This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: 69GqkKBwR/FdvEY2nV2ouTFneLtYYVuB6xP/RB689Uk= Subject key identifier: 35:7B:FE:7A:1D:0E:F1:ED:62:FC:66:49:EA:6A:1B:B2:1B:4B:E4:31 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 44D07C5C0E6338E94C3E3A2F1F4EB33F78A4B02E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0260 Signing time: Wed 24 Dec 2025 13:12:10 +0000 Manifest this update: Wed 24 Dec 2025 13:07:10 +0000 Manifest next update: Sun 28 Dec 2025 00:13:10 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: 9OH2+cjP2Wgfx+1Jc2CQOx4QyUoCRL/JSvc3EYKwNm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d0:7c:5c:0e:63:38:e9:4c:3e:3a:2f:1f:4e:b3:3f:78:a4:b0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Dec 24 13:07:10 2025 GMT Not After : Dec 28 00:13:10 2025 GMT Subject: CN=357BFE7A1D0EF1ED62FC6649EA6A1BB21B4BE431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:2d:86:69:d3:ff:f2:17:eb:40:7b:e2:94: 9a:8a:40:b3:7c:91:2a:bf:cb:4a:05:44:ef:50:f2: 0a:89:c4:fd:b8:d4:a5:05:43:2a:b2:31:05:98:3d: 61:51:37:48:b0:fd:6c:c1:9c:88:45:34:50:05:be: 95:15:eb:ef:77:b8:56:15:72:14:ca:e3:26:f3:9a: b8:c3:8c:31:b8:6b:0c:c2:3b:ac:c1:1c:62:70:0a: f9:af:64:3d:02:4d:44:a8:aa:44:2f:37:f2:3b:51: cd:2d:9b:ff:9f:83:87:85:80:54:8b:ea:9f:f4:4c: 8a:a1:c7:9d:08:50:5c:fe:8d:83:fd:b2:f2:24:bd: 51:b9:be:f8:bf:37:06:08:cf:54:b8:db:42:c3:0d: 40:b5:bc:3a:ad:ad:db:91:a5:95:49:8b:27:e3:8b: 51:00:95:8d:6a:e8:37:fe:3b:5c:2b:14:35:bf:2c: 0a:2a:fb:c4:90:28:10:4e:ab:49:b0:cf:07:d0:37: 62:fb:16:a1:f5:c1:80:45:ce:2a:3d:1c:ed:ed:52: d7:b4:70:6b:e1:dd:35:f1:f6:56:fb:e2:4a:bf:a6: 3d:80:c9:7f:7b:fe:65:5d:4c:29:ec:bd:6a:1a:4b: 79:3a:f9:04:ea:0d:ed:4f:43:14:fd:07:e2:ff:71: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:FE:7A:1D:0E:F1:ED:62:FC:66:49:EA:6A:1B:B2:1B:4B:E4:31 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:d1:d6:48:9b:95:cb:bf:c9:fd:15:0a:66:73:97:79:ce: 1b:e3:75:b6:69:21:47:6f:f0:d2:56:45:09:8a:f6:e3:bc:e7: d4:02:7a:50:6c:1e:d3:27:0a:5b:48:49:cb:c8:be:67:22:bb: 6b:0b:42:27:1e:75:ce:69:36:08:b0:e0:a7:fb:9c:82:76:df: 7a:b3:4d:4a:fb:7e:a5:31:4f:9c:84:0c:35:c6:bd:37:16:49: aa:64:30:41:a6:fd:23:25:9e:ee:4a:50:04:61:95:7d:04:ae: fb:7a:82:61:32:40:dd:03:51:c0:16:4d:33:75:60:6c:dc:5f: fe:8d:b6:05:0d:9e:ec:74:59:2a:ec:51:8c:b8:d7:99:05:e0: 74:41:ec:d8:40:26:e1:86:d8:73:e3:a1:58:82:7e:b5:70:a0: b7:19:a5:d3:4b:c3:5d:51:a7:21:ce:72:3c:f7:21:4b:26:09: 1f:76:a6:43:f2:b7:78:a5:52:56:16:23:2a:9d:64:17:78:7f: 78:c3:ff:94:31:a1:0c:79:4f:10:a6:d4:39:86:3c:dc:9b:8e: 3a:0b:6f:37:e3:92:fd:4f:32:ba:db:ca:d4:e8:c7:d6:5b:b9: 99:d9:77:a8:65:dc:9f:ef:a7:4c:cd:a0:97:7f:b4:89:56:e6: cd:f2:70:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNB8XA5jOOlMPjovH06zP3iksC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTEyMjQxMzA3MTBaFw0yNTEyMjgwMDEzMTBaMDMxMTAvBgNV BAMTKDM1N0JGRTdBMUQwRUYxRUQ2MkZDNjY0OUVBNkExQkIyMUI0QkU0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyS2GadP/8hfrQHvilJqKQLN8 kSq/y0oFRO9Q8gqJxP241KUFQyqyMQWYPWFRN0iw/WzBnIhFNFAFvpUV6+93uFYV chTK4ybzmrjDjDG4awzCO6zBHGJwCvmvZD0CTUSoqkQvN/I7Uc0tm/+fg4eFgFSL 6p/0TIqhx50IUFz+jYP9svIkvVG5vvi/NwYIz1S420LDDUC1vDqtrduRpZVJiyfj i1EAlY1q6Df+O1wrFDW/LAoq+8SQKBBOq0mwzwfQN2L7FqH1wYBFzio9HO3tUte0 cGvh3TXx9lb74kq/pj2AyX97/mVdTCnsvWoaS3k6+QTqDe1PQxT9B+L/cexzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXv+eh0O8e1i/GZJ6mobshtL5DEwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK10dZIm5XLv8n9FQpmc5d5zhvjdbZpIUdv 8NJWRQmK9uO859QCelBsHtMnCltIScvIvmciu2sLQicedc5pNgiw4Kf7nIJ233qz TUr7fqUxT5yEDDXGvTcWSapkMEGm/SMlnu5KUARhlX0Ervt6gmEyQN0DUcAWTTN1 YGzcX/6NtgUNnux0WSrsUYy415kF4HRB7NhAJuGG2HPjoViCfrVwoLcZpdNLw11R pyHOcjz3IUsmCR92pkPyt3ilUlYWIyqdZBd4f3jD/5QxoQx5TxCm1DmGPNybjjoL bzfjkv1PMrrbytTox9ZbuZnZd6hl3J/vp0zNoJd/tIlW5s3ycOo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:20 2025 by rpki-client