This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: 4+q1FJJ69KJVFn7y8KUnAq3kWkwA7rJFGJeRlnX0SXU= Subject key identifier: F0:94:92:C4:E0:26:BC:26:57:7B:3B:65:DF:82:41:BC:6F:62:65:0A Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 08DF33C7D044D5B66CFB9994CA8EDAF58ECED7B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: A0 Signing time: Wed 24 Dec 2025 10:12:24 +0000 Manifest this update: Wed 24 Dec 2025 10:07:24 +0000 Manifest next update: Sat 27 Dec 2025 11:23:24 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: I28r4i4lWDSRmz98gxENOln+97MGeec1Z1eAP51TwjI=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: af4OU+mDY/3+5OJCf0Hdv/JCrjoD4pIVQVt7FBaD7lY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:df:33:c7:d0:44:d5:b6:6c:fb:99:94:ca:8e:da:f5:8e:ce:d7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Dec 24 10:07:24 2025 GMT Not After : Dec 27 11:23:24 2025 GMT Subject: CN=F09492C4E026BC26577B3B65DF8241BC6F62650A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:0f:15:40:9d:cf:1d:14:b8:31:8d:da:0b: a3:1f:da:a0:77:51:4d:e6:f6:cf:d8:9c:c3:8d:2a: e4:f3:f1:a9:88:8b:3e:d8:83:4e:6b:d1:e0:73:84: 48:2d:37:8a:83:6c:e3:ea:2c:3a:b2:b5:a1:40:da: 1c:2c:e9:05:4d:01:59:b7:44:1c:b1:34:3e:2b:98: 90:35:9d:df:1d:8e:80:f4:27:d4:9c:d5:28:2b:28: 52:b1:06:37:e0:00:07:5f:e1:b8:1c:9e:78:eb:a7: 2c:6c:24:75:8a:b6:58:1e:61:18:23:42:a6:b2:ce: 02:94:6c:7d:52:c3:87:89:40:75:12:6d:d5:eb:2a: fa:4c:1f:0a:38:bf:e0:a2:e8:0a:7f:73:d1:41:89: fa:9d:b3:4e:e4:ab:97:b4:b3:76:6e:bc:24:75:b0: b0:74:e9:d5:73:11:8e:2b:c9:94:ae:b2:d4:98:d7: b0:11:eb:14:a1:28:6d:c6:13:1d:82:7b:65:4e:8a: f0:84:8a:ab:1f:87:80:c1:92:ed:22:a4:aa:f6:35: 0a:a3:ba:e3:4c:8f:d8:fb:d9:1b:44:15:67:b2:b1: f0:1d:b0:35:bb:fb:30:47:e6:e0:2f:6d:50:24:dd: 71:b1:0c:ed:04:1a:c7:8b:72:13:94:af:7a:e6:2b: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:94:92:C4:E0:26:BC:26:57:7B:3B:65:DF:82:41:BC:6F:62:65:0A X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e7:13:6e:0f:97:a1:a0:77:91:e0:6d:e9:0d:a2:04:10:e7: ae:43:de:ab:ea:b1:da:74:62:bc:e4:78:3a:1e:7c:60:6d:b5: 45:ea:22:9e:90:ea:27:57:40:55:d9:bf:9a:30:e5:49:eb:34: 89:1c:c6:e6:3d:15:8a:a8:64:c4:2c:3d:4a:cd:79:c0:4a:3b: 04:02:d0:ec:c5:2e:38:82:cd:7c:32:20:db:2f:16:45:3a:7a: 8c:8e:a4:60:e1:0e:14:78:ab:d2:ea:88:c0:86:e5:2f:8a:7f: 0f:75:96:a7:68:56:40:16:72:40:c6:bf:23:35:5c:1b:c9:04: 3e:b6:3d:d4:26:94:b7:0a:56:80:8b:17:62:34:f3:c0:92:13: 83:10:a9:12:23:40:a3:20:92:41:c6:da:c9:9f:7b:91:80:d8: ba:b4:0f:3f:d5:4a:1e:05:76:2f:2a:65:25:37:4e:aa:54:37: bb:10:9b:e9:a3:76:bb:7e:96:45:d1:ab:39:77:04:57:2c:44: 35:9c:22:7a:8b:d7:16:2f:e6:fa:a3:b3:a3:42:e0:cc:e7:bb: 45:5c:ab:55:97:51:e2:c6:14:b8:19:42:f8:8f:fe:8d:0c:9f: 5c:7f:59:3f:1c:d5:66:28:6c:46:3e:a9:ab:ee:00:93:3e:8c: b5:fb:ed:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN8zx9BE1bZs+5mUyo7a9Y7O17cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTEyMjQxMDA3MjRaFw0yNTEyMjcxMTIzMjRaMDMxMTAvBgNV BAMTKEYwOTQ5MkM0RTAyNkJDMjY1NzdCM0I2NURGODI0MUJDNkY2MjY1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMg8VQJ3PHRS4MY3aC6Mf2qB3 UU3m9s/YnMONKuTz8amIiz7Yg05r0eBzhEgtN4qDbOPqLDqytaFA2hws6QVNAVm3 RByxND4rmJA1nd8djoD0J9Sc1SgrKFKxBjfgAAdf4bgcnnjrpyxsJHWKtlgeYRgj QqayzgKUbH1Sw4eJQHUSbdXrKvpMHwo4v+Ci6Ap/c9FBifqds07kq5e0s3ZuvCR1 sLB06dVzEY4ryZSustSY17AR6xShKG3GEx2Ce2VOivCEiqsfh4DBku0ipKr2NQqj uuNMj9j72RtEFWeysfAdsDW7+zBH5uAvbVAk3XGxDO0EGseLchOUr3rmKyZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8JSSxOAmvCZXeztl34JBvG9iZQowHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvnE24Pl6Ggd5HgbekNogQQ565D3qvqsdp0 YrzkeDoefGBttUXqIp6Q6idXQFXZv5ow5UnrNIkcxuY9FYqoZMQsPUrNecBKOwQC 0OzFLjiCzXwyINsvFkU6eoyOpGDhDhR4q9LqiMCG5S+Kfw91lqdoVkAWckDGvyM1 XBvJBD62PdQmlLcKVoCLF2I088CSE4MQqRIjQKMgkkHG2smfe5GA2Lq0Dz/VSh4F di8qZSU3TqpUN7sQm+mjdrt+lkXRqzl3BFcsRDWcInqL1xYv5vqjs6NC4Mznu0Vc q1WXUeLGFLgZQviP/o0Mn1x/WT8c1WYobEY+qavuAJM+jLX77V0= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:18 2025 by rpki-client