This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: R4SegsMnvW+O9Mpkmv2/TbVQiSrwfCpfTbD+m1GfFSQ= Subject key identifier: 04:1E:63:F6:03:E5:18:36:78:0E:76:5E:48:7F:34:5A:95:17:E6:02 Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 2EC2499AB9F310408DCB18315DF46B981421EF8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 03AF Signing time: Thu 18 Dec 2025 06:41:29 +0000 Manifest this update: Thu 18 Dec 2025 06:36:29 +0000 Manifest next update: Sun 21 Dec 2025 13:58:29 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: qIB4g2rUZ4euKftxhBZK5IvwuR6+6kWiCmMqE9EMuec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c2:49:9a:b9:f3:10:40:8d:cb:18:31:5d:f4:6b:98:14:21:ef:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Dec 18 06:36:29 2025 GMT Not After : Dec 21 13:58:29 2025 GMT Subject: CN=041E63F603E51836780E765E487F345A9517E602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:30:36:40:06:88:cf:96:f0:d9:75:87:8d: 14:61:de:56:11:cd:ea:ee:c6:14:c4:50:56:fc:d0: d1:f2:80:59:0f:b4:7a:de:48:41:ef:66:1c:93:00: 5e:b8:0d:9e:89:1a:29:15:38:b9:d6:6b:09:57:8a: 46:29:92:9f:ec:5f:94:cf:54:ae:06:2b:53:d8:bd: 47:78:67:6e:3e:65:5d:59:53:c6:61:ac:7d:ac:05: 08:f7:ca:fa:21:06:19:a4:cd:ba:f8:6c:80:3a:d8: 55:b7:79:ce:00:fb:50:b5:20:a9:21:35:bd:b7:7e: c9:f1:db:3f:c5:08:0c:be:88:a3:f7:55:e4:14:f6: 23:0a:0a:be:de:b2:cf:05:e3:80:4b:f0:22:fd:4c: 12:ce:64:77:a8:83:1d:08:4a:9d:9a:f8:1c:1b:f3: de:8b:6d:da:59:f3:43:44:bb:14:32:28:38:2f:5d: 44:e8:69:4c:a9:9e:31:25:af:8a:c3:87:78:23:a2: 1f:72:3c:e9:84:5f:ea:86:57:3b:e5:3d:9b:39:a9: 61:7e:a7:d1:62:dc:8c:fc:b2:e2:21:3d:e5:84:4f: e1:e7:55:ce:58:6e:61:e4:4c:47:55:7d:a5:47:86: c2:d4:f0:08:b0:bc:af:da:fe:ee:86:e8:66:e2:ec: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1E:63:F6:03:E5:18:36:78:0E:76:5E:48:7F:34:5A:95:17:E6:02 X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f2:28:d1:9b:66:e2:36:58:91:7c:ab:d0:cd:26:60:3b:eb: 49:da:92:08:82:53:77:73:29:e7:0a:0a:e0:83:23:7e:71:77: e3:a2:59:1b:13:df:d2:49:0d:f1:56:60:b6:95:48:a3:35:50: 5a:fb:2b:ac:85:51:12:f0:7f:cd:56:ee:5d:90:84:d8:92:e8: b4:bd:5a:04:06:5b:21:0a:e4:d6:46:67:94:c5:63:5f:fc:eb: 3d:8b:68:ed:0a:99:a5:13:74:d9:6a:a0:8d:85:fb:a2:6d:71: 44:0b:8f:9e:55:4c:1b:ff:fd:12:2f:39:b7:98:5a:d9:03:c1: fe:70:c0:87:86:16:96:9b:82:9c:73:34:c0:4e:6d:d4:9f:c5: 17:9a:3f:be:35:d3:4b:e7:91:ab:bd:57:ec:00:b3:db:01:0e: f6:4e:47:9e:37:e6:6d:89:89:75:da:a3:02:f7:98:79:77:b2: 48:f3:52:6b:5d:37:25:a0:11:34:7d:d8:25:ee:ae:34:63:35: 14:02:d2:dd:a1:5e:a3:a3:6c:b9:f9:75:a1:52:f8:18:71:4e: f2:ce:10:10:a6:87:ab:c9:35:26:dd:14:f1:b1:f6:cf:8b:55: 67:d8:22:5b:f5:da:b2:02:63:fe:72:a1:2a:f3:f5:82:31:7e: b2:22:3a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsJJmrnzEECNyxgxXfRrmBQh740wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTEyMTgwNjM2MjlaFw0yNTEyMjExMzU4MjlaMDMxMTAvBgNV BAMTKDA0MUU2M0Y2MDNFNTE4MzY3ODBFNzY1RTQ4N0YzNDVBOTUxN0U2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNjA2QAaIz5bw2XWHjRRh3lYR zeruxhTEUFb80NHygFkPtHreSEHvZhyTAF64DZ6JGikVOLnWawlXikYpkp/sX5TP VK4GK1PYvUd4Z24+ZV1ZU8ZhrH2sBQj3yvohBhmkzbr4bIA62FW3ec4A+1C1IKkh Nb23fsnx2z/FCAy+iKP3VeQU9iMKCr7ess8F44BL8CL9TBLOZHeogx0ISp2a+Bwb 896LbdpZ80NEuxQyKDgvXUToaUypnjElr4rDh3gjoh9yPOmEX+qGVzvlPZs5qWF+ p9Fi3Iz8suIhPeWET+HnVc5YbmHkTEdVfaVHhsLU8AiwvK/a/u6G6Gbi7NLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBB5j9gPlGDZ4DnZeSH80WpUX5gIwHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvyKNGbZuI2WJF8q9DNJmA760nakgiCU3dz KecKCuCDI35xd+OiWRsT39JJDfFWYLaVSKM1UFr7K6yFURLwf81W7l2QhNiS6LS9 WgQGWyEK5NZGZ5TFY1/86z2LaO0KmaUTdNlqoI2F+6JtcUQLj55VTBv//RIvObeY WtkDwf5wwIeGFpabgpxzNMBObdSfxReaP74100vnkau9V+wAs9sBDvZOR5435m2J iXXaowL3mHl3skjzUmtdNyWgETR92CXurjRjNRQC0t2hXqOjbLn5daFS+BhxTvLO EBCmh6vJNSbdFPGx9s+LVWfYIlv12rICY/5yoSrz9YIxfrIiOok= -----END CERTIFICATE-----Generated at Sat Dec 20 18:16:34 2025 by rpki-client