This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: SBwG9AUwu9rRy/hrFzOaY5mbizlZw0ivD/7WRjcxiQU= Subject key identifier: 2E:2C:64:35:46:D9:E6:A4:9B:75:2C:F0:A2:ED:96:76:2E:77:12:DE Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 3ACC1F34F2DD7DE65F9D55E8AC3CAB3432263B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0500 Signing time: Fri 19 Dec 2025 17:33:16 +0000 Manifest this update: Fri 19 Dec 2025 17:28:16 +0000 Manifest next update: Mon 22 Dec 2025 20:13:16 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: 55PyHzqA5nH2dOKEWSCkj1R7QSz1+dre3krXTO1MItc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cc:1f:34:f2:dd:7d:e6:5f:9d:55:e8:ac:3c:ab:34:32:26:3b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Dec 19 17:28:16 2025 GMT Not After : Dec 22 20:13:16 2025 GMT Subject: CN=2E2C643546D9E6A49B752CF0A2ED96762E7712DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:5b:60:a7:c8:81:93:54:b2:f5:db:db:8a: 6d:f9:01:76:cb:13:14:cc:e4:c8:8a:00:78:e9:4c: 20:26:02:f0:81:fe:99:d7:b9:0b:e3:9c:c7:30:e2: e1:9b:a6:13:80:9d:b5:23:e3:fd:ff:b9:f5:90:b2: 81:8b:65:3b:20:85:3a:c3:1c:82:22:b7:c5:4b:65: c8:7c:e7:a3:8e:31:92:bb:da:6a:dd:f8:cd:bc:a9: 7d:6f:80:f3:4d:da:8c:bf:5e:a2:cb:fc:14:34:15: e9:30:e7:03:5b:7f:c5:bc:c3:de:64:c5:f2:43:45: e1:f2:6c:55:41:d5:31:6c:d8:98:9e:c4:71:4c:2f: 77:c7:5b:b2:64:71:b8:7f:94:82:19:1d:44:e9:b5: 31:25:dd:b3:32:ac:aa:8c:f6:1c:35:2d:86:3b:78: af:0e:fc:4f:09:9d:69:ca:24:b7:8e:bc:47:a0:89: 8f:be:d6:d9:b1:30:a9:2b:56:ed:de:d8:1b:f7:f8: d2:cb:47:3f:9b:87:9e:39:33:dc:27:cf:31:d2:77: 76:8a:9c:3b:15:f7:96:f4:f1:66:aa:b7:b0:48:5a: 1f:74:ac:fd:b0:19:20:57:5e:63:63:17:fc:7d:2e: 1e:e8:6c:72:df:bd:ca:10:d7:3e:15:87:2a:71:58: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2C:64:35:46:D9:E6:A4:9B:75:2C:F0:A2:ED:96:76:2E:77:12:DE X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cc:e4:d7:af:50:ca:ee:d5:43:92:da:d6:d7:70:00:fd:77: ed:92:c7:de:10:d4:74:73:35:67:dc:ee:e7:68:69:57:22:4c: ff:58:39:76:35:50:8d:98:6d:f8:f9:1e:74:b9:8e:82:36:0e: ae:f5:7d:37:e0:b7:39:8b:0f:4d:cd:cf:c3:60:e8:63:4f:f1: 69:70:cb:7d:16:c2:e2:ec:1a:c6:a4:5f:8c:f6:92:82:05:ee: 07:51:00:89:f0:c7:ba:f8:56:87:d9:58:46:d0:e4:ff:46:bc: 60:00:b4:7c:6f:cf:09:6f:11:3d:f6:aa:d8:a4:a9:06:83:79: 98:66:20:11:68:48:d1:2a:89:c6:ee:7d:6e:b3:a3:bb:be:94: 70:e5:e9:88:8c:b5:05:9c:09:d5:03:d2:33:86:a2:b1:bf:f9: f5:ab:f5:45:fc:59:0e:4b:f4:7d:6a:48:56:50:ed:b9:78:f9: e4:a3:33:00:df:a6:42:05:b6:e4:2b:96:ed:38:13:a2:17:d9: 89:9e:ff:09:53:80:be:72:4d:6b:6d:25:50:d2:d2:c3:9e:f2: f4:a5:f6:cc:e9:18:96:c9:f7:78:c9:25:43:93:a5:46:12:5b: 56:f7:b0:c3:e5:4e:18:85:79:6b:06:ba:25:7b:64:bf:db:c9: 31:4a:64:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOswfNPLdfeZfnVXorDyrNDImO1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTEyMTkxNzI4MTZaFw0yNTEyMjIyMDEzMTZaMDMxMTAvBgNV BAMTKDJFMkM2NDM1NDZEOUU2QTQ5Qjc1MkNGMEEyRUQ5Njc2MkU3NzEyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNVtgp8iBk1Sy9dvbim35AXbL ExTM5MiKAHjpTCAmAvCB/pnXuQvjnMcw4uGbphOAnbUj4/3/ufWQsoGLZTsghTrD HIIit8VLZch856OOMZK72mrd+M28qX1vgPNN2oy/XqLL/BQ0Fekw5wNbf8W8w95k xfJDReHybFVB1TFs2JiexHFML3fHW7Jkcbh/lIIZHUTptTEl3bMyrKqM9hw1LYY7 eK8O/E8JnWnKJLeOvEegiY++1tmxMKkrVu3e2Bv3+NLLRz+bh545M9wnzzHSd3aK nDsV95b08Waqt7BIWh90rP2wGSBXXmNjF/x9Lh7obHLfvcoQ1z4VhypxWM5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULixkNUbZ5qSbdSzwou2Wdi53Et4wHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDM5NevUMru1UOS2tbXcAD9d+2Sx94Q1HRz NWfc7udoaVciTP9YOXY1UI2Ybfj5HnS5joI2Dq71fTfgtzmLD03Nz8Ng6GNP8Wlw y30WwuLsGsakX4z2koIF7gdRAInwx7r4VofZWEbQ5P9GvGAAtHxvzwlvET32qtik qQaDeZhmIBFoSNEqicbufW6zo7u+lHDl6YiMtQWcCdUD0jOGorG/+fWr9UX8WQ5L 9H1qSFZQ7bl4+eSjMwDfpkIFtuQrlu04E6IX2Yme/wlTgL5yTWttJVDS0sOe8vSl 9szpGJbJ93jJJUOTpUYSW1b3sMPlThiFeWsGuiV7ZL/byTFKZA0= -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:12 2025 by rpki-client