This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: S7TNHSXhKwyJbZNo8fp3TM9zJc1z+9Mi248I+RrZLwQ= Subject key identifier: D6:70:0C:16:BE:1D:BC:46:FF:EC:04:AD:61:8B:AB:03:51:C2:0F:21 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 1874A4D7D42AC24846BBC69061263E2740195C75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 0536 Signing time: Wed 24 Dec 2025 11:01:53 +0000 Manifest this update: Wed 24 Dec 2025 10:56:53 +0000 Manifest next update: Sat 27 Dec 2025 18:05:53 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 2: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: 9t70KeL2UkvySdAj2j//kuk/UDqhROVmJmz6OXCUfk8=) 3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:74:a4:d7:d4:2a:c2:48:46:bb:c6:90:61:26:3e:27:40:19:5c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Dec 24 10:56:53 2025 GMT Not After : Dec 27 18:05:53 2025 GMT Subject: CN=D6700C16BE1DBC46FFEC04AD618BAB0351C20F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:d3:22:35:89:5c:1d:f7:80:ec:b6:6a:18: e6:54:2e:04:b9:fe:a0:80:c3:fe:1b:a8:c8:70:1c: c3:43:3e:d0:0a:78:61:ea:4a:92:cc:ca:b5:8a:5d: f7:a4:4a:ae:f1:05:4a:e7:6c:03:ca:6e:53:4e:95: 72:e8:a7:9c:7b:58:42:46:b8:65:d4:f0:b6:a8:03: 32:c9:6a:66:01:93:8b:a3:b8:b1:5a:02:19:a6:52: 36:c6:0c:43:ae:db:41:d6:8f:45:74:5a:78:25:71: b6:2d:7f:9f:39:0b:72:f2:c1:e6:5e:8d:cb:f3:67: f3:6f:e1:4d:ea:3b:ee:d0:11:aa:90:7e:55:b0:f5: 06:03:5c:fb:b4:b5:16:53:97:a5:b2:20:5d:f9:b8: eb:a8:1a:36:d3:27:a3:5f:38:66:ba:2c:68:34:e0: ef:3d:09:3b:67:af:c4:eb:65:a2:9b:5e:e6:c3:ee: 5c:00:14:5b:0a:fc:31:66:ff:d8:aa:2b:bd:7d:b4: aa:3d:62:4a:73:5c:ce:64:78:a0:c9:cf:11:cd:76: 31:9d:c8:21:43:20:88:3d:2a:63:8e:35:b3:97:9e: 25:eb:94:7d:89:6b:a7:8e:02:c2:a7:5e:42:0b:1d: 55:4c:90:ab:7b:2c:e5:40:8d:34:e8:e8:36:4b:77: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:0C:16:BE:1D:BC:46:FF:EC:04:AD:61:8B:AB:03:51:C2:0F:21 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:43:59:ec:25:2b:83:d0:6b:fa:61:45:07:b8:34:7c:67:04: 07:09:55:30:3e:3e:b9:00:76:a2:03:9a:ee:3e:d7:5f:0d:32: b1:0e:21:07:40:f7:be:9d:7d:36:89:67:af:50:ff:ae:35:42: 70:21:9c:c4:48:7b:c2:66:43:21:d8:35:34:6b:ca:b3:d6:38: 55:8b:7e:6d:59:bf:25:34:72:d9:7b:40:b7:dc:6b:3a:b4:93: be:27:be:78:af:7e:d2:e2:b1:dc:f8:26:12:ae:51:fa:61:ae: 63:d0:3c:cd:04:6d:1c:54:49:c7:24:5a:04:bc:8f:43:db:17: 75:80:50:41:ca:22:9b:4b:31:37:94:f9:ef:29:06:8b:37:d4: f4:7a:57:19:57:71:0e:61:5a:79:db:b2:24:b5:0f:69:42:99: 45:a2:7f:ea:23:a7:cb:8b:79:1c:c7:5e:b6:55:d5:04:7b:a9: 8d:30:1c:88:58:03:2a:9c:6f:c2:a5:68:eb:92:a2:8a:f0:0b: 2c:dd:df:dc:bd:ea:6d:f1:ba:d9:1d:fa:46:c2:dc:40:cb:84: c2:be:8c:69:0a:6e:98:bc:6f:8a:8f:49:61:a4:8e:02:e1:a0: e8:43:6a:0e:4c:9e:67:68:c2:ba:fd:2f:54:63:dd:e5:c2:19: 4e:b7:d9:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHSk19QqwkhGu8aQYSY+J0AZXHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTEyMjQxMDU2NTNaFw0yNTEyMjcxODA1NTNaMDMxMTAvBgNV BAMTKEQ2NzAwQzE2QkUxREJDNDZGRkVDMDRBRDYxOEJBQjAzNTFDMjBGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwtMiNYlcHfeA7LZqGOZULgS5 /qCAw/4bqMhwHMNDPtAKeGHqSpLMyrWKXfekSq7xBUrnbAPKblNOlXLop5x7WEJG uGXU8LaoAzLJamYBk4ujuLFaAhmmUjbGDEOu20HWj0V0WnglcbYtf585C3LyweZe jcvzZ/Nv4U3qO+7QEaqQflWw9QYDXPu0tRZTl6WyIF35uOuoGjbTJ6NfOGa6LGg0 4O89CTtnr8TrZaKbXubD7lwAFFsK/DFm/9iqK719tKo9YkpzXM5keKDJzxHNdjGd yCFDIIg9KmOONbOXniXrlH2Ja6eOAsKnXkILHVVMkKt7LOVAjTTo6DZLd2OVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nAMFr4dvEb/7AStYYurA1HCDyEwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJDWewlK4PQa/phRQe4NHxnBAcJVTA+PrkA dqIDmu4+118NMrEOIQdA976dfTaJZ69Q/641QnAhnMRIe8JmQyHYNTRryrPWOFWL fm1ZvyU0ctl7QLfcazq0k74nvnivftLisdz4JhKuUfphrmPQPM0EbRxUScckWgS8 j0PbF3WAUEHKIptLMTeU+e8pBos31PR6VxlXcQ5hWnnbsiS1D2lCmUWif+ojp8uL eRzHXrZV1QR7qY0wHIhYAyqcb8KlaOuSoorwCyzd39y96m3xutkd+kbC3EDLhMK+ jGkKbpi8b4qPSWGkjgLhoOhDag5Mnmdowrr9L1Rj3eXCGU632dg= -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:08 2025 by rpki-client