This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: cTvEDjRp1rv3XQ0PsQlYmONE0Re8pmg3+3j8EkXkMgI= Subject key identifier: 95:EC:B0:3F:1F:22:9E:D3:1D:00:CF:E0:8B:2B:7B:7C:68:20:E1:C3 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 71179C10FDB278370E8BCA0E2A193968A7D6B7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02BE Signing time: Wed 24 Dec 2025 11:02:39 +0000 Manifest this update: Wed 24 Dec 2025 10:57:39 +0000 Manifest next update: Sat 27 Dec 2025 22:09:39 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) 2: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) 5: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: DtSZCZ/dWMF1Zet0Du1ErU2vheoxgiSmYaVIZlvzIFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:17:9c:10:fd:b2:78:37:0e:8b:ca:0e:2a:19:39:68:a7:d6:b7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Dec 24 10:57:39 2025 GMT Not After : Dec 27 22:09:39 2025 GMT Subject: CN=95ECB03F1F229ED31D00CFE08B2B7B7C6820E1C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:1f:cb:9a:38:df:63:b3:6b:2c:a2:7f:e6: 3c:36:42:5d:61:28:b6:af:82:6a:01:05:5c:f8:4e: 41:1d:ca:89:d2:b8:14:2c:a4:a5:04:0f:9f:39:ed: 86:fd:2a:f4:60:c5:82:57:b1:a6:50:a2:28:00:d1: 17:9a:44:92:cd:c1:2a:48:68:7a:ca:dd:dd:f7:2a: e1:46:b5:e3:1b:08:03:38:e2:da:cf:3f:0c:44:d5: 4d:1e:d7:6e:fe:0c:1c:8c:fd:5f:bd:6a:a8:22:7d: 0d:17:01:5f:cf:34:6e:a9:ca:4b:db:74:b3:5c:cc: f0:0b:9e:c0:73:14:22:4d:07:3e:51:b8:fe:fc:99: 76:6b:18:7e:dc:04:74:e4:f5:98:5d:d5:ad:8a:7d: 76:90:64:87:cb:63:95:cb:28:6b:45:5e:86:a0:9d: d4:4d:8f:0c:d8:8f:b1:22:6b:e3:4c:e8:59:bd:75: dc:2a:7a:b4:81:09:4c:8a:1a:10:d6:16:16:20:d8: 36:62:e4:08:e2:43:e2:ed:f4:aa:4e:4b:38:e8:83: 95:cc:b5:6d:9d:b1:c9:44:a3:fe:f3:67:0b:d0:af: 86:66:cf:95:1f:e0:75:10:f5:46:59:c9:72:40:41: 8b:7c:28:31:4f:c7:e1:a7:ff:5d:7e:dc:0a:62:37: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:B0:3F:1F:22:9E:D3:1D:00:CF:E0:8B:2B:7B:7C:68:20:E1:C3 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d5:d7:84:31:6e:de:0c:8b:ac:20:75:c5:3d:45:da:14:19: ae:cb:1b:9e:19:73:8e:3e:21:ab:65:2c:e2:cf:55:f8:fd:e2: 05:5d:ab:09:f1:8d:06:d1:aa:bd:d3:ac:3a:1f:33:82:70:73: 8b:06:da:57:41:18:11:c5:94:9e:01:a8:6c:07:c1:0a:76:52: 98:df:54:dd:e1:04:61:17:77:87:61:24:1a:cc:23:da:ba:ee: d2:83:f5:7d:9f:4c:4d:a7:de:b0:52:f5:20:5e:e8:35:bc:90: 15:26:db:ac:91:ef:c9:61:30:58:b8:31:3e:4e:fa:6f:2a:e6: 85:1c:59:7c:5d:57:8f:cc:a5:40:dc:37:97:5d:01:ae:25:fc: 2b:61:3a:d4:bc:f5:42:65:3e:e2:14:4a:c5:0a:50:d3:97:11: b8:b3:a1:ea:57:ba:a2:fe:fc:f0:88:22:30:00:2c:f9:b0:5f: 01:4e:ce:73:97:72:77:81:22:96:8c:48:d5:85:40:23:01:24: 09:71:3f:f1:57:a0:4e:93:99:39:90:fb:3d:08:2e:14:62:70: 88:ea:75:0f:70:92:91:a5:ae:dc:4c:d9:b5:69:8b:18:8c:13: 40:8f:41:6a:dd:c7:d0:75:dc:10:5e:8d:71:18:76:3e:72:1e: 14:71:1d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRecEP2yeDcOi8oOKhk5aKfWt78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTEyMjQxMDU3MzlaFw0yNTEyMjcyMjA5MzlaMDMxMTAvBgNV BAMTKDk1RUNCMDNGMUYyMjlFRDMxRDAwQ0ZFMDhCMkI3QjdDNjgyMEUxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvtR/LmjjfY7NrLKJ/5jw2Ql1h KLavgmoBBVz4TkEdyonSuBQspKUED5857Yb9KvRgxYJXsaZQoigA0ReaRJLNwSpI aHrK3d33KuFGteMbCAM44trPPwxE1U0e127+DByM/V+9aqgifQ0XAV/PNG6pykvb dLNczPALnsBzFCJNBz5RuP78mXZrGH7cBHTk9Zhd1a2KfXaQZIfLY5XLKGtFXoag ndRNjwzYj7Eia+NM6Fm9ddwqerSBCUyKGhDWFhYg2DZi5AjiQ+Lt9KpOSzjog5XM tW2dsclEo/7zZwvQr4Zmz5Uf4HUQ9UZZyXJAQYt8KDFPx+Gn/11+3ApiNynbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleywPx8intMdAM/giyt7fGgg4cMwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbV14Qxbt4Mi6wgdcU9RdoUGa7LG54Zc44+ IatlLOLPVfj94gVdqwnxjQbRqr3TrDofM4Jwc4sG2ldBGBHFlJ4BqGwHwQp2Upjf VN3hBGEXd4dhJBrMI9q67tKD9X2fTE2n3rBS9SBe6DW8kBUm26yR78lhMFi4MT5O +m8q5oUcWXxdV4/MpUDcN5ddAa4l/CthOtS89UJlPuIUSsUKUNOXEbizoepXuqL+ /PCIIjAALPmwXwFOznOXcneBIpaMSNWFQCMBJAlxP/FXoE6TmTmQ+z0ILhRicIjq dQ9wkpGlrtxM2bVpixiME0CPQWrdx9B13BBejXEYdj5yHhRxHbU= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:17 2025 by rpki-client