This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: 4moPQ9NMX8nFJ6RKO8vVrby9sCt1fCutH23Wp11aAHA= Subject key identifier: E3:F1:FE:85:7E:9F:7E:2D:DC:89:96:AF:06:D6:21:9C:F4:72:22:39 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 1F1EB160D8EA4CB7F5F9CA1295B099BFE8F2D28A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0227 Signing time: Wed 24 Dec 2025 12:14:44 +0000 Manifest this update: Wed 24 Dec 2025 12:09:44 +0000 Manifest next update: Sat 27 Dec 2025 12:52:44 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: IyVJJiGfOYj4BH8hp1NzT3eX0+KDPVflJgN2qPu5wSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1e:b1:60:d8:ea:4c:b7:f5:f9:ca:12:95:b0:99:bf:e8:f2:d2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Dec 24 12:09:44 2025 GMT Not After : Dec 27 12:52:44 2025 GMT Subject: CN=E3F1FE857E9F7E2DDC8996AF06D6219CF4722239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:f4:ca:ea:2e:43:ac:09:e7:ec:5c:d7:64: 43:28:0f:17:11:6b:12:4d:89:d9:c6:f2:22:b0:78: 12:cc:1f:f8:04:42:e2:a2:d8:f7:36:06:37:58:1e: a4:35:db:80:52:67:4f:b7:7d:35:f3:3c:58:8b:b4: 8e:86:4b:12:09:f9:e8:7d:d2:5c:5d:65:9c:77:ba: 02:e3:75:05:05:d8:a9:c0:99:45:62:8f:dc:bf:15: c2:d5:a6:67:a2:4e:e8:98:d0:4b:00:8e:17:5b:4f: 11:42:0a:35:ad:0e:7a:59:f5:38:45:85:0f:e2:54: 25:b3:34:50:54:15:78:2e:e0:76:dc:7a:4e:0c:73: 0b:3f:ee:14:72:16:fc:ef:d8:0a:ad:94:e9:9b:2e: a0:5d:4f:19:56:f9:b5:11:ff:a2:19:7a:d6:e9:05: 5c:1f:3e:03:68:57:d2:7b:1f:d8:80:0c:19:cc:fb: af:04:fe:fc:c8:f9:6e:d6:66:ec:05:c5:0b:c9:37: ec:c9:12:58:e7:b0:2e:52:42:68:54:a4:0c:32:8b: 02:e6:ab:12:52:ff:89:9f:63:a3:fe:6e:f5:30:f7: ad:ea:cc:5c:df:ef:f6:46:80:d4:79:b3:0f:b7:81: 56:17:3e:89:70:5e:ff:b0:50:e2:be:e2:bd:51:a5: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:FE:85:7E:9F:7E:2D:DC:89:96:AF:06:D6:21:9C:F4:72:22:39 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:26:1a:9c:b9:e2:7d:84:3f:06:57:5c:b6:80:3b:7b:7e: d6:9a:aa:63:b5:a0:5f:49:54:04:ba:17:c8:aa:49:23:40:89: 55:f5:2d:e3:dc:3a:77:21:f9:3f:2e:22:fa:b5:f3:20:ee:ff: 21:d4:4d:88:d6:70:9b:da:78:1d:cb:70:40:5d:f1:d5:c3:28: 9a:56:de:58:fc:8e:d8:f2:60:52:7f:fd:74:a0:f0:63:d3:2d: 0e:28:98:07:23:45:44:75:64:3b:b6:4d:db:c8:ca:19:fa:68: ea:08:1d:fe:2c:63:7c:56:bf:e8:07:bf:88:86:65:ab:57:10: d9:08:6c:04:08:6e:df:77:8a:77:b6:ca:6c:58:b7:4c:a8:fa: 59:ba:98:c5:55:9b:d0:29:bb:b4:20:8f:94:f3:2d:e3:c0:e0: d5:0b:17:22:b1:e6:7c:f8:fe:7e:55:31:f1:83:4e:98:12:8d: bc:36:dd:db:e9:df:6b:06:05:32:22:c1:c9:3b:42:f4:b1:11: 8c:a6:74:00:ca:20:ff:a8:aa:2a:4c:76:43:c9:57:18:9e:d2: ec:fb:d0:84:ad:54:87:c4:96:35:ac:19:b2:40:99:90:a2:a8: 3e:05:8c:9a:96:76:a0:7c:59:f7:dd:c9:d1:33:51:66:e3:76: bf:83:cb:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHx6xYNjqTLf1+coSlbCZv+jy0oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTEyMjQxMjA5NDRaFw0yNTEyMjcxMjUyNDRaMDMxMTAvBgNV BAMTKEUzRjFGRTg1N0U5RjdFMkREQzg5OTZBRjA2RDYyMTlDRjQ3MjIyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshPTK6i5DrAnn7FzXZEMoDxcR axJNidnG8iKweBLMH/gEQuKi2Pc2BjdYHqQ124BSZ0+3fTXzPFiLtI6GSxIJ+eh9 0lxdZZx3ugLjdQUF2KnAmUVij9y/FcLVpmeiTuiY0EsAjhdbTxFCCjWtDnpZ9ThF hQ/iVCWzNFBUFXgu4Hbcek4Mcws/7hRyFvzv2AqtlOmbLqBdTxlW+bUR/6IZetbp BVwfPgNoV9J7H9iADBnM+68E/vzI+W7WZuwFxQvJN+zJEljnsC5SQmhUpAwyiwLm qxJS/4mfY6P+bvUw963qzFzf7/ZGgNR5sw+3gVYXPolwXv+wUOK+4r1RpS/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/H+hX6ffi3ciZavBtYhnPRyIjkwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmuJhqcueJ9hD8GV1y2gDt7ftaaqmO1oF9J VAS6F8iqSSNAiVX1LePcOnch+T8uIvq18yDu/yHUTYjWcJvaeB3LcEBd8dXDKJpW 3lj8jtjyYFJ//XSg8GPTLQ4omAcjRUR1ZDu2TdvIyhn6aOoIHf4sY3xWv+gHv4iG ZatXENkIbAQIbt93ine2ymxYt0yo+lm6mMVVm9Apu7Qgj5TzLePA4NULFyKx5nz4 /n5VMfGDTpgSjbw23dvp32sGBTIiwck7QvSxEYymdADKIP+oqipMdkPJVxie0uz7 0IStVIfEljWsGbJAmZCiqD4FjJqWdqB8WffdydEzUWbjdr+Dy5g= -----END CERTIFICATE-----Generated at Thu Dec 25 06:34:45 2025 by rpki-client