This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: GinlJzbkIGmW/5SMnytHDRkvWymeH89xp1XpDEvkS60= Subject key identifier: A8:30:D0:93:EA:15:BF:68:23:72:95:32:E4:93:D1:28:3D:E7:32:2B Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 291FD5B1E48346DEE87C31A7C7AFFA4B9883C6F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 0108 Signing time: Wed 24 Dec 2025 00:13:37 +0000 Manifest this update: Wed 24 Dec 2025 00:08:37 +0000 Manifest next update: Sat 27 Dec 2025 03:48:37 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: OEMX7YT1EaDN8gXbhfFJk/kPaDeDCeN9sQJcgJ+pX54=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1f:d5:b1:e4:83:46:de:e8:7c:31:a7:c7:af:fa:4b:98:83:c6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Dec 24 00:08:37 2025 GMT Not After : Dec 27 03:48:37 2025 GMT Subject: CN=A830D093EA15BF6823729532E493D1283DE7322B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:24:dd:5a:26:b6:0c:6e:f9:e1:ba:73:db: 1f:a0:b5:35:8a:7e:21:cc:37:bc:ea:81:50:16:7b: 2f:82:06:a3:51:56:6b:25:84:d7:17:46:71:76:1e: 9d:31:94:b8:dc:ab:b4:7f:71:56:2f:df:5d:45:67: e9:6f:9b:39:05:2c:79:b6:a6:58:d1:20:b1:56:ed: 41:f2:76:fc:1e:b0:f2:97:b8:a9:f3:c9:74:0a:73: 6f:9c:9c:96:83:c0:ef:96:09:5b:67:2c:87:fa:f9: a8:12:82:0c:c2:36:20:79:98:2d:4a:e4:56:3f:d0: c5:21:19:6a:54:d5:a0:cf:b5:a1:55:19:bb:e5:11: 68:38:79:7f:b5:e1:fe:2d:83:68:ac:f3:9b:18:5c: 0b:98:dc:75:0b:15:04:6a:4a:9c:e0:65:9c:8a:16: f0:7f:13:d0:54:90:98:38:7d:8e:42:d8:ab:5b:19: f5:42:8e:b0:51:2b:22:5c:0b:49:63:1c:21:08:7a: 03:7d:19:d1:95:51:a6:64:a0:b8:f7:b8:38:6b:81: 29:eb:fd:a7:b5:03:b9:43:0c:da:13:60:82:4d:e2: 79:dc:ad:27:b8:d8:ec:e5:e9:3c:9d:26:7b:43:76: 22:86:43:69:84:21:6a:52:bf:00:5b:69:78:15:fc: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:D0:93:EA:15:BF:68:23:72:95:32:E4:93:D1:28:3D:E7:32:2B X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:19:61:c3:26:55:cf:e0:a3:d5:8d:62:b4:97:af:fe:22: 0c:bc:b7:a3:38:fb:62:e3:af:8c:2a:a2:72:41:72:99:a4:b0: 2d:96:00:a1:6d:b6:a0:c3:31:1d:74:68:80:5b:11:32:c6:4b: f4:46:a6:91:58:16:7c:d0:61:3b:67:cf:a9:eb:a3:1d:58:df: 9d:92:cd:47:9a:5d:a2:5d:cf:81:96:9e:c2:cc:df:53:92:5a: 90:9d:2f:47:c4:76:b6:d8:4c:8c:51:5f:39:1d:ad:87:b8:eb: 13:1f:bd:4d:59:04:6e:17:62:12:f6:3d:6a:69:d3:39:e0:96: 2e:49:ce:8d:bc:5c:43:fc:85:ce:d9:50:b0:ca:28:3e:3a:3d: 8c:cb:a9:8d:1b:67:2b:0d:f3:bb:95:51:ba:51:26:4b:f7:ff: f1:ce:9c:ce:c9:15:9d:cd:a4:41:e7:23:e2:2c:4f:6e:32:ce: cb:26:02:1b:37:6d:24:7d:8c:27:0b:53:04:89:e6:aa:b1:7e: 83:87:14:fd:61:e0:72:e9:4c:ae:63:74:31:9d:c9:2b:12:f6: 1a:08:fa:2d:02:18:5c:eb:9e:3d:c4:5e:fd:67:db:b8:5d:6a: 5d:48:06:4e:e4:c9:be:a2:59:a0:c1:61:9b:6b:03:71:90:f2: 32:c1:5f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKR/VseSDRt7ofDGnx6/6S5iDxvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTEyMjQwMDA4MzdaFw0yNTEyMjcwMzQ4MzdaMDMxMTAvBgNV BAMTKEE4MzBEMDkzRUExNUJGNjgyMzcyOTUzMkU0OTNEMTI4M0RFNzMyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1CTdWia2DG754bpz2x+gtTWK fiHMN7zqgVAWey+CBqNRVmslhNcXRnF2Hp0xlLjcq7R/cVYv311FZ+lvmzkFLHm2 pljRILFW7UHydvwesPKXuKnzyXQKc2+cnJaDwO+WCVtnLIf6+agSggzCNiB5mC1K 5FY/0MUhGWpU1aDPtaFVGbvlEWg4eX+14f4tg2is85sYXAuY3HULFQRqSpzgZZyK FvB/E9BUkJg4fY5C2KtbGfVCjrBRKyJcC0ljHCEIegN9GdGVUaZkoLj3uDhrgSnr /ae1A7lDDNoTYIJN4nncrSe42Ozl6TydJntDdiKGQ2mEIWpSvwBbaXgV/IuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDDQk+oVv2gjcpUy5JPRKD3nMiswHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIImGWHDJlXP4KPVjWK0l6/+Igy8t6M4+2Lj r4wqonJBcpmksC2WAKFttqDDMR10aIBbETLGS/RGppFYFnzQYTtnz6nrox1Y352S zUeaXaJdz4GWnsLM31OSWpCdL0fEdrbYTIxRXzkdrYe46xMfvU1ZBG4XYhL2PWpp 0zngli5Jzo28XEP8hc7ZULDKKD46PYzLqY0bZysN87uVUbpRJkv3//HOnM7JFZ3N pEHnI+IsT24yzssmAhs3bSR9jCcLUwSJ5qqxfoOHFP1h4HLpTK5jdDGdySsS9hoI +i0CGFzrnj3EXv1n27hdal1IBk7kyb6iWaDBYZtrA3GQ8jLBX74= -----END CERTIFICATE-----Generated at Thu Dec 25 00:49:13 2025 by rpki-client