This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: bG5cX4MWQ/M5nY9L/YyQv5ujO2NxeUic+qbwbWKoMQw= Subject key identifier: 44:CE:82:48:4F:CD:D3:64:9C:C5:78:3C:51:2C:5B:E6:F4:35:E0:9A Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 4A3F1A12D5A1F79A33AA13AF20DA7824F3671E4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0544 Signing time: Sun 28 Dec 2025 23:41:43 +0000 Manifest this update: Sun 28 Dec 2025 23:36:43 +0000 Manifest next update: Thu 01 Jan 2026 09:51:43 +0000 Files and hashes: 1: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 2: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 3: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 4: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: Gml4S9de8URytM7qTK/bgAbpcPWF3gZNBdb7ti9fr+I=) 5: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 6: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 7: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 8: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 9: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 10: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 11: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 12: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 13: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 09:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3f:1a:12:d5:a1:f7:9a:33:aa:13:af:20:da:78:24:f3:67:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Dec 28 23:36:43 2025 GMT Not After : Jan 1 09:51:43 2026 GMT Subject: CN=44CE82484FCDD3649CC5783C512C5BE6F435E09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:6c:81:ff:3e:58:8e:bf:3c:63:47:66:42: 0a:17:ab:83:a0:a9:a0:19:fd:12:e8:21:35:85:05: c1:b1:1b:0a:2b:a6:fb:10:b3:40:7f:97:c9:04:78: 12:05:0c:8b:05:4d:8f:8e:6e:24:c9:1d:86:94:e0: 61:39:08:f6:c9:cb:93:98:e3:ee:c5:f6:47:0b:e2: a2:59:6f:64:92:1c:7c:56:ff:9f:e6:f5:3d:dd:45: 3a:40:0e:6c:78:c0:bd:17:4b:88:a5:e8:be:d1:03: 39:c9:9b:80:ba:5c:f0:12:0d:b3:1d:0f:26:82:4c: 5b:d3:9c:02:93:3d:86:e9:17:60:77:1c:83:33:6a: 9e:01:50:53:17:be:8f:da:6b:36:bf:1b:2b:07:3f: 98:8f:cd:22:ec:6a:c5:52:e5:8e:6c:8e:bb:05:b5: 00:2a:88:72:c0:50:af:76:88:cb:99:a4:ba:41:73: c2:ae:d3:ab:28:e7:60:d4:32:26:57:45:12:bf:f5: 30:68:67:be:cb:44:25:da:4c:84:af:3c:3f:38:7b: 4e:15:2e:1a:e1:ff:15:d1:1f:e5:c3:e2:5a:bf:5a: f6:bb:66:f6:5b:7a:39:bb:d6:e4:cb:ee:69:53:61: 4f:37:e5:02:57:7e:cd:72:89:78:11:30:88:33:2b: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CE:82:48:4F:CD:D3:64:9C:C5:78:3C:51:2C:5B:E6:F4:35:E0:9A X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:0c:2e:26:db:ae:a2:36:e7:5e:4c:34:7b:88:70:6a:11: d0:bf:94:fb:80:1d:82:9f:a3:23:62:d9:6f:ec:73:4c:a3:81: 41:96:81:f0:a9:b7:69:5d:4c:54:dd:4a:7c:37:eb:58:b9:4c: 38:61:3c:40:60:8f:90:2a:cc:29:67:4f:bd:24:46:53:0f:be: 78:fd:fd:4b:92:af:15:f4:41:d8:f5:73:65:46:12:4f:c6:26: 95:ec:de:f9:19:b7:5a:e5:8d:3d:d9:d9:25:30:56:98:ba:59: 5f:aa:a0:b6:ca:f3:db:eb:5c:ae:b6:8f:04:5f:95:03:de:20: 81:72:a0:5d:b9:6f:77:ca:db:76:4b:f0:27:d5:84:29:e9:d3: b4:c7:07:91:04:b2:62:5e:15:29:53:1c:b1:41:e5:82:fe:de: b1:28:d3:62:f7:b5:55:31:45:d5:af:e9:b0:db:f7:95:1f:84: 99:22:da:7d:6e:83:66:06:e3:bf:99:0d:d1:1c:05:23:00:97: 78:09:26:fb:65:16:a6:82:88:16:11:e5:95:b0:1b:6a:ea:fb: a9:c3:6b:68:04:0e:c3:40:1c:24:15:6b:62:9b:2c:0a:21:e5: 35:8e:dc:a0:41:83:1c:ac:4f:13:bf:f1:35:98:6c:65:4b:81: 49:01:78:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSj8aEtWh95ozqhOvINp4JPNnHkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEyMjgyMzM2NDNaFw0yNjAxMDEwOTUxNDNaMDMxMTAvBgNV BAMTKDQ0Q0U4MjQ4NEZDREQzNjQ5Q0M1NzgzQzUxMkM1QkU2RjQzNUUwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/umyB/z5Yjr88Y0dmQgoXq4Og qaAZ/RLoITWFBcGxGworpvsQs0B/l8kEeBIFDIsFTY+ObiTJHYaU4GE5CPbJy5OY 4+7F9kcL4qJZb2SSHHxW/5/m9T3dRTpADmx4wL0XS4il6L7RAznJm4C6XPASDbMd DyaCTFvTnAKTPYbpF2B3HIMzap4BUFMXvo/aaza/GysHP5iPzSLsasVS5Y5sjrsF tQAqiHLAUK92iMuZpLpBc8Ku06so52DUMiZXRRK/9TBoZ77LRCXaTISvPD84e04V Lhrh/xXRH+XD4lq/Wva7ZvZbejm71uTL7mlTYU835QJXfs1yiXgRMIgzKzLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURM6CSE/N02ScxXg8USxb5vQ14JowHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGajDC4m266iNudeTDR7iHBqEdC/lPuAHYKf oyNi2W/sc0yjgUGWgfCpt2ldTFTdSnw361i5TDhhPEBgj5AqzClnT70kRlMPvnj9 /UuSrxX0Qdj1c2VGEk/GJpXs3vkZt1rljT3Z2SUwVpi6WV+qoLbK89vrXK62jwRf lQPeIIFyoF25b3fK23ZL8CfVhCnp07THB5EEsmJeFSlTHLFB5YL+3rEo02L3tVUx RdWv6bDb95UfhJki2n1ug2YG47+ZDdEcBSMAl3gJJvtlFqaCiBYR5ZWwG2rq+6nD a2gEDsNAHCQVa2KbLAoh5TWO3KBBgxysTxO/8TWYbGVLgUkBeGg= -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:53 2025 by rpki-client