This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: JsU8uMPY1mryUxn+aXK3CO39cSKzZp+JS3hwtrCvv9o= Subject key identifier: 92:1B:5C:35:14:D9:76:BB:83:35:22:1E:8D:90:97:B3:01:35:6B:BA Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 3F129A04F9CCBEFD2111ACFA48BC1851D83F959E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02BF Signing time: Fri 26 Dec 2025 22:12:29 +0000 Manifest this update: Fri 26 Dec 2025 22:07:29 +0000 Manifest next update: Mon 29 Dec 2025 23:37:29 +0000 Files and hashes: 1: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: bWT/W7ejkeNVaD+u5Sw6E2/OVg59zXngVaB7A/+zvKc=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 5: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:12:9a:04:f9:cc:be:fd:21:11:ac:fa:48:bc:18:51:d8:3f:95:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Dec 26 22:07:29 2025 GMT Not After : Dec 29 23:37:29 2025 GMT Subject: CN=921B5C3514D976BB8335221E8D9097B301356BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:dc:af:dc:c0:0a:d2:43:6b:01:4e:38:15: 54:1d:63:44:a6:4b:06:2a:57:b3:a9:87:52:1d:65: 79:05:5f:9a:9e:95:a0:b5:ba:00:0a:2f:2a:1f:d7: 85:c9:9a:dd:8e:76:3d:3b:c2:6c:77:ef:50:0c:05: ad:f1:1b:78:be:de:00:67:9b:fa:bc:8a:ae:6f:07: 0f:c6:ed:97:38:7e:9e:30:74:c2:2e:56:3f:85:f8: 34:81:77:8e:1e:d5:f2:b9:89:fb:92:7b:27:e5:26: 60:e2:43:1b:27:7b:3e:87:4c:ee:8e:87:df:a8:70: 16:52:2b:4e:b8:4a:57:75:8a:f7:c0:8a:a3:4e:38: 4f:d9:36:5e:8a:ab:f9:78:cf:94:f9:4d:5c:fe:53: f5:97:f2:51:b6:31:d4:df:84:99:92:8a:6d:30:c0: db:cc:5c:97:27:ff:b9:64:4b:b5:f1:cf:d7:d8:9a: a9:41:62:93:6c:ec:6c:47:c8:57:b9:f4:bd:ec:88: ca:49:00:70:20:08:fa:ad:e4:3c:a0:63:8f:cf:f6: e4:d7:ae:69:7f:e4:c0:ed:c7:e1:03:51:21:89:7e: 6a:25:da:d1:51:94:ce:5f:6d:c4:a9:29:90:40:e6: 72:7e:b8:10:68:4b:25:2f:18:09:15:cb:f9:a7:77: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:5C:35:14:D9:76:BB:83:35:22:1E:8D:90:97:B3:01:35:6B:BA X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:05:30:44:2f:95:87:09:ad:c8:fb:b2:7f:8d:a7:ed:60:55: 82:e4:82:92:65:88:f8:ac:91:2d:b7:b2:d1:76:74:41:d2:24: d0:62:f7:9c:f7:28:e6:50:fe:33:4d:d0:2e:0c:7b:e8:fa:43: 8e:0f:75:56:3a:b9:e3:a7:dc:51:79:5b:56:4e:52:ab:38:56: d7:9a:35:69:a9:e1:0a:6a:c7:12:18:81:77:08:1a:5b:90:e0: 4b:07:57:2b:52:74:b9:ec:04:89:61:53:20:8d:16:23:cb:74: 34:84:a1:50:b0:2a:e1:50:51:6d:e5:9b:17:94:3a:f1:75:a2: fd:d6:ab:b1:8c:0f:fc:0b:3a:b6:bb:32:c3:87:a7:d9:c9:62: f1:ff:7a:aa:ee:1d:f1:6c:01:b8:73:b2:c6:69:80:8d:cd:f2: 5f:9a:58:46:ec:8b:6e:db:19:56:5e:6d:c6:04:76:bb:c0:95: 1b:37:86:ee:d6:4e:5a:ce:87:25:97:bf:01:c0:28:f7:26:db: 8c:c7:16:74:b5:0a:d4:4e:b3:30:14:3b:12:40:ae:5b:4e:e2: 9d:7e:6c:78:84:dd:1d:57:08:9e:94:a8:49:48:4d:76:ec:59: 7c:75:81:99:f0:d0:22:8b:2c:98:40:b8:a6:80:43:2a:cd:f1: 23:31:59:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxKaBPnMvv0hEaz6SLwYUdg/lZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTEyMjYyMjA3MjlaFw0yNTEyMjkyMzM3MjlaMDMxMTAvBgNV BAMTKDkyMUI1QzM1MTREOTc2QkI4MzM1MjIxRThEOTA5N0IzMDEzNTZCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLw9yv3MAK0kNrAU44FVQdY0Sm SwYqV7Oph1IdZXkFX5qelaC1ugAKLyof14XJmt2Odj07wmx371AMBa3xG3i+3gBn m/q8iq5vBw/G7Zc4fp4wdMIuVj+F+DSBd44e1fK5ifuSeyflJmDiQxsnez6HTO6O h9+ocBZSK064Sld1ivfAiqNOOE/ZNl6Kq/l4z5T5TVz+U/WX8lG2MdTfhJmSim0w wNvMXJcn/7lkS7Xxz9fYmqlBYpNs7GxHyFe59L3siMpJAHAgCPqt5DygY4/P9uTX rml/5MDtx+EDUSGJfmol2tFRlM5fbcSpKZBA5nJ+uBBoSyUvGAkVy/mnd2q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhtcNRTZdruDNSIejZCXswE1a7owHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMFMEQvlYcJrcj7sn+Np+1gVYLkgpJliPis kS23stF2dEHSJNBi95z3KOZQ/jNN0C4Me+j6Q44PdVY6ueOn3FF5W1ZOUqs4Vtea NWmp4QpqxxIYgXcIGluQ4EsHVytSdLnsBIlhUyCNFiPLdDSEoVCwKuFQUW3lmxeU OvF1ov3Wq7GMD/wLOra7MsOHp9nJYvH/eqruHfFsAbhzssZpgI3N8l+aWEbsi27b GVZebcYEdrvAlRs3hu7WTlrOhyWXvwHAKPcm24zHFnS1CtROszAUOxJArltO4p1+ bHiE3R1XCJ6UqElITXbsWXx1gZnw0CKLLJhAuKaAQyrN8SMxWYY= -----END CERTIFICATE-----Generated at Sat Dec 27 15:46:17 2025 by rpki-client