82:fc:33: 3a:ad:4f:91:e8:af:40:79:fe:d7:ff:13:58:1c:00:37:2f:58: e4:be:1e:8f:26:27:a9:71:e3:0d:38:54:86:5c:c4:09:13:19: 47:fd:c4:6f:5f:cf:0d:fb:d8:1c:c4:4d:b2:59:1e:d6:19:f7: c0:c8:b4:37:f1:e1:3c:da:e6:71:71:a1:a7:f9:4c:30:bc:df: b9:0b:12:c5:e8:0f:a1:3d:e5:34:6d:ae:e0:85:af:91:c6:e6: af:d5:e6:40:fd:69:9c:91:23:62:af:2a:8e:4d:b9:de:2b:a5: f5:83:e9:4d:17:ec:b8:4e:a8:bc:3a:30:5d:0a:89:67:56:9c: 92:7d:bc:b9:17:00:46:4f:85:2d:fc:b9:96:82:80:36:d2:c0: ee:87:73:4b:ef:e4:a4:35:63:68:3e:7d:b6:fa:d1:bd:79:ae: a6:4c:6b:35:45:b0:b1:aa:a3:3e:c1:de:ae:3e:65:7a:fa:6c: 04:94:7e:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmakk0bGuw6RSm6AkHkcYetp8tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTEyMDEyMTU2NDZaFw0yNTEyMDQyMjU4NDZaMDMxMTAvBgNV BAMTKEQ1NzJGRjFBQTIxRDI4REFBNTA0M0U5NTVCQUM4OUM4OTk0QzEwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnpiXAPvWsP+Fa5YPTgK0+rYv YjUK7DOtC7DEjFht74aX7XpKlxmSXuAdLYFYPAu14wIWgp22obzF72dRIkYZw6Tv nB+vtDWp8W15YBeqmVag+qccVJtrOp+0arJTbaKpVq6NxiTd5Ks8zE1DCqaTvNdx 8c0dDrsteAyeRHIyWehpTKLIevtnpbnR/G1odHIl2IQKq7XxjqJEZo+h+8a9NATl NYqqsTtiuh9jchaKKNtyKUrpMZy4eXTq+Aq7me8FFhtHwSBq32i9SgQjwBg5QleS W8Hl+nFMUn0PSbKhxkVgBXcI7TVzeq2YwqknLq1dVEtG3XsSSh0XhCVM0pK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XL/GqIdKNqlBD6VW6yJyJlMED4wHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSNd1lRfr0TF9TRi0k8DGQXU4llr2LCBBFT buyra9mVzSarjl3cLQdLbEtCwzy6EJNMH5Fa7TzMYvd3M3lJKwB8+YbaNIL8Mzqt T5Hor0B5/tf/E1gcADcvWOS+Ho8mJ6lx4w04VIZcxAkTGUf9xG9fzw372BzETbJZ HtYZ98DItDfx4Tza5nFxoaf5TDC837kLEsXoD6E95TRtruCFr5HG5q/V5kD9aZyR I2KvKo5Nud4rpfWD6U0X7LhOqLw6MF0KiWdWnJJ9vLkXAEZPhS38uZaCgDbSwO6H c0vv5KQ1Y2g+fbb60b15rqZMazVFsLGqoz7B3q4+ZXr6bASUflo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:02 2025 by rpki-client