This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: DDmr5ZW6SuIjrT/VLWdn2kJNm+z+9f7mbrFKkdEtlP8= Subject key identifier: 23:8F:40:D2:17:13:E3:53:94:15:81:7F:3F:34:FD:A6:DB:4E:41:09 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 56319BD782D44CEE72B605AE550F79AC73CED9E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02A4 Signing time: Mon 22 Dec 2025 14:02:32 +0000 Manifest this update: Mon 22 Dec 2025 13:57:32 +0000 Manifest next update: Fri 26 Dec 2025 00:54:32 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: m00KpvghzGcv5DuGfoh6kIej8tkK0OrdtzqgScbMSWc=) 2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) 4: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:31:9b:d7:82:d4:4c:ee:72:b6:05:ae:55:0f:79:ac:73:ce:d9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Dec 22 13:57:32 2025 GMT Not After : Dec 26 00:54:32 2025 GMT Subject: CN=238F40D21713E3539415817F3F34FDA6DB4E4109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:2e:4c:72:98:4b:c1:b7:05:fa:1b:ff:ee: 46:f0:3e:b1:7a:83:53:9e:ef:b8:5b:09:ac:ce:f4: cb:b5:8d:76:fa:93:4c:10:4b:81:2c:ef:6c:b3:26: 40:27:e1:1f:24:4a:11:35:d7:14:51:d9:a4:db:f0: 6c:27:cd:ad:12:12:f8:c4:bd:93:e0:3d:d0:d6:c8: 42:a0:a4:07:c8:3d:8f:bc:9f:26:61:d6:dc:cb:9f: 8d:4a:9d:7e:e4:5d:c6:cc:9f:32:b5:22:88:6d:20: ef:23:80:8a:81:b0:2a:d3:36:ab:2b:c8:1d:44:0e: de:5a:6c:04:21:df:40:a1:15:2e:8d:45:86:86:9e: 1f:e8:d1:13:a9:20:9a:f7:89:f9:f5:70:15:60:8a: a3:d1:09:a0:80:de:58:88:aa:8d:ef:f4:e0:b1:f9: 86:21:41:4b:ea:86:0c:98:89:8f:0e:10:9e:08:fa: 06:0e:96:1e:9b:bb:1e:2b:a1:3d:86:67:a6:e4:e7: fc:c8:4c:2d:20:a4:fb:69:e6:1f:91:ce:78:7f:e5: 58:a6:f5:91:3c:51:24:43:b1:b9:3b:41:56:d8:05: 87:fe:c0:58:07:d0:01:93:2a:27:c4:34:0a:13:6b: 33:58:c0:73:6e:93:73:e9:de:fd:df:8c:f1:47:61: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8F:40:D2:17:13:E3:53:94:15:81:7F:3F:34:FD:A6:DB:4E:41:09 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:64:8f:00:69:24:8c:6d:c1:28:04:e0:e6:27:c8:a3:67:b5: eb:af:09:61:20:43:1f:6b:55:ed:6c:a4:e0:db:f7:54:8c:28: 44:8b:eb:2e:f3:62:5b:f7:18:de:b7:8a:12:8f:fe:f1:7b:3e: 35:c8:32:df:a9:0b:5c:61:19:d1:9b:1a:4a:de:a5:cd:82:5e: 5c:93:30:e3:35:0d:dd:b9:0a:3a:22:d4:50:0c:82:19:e8:8c: af:2d:a0:eb:09:c7:b4:26:8a:e5:93:8d:89:79:c2:b6:2e:92: 0d:dd:a7:15:4e:cc:35:6c:3a:61:bb:bc:62:1a:77:b4:ac:1b: 66:39:48:ed:78:d8:47:c9:f3:cc:ed:31:c1:ca:d8:11:92:ea: 38:f5:b9:20:92:e2:1e:fa:8d:c1:f1:51:c9:a8:20:c5:e6:ee: 97:91:90:14:78:8e:74:9a:7e:e3:fe:71:05:33:b9:fe:69:e5: 81:05:b4:f6:cc:f0:43:7a:84:9e:d7:93:86:b5:19:ee:e0:1c: a7:7e:7e:73:1f:ff:69:30:05:40:82:e7:44:aa:58:15:69:95: c4:55:fe:10:c5:01:69:63:81:4f:55:b8:42:48:c9:dd:09:08: eb:60:00:bd:95:f7:7a:c4:15:3e:e2:89:e6:12:01:19:f3:03: f1:ed:20:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjGb14LUTO5ytgWuVQ95rHPO2eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTEyMjIxMzU3MzJaFw0yNTEyMjYwMDU0MzJaMDMxMTAvBgNV BAMTKDIzOEY0MEQyMTcxM0UzNTM5NDE1ODE3RjNGMzRGREE2REI0RTQxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSS5McphLwbcF+hv/7kbwPrF6 g1Oe77hbCazO9Mu1jXb6k0wQS4Es72yzJkAn4R8kShE11xRR2aTb8Gwnza0SEvjE vZPgPdDWyEKgpAfIPY+8nyZh1tzLn41KnX7kXcbMnzK1IohtIO8jgIqBsCrTNqsr yB1EDt5abAQh30ChFS6NRYaGnh/o0ROpIJr3ifn1cBVgiqPRCaCA3liIqo3v9OCx +YYhQUvqhgyYiY8OEJ4I+gYOlh6bux4roT2GZ6bk5/zITC0gpPtp5h+Rznh/5Vim 9ZE8USRDsbk7QVbYBYf+wFgH0AGTKifENAoTazNYwHNuk3Pp3v3fjPFHYWSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI49A0hcT41OUFYF/PzT9pttOQQkwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlkjwBpJIxtwSgE4OYnyKNnteuvCWEgQx9r Ve1spODb91SMKESL6y7zYlv3GN63ihKP/vF7PjXIMt+pC1xhGdGbGkrepc2CXlyT MOM1Dd25Cjoi1FAMghnojK8toOsJx7QmiuWTjYl5wrYukg3dpxVOzDVsOmG7vGIa d7SsG2Y5SO142EfJ88ztMcHK2BGS6jj1uSCS4h76jcHxUcmoIMXm7peRkBR4jnSa fuP+cQUzuf5p5YEFtPbM8EN6hJ7Xk4a1Ge7gHKd+fnMf/2kwBUCC50SqWBVplcRV /hDFAWljgU9VuEJIyd0JCOtgAL2V93rEFT7iieYSARnzA/HtII4= -----END CERTIFICATE-----Generated at Wed Dec 24 09:03:16 2025 by rpki-client