This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: VV5sU2AT1kSmX1S5sISBX05REoTVwCBrM9UHaUlU0+4= Subject key identifier: 2F:0B:77:CF:85:0F:1A:88:BD:94:75:94:82:B2:7E:88:A1:3E:5A:AF Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 2F980EA5D0BFBD600C8E66F796D59A3DE8C99A31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 0115 Signing time: Mon 22 Dec 2025 21:03:02 +0000 Manifest this update: Mon 22 Dec 2025 20:58:02 +0000 Manifest next update: Thu 25 Dec 2025 22:32:02 +0000 Files and hashes: 1: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 2: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 3: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) 4: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) 5: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 6: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 7: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 8: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: K+2xa6w60fdVQuQZitE3nzn23TOdU1frAulyhlDDK7w=) 9: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:98:0e:a5:d0:bf:bd:60:0c:8e:66:f7:96:d5:9a:3d:e8:c9:9a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Dec 22 20:58:02 2025 GMT Not After : Dec 25 22:32:02 2025 GMT Subject: CN=2F0B77CF850F1A88BD94759482B27E88A13E5AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:e9:3b:15:4f:e3:7d:8e:a1:64:52:fd:ac: a1:f5:bb:f9:a8:f4:79:07:03:cc:68:36:19:7b:b9: ca:92:3e:3d:1e:58:99:25:93:0c:75:9e:71:84:7f: 77:92:70:ac:e9:9a:06:47:a1:c5:41:d0:7b:0e:84: 81:b9:7b:ab:39:d1:80:13:2e:b3:b1:ee:61:aa:40: 73:c9:95:c3:63:f2:b2:82:67:15:eb:3a:73:91:6b: 39:87:d0:aa:4f:5a:4b:be:6b:95:21:76:ff:2c:d7: 57:cc:ae:10:30:79:8f:67:18:6b:6e:26:a7:3c:da: 77:97:1b:3b:1b:ae:63:f8:c9:2a:16:38:f1:39:c9: 92:f5:f9:e4:24:7b:e2:48:53:c8:44:77:84:98:d5: f8:a7:48:44:dd:7d:53:d3:bd:e4:48:a2:66:a2:95: dd:c9:32:a1:27:92:d3:21:e6:9f:fc:30:ae:e5:54: 32:88:87:83:9d:10:36:7a:c8:46:bc:1d:c0:c1:49: a1:ac:32:79:55:53:6f:37:79:87:43:6c:44:fe:4b: 80:8e:01:7d:04:e5:8e:42:92:68:17:de:ca:d5:de: 02:89:10:86:03:01:80:e2:24:2b:9b:23:a6:60:93: c1:f2:92:c7:12:a4:c5:09:42:60:b4:e3:3b:21:30: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:77:CF:85:0F:1A:88:BD:94:75:94:82:B2:7E:88:A1:3E:5A:AF X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:77:e0:84:00:63:1c:e1:17:a8:40:16:85:e6:73:d5:c0:da: a8:78:6c:d8:a5:af:6c:b0:5e:64:76:d2:12:3b:fc:63:4c:d4: bb:16:b3:c3:ad:3b:6e:c0:2a:5a:43:17:6c:9a:b3:b7:5e:16: a9:50:ba:ae:a7:5e:52:94:61:2d:9d:db:7f:d0:54:df:ad:11: ff:61:c5:05:15:4c:82:43:76:ef:81:b4:51:5c:ca:43:1b:b1: 52:95:be:54:2c:34:e2:1a:52:8a:fb:7f:7c:02:77:26:10:6a: d5:da:4e:12:8b:a6:85:0e:a8:11:b8:24:08:fa:77:df:4e:95: 48:93:7a:0e:77:86:d2:16:d1:3d:ab:bd:65:0e:24:34:c3:b4: 33:dc:50:e8:b8:6a:dc:e0:a6:0b:ba:e7:10:9b:13:8b:06:c0: 56:f6:79:bf:10:55:c0:74:72:b6:cb:82:3c:76:84:85:31:e8: 65:de:51:db:ea:fc:ca:ec:5d:18:fe:95:68:cf:64:42:43:06: bb:d7:79:fa:1c:8f:64:fd:a8:90:2c:d9:3b:2d:da:d1:47:18: 3a:07:d5:d0:b5:9b:64:84:45:b0:90:9c:fc:22:25:0c:50:7f: cd:c8:ef:ae:8e:a2:0d:68:ce:38:96:5d:99:28:f0:a5:9c:13: a6:70:45:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5gOpdC/vWAMjmb3ltWaPejJmjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTEyMjIyMDU4MDJaFw0yNTEyMjUyMjMyMDJaMDMxMTAvBgNV BAMTKDJGMEI3N0NGODUwRjFBODhCRDk0NzU5NDgyQjI3RTg4QTEzRTVBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJ+k7FU/jfY6hZFL9rKH1u/mo 9HkHA8xoNhl7ucqSPj0eWJklkwx1nnGEf3eScKzpmgZHocVB0HsOhIG5e6s50YAT LrOx7mGqQHPJlcNj8rKCZxXrOnORazmH0KpPWku+a5Uhdv8s11fMrhAweY9nGGtu Jqc82neXGzsbrmP4ySoWOPE5yZL1+eQke+JIU8hEd4SY1finSETdfVPTveRIomai ld3JMqEnktMh5p/8MK7lVDKIh4OdEDZ6yEa8HcDBSaGsMnlVU283eYdDbET+S4CO AX0E5Y5CkmgX3srV3gKJEIYDAYDiJCubI6Zgk8HykscSpMUJQmC04zshMEYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwt3z4UPGoi9lHWUgrJ+iKE+Wq8wHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMB34IQAYxzhF6hAFoXmc9XA2qh4bNilr2yw XmR20hI7/GNM1LsWs8OtO27AKlpDF2yas7deFqlQuq6nXlKUYS2d23/QVN+tEf9h xQUVTIJDdu+BtFFcykMbsVKVvlQsNOIaUor7f3wCdyYQatXaThKLpoUOqBG4JAj6 d99OlUiTeg53htIW0T2rvWUOJDTDtDPcUOi4atzgpgu65xCbE4sGwFb2eb8QVcB0 crbLgjx2hIUx6GXeUdvq/MrsXRj+lWjPZEJDBrvXefocj2T9qJAs2Tst2tFHGDoH 1dC1m2SERbCQnPwiJQxQf83I766Oog1ozjiWXZko8KWcE6ZwRYY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:03:30 2025 by rpki-client