This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: yBC0KYoU9WW4zxd8JD9RLZf8z0r9wGXFWk6X7kSel4c= Subject key identifier: 9A:0A:54:7C:AB:2F:17:82:59:F3:82:0A:79:5C:7D:2C:CA:F4:63:86 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 66B09701253C338B7D64C4739C603B8E4270A1DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01B8 Signing time: Sat 20 Dec 2025 00:10:38 +0000 Manifest this update: Sat 20 Dec 2025 00:05:38 +0000 Manifest next update: Tue 23 Dec 2025 02:02:38 +0000 Files and hashes: 1: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: PI66yzDiskZvgZmFLyxNpPG0lv6yNVsBZRSCpPy3ka0=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 3: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 4: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 02:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b0:97:01:25:3c:33:8b:7d:64:c4:73:9c:60:3b:8e:42:70:a1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Dec 20 00:05:38 2025 GMT Not After : Dec 23 02:02:38 2025 GMT Subject: CN=9A0A547CAB2F178259F3820A795C7D2CCAF46386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:5d:bc:67:b4:89:53:0f:35:3b:73:c4:5c: 09:c7:e9:25:1e:8b:6a:6d:7b:4f:22:39:ab:4f:5c: a7:5e:4c:47:ed:98:5a:6e:eb:2b:c8:a0:34:b1:04: 03:ac:77:18:a1:48:70:45:e5:0c:cd:e7:79:6b:33: 32:5f:9f:3e:2b:5d:9e:3e:28:7a:79:dc:90:07:2a: d9:6d:87:50:2f:c5:b2:72:2c:c6:b7:62:f2:7f:de: 98:a8:c7:dd:b6:1c:96:d0:9d:f4:c8:0f:26:9b:3a: d7:9f:1c:35:47:d9:ff:9f:9e:c5:44:78:ab:a8:5d: 09:21:e1:32:ee:ab:22:67:46:ce:4a:66:e2:82:a0: 1e:eb:c9:8b:42:6a:87:2f:fd:4a:aa:05:f3:cc:6a: 5f:a9:e9:8e:46:c6:ae:ff:6b:15:c6:c3:f8:7f:76: 0f:91:1e:d3:26:eb:09:a6:d9:33:49:17:99:2a:8c: d0:6e:dd:2c:25:8e:ef:0f:2a:de:6f:67:1a:6f:9e: 0b:73:ea:58:ec:17:57:63:ee:de:6d:95:bf:50:4c: c1:aa:e2:e5:39:c3:8c:78:ce:c0:07:8a:3e:d2:4d: 37:e2:39:dd:a8:cd:5a:68:c0:fe:57:80:09:5f:08: 08:52:94:79:c2:eb:59:79:c6:2b:f3:39:f7:42:7c: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:54:7C:AB:2F:17:82:59:F3:82:0A:79:5C:7D:2C:CA:F4:63:86 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c9:82:f7:5b:dd:95:58:4f:eb:c0:cd:f7:22:cf:3c:54:8d: d5:c6:26:55:27:b5:af:27:27:4a:bd:08:2e:65:34:04:44:ca: c2:9a:1e:5e:93:de:e7:34:63:57:5d:f8:17:5e:a0:8b:ed:80: 22:44:0f:55:b3:be:e8:36:48:30:e1:b8:1d:2b:e6:b3:88:96: f2:ca:3e:21:c4:c1:a3:d7:2b:1d:aa:42:54:0b:3c:aa:44:40: a7:5f:2e:94:b3:33:a7:9d:ce:44:44:39:73:c1:3b:97:0e:8d: b6:f0:db:3b:54:e6:61:c8:f4:5a:de:a0:21:9f:79:06:7d:0b: cb:af:46:7f:04:06:71:b6:cd:e5:5f:01:3b:e7:48:28:6e:63: e4:53:05:5b:2d:01:1c:14:73:9e:23:bb:5e:0c:fb:19:fb:3c: fb:14:a7:ad:32:66:cc:fe:f6:fe:f7:1b:dc:da:3e:3e:93:d1: bb:c2:6e:0a:6d:5c:06:b0:9e:fb:28:1c:b2:be:af:9c:89:87: 5a:0c:3c:a4:53:99:4f:f1:1b:eb:fa:91:9b:0e:c6:31:8c:29: bc:c4:55:72:3a:de:ea:9b:3d:8c:07:76:d8:46:4d:5f:91:58: 01:33:6d:34:df:1e:5a:05:28:be:90:9c:3e:d6:a9:da:b0:0c: ce:8c:d6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrCXASU8M4t9ZMRznGA7jkJwod0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTEyMjAwMDA1MzhaFw0yNTEyMjMwMjAyMzhaMDMxMTAvBgNV BAMTKDlBMEE1NDdDQUIyRjE3ODI1OUYzODIwQTc5NUM3RDJDQ0FGNDYzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O128Z7SJUw81O3PEXAnH6SUe i2pte08iOatPXKdeTEftmFpu6yvIoDSxBAOsdxihSHBF5QzN53lrMzJfnz4rXZ4+ KHp53JAHKtlth1AvxbJyLMa3YvJ/3piox922HJbQnfTIDyabOtefHDVH2f+fnsVE eKuoXQkh4TLuqyJnRs5KZuKCoB7ryYtCaocv/UqqBfPMal+p6Y5Gxq7/axXGw/h/ dg+RHtMm6wmm2TNJF5kqjNBu3Swlju8PKt5vZxpvngtz6ljsF1dj7t5tlb9QTMGq 4uU5w4x4zsAHij7STTfiOd2ozVpowP5XgAlfCAhSlHnC61l5xivzOfdCfF+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgpUfKsvF4JZ84IKeVx9LMr0Y4YwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHJgvdb3ZVYT+vAzfcizzxUjdXGJlUnta8n J0q9CC5lNAREysKaHl6T3uc0Y1dd+BdeoIvtgCJED1Wzvug2SDDhuB0r5rOIlvLK PiHEwaPXKx2qQlQLPKpEQKdfLpSzM6edzkREOXPBO5cOjbbw2ztU5mHI9FreoCGf eQZ9C8uvRn8EBnG2zeVfATvnSChuY+RTBVstARwUc54ju14M+xn7PPsUp60yZsz+ 9v73G9zaPj6T0bvCbgptXAawnvsoHLK+r5yJh1oMPKRTmU/xG+v6kZsOxjGMKbzE VXI63uqbPYwHdthGTV+RWAEzbTTfHloFKL6QnD7WqdqwDM6M1sA= -----END CERTIFICATE-----Generated at Sun Dec 21 05:50:50 2025 by rpki-client