This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: ZNOT4LwpQeeiYKRzhCOGuz2AxnAi9wJc2UwZ4BEvIbw= Subject key identifier: 81:FC:81:12:F6:3C:80:A7:9E:0C:C3:40:D4:5E:25:14:42:9C:2E:D9 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 86ADD5D560173F8F2948E77A8FEF0A2FB4A9BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0540 Signing time: Sat 20 Dec 2025 05:42:17 +0000 Manifest this update: Sat 20 Dec 2025 05:37:17 +0000 Manifest next update: Tue 23 Dec 2025 15:34:17 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 2: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 3: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 4: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 5: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 6: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 7: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 8: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: tk0T22tO74x3egzxg6SUHmKuGHbhRjYTQ6e7PNfz3MI=) 9: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 10: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 11: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 12: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 13: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86:ad:d5:d5:60:17:3f:8f:29:48:e7:7a:8f:ef:0a:2f:b4:a9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Dec 20 05:37:17 2025 GMT Not After : Dec 23 15:34:17 2025 GMT Subject: CN=81FC8112F63C80A79E0CC340D45E2514429C2ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:c9:8c:c7:ec:31:8a:76:4e:4a:0c:3c:c8: 14:9d:5d:6c:8c:6c:06:9e:56:7e:cd:45:bb:03:a2: 08:96:6b:81:5d:c2:d1:ac:1c:eb:be:2e:b8:e9:d4: 0c:4e:8c:b4:ab:51:fa:3d:c5:bc:de:c1:12:01:b6: a4:00:b0:85:e0:51:4d:28:8f:b5:d0:1e:0b:e2:77: 2e:22:81:45:7a:4b:e8:4e:d0:23:b8:b8:0f:ae:2d: e1:b7:fe:82:1e:87:24:04:77:ed:0d:18:87:28:58: 53:87:3e:a5:71:68:e1:a0:73:d8:1d:ed:ec:69:43: fc:b2:06:ac:05:88:75:eb:98:cf:2d:cb:ff:29:a2: 2a:9d:44:12:a2:a5:8f:91:87:9c:8a:bc:3b:48:05: 94:ba:fd:33:1a:67:94:c4:42:94:7c:10:5a:9e:a1: 94:bc:49:bf:58:2c:26:66:18:bf:89:45:c0:9e:d9: c3:d6:76:2d:75:22:7d:11:a9:0b:40:cf:cd:a0:0b: 64:16:78:16:1a:ed:00:90:30:7d:59:33:2f:1a:71: 27:09:ae:35:9e:58:aa:41:56:51:af:1e:c0:f9:bf: be:eb:9e:fd:b1:f9:5e:54:1f:60:85:9d:b4:c3:89: e3:e6:26:d8:5e:80:d6:76:f8:d7:d1:5a:68:87:fb: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FC:81:12:F6:3C:80:A7:9E:0C:C3:40:D4:5E:25:14:42:9C:2E:D9 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b6:56:ee:89:d4:3c:63:bc:82:ae:43:ee:a2:67:78:7b:2c: 79:c2:b0:dc:3c:f8:24:14:98:ce:55:ce:ce:1d:a4:fc:dc:24: 9b:bb:cf:c7:9c:c2:42:54:fb:2c:bb:6c:3e:23:ee:f0:03:69: d1:09:90:44:3c:4f:9c:b1:ca:fc:f9:c0:98:55:3b:e1:14:72: cf:68:2e:19:16:58:95:b7:bf:a3:9f:0d:5e:e1:94:af:df:dd: 41:99:06:31:58:81:12:02:79:55:ed:43:6e:38:3f:26:b9:ef: 05:c7:f9:27:a0:3a:9e:ba:b4:d6:11:71:50:b1:ac:26:cf:eb: 8e:93:c3:38:b2:5f:72:d5:d7:cf:aa:c0:e6:bf:78:84:0d:44: 0a:fc:77:81:0f:84:c8:7c:e9:5d:5e:c8:6c:d0:23:7a:72:48: 6c:24:6d:a7:f3:da:d6:68:6e:75:84:d5:06:a8:5a:bd:4d:cb: 6f:b4:2d:c2:f0:3e:35:89:8f:e9:f8:e0:ad:bc:a8:84:cc:e9: 4c:11:d1:87:09:ac:0f:04:3f:5b:f9:c9:e1:97:38:37:89:6d: 46:08:b0:4b:2f:57:7a:61:12:2e:1f:4e:b9:f8:5c:a2:c8:41: 11:f6:84:14:23:59:e0:4c:b4:2d:d1:dc:3b:d8:e6:34:d8:97: 4c:40:c9:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIat1dVgFz+PKUjneo/vCi+0qbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEyMjAwNTM3MTdaFw0yNTEyMjMxNTM0MTdaMDMxMTAvBgNV BAMTKDgxRkM4MTEyRjYzQzgwQTc5RTBDQzM0MEQ0NUUyNTE0NDI5QzJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TMmMx+wxinZOSgw8yBSdXWyM bAaeVn7NRbsDogiWa4FdwtGsHOu+Lrjp1AxOjLSrUfo9xbzewRIBtqQAsIXgUU0o j7XQHgvidy4igUV6S+hO0CO4uA+uLeG3/oIehyQEd+0NGIcoWFOHPqVxaOGgc9gd 7expQ/yyBqwFiHXrmM8ty/8poiqdRBKipY+Rh5yKvDtIBZS6/TMaZ5TEQpR8EFqe oZS8Sb9YLCZmGL+JRcCe2cPWdi11In0RqQtAz82gC2QWeBYa7QCQMH1ZMy8acScJ rjWeWKpBVlGvHsD5v77rnv2x+V5UH2CFnbTDiePmJthegNZ2+NfRWmiH+36ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfyBEvY8gKeeDMNA1F4lFEKcLtkwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH62Vu6J1DxjvIKuQ+6iZ3h7LHnCsNw8+CQU mM5Vzs4dpPzcJJu7z8ecwkJU+yy7bD4j7vADadEJkEQ8T5yxyvz5wJhVO+EUcs9o LhkWWJW3v6OfDV7hlK/f3UGZBjFYgRICeVXtQ244Pya57wXH+SegOp66tNYRcVCx rCbP646TwziyX3LV18+qwOa/eIQNRAr8d4EPhMh86V1eyGzQI3pySGwkbafz2tZo bnWE1QaoWr1Ny2+0LcLwPjWJj+n44K28qITM6UwR0YcJrA8EP1v5yeGXODeJbUYI sEsvV3phEi4fTrn4XKLIQRH2hBQjWeBMtC3R3DvY5jTYl0xAyU4= -----END CERTIFICATE-----Generated at Sun Dec 21 17:04:51 2025 by rpki-client