This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: Mt+IBap/9VpvLiTf8icM8HLhrLgXCn2zvcAXf7A4BM8= Subject key identifier: 50:60:A0:BE:EF:55:29:03:09:7D:CB:43:C6:DC:14:F1:76:E0:23:DC Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 0595F097B0F1653AE75728B63B1E88658E22D010 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 010A Signing time: Fri 19 Dec 2025 22:51:47 +0000 Manifest this update: Fri 19 Dec 2025 22:46:47 +0000 Manifest next update: Tue 23 Dec 2025 03:53:47 +0000 Files and hashes: 1: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 2: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 3: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 4: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 5: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: lQGJJA9fi3Pjn2LgTwDWf/3Au7H0eQh1+QkwWKf/t1s=) 6: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 03:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:95:f0:97:b0:f1:65:3a:e7:57:28:b6:3b:1e:88:65:8e:22:d0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Dec 19 22:46:47 2025 GMT Not After : Dec 23 03:53:47 2025 GMT Subject: CN=5060A0BEEF552903097DCB43C6DC14F176E023DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:82:5d:5a:ee:3e:d1:7d:a2:92:1b:c1:e4: 2a:85:e5:cb:60:6f:92:fc:08:16:e1:5a:32:6c:de: a0:c2:21:7a:b8:87:e2:fc:4c:3a:a8:7a:6a:d0:24: 66:98:44:59:94:ad:cf:fa:5a:8e:61:e4:37:a3:f4: b2:0f:5a:73:b8:39:3c:df:45:b3:5d:d2:da:3e:a7: ad:52:a3:ac:8c:1e:b1:0a:29:33:96:52:02:a5:a2: 0e:c8:64:fb:cd:f6:70:b6:52:d3:91:73:21:fb:29: ec:dd:80:44:5b:0c:6d:89:cf:c1:93:73:00:da:1a: 9b:c6:b6:b0:24:e0:a8:9c:fd:fb:88:9d:41:5e:cb: 17:97:36:21:87:2c:9e:40:e2:2f:ad:28:35:d5:c4: cc:e6:b9:f6:2e:ac:93:4b:cd:d8:f1:4f:e0:2d:c8: 87:1f:5d:d8:ce:42:8c:d1:51:d7:9d:46:83:2c:43: 4d:c7:8b:fd:45:b8:f4:b3:5f:a3:4e:71:f6:7f:57: ef:6c:6f:a0:b9:b4:53:19:8a:3c:6b:82:53:44:c2: f4:74:ed:20:8d:77:2d:65:d7:09:22:38:6b:18:4a: c6:de:d8:db:4e:31:65:de:aa:ba:35:6d:7c:6c:9a: 61:06:a8:1d:13:b1:1a:16:53:34:59:39:04:54:d1: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:60:A0:BE:EF:55:29:03:09:7D:CB:43:C6:DC:14:F1:76:E0:23:DC X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:49:b7:68:54:b6:b2:27:ef:63:fe:d4:4e:cf:44:b6:49:2a: 01:c4:8b:aa:9f:05:c5:46:2a:80:a3:db:d4:86:55:ae:a7:c1: f7:c5:00:23:4b:15:dd:44:f0:a7:7f:b1:09:98:1a:e7:5b:60: 75:ae:dd:8e:c3:23:29:5f:23:0c:72:04:52:30:74:a3:23:da: 8b:3b:df:3f:6c:7b:8e:06:5a:5f:d7:a9:d0:d8:e4:29:8c:a8: ac:6e:d7:e8:ea:4f:d5:b7:5b:ff:ca:77:76:60:2f:33:72:5e: 84:69:44:41:2e:e7:ee:d2:05:87:9c:36:7d:8d:f4:b3:1e:ee: 54:34:4f:ad:45:7f:d1:9d:1b:b1:25:b8:a8:45:e1:af:fb:95: 4c:52:35:ec:be:dd:f7:b9:b2:4c:b5:ce:f3:f0:6b:e0:3b:5e: 58:c6:1c:72:54:0a:d2:5b:10:b6:ba:34:bc:03:bf:5e:5b:0b: f4:31:14:9a:3f:dd:95:ad:6b:6c:c3:c8:09:db:74:4e:db:7e: d1:ee:ed:c0:69:fe:84:4a:4b:83:2d:be:85:36:74:ae:85:81: df:34:59:54:07:9e:b1:a0:d9:ab:20:7c:04:dc:b7:db:e0:7f: 05:93:b7:57:94:78:6b:b1:49:d7:45:e3:3d:ef:09:83:f4:2e: b3:5c:3b:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZXwl7DxZTrnVyi2Ox6IZY4i0BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNTEyMTkyMjQ2NDdaFw0yNTEyMjMwMzUzNDdaMDMxMTAvBgNV BAMTKDUwNjBBMEJFRUY1NTI5MDMwOTdEQ0I0M0M2REMxNEYxNzZFMDIzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZ4JdWu4+0X2ikhvB5CqF5ctg b5L8CBbhWjJs3qDCIXq4h+L8TDqoemrQJGaYRFmUrc/6Wo5h5Dej9LIPWnO4OTzf RbNd0to+p61So6yMHrEKKTOWUgKlog7IZPvN9nC2UtORcyH7KezdgERbDG2Jz8GT cwDaGpvGtrAk4Kic/fuInUFeyxeXNiGHLJ5A4i+tKDXVxMzmufYurJNLzdjxT+At yIcfXdjOQozRUdedRoMsQ03Hi/1FuPSzX6NOcfZ/V+9sb6C5tFMZijxrglNEwvR0 7SCNdy1l1wkiOGsYSsbe2NtOMWXeqro1bXxsmmEGqB0TsRoWUzRZOQRU0S7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGCgvu9VKQMJfctDxtwU8XbgI9wwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Jt2hUtrIn72P+1E7PRLZJKgHEi6qfBcVG KoCj29SGVa6nwffFACNLFd1E8Kd/sQmYGudbYHWu3Y7DIylfIwxyBFIwdKMj2os7 3z9se44GWl/XqdDY5CmMqKxu1+jqT9W3W//Kd3ZgLzNyXoRpREEu5+7SBYecNn2N 9LMe7lQ0T61Ff9GdG7EluKhF4a/7lUxSNey+3fe5sky1zvPwa+A7XljGHHJUCtJb ELa6NLwDv15bC/QxFJo/3ZWta2zDyAnbdE7bftHu7cBp/oRKS4MtvoU2dK6Fgd80 WVQHnrGg2asgfATct9vgfwWTt1eUeGuxSddF4z3vCYP0LrNcO/Q= -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:04 2025 by rpki-client