This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: 61f5QG85lBRrEHEmctMnEJE6fuo+roKt/0N36soBJqI= Subject key identifier: 99:3F:AC:30:05:0F:26:3C:D1:67:16:82:14:24:FC:90:1D:D4:5B:0F Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 13EEA97C4CDDA8F629577E24F4CA868369CF8DC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0128 Signing time: Sat 20 Dec 2025 17:42:40 +0000 Manifest this update: Sat 20 Dec 2025 17:37:40 +0000 Manifest next update: Tue 23 Dec 2025 23:04:40 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: WODAefLm+l/4YfEWUNWtV/HwbVHCF0B8vRLcuXuMVEo=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 23:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ee:a9:7c:4c:dd:a8:f6:29:57:7e:24:f4:ca:86:83:69:cf:8d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Dec 20 17:37:40 2025 GMT Not After : Dec 23 23:04:40 2025 GMT Subject: CN=993FAC30050F263CD16716821424FC901DD45B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:00:e0:1c:76:7f:6d:b6:55:ba:c5:ed:6a: 29:20:b2:33:52:e6:06:0a:8d:35:1f:3f:45:ba:f1: d6:50:b3:f5:1c:f0:f6:37:50:42:d2:7d:2b:27:0f: 7e:12:28:c2:3e:d0:31:fb:ec:d3:02:d2:01:af:42: 7c:a3:75:d2:59:2d:c5:11:90:47:9f:6d:7a:38:1d: b3:3e:a4:3d:6d:34:e6:e4:3a:da:cb:e4:85:47:21: c6:96:b2:3b:4c:06:27:b5:87:b3:5e:ff:ad:be:37: 98:8a:b3:93:22:fb:33:25:95:2c:89:5e:4a:d9:0f: ee:3a:04:97:19:57:90:de:f3:b5:97:a3:a3:6b:03: e1:2e:15:98:0b:96:cb:2e:b8:e5:1b:17:e8:c3:c1: 39:09:41:5d:4e:48:d6:da:b8:6c:29:60:2a:cc:b1: 6e:ff:11:96:ec:2c:28:1d:6a:a3:6a:01:c1:df:27: 29:e4:50:3f:87:03:30:91:3b:71:78:c3:9d:3b:12: fe:32:f7:82:f5:b7:8c:69:7e:fb:d4:b2:5f:a0:9f: 26:44:04:12:ed:dc:4c:69:3c:c7:a2:d7:be:b5:ab: e4:44:af:a7:e4:bb:34:4a:27:b0:7f:b7:30:ab:50: 53:42:8e:cc:97:e3:c9:69:1d:5c:5a:2a:83:52:9a: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:AC:30:05:0F:26:3C:D1:67:16:82:14:24:FC:90:1D:D4:5B:0F X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c4:1b:ee:1e:69:e9:06:a9:ba:53:fe:1e:25:78:51:c7:75: e4:41:b5:cb:b2:56:e3:3d:f6:0c:fc:cf:6c:ca:40:d5:13:90: 54:7b:7e:d8:fc:85:ae:28:26:0d:d6:2f:a8:94:2c:ea:32:2a: e2:26:3d:03:89:c7:07:89:11:a7:7f:0d:f3:0d:c6:f1:eb:1a: 6e:85:83:10:9a:e0:63:36:4b:60:d4:32:b9:eb:a2:1b:9a:63: a5:b0:2b:a6:1f:18:cd:15:25:db:3e:15:c0:79:6e:0d:a0:60: 49:d8:f5:d9:98:72:aa:fe:1f:2a:6f:3b:3d:be:86:81:2a:57: e3:fb:44:ee:9a:43:a5:bb:71:62:24:c1:66:ef:84:b2:01:ea: ca:2d:2b:a7:2f:88:81:19:f5:00:f2:a2:ba:14:2f:e4:5a:3e: 6e:8f:05:57:9f:25:2f:49:6a:9a:e0:86:bc:9b:1c:76:a7:c5: 47:ae:32:6e:3e:fc:cb:57:7c:b6:27:f6:7b:de:e6:1a:86:81: da:4a:a3:7c:24:39:e7:f6:eb:6a:5c:43:91:c4:b6:5d:58:ca: 92:a5:4c:2b:c7:58:f0:9f:08:8c:ec:b7:ca:4f:48:e6:17:97: 6d:39:a9:4d:4e:7d:97:63:19:f4:f2:cc:34:c4:ba:77:c8:fb: fa:21:0c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+6pfEzdqPYpV34k9MqGg2nPjcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTEyMjAxNzM3NDBaFw0yNTEyMjMyMzA0NDBaMDMxMTAvBgNV BAMTKDk5M0ZBQzMwMDUwRjI2M0NEMTY3MTY4MjE0MjRGQzkwMURENDVCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZywDgHHZ/bbZVusXtaikgsjNS 5gYKjTUfP0W68dZQs/Uc8PY3UELSfSsnD34SKMI+0DH77NMC0gGvQnyjddJZLcUR kEefbXo4HbM+pD1tNObkOtrL5IVHIcaWsjtMBie1h7Ne/62+N5iKs5Mi+zMllSyJ XkrZD+46BJcZV5De87WXo6NrA+EuFZgLlssuuOUbF+jDwTkJQV1OSNbauGwpYCrM sW7/EZbsLCgdaqNqAcHfJynkUD+HAzCRO3F4w507Ev4y94L1t4xpfvvUsl+gnyZE BBLt3ExpPMei1761q+REr6fkuzRKJ7B/tzCrUFNCjsyX48lpHVxaKoNSmsjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmT+sMAUPJjzRZxaCFCT8kB3UWw8wHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXEG+4eaekGqbpT/h4leFHHdeRBtcuyVuM9 9gz8z2zKQNUTkFR7ftj8ha4oJg3WL6iULOoyKuImPQOJxweJEad/DfMNxvHrGm6F gxCa4GM2S2DUMrnrohuaY6WwK6YfGM0VJds+FcB5bg2gYEnY9dmYcqr+HypvOz2+ hoEqV+P7RO6aQ6W7cWIkwWbvhLIB6sotK6cviIEZ9QDyoroUL+RaPm6PBVefJS9J aprghrybHHanxUeuMm4+/MtXfLYn9nve5hqGgdpKo3wkOef262pcQ5HEtl1YypKl TCvHWPCfCIzst8pPSOYXl205qU1OfZdjGfTyzDTEunfI+/ohDPs= -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:01 2025 by rpki-client