This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: b9HqDsA/Z26DvHPRai71L/87k4VRIhiDu6kECHLO9Q8= Subject key identifier: 1E:90:FB:86:08:91:64:4B:84:96:01:2A:70:34:5F:23:8E:3E:97:B3 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 5350BE715150E0346D2481737478FEAE06483A26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02A6 Signing time: Sat 27 Dec 2025 12:01:57 +0000 Manifest this update: Sat 27 Dec 2025 11:56:57 +0000 Manifest next update: Tue 30 Dec 2025 23:38:57 +0000 Files and hashes: 1: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 2: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) 3: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 4: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: HWtWNLAFYmFZa5Jjt89jKGgqAk5/SneN8MRSDQ5qWVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 23:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:50:be:71:51:50:e0:34:6d:24:81:73:74:78:fe:ae:06:48:3a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Dec 27 11:56:57 2025 GMT Not After : Dec 30 23:38:57 2025 GMT Subject: CN=1E90FB860891644B8496012A70345F238E3E97B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:f0:94:dc:83:2d:1f:1b:2e:8a:29:6a:08: 9c:5c:e5:a3:ea:92:14:3d:14:73:ce:ac:25:4b:43: ca:ea:d7:05:c9:c5:60:e1:84:64:a5:59:4a:23:c3: 30:9f:cc:07:30:ad:e8:66:a3:4d:f6:9d:e8:4c:5e: 8a:d9:79:cd:44:bf:dc:8f:8c:88:1a:cd:88:89:7d: d0:b4:39:55:1f:1e:85:df:6e:ab:05:c5:d0:5d:28: 27:62:2d:f6:05:4c:ba:38:06:30:67:fb:b6:f5:c5: f6:07:7c:dc:a1:a4:83:72:50:2e:0a:41:f0:89:d0: b0:97:fb:1b:e1:17:b9:84:4f:56:df:83:49:f1:8e: bd:3f:8b:af:3c:72:b2:4b:35:8f:ad:cf:e4:c5:ac: 3c:a0:4f:62:29:7e:92:02:46:2b:a5:f7:8e:4b:1f: a5:ec:c5:c3:60:03:6c:9a:58:e8:c2:e4:78:86:d8: e2:af:37:76:c0:18:59:6e:b5:b4:25:f1:1a:ed:40: be:af:dc:13:cf:62:46:35:15:87:87:8e:57:da:54: d1:dd:c1:6b:f1:47:a8:6a:3b:f8:74:26:5e:05:44: 6b:a1:0d:3e:fa:c8:19:a0:36:b3:ae:d3:f1:ed:10: 48:93:48:81:3d:a1:27:8f:af:6d:a6:e1:04:f6:5f: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:FB:86:08:91:64:4B:84:96:01:2A:70:34:5F:23:8E:3E:97:B3 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0d:94:05:9a:ce:40:11:1b:ff:b4:95:3d:2a:1c:26:87:7e: 32:94:c6:4e:77:79:46:0a:7c:6c:49:15:7c:4d:3d:5c:52:41: 75:48:23:46:b7:63:b5:f4:0a:0f:ba:1b:71:96:ab:56:77:8d: ed:66:db:82:f5:5f:ce:d0:a9:9d:52:9a:69:4e:8c:cd:48:a9: 94:84:e6:a1:54:39:d1:e3:26:21:7e:57:9b:ec:d5:a4:62:b7: 33:c7:70:13:7d:11:59:bf:25:4b:f8:36:e7:c7:9f:29:db:fe: e9:70:55:be:1e:48:c1:c2:a8:2b:69:94:e5:3d:2a:89:c2:4b: 9a:dc:43:63:c3:8e:da:a8:eb:48:33:d1:aa:90:c0:e9:e2:24: 52:fe:63:ed:38:1a:82:23:7d:68:14:56:ed:1c:b2:56:4f:a5: 7e:55:75:1d:54:d5:5e:4a:01:57:c7:8e:e6:b4:68:4f:71:a7: 2e:76:e1:28:eb:82:ef:36:4e:3c:7a:87:ae:6e:f1:fa:6f:57: a6:95:30:12:f8:89:5c:73:04:6c:53:52:fa:1d:01:a0:5d:05: 87:06:94:c4:9e:12:d4:4b:12:9d:e8:4c:eb:2a:66:ce:04:bf: 24:36:62:f5:34:04:82:47:f4:70:5a:96:55:1a:b8:fe:19:71: 3d:9f:57:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1C+cVFQ4DRtJIFzdHj+rgZIOiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTEyMjcxMTU2NTdaFw0yNTEyMzAyMzM4NTdaMDMxMTAvBgNV BAMTKDFFOTBGQjg2MDg5MTY0NEI4NDk2MDEyQTcwMzQ1RjIzOEUzRTk3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmfCU3IMtHxsuiilqCJxc5aPq khQ9FHPOrCVLQ8rq1wXJxWDhhGSlWUojwzCfzAcwrehmo032nehMXorZec1Ev9yP jIgazYiJfdC0OVUfHoXfbqsFxdBdKCdiLfYFTLo4BjBn+7b1xfYHfNyhpINyUC4K QfCJ0LCX+xvhF7mET1bfg0nxjr0/i688crJLNY+tz+TFrDygT2IpfpICRiul945L H6XsxcNgA2yaWOjC5HiG2OKvN3bAGFlutbQl8RrtQL6v3BPPYkY1FYeHjlfaVNHd wWvxR6hqO/h0Jl4FRGuhDT76yBmgNrOu0/HtEEiTSIE9oSePr22m4QT2X05BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpD7hgiRZEuElgEqcDRfI44+l7MwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwNlAWazkARG/+0lT0qHCaHfjKUxk53eUYK fGxJFXxNPVxSQXVII0a3Y7X0Cg+6G3GWq1Z3je1m24L1X87QqZ1SmmlOjM1IqZSE 5qFUOdHjJiF+V5vs1aRitzPHcBN9EVm/JUv4NufHnynb/ulwVb4eSMHCqCtplOU9 KonCS5rcQ2PDjtqo60gz0aqQwOniJFL+Y+04GoIjfWgUVu0cslZPpX5VdR1U1V5K AVfHjua0aE9xpy524Sjrgu82Tjx6h65u8fpvV6aVMBL4iVxzBGxTUvodAaBdBYcG lMSeEtRLEp3oTOsqZs4EvyQ2YvU0BIJH9HBallUauP4ZcT2fV1I= -----END CERTIFICATE-----Generated at Mon Dec 29 16:23:58 2025 by rpki-client