This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft File: 0310C64163DFFAE5A8F4065429C26B631D9834D9.mft (raw, json) Hash identifier: csPYQ50pIw73FZqyhxY6W5OSFelWdxeu4Mhm+raF3lI= Subject key identifier: E2:91:C1:45:CF:F6:CB:BC:B5:9B:3D:48:3C:E5:B7:5E:7D:BE:9A:72 Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9 Certificate issuer: /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9 Certificate serial: 2344DFB4AA81062184BA219C22DB08B4F3020AF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft Manifest number: 01EC Signing time: Tue 23 Dec 2025 13:11:45 +0000 Manifest this update: Tue 23 Dec 2025 13:06:45 +0000 Manifest next update: Fri 26 Dec 2025 13:16:45 +0000 Files and hashes: 1: 0310C64163DFFAE5A8F4065429C26B631D9834D9.crl (hash: c758jSyhtBum/jDMK8fKIusllKugY7G1ecQcmVXYOHc=) 2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: 1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:44:df:b4:aa:81:06:21:84:ba:21:9c:22:db:08:b4:f3:02:0a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9 Validity Not Before: Dec 23 13:06:45 2025 GMT Not After : Dec 26 13:16:45 2025 GMT Subject: CN=E291C145CFF6CBBCB59B3D483CE5B75E7DBE9A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:e8:c6:a7:c5:fa:86:9a:a9:66:7a:c8:ff: 4c:a4:d8:38:4c:93:96:67:b2:e0:9a:b9:e9:3a:9d: ea:34:85:fd:21:60:19:c0:76:c3:e4:38:83:a9:18: 7b:d3:3f:55:8d:9a:94:7b:d1:9d:71:30:7e:92:f8: 80:db:d9:b5:65:ba:05:2b:3e:11:bc:52:16:d0:69: a7:de:bf:05:14:8a:85:45:de:07:36:0e:11:db:1d: 66:a8:be:b4:c3:b1:23:1c:99:33:c6:07:cc:20:d8: 81:41:7a:8d:15:f8:0d:c5:71:8f:f7:ad:23:75:fd: 36:f7:80:38:76:98:b4:46:38:30:22:c4:3d:6d:77: 9f:c0:e8:2c:73:31:12:f8:73:55:19:0e:d1:cc:d7: 25:5f:27:f1:6c:5f:05:c2:9d:9b:13:03:6d:ca:d7: 3c:b1:23:d5:8b:cc:2a:42:14:ba:13:8d:dc:4b:8e: f9:ca:57:10:f0:ff:98:a9:25:bb:13:9c:72:83:c0: fa:6c:ab:a4:bd:33:99:99:7d:f1:50:d1:8b:03:06: 48:02:a3:14:92:fb:cc:89:89:a3:12:7e:54:b4:60: 89:ac:a2:db:89:ba:7f:e9:c0:0a:25:38:d1:2c:1a: 00:0c:df:80:50:16:9f:2a:8f:1b:3b:11:fd:bd:e4: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:91:C1:45:CF:F6:CB:BC:B5:9B:3D:48:3C:E5:B7:5E:7D:BE:9A:72 X509v3 Authority Key Identifier: keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:19:18:40:a7:6d:eb:f9:07:79:b9:1e:2e:b7:00:bb:7b:a1: 40:63:42:75:95:7c:69:bd:d4:f8:a5:13:5b:2c:2e:84:ec:69: 70:49:29:9d:3f:d1:02:60:96:94:f0:81:a6:26:61:f1:d4:b9: 5b:d5:29:3a:c5:fe:b8:89:22:3e:e8:05:c4:f7:02:42:5e:76: 3f:73:2d:1f:63:82:19:9a:71:9a:89:56:53:a7:fe:82:90:d9: 07:1f:8b:03:10:0b:3a:aa:b7:f7:3e:d1:73:1e:35:96:99:47: f0:f8:ed:a4:ed:e3:4a:2b:2e:ee:80:93:86:1d:74:35:55:1a: e6:d2:b4:6a:a2:28:30:da:76:15:47:72:5e:73:68:b5:ad:77: 33:86:9a:f7:4c:0c:f2:67:fe:ad:ac:5a:3e:c6:38:50:fa:22: 26:70:85:5c:b4:f4:58:a6:f0:c1:66:0e:87:a4:b7:36:5b:40: d2:51:7e:50:c9:70:75:ff:9e:31:a7:1a:62:00:3d:59:cf:e3: 26:c2:ab:9a:b9:40:68:a6:8f:f6:b6:1b:9e:18:61:15:0d:71: 5c:11:79:57:24:64:fd:0f:49:a6:b0:e9:83:4a:69:ac:9b:e2: 55:e8:f4:b6:7c:ef:c0:38:21:b1:a0:e7:d3:48:5f:60:4a:0a: 8f:c3:e4:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0TftKqBBiGEuiGcItsItPMCCvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMx RDk4MzREOTAeFw0yNTEyMjMxMzA2NDVaFw0yNTEyMjYxMzE2NDVaMDMxMTAvBgNV BAMTKEUyOTFDMTQ1Q0ZGNkNCQkNCNTlCM0Q0ODNDRTVCNzVFN0RCRTlBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT+jGp8X6hpqpZnrI/0yk2DhM k5ZnsuCauek6neo0hf0hYBnAdsPkOIOpGHvTP1WNmpR70Z1xMH6S+IDb2bVlugUr PhG8UhbQaafevwUUioVF3gc2DhHbHWaovrTDsSMcmTPGB8wg2IFBeo0V+A3FcY/3 rSN1/Tb3gDh2mLRGODAixD1td5/A6CxzMRL4c1UZDtHM1yVfJ/FsXwXCnZsTA23K 1zyxI9WLzCpCFLoTjdxLjvnKVxDw/5ipJbsTnHKDwPpsq6S9M5mZffFQ0YsDBkgC oxSS+8yJiaMSflS0YImsotuJun/pwAolONEsGgAM34BQFp8qjxs7Ef295IILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pHBRc/2y7y1mz1IPOW3Xn2+mnIwHwYDVR0j BBgwFoAUAxDGQWPf+uWo9AZUKcJrYx2YNNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDk4MTk3Yy1hNTI2LTQ1YmQtOWNlOS0xNTM4M2M1ZDk1MzYvMC8wMzEwQzY0MTYz REZGQUU1QThGNDA2NTQyOUMyNkI2MzFEOTgzNEQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMxRDk4 MzREOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZC NjMxRDk4MzREOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEZGECnbev5B3m5Hi63ALt7oUBjQnWVfGm9 1PilE1ssLoTsaXBJKZ0/0QJglpTwgaYmYfHUuVvVKTrF/riJIj7oBcT3AkJedj9z LR9jghmacZqJVlOn/oKQ2QcfiwMQCzqqt/c+0XMeNZaZR/D47aTt40orLu6Ak4Yd dDVVGubStGqiKDDadhVHcl5zaLWtdzOGmvdMDPJn/q2sWj7GOFD6IiZwhVy09Fim 8MFmDoektzZbQNJRflDJcHX/njGnGmIAPVnP4ybCq5q5QGimj/a2G54YYRUNcVwR eVckZP0PSaaw6YNKaayb4lXo9LZ878A4IbGg59NIX2BKCo/D5Kg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:11 2025 by rpki-client