This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: +a1TW0yyM+gbGX4ndc77X56/NryaOThd5RlGm8QNdtM= Subject key identifier: 53:0C:8D:75:5E:53:25:A5:AD:2A:AF:97:3D:5A:B9:3E:10:CD:96:70 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 04D8C94C8C090D745426979DBF435331195BFA39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 0542 Signing time: Mon 22 Dec 2025 18:11:35 +0000 Manifest this update: Mon 22 Dec 2025 18:06:35 +0000 Manifest next update: Fri 26 Dec 2025 03:00:35 +0000 Files and hashes: 1: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=) 3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=) 5: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: ItFvLkEuuPcZLTUANX29CXOnLqIxBT+ueKPA0EjJuGU=) 6: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=) 7: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d8:c9:4c:8c:09:0d:74:54:26:97:9d:bf:43:53:31:19:5b:fa:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Dec 22 18:06:35 2025 GMT Not After : Dec 26 03:00:35 2025 GMT Subject: CN=530C8D755E5325A5AD2AAF973D5AB93E10CD9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:f9:47:ca:2d:e8:9b:79:c8:91:bc:f4:43: 92:75:2a:7d:fc:75:b0:c3:9a:35:f5:6b:bb:95:8f: 78:ba:87:27:5f:d6:a9:ff:4a:a4:2b:18:c7:0c:ba: 02:c8:a1:b7:3b:17:55:d4:42:a2:0f:d0:09:f6:16: df:97:79:a5:27:e1:b8:03:7c:05:14:27:2f:ed:5e: f2:71:a8:90:36:7d:63:43:b0:b7:4f:89:b5:01:f7: 62:2e:3a:86:c3:00:cd:e5:43:73:89:5b:62:0d:88: aa:f8:2b:29:4e:0a:e3:4b:56:91:e5:09:dc:b6:b1: 1c:8f:da:e2:a8:d7:50:06:3f:cc:3f:39:f1:37:85: 37:f9:51:78:ac:0d:46:91:c5:58:3b:91:5e:6b:11: 96:43:4b:98:dc:df:25:2d:cb:e0:df:bc:df:e4:8b: d4:70:03:9a:7e:7a:00:f9:44:69:94:9b:ed:04:01: 69:3e:29:a4:bb:e4:a2:01:a3:5b:d4:6f:1d:3a:ba: a2:2a:71:6b:8b:17:f1:ab:8a:4a:8b:f5:c5:ee:c1: 3d:77:88:1c:53:66:89:88:67:01:ff:6c:0b:95:09: 94:b9:b1:89:cc:c4:6f:a3:96:cf:01:ca:70:c6:24: 5d:7b:ef:3f:d1:c3:57:d7:58:98:8a:d8:e2:53:ba: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0C:8D:75:5E:53:25:A5:AD:2A:AF:97:3D:5A:B9:3E:10:CD:96:70 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8d:f6:4b:c5:b4:7c:24:60:ce:ab:fa:78:50:57:d5:25:0e: 2c:51:f2:5e:23:f8:fb:56:74:08:8f:bf:b1:b6:c5:ca:9d:2f: 64:63:f3:45:4c:4f:af:99:2c:34:fd:1d:41:04:39:e4:b3:24: d2:62:fb:ca:86:0b:ad:d6:07:a2:88:cc:b6:cf:cb:4a:63:ca: 43:c4:86:1f:7a:9f:d3:9c:4f:8e:99:1a:f2:ea:09:ff:2d:13: dd:5b:c3:a8:28:bc:98:86:aa:a6:76:30:8b:9b:7d:c6:bf:04: ba:b3:74:eb:a5:d5:62:5b:8b:d0:f9:00:ea:6a:15:e9:89:4e: b8:72:5a:86:43:0a:4c:c7:5f:78:64:c9:08:f2:63:c3:cc:95: 33:c2:22:ba:f7:e4:8f:c6:91:51:7b:71:c8:2c:ba:e5:89:01: 49:af:a5:c7:c4:ca:a7:4f:bc:c8:63:53:c4:2b:3f:2b:fd:4b: 7c:a5:5b:a5:ec:e9:91:a1:db:6a:a4:b1:f9:6f:ee:bc:b2:be: 81:41:7a:68:61:43:b4:ac:7f:0e:83:6f:d8:8a:bd:0d:75:b0: 16:46:c1:40:00:43:2c:98:e1:70:21:07:92:b5:ec:c8:45:48: 57:21:e8:d0:66:fa:0a:f0:78:0d:ff:ba:4b:09:b3:bf:3f:66: 65:6b:49:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNjJTIwJDXRUJpedv0NTMRlb+jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTEyMjIxODA2MzVaFw0yNTEyMjYwMzAwMzVaMDMxMTAvBgNV BAMTKDUzMEM4RDc1NUU1MzI1QTVBRDJBQUY5NzNENUFCOTNFMTBDRDk2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZPlHyi3om3nIkbz0Q5J1Kn38 dbDDmjX1a7uVj3i6hydf1qn/SqQrGMcMugLIobc7F1XUQqIP0An2Ft+XeaUn4bgD fAUUJy/tXvJxqJA2fWNDsLdPibUB92IuOobDAM3lQ3OJW2INiKr4KylOCuNLVpHl Cdy2sRyP2uKo11AGP8w/OfE3hTf5UXisDUaRxVg7kV5rEZZDS5jc3yUty+DfvN/k i9RwA5p+egD5RGmUm+0EAWk+KaS75KIBo1vUbx06uqIqcWuLF/GrikqL9cXuwT13 iBxTZomIZwH/bAuVCZS5sYnMxG+jls8BynDGJF177z/Rw1fXWJiK2OJTunzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwyNdV5TJaWtKq+XPVq5PhDNlnAwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqN9kvFtHwkYM6r+nhQV9UlDixR8l4j+PtW dAiPv7G2xcqdL2Rj80VMT6+ZLDT9HUEEOeSzJNJi+8qGC63WB6KIzLbPy0pjykPE hh96n9OcT46ZGvLqCf8tE91bw6govJiGqqZ2MIubfca/BLqzdOul1WJbi9D5AOpq FemJTrhyWoZDCkzHX3hkyQjyY8PMlTPCIrr35I/GkVF7ccgsuuWJAUmvpcfEyqdP vMhjU8QrPyv9S3ylW6Xs6ZGh22qksflv7ryyvoFBemhhQ7Ssfw6Db9iKvQ11sBZG wUAAQyyY4XAhB5K17MhFSFch6NBm+grweA3/uksJs78/ZmVrSTs= -----END CERTIFICATE-----Generated at Tue Dec 23 12:36:54 2025 by rpki-client