This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: 4aaWiwkYzy/+b4UMEbx2lFC4s6XW9tfRAO6j0YErLjw= Subject key identifier: C7:91:E7:CF:86:27:F1:34:F2:A5:5A:2C:03:F8:EA:59:26:2D:28:B4 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 1F5E380E4B534C612AFE9DB16CA594FEDC76F3C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 041B Signing time: Tue 23 Dec 2025 23:42:11 +0000 Manifest this update: Tue 23 Dec 2025 23:37:11 +0000 Manifest next update: Sat 27 Dec 2025 11:14:11 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=) 2: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: INVD5weIktddCJFKsiiQfM7r5SGYqqyt3+fwH5NHI5A=) 3: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=) 4: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=) 5: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5e:38:0e:4b:53:4c:61:2a:fe:9d:b1:6c:a5:94:fe:dc:76:f3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Dec 23 23:37:11 2025 GMT Not After : Dec 27 11:14:11 2025 GMT Subject: CN=C791E7CF8627F134F2A55A2C03F8EA59262D28B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:ce:ff:68:60:bc:da:ec:01:86:67:30:51: 3f:78:e9:5c:5b:e1:69:b8:87:d5:13:4d:97:79:3b: a2:0f:da:0e:2a:d4:18:3b:2e:55:9d:cf:e0:ac:56: 86:db:e5:d2:0e:28:c3:6e:18:96:d1:3f:ae:1f:e5: e7:0e:72:df:7d:5b:54:da:7b:3c:b2:36:aa:48:60: 56:01:91:70:eb:9f:79:50:0d:7f:52:fe:10:0d:29: 19:d3:39:8b:53:44:3f:41:29:d1:45:22:c7:b0:42: e6:45:d4:25:a4:7a:f0:7b:c0:42:f9:d9:b7:6b:31: 19:e5:a2:37:67:f0:27:6a:c5:6c:92:b3:70:9b:38: 90:3f:16:84:e0:fd:d1:59:b7:63:96:d7:30:21:54: 82:63:f0:b3:3c:60:8f:62:b0:95:df:1e:bf:5d:89: 46:87:3f:47:95:e9:a6:91:8a:05:a9:5d:ca:e0:04: c4:46:0e:76:eb:7e:82:73:3e:33:55:f3:10:95:db: eb:fe:32:d4:7d:c6:39:fe:b3:63:2c:53:c9:d3:e2: 36:c3:98:cd:73:5e:1e:06:08:0c:77:f9:be:41:0e: 32:07:4b:35:1d:24:a0:4a:21:bf:cc:ad:c3:0b:fe: 4e:ed:6b:cf:bd:9f:a8:4d:75:3e:2c:50:8c:aa:8c: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:91:E7:CF:86:27:F1:34:F2:A5:5A:2C:03:F8:EA:59:26:2D:28:B4 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a5:1f:e0:02:30:ef:6f:e0:e7:66:cc:7a:dd:11:0f:93:7d: 4e:72:66:c4:f4:dc:b0:5a:00:70:a1:78:b8:28:5b:cc:cb:33: 19:88:95:32:a0:38:e5:17:77:0d:68:c9:50:44:de:58:bc:f0: 1c:fa:0c:cb:a9:dd:17:83:4b:4b:0b:35:6c:e5:d1:c2:9c:b6: 4d:2e:4d:92:4b:d1:48:f2:8e:4d:d8:b3:04:85:f1:a0:f4:3c: 04:fd:2b:83:0b:0c:f1:ae:29:6f:7a:c5:54:ae:a7:f2:4f:1d: fd:84:97:c3:be:fc:f5:ef:a6:7f:64:df:e9:c8:ae:e8:4a:67: 4d:0f:44:8d:c3:9a:80:38:0c:61:7f:48:e7:b9:eb:77:b0:b2: 06:40:2e:3c:48:6b:a9:42:f3:5b:36:8c:63:96:59:13:c5:59: 71:bd:a6:0f:19:1e:21:47:98:91:7c:8e:70:2c:20:a3:be:5b: db:41:a9:89:95:89:71:07:d5:68:d8:a5:c1:c8:b3:ee:d4:e4: 4d:45:62:0f:34:db:2b:50:94:3e:99:3a:6b:60:9a:ee:2d:9c: b7:12:5a:bd:69:81:4f:b3:7d:3c:58:f5:0a:2a:fa:05:3a:0d: 31:01:36:ba:04:f3:5b:6a:6e:6f:e7:06:ab:ed:25:dc:4c:ee: d2:f8:9b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH144DktTTGEq/p2xbKWU/tx288QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTEyMjMyMzM3MTFaFw0yNTEyMjcxMTE0MTFaMDMxMTAvBgNV BAMTKEM3OTFFN0NGODYyN0YxMzRGMkE1NUEyQzAzRjhFQTU5MjYyRDI4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmc7/aGC82uwBhmcwUT946Vxb 4Wm4h9UTTZd5O6IP2g4q1Bg7LlWdz+CsVobb5dIOKMNuGJbRP64f5ecOct99W1Ta ezyyNqpIYFYBkXDrn3lQDX9S/hANKRnTOYtTRD9BKdFFIsewQuZF1CWkevB7wEL5 2bdrMRnlojdn8CdqxWySs3CbOJA/FoTg/dFZt2OW1zAhVIJj8LM8YI9isJXfHr9d iUaHP0eV6aaRigWpXcrgBMRGDnbrfoJzPjNV8xCV2+v+MtR9xjn+s2MsU8nT4jbD mM1zXh4GCAx3+b5BDjIHSzUdJKBKIb/MrcML/k7ta8+9n6hNdT4sUIyqjLVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5Hnz4Yn8TTypVosA/jqWSYtKLQwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADalH+ACMO9v4OdmzHrdEQ+TfU5yZsT03LBa AHCheLgoW8zLMxmIlTKgOOUXdw1oyVBE3li88Bz6DMup3ReDS0sLNWzl0cKctk0u TZJL0Ujyjk3YswSF8aD0PAT9K4MLDPGuKW96xVSup/JPHf2El8O+/PXvpn9k3+nI ruhKZ00PRI3DmoA4DGF/SOe563ewsgZALjxIa6lC81s2jGOWWRPFWXG9pg8ZHiFH mJF8jnAsIKO+W9tBqYmViXEH1WjYpcHIs+7U5E1FYg802ytQlD6ZOmtgmu4tnLcS Wr1pgU+zfTxY9Qoq+gU6DTEBNroE81tqbm/nBqvtJdxM7tL4m2g= -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:56 2025 by rpki-client