This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: FcQnRjt1suAX7v69KP8Ira+Qb24nx40pdL4oilX564g= Subject key identifier: 29:E6:2E:53:14:CB:6D:A8:17:85:EB:32:67:AB:82:42:A0:7D:B0:44 Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 2E99D10EACCFC72C001025227912924F3D067AAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 0230 Signing time: Tue 23 Dec 2025 00:21:02 +0000 Manifest this update: Tue 23 Dec 2025 00:16:02 +0000 Manifest next update: Fri 26 Dec 2025 11:18:02 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 2: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 3: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: Yhei9Hnw4vVbmKj7A53ASrhfedPcSmxYlwLyckxJjG4=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:99:d1:0e:ac:cf:c7:2c:00:10:25:22:79:12:92:4f:3d:06:7a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Dec 23 00:16:02 2025 GMT Not After : Dec 26 11:18:02 2025 GMT Subject: CN=29E62E5314CB6DA81785EB3267AB8242A07DB044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:bd:5f:13:35:a2:d3:4c:94:43:c6:40:f5: 02:72:f8:e1:7a:20:6b:df:1e:7c:e8:21:43:38:cb: 79:ce:06:0a:b1:f6:8f:f7:8f:66:c2:41:73:d3:2a: 64:cd:cc:f1:9a:ea:98:c0:1c:0c:fe:ad:57:8c:d7: f0:50:8a:ec:86:f2:62:75:99:c3:98:dd:9d:c7:0c: 85:f8:b3:bb:c1:7e:c6:fa:ad:5d:82:82:a4:b0:ba: a7:44:e7:a5:3a:08:87:08:3a:9c:a3:1f:af:64:65: e0:b9:7d:1e:7a:3f:a9:65:b1:55:0f:1e:74:c3:1b: 15:a7:d7:a0:a6:45:95:12:19:f2:5a:ab:fc:15:c5: e5:9e:35:34:fd:ce:6a:7c:e6:b5:89:9a:b7:17:1b: e4:04:8f:c8:8f:3a:7a:3f:c2:2f:19:53:d1:8e:b2: 94:0b:38:a0:a1:92:51:b2:e5:77:24:28:db:dd:ab: 9a:4b:4e:de:6f:da:b2:57:12:e0:c9:fa:c5:37:40: 2c:57:5b:21:d9:e8:87:c6:0d:2c:7c:d4:11:2f:b4: ad:ad:b5:1f:11:33:66:81:25:63:ab:f0:58:ca:79: c2:8f:7d:b5:a8:21:ea:c9:1f:94:a5:11:59:65:10: d8:43:0a:a5:e7:04:d1:56:15:8b:5e:03:5a:26:76: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:2E:53:14:CB:6D:A8:17:85:EB:32:67:AB:82:42:A0:7D:B0:44 X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4a:53:9a:9f:1f:72:87:5f:cc:4a:eb:b6:43:a2:e1:78:ad: 15:f8:3b:02:d1:46:da:b7:bc:71:8f:af:6f:82:47:9a:09:56: 15:85:10:1d:d9:fe:48:20:d1:d2:d5:e9:3f:7e:a4:bd:53:b9: 2e:9b:a3:36:a2:52:60:c6:fb:ce:03:22:ed:6b:97:49:7e:1c: 5b:6a:99:9c:69:8f:bf:7b:3d:34:ba:67:e4:34:69:e8:d8:b4: 25:95:70:b2:4b:54:6c:32:06:a9:95:ee:a0:c3:b7:27:6b:6c: ba:ed:30:99:fe:65:5b:a4:11:b4:cd:dc:90:ed:55:c2:a5:ad: 46:13:67:39:d6:a7:ba:09:2a:6b:88:5c:b8:ed:5c:c9:71:ee: 33:ea:90:d3:c4:63:f8:c7:f3:d2:99:7b:98:4f:9e:a9:55:dd: ac:ec:84:01:9b:cf:30:99:51:e9:9c:48:dc:cf:11:66:46:65: a6:78:64:ef:06:72:d6:ae:ae:43:9a:60:d3:12:b1:68:06:01: 8f:f4:1f:ad:99:f6:8c:cc:5d:19:e7:14:39:0e:29:ae:93:34: 07:a5:f2:a3:d0:1b:7e:ed:7f:8a:db:2f:af:92:b2:b6:12:0f: 8a:d1:da:ac:c5:91:7e:5b:35:db:d3:60:b0:4a:a9:df:17:f1: 5f:78:52:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpnRDqzPxywAECUieRKSTz0GeqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTEyMjMwMDE2MDJaFw0yNTEyMjYxMTE4MDJaMDMxMTAvBgNV BAMTKDI5RTYyRTUzMTRDQjZEQTgxNzg1RUIzMjY3QUI4MjQyQTA3REIwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJL1fEzWi00yUQ8ZA9QJy+OF6 IGvfHnzoIUM4y3nOBgqx9o/3j2bCQXPTKmTNzPGa6pjAHAz+rVeM1/BQiuyG8mJ1 mcOY3Z3HDIX4s7vBfsb6rV2CgqSwuqdE56U6CIcIOpyjH69kZeC5fR56P6llsVUP HnTDGxWn16CmRZUSGfJaq/wVxeWeNTT9zmp85rWJmrcXG+QEj8iPOno/wi8ZU9GO spQLOKChklGy5XckKNvdq5pLTt5v2rJXEuDJ+sU3QCxXWyHZ6IfGDSx81BEvtK2t tR8RM2aBJWOr8FjKecKPfbWoIerJH5SlEVllENhDCqXnBNFWFYteA1omdtFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKeYuUxTLbagXhesyZ6uCQqB9sEQwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhKU5qfH3KHX8xK67ZDouF4rRX4OwLRRtq3 vHGPr2+CR5oJVhWFEB3Z/kgg0dLV6T9+pL1TuS6bozaiUmDG+84DIu1rl0l+HFtq mZxpj797PTS6Z+Q0aejYtCWVcLJLVGwyBqmV7qDDtydrbLrtMJn+ZVukEbTN3JDt VcKlrUYTZznWp7oJKmuIXLjtXMlx7jPqkNPEY/jH89KZe5hPnqlV3azshAGbzzCZ UemcSNzPEWZGZaZ4ZO8GctaurkOaYNMSsWgGAY/0H62Z9ozMXRnnFDkOKa6TNAel 8qPQG37tf4rbL6+SsrYSD4rR2qzFkX5bNdvTYLBKqd8X8V94UjM= -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:58 2025 by rpki-client