This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: 2tZS6nG3wRuXZ7IXMxIdxsTiv5vUoHqnxJSJSeppHio= Subject key identifier: 3F:2D:2D:0A:DC:3D:7A:50:50:3E:C2:C7:A7:A2:82:32:3E:EC:CF:83 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 651EB58737E0EF08820AB5866EF83D8B36ABF777 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 02A2 Signing time: Thu 18 Dec 2025 00:50:59 +0000 Manifest this update: Thu 18 Dec 2025 00:45:59 +0000 Manifest next update: Sun 21 Dec 2025 03:38:59 +0000 Files and hashes: 1: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: sSnxtf8TtC4PO2zmbNaGgHD80ecB0QzT4ZxlEb0ObOM=) 2: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: piBMQKLQ4vl4/HEDElryTA2LFV1e3urfPVD8hTuJ8gs=) 3: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) 4: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: A29yvIL9DXiEIGSzvn+Q7dkHX3/xs64c+D7pe9mQKXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1e:b5:87:37:e0:ef:08:82:0a:b5:86:6e:f8:3d:8b:36:ab:f7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Dec 18 00:45:59 2025 GMT Not After : Dec 21 03:38:59 2025 GMT Subject: CN=3F2D2D0ADC3D7A50503EC2C7A7A282323EECCF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:c5:f3:f2:3f:0e:00:d5:01:10:ee:de:5a: 49:c5:d2:9a:bf:2f:65:00:92:dd:b1:5d:14:14:0a: 04:7c:4f:1a:c9:85:27:4b:be:45:c4:c5:eb:4f:52: 23:3f:87:d6:4a:8b:63:f9:1e:6c:07:7b:3a:9c:8b: 5c:f5:f7:c8:fb:82:aa:89:52:30:68:42:ec:e9:05: 2a:b7:03:2b:48:b7:5f:9f:0f:f4:34:a6:52:fc:d8: b5:e7:01:7e:a8:61:ba:32:38:50:7f:c1:d5:c9:f4: bd:42:f7:f9:dd:df:27:97:f7:1d:e3:76:da:18:59: 2b:26:62:d7:dd:27:30:99:5f:5f:60:55:4a:cd:b9: 8b:e9:4a:a3:68:a4:d2:8d:af:53:3e:f5:1f:b9:b2: a0:9d:6d:f8:d8:d3:e4:f6:84:ec:76:b3:e4:e3:47: 20:80:50:d6:0f:e3:23:ec:2e:08:5e:3c:73:57:05: 51:c9:b1:96:7a:25:2f:97:8b:f8:0f:62:5e:41:83: c6:a7:c1:44:40:6c:95:2a:3c:a7:9c:3b:a8:cc:85: dd:5f:8d:90:a8:f4:32:a5:9d:72:a8:af:97:73:f7: 8f:62:1e:a1:87:67:2a:98:9f:17:f0:d8:fa:7a:56: a7:f9:3d:ad:cf:e7:21:9c:83:02:9f:07:5e:f2:40: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:2D:0A:DC:3D:7A:50:50:3E:C2:C7:A7:A2:82:32:3E:EC:CF:83 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:17:1f:6d:8c:6e:80:3c:64:2b:49:77:3a:44:24:d9:f1:eb: 5f:2c:31:d7:7d:7f:24:0e:6b:4f:41:e9:2e:27:c4:bb:45:94: 9d:35:c2:a9:ce:a2:ba:2d:07:79:6e:0a:70:63:49:f5:c7:40: 6e:f8:d0:45:e2:6e:15:33:92:d0:6b:a3:48:18:44:62:84:29: ac:9f:fd:f8:fa:d7:14:5c:72:1a:64:1f:6e:35:47:63:c6:23: e4:6c:6f:b0:15:62:22:b4:c6:c2:88:2d:11:3e:f8:fc:30:66: e9:a4:30:0d:a2:5c:10:7e:4c:46:15:45:e2:cd:6d:72:ad:2b: 1c:ea:41:dc:40:98:d9:da:28:68:2f:a7:ea:2d:e1:67:e9:c7: f0:69:d4:1b:18:09:8e:2f:45:88:95:96:8e:1c:08:55:33:5e: ff:de:04:d6:fe:91:25:8d:e6:48:c1:20:8c:a2:43:9a:5a:b6: a9:39:62:5b:d4:44:9a:f5:ba:98:4d:21:79:73:28:f9:3d:a0: a6:36:6b:01:3b:7f:11:56:71:c1:f7:ff:ef:8e:c0:f9:0e:56: ca:6c:c4:7a:96:23:cb:6c:2c:f9:2e:40:64:2b:6d:8b:b4:03: 70:64:cb:b9:75:86:be:4e:db:42:77:a0:6e:01:d1:0e:e0:7c: fe:d4:f2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZR61hzfg7wiCCrWGbvg9izar93cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTEyMTgwMDQ1NTlaFw0yNTEyMjEwMzM4NTlaMDMxMTAvBgNV BAMTKDNGMkQyRDBBREMzRDdBNTA1MDNFQzJDN0E3QTI4MjMyM0VFQ0NGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0MXz8j8OANUBEO7eWknF0pq/ L2UAkt2xXRQUCgR8TxrJhSdLvkXExetPUiM/h9ZKi2P5HmwHezqci1z198j7gqqJ UjBoQuzpBSq3AytIt1+fD/Q0plL82LXnAX6oYboyOFB/wdXJ9L1C9/nd3yeX9x3j dtoYWSsmYtfdJzCZX19gVUrNuYvpSqNopNKNr1M+9R+5sqCdbfjY0+T2hOx2s+Tj RyCAUNYP4yPsLghePHNXBVHJsZZ6JS+Xi/gPYl5Bg8anwURAbJUqPKecO6jMhd1f jZCo9DKlnXKor5dz949iHqGHZyqYnxfw2Pp6Vqf5Pa3P5yGcgwKfB17yQPmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPy0tCtw9elBQPsLHp6KCMj7sz4MwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMXH22MboA8ZCtJdzpEJNnx618sMdd9fyQO a09B6S4nxLtFlJ01wqnOorotB3luCnBjSfXHQG740EXibhUzktBro0gYRGKEKayf /fj61xRcchpkH241R2PGI+Rsb7AVYiK0xsKILRE++PwwZumkMA2iXBB+TEYVReLN bXKtKxzqQdxAmNnaKGgvp+ot4Wfpx/Bp1BsYCY4vRYiVlo4cCFUzXv/eBNb+kSWN 5kjBIIyiQ5patqk5YlvURJr1uphNIXlzKPk9oKY2awE7fxFWccH3/++OwPkOVsps xHqWI8tsLPkuQGQrbYu0A3Bky7l1hr5O20J3oG4B0Q7gfP7U8hM= -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:13 2025 by rpki-client