This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: yvyW1jJbLnowxBtVYLJVuB3AAYmqcM8N1boP3xvEzKE= Subject key identifier: C8:1C:29:AA:96:CF:94:69:CF:F2:78:1D:6E:D6:E5:E2:92:39:CB:83 Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 3BF16176F1CB1A4186A3C1468C0651D9AD93C994 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 03B0 Signing time: Sat 20 Dec 2025 14:01:41 +0000 Manifest this update: Sat 20 Dec 2025 13:56:41 +0000 Manifest next update: Tue 23 Dec 2025 19:49:41 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: PCZwKWQ8DHRQTmn6KU0N68FwblX7KlN8R07h+jmvxIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 19:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f1:61:76:f1:cb:1a:41:86:a3:c1:46:8c:06:51:d9:ad:93:c9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Dec 20 13:56:41 2025 GMT Not After : Dec 23 19:49:41 2025 GMT Subject: CN=C81C29AA96CF9469CFF2781D6ED6E5E29239CB83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:aa:4b:0b:7e:ad:5d:10:cd:1c:a5:ed:7f: cf:6e:73:59:7b:88:15:55:8b:72:e2:ec:0f:bf:c9: fe:97:2d:f6:e9:37:ef:9d:02:15:a4:cf:c3:38:e3: e2:e2:2d:3c:2d:68:ed:51:09:aa:32:56:48:1e:b5: b3:4c:d6:25:93:18:c6:7f:cf:72:cc:36:09:2f:28: d7:b8:d1:d0:07:c3:2d:f4:11:5e:9b:fe:3b:c0:ab: cc:8e:42:51:b7:b5:a6:11:0c:a6:e2:03:cb:48:03: cd:47:8f:64:09:14:8b:52:69:75:87:f6:f1:84:18: 2b:44:88:1a:2d:8b:d9:8d:b2:55:40:1a:41:68:2c: aa:33:1f:17:55:5d:e0:7c:cb:3e:95:f5:06:f2:dd: 3e:58:e8:3d:ea:21:2f:3a:a3:d0:0d:a0:eb:ab:3b: 89:80:e1:36:be:c1:9a:1a:c4:cc:6b:4f:88:53:1a: 3a:e0:e9:0e:ea:69:5f:7b:82:53:11:ee:b2:82:cf: fa:b2:2c:9a:70:c3:75:40:70:b9:3a:f5:7a:2e:50: 66:43:4e:0d:3d:2c:28:39:22:79:fb:e6:9f:43:c5: 53:a1:78:00:7f:b1:da:06:e9:03:78:b4:b1:ae:d9: 1b:20:ca:56:1a:22:f5:b1:5e:f3:38:3e:07:a2:9e: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1C:29:AA:96:CF:94:69:CF:F2:78:1D:6E:D6:E5:E2:92:39:CB:83 X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9f:bb:30:f5:35:b7:8d:76:41:43:03:7e:21:3c:ad:a4:26: 95:b8:dd:e5:0c:1b:4b:75:a1:71:58:62:e3:a7:d6:4b:84:cc: a2:fe:31:b5:d3:16:62:60:e4:e9:15:b5:4f:b8:4b:63:a4:72: fb:14:53:d1:70:2e:1e:6b:2e:db:b5:b0:7e:6b:5b:0d:7b:ed: 40:76:e2:12:9e:ce:24:b1:4a:83:c4:26:03:c8:b2:2c:02:3b: 8c:52:b2:61:0b:61:56:5a:39:23:e8:dc:43:e5:41:f7:9a:11: 4e:b4:32:ec:c3:19:ca:db:cb:66:98:71:ce:2e:82:5a:80:e3: 32:c8:6a:d7:bd:e1:19:bd:85:14:8f:9f:49:9e:34:72:57:b3: b5:ec:5b:e8:3b:83:9c:29:56:f0:7d:6b:f8:c6:60:95:fc:f5: 9b:0f:15:ff:23:68:a5:ea:2d:d7:64:ca:e9:af:cd:c9:8f:2d: 93:43:14:81:a1:d2:12:22:ff:4c:64:66:82:9d:9c:7f:bb:8c: e3:5a:15:e3:68:4b:2f:98:dc:01:be:d4:94:dd:f8:02:cc:16: ef:c6:8e:f8:f5:31:c1:f1:25:0b:17:5f:60:b8:ac:ff:f5:5e: 55:50:8f:95:1c:e1:ba:f5:0d:94:30:40:da:07:5d:d9:9f:8f: 2e:fb:2b:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/FhdvHLGkGGo8FGjAZR2a2TyZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTEyMjAxMzU2NDFaFw0yNTEyMjMxOTQ5NDFaMDMxMTAvBgNV BAMTKEM4MUMyOUFBOTZDRjk0NjlDRkYyNzgxRDZFRDZFNUUyOTIzOUNCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9qpLC36tXRDNHKXtf89uc1l7 iBVVi3Li7A+/yf6XLfbpN++dAhWkz8M44+LiLTwtaO1RCaoyVkgetbNM1iWTGMZ/ z3LMNgkvKNe40dAHwy30EV6b/jvAq8yOQlG3taYRDKbiA8tIA81Hj2QJFItSaXWH 9vGEGCtEiBoti9mNslVAGkFoLKozHxdVXeB8yz6V9Qby3T5Y6D3qIS86o9ANoOur O4mA4Ta+wZoaxMxrT4hTGjrg6Q7qaV97glMR7rKCz/qyLJpww3VAcLk69XouUGZD Tg09LCg5Inn75p9DxVOheAB/sdoG6QN4tLGu2RsgylYaIvWxXvM4PgeinsdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBwpqpbPlGnP8ngdbtbl4pI5y4MwHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2fuzD1NbeNdkFDA34hPK2kJpW43eUMG0t1 oXFYYuOn1kuEzKL+MbXTFmJg5OkVtU+4S2OkcvsUU9FwLh5rLtu1sH5rWw177UB2 4hKeziSxSoPEJgPIsiwCO4xSsmELYVZaOSPo3EPlQfeaEU60MuzDGcrby2aYcc4u glqA4zLIate94Rm9hRSPn0meNHJXs7XsW+g7g5wpVvB9a/jGYJX89ZsPFf8jaKXq LddkyumvzcmPLZNDFIGh0hIi/0xkZoKdnH+7jONaFeNoSy+Y3AG+1JTd+ALMFu/G jvj1McHxJQsXX2C4rP/1XlVQj5Uc4br1DZQwQNoHXdmfjy77K58= -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:11 2025 by rpki-client