This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: xU58vqE5sMPJuI1SQjYr/WrLzLD7DCeCFSws3XJaCL4= Subject key identifier: 0E:68:BB:3C:A2:67:24:5B:B8:77:60:7F:C3:65:53:74:97:2C:1F:F9 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 312BA9061305B63FC3B5B32861BF5FEE0BC924BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: CF Signing time: Sun 07 Dec 2025 05:10:47 +0000 Manifest this update: Sun 07 Dec 2025 05:05:47 +0000 Manifest next update: Wed 10 Dec 2025 12:50:47 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: wgMButma24olvK5SeF6cohNevzz5xc7/qD8nn/hqv+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2b:a9:06:13:05:b6:3f:c3:b5:b3:28:61:bf:5f:ee:0b:c9:24:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Dec 7 05:05:47 2025 GMT Not After : Dec 10 12:50:47 2025 GMT Subject: CN=0E68BB3CA267245BB877607FC3655374972C1FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:21:3e:12:f0:c2:a7:d1:c6:76:2d:e5:d9: 22:a0:c0:98:a1:d9:dc:ee:86:47:a8:d9:d6:15:81: c9:e4:c1:3a:20:b0:03:e1:7d:79:59:1b:57:28:de: e1:17:d3:a4:68:ad:0c:bb:dc:0e:e5:db:a8:35:ec: 27:25:5f:45:34:ec:b7:7c:62:53:5f:ea:ff:df:ef: 7f:41:49:d5:fb:65:cd:e8:7b:40:68:04:4b:26:50: 68:43:b5:c1:83:8a:95:45:11:fc:f9:8f:63:9b:1c: 71:cd:54:ee:ea:05:f2:d1:6b:4a:18:9e:2f:0d:e9: 1a:d3:9d:df:d6:23:04:2f:5b:bf:10:db:b5:75:c7: 28:ea:3a:80:d2:74:87:cb:78:3e:4a:e9:1a:d0:25: d2:7c:34:40:7a:d1:01:a6:ee:9c:6c:c9:1e:1e:e1: 90:af:68:d0:db:ec:c8:85:64:98:ac:b7:ef:25:90: c1:60:17:cc:07:0b:71:e1:0e:66:cd:3a:7e:25:e5: ff:82:33:ea:fa:08:fc:2b:d3:f0:9c:20:45:4e:70: 3b:1c:85:38:29:1f:2d:2c:3f:e3:9f:33:89:c3:59: a1:4c:eb:ee:2e:14:8a:d3:68:66:14:d2:0f:17:71: cf:5d:15:44:9d:64:14:88:27:60:e6:42:3f:eb:7c: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:BB:3C:A2:67:24:5B:B8:77:60:7F:C3:65:53:74:97:2C:1F:F9 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:40:6b:7d:9b:62:27:df:f4:b3:c7:d1:d3:93:1d:13:14:58: f7:2e:9a:20:ab:25:93:34:ce:ce:2b:bc:41:a1:71:10:c1:f3: bd:09:61:cb:45:63:aa:99:97:95:3a:63:d8:6a:8b:55:83:b0: 21:7f:9a:67:30:f1:64:74:c0:8c:d4:b8:e1:25:a5:7e:97:99: 8c:98:59:76:1a:86:3f:d9:ca:d7:9f:dd:81:eb:3e:ee:2b:92: 3e:27:31:49:3a:e7:47:55:d8:cf:6b:b8:c1:82:f6:d1:b3:66: e5:b6:e1:5a:30:78:2d:01:ad:d5:f3:f8:bb:36:dd:42:d1:a0: 56:c5:48:5c:4a:7a:15:26:dc:e7:f8:62:d9:83:ba:79:df:75: 5a:50:91:47:5e:72:1c:e0:50:b2:cc:49:4c:c6:cf:a8:7e:25: 2c:92:28:97:45:93:99:0c:7e:5c:ba:33:11:2a:78:87:30:c1: e5:c9:9e:f1:69:48:3f:7a:28:89:6a:b9:dc:f4:62:c1:8e:2e: 68:09:e8:b6:20:47:ec:9c:42:09:72:62:61:55:ab:c2:8c:29: a5:2d:9b:e6:f6:8d:46:c6:33:6d:72:7d:d7:dd:4e:03:31:4b: 8a:f6:91:1a:01:31:f4:4e:ca:18:08:e0:21:8b:96:69:ff:1c: 59:55:09:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSupBhMFtj/DtbMoYb9f7gvJJL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTEyMDcwNTA1NDdaFw0yNTEyMTAxMjUwNDdaMDMxMTAvBgNV BAMTKDBFNjhCQjNDQTI2NzI0NUJCODc3NjA3RkMzNjU1Mzc0OTcyQzFGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCleiE+EvDCp9HGdi3l2SKgwJih 2dzuhkeo2dYVgcnkwTogsAPhfXlZG1co3uEX06RorQy73A7l26g17CclX0U07Ld8 YlNf6v/f739BSdX7Zc3oe0BoBEsmUGhDtcGDipVFEfz5j2ObHHHNVO7qBfLRa0oY ni8N6RrTnd/WIwQvW78Q27V1xyjqOoDSdIfLeD5K6RrQJdJ8NEB60QGm7pxsyR4e 4ZCvaNDb7MiFZJist+8lkMFgF8wHC3HhDmbNOn4l5f+CM+r6CPwr0/CcIEVOcDsc hTgpHy0sP+OfM4nDWaFM6+4uFIrTaGYU0g8Xcc9dFUSdZBSIJ2DmQj/rfIS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmi7PKJnJFu4d2B/w2VTdJcsH/kwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVAa32bYiff9LPH0dOTHRMUWPcumiCrJZM0 zs4rvEGhcRDB870JYctFY6qZl5U6Y9hqi1WDsCF/mmcw8WR0wIzUuOElpX6XmYyY WXYahj/Zytef3YHrPu4rkj4nMUk650dV2M9ruMGC9tGzZuW24VoweC0BrdXz+Ls2 3ULRoFbFSFxKehUm3Of4YtmDunnfdVpQkUdechzgULLMSUzGz6h+JSySKJdFk5kM fly6MxEqeIcwweXJnvFpSD96KIlqudz0YsGOLmgJ6LYgR+ycQglyYmFVq8KMKaUt m+b2jUbGM21yfdfdTgMxS4r2kRoBMfROyhgI4CGLlmn/HFlVCZ4= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:14 2025 by rpki-client