This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: qgC8ncmkpvLlNaeDLfoEhuKKGuM4dVo5To5LSE6Y0NY= Subject key identifier: E0:33:F2:B2:57:3D:A1:B3:90:C5:3F:C8:04:0D:38:05:41:36:F4:1B Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 109E8A4C3DF13E03725175362C22A89F1D9F8AAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 0240 Signing time: Wed 17 Dec 2025 06:01:14 +0000 Manifest this update: Wed 17 Dec 2025 05:56:14 +0000 Manifest next update: Sat 20 Dec 2025 13:02:14 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: g8FD22OtJYX1fcmzhgYg9M2KC9o74HexuJTZiQKDZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9e:8a:4c:3d:f1:3e:03:72:51:75:36:2c:22:a8:9f:1d:9f:8a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Dec 17 05:56:14 2025 GMT Not After : Dec 20 13:02:14 2025 GMT Subject: CN=E033F2B2573DA1B390C53FC8040D38054136F41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:70:d2:a5:15:96:66:25:d6:ab:22:b1:f0: d9:a4:72:cd:75:5d:a6:7e:d9:70:e8:63:a3:d2:91: 87:2f:2c:f8:75:91:95:39:05:4b:46:b9:f8:da:07: 03:6d:b8:be:da:00:ac:37:f4:96:eb:55:4e:1b:23: 40:b6:32:0a:a1:5b:55:b3:85:9b:14:ac:f0:dc:b4: d2:58:6a:a9:f4:e3:67:09:f6:71:e0:45:d0:a0:ea: 3e:ae:9b:ab:83:06:4b:65:d0:6d:69:eb:86:20:bf: c0:79:ed:9c:da:52:dd:56:8a:a2:79:2a:82:09:b4: 43:43:54:72:1a:81:4d:e6:40:c5:08:99:cc:9c:de: 80:8f:f6:f5:60:b8:17:3f:33:50:b9:f0:d6:15:ab: 17:b9:18:b8:3a:89:2b:16:d2:66:08:54:86:5c:13: 1a:e8:fc:c3:1b:7b:13:dc:d2:aa:c3:13:2b:d3:fc: ad:48:38:aa:e8:5a:16:ea:7c:4a:be:26:85:65:59: d9:38:b4:dd:4b:e9:b2:0b:7e:01:3a:e0:4a:9a:71: 40:62:79:e5:91:85:2d:69:db:1b:d1:b8:d7:35:51: fb:41:5b:8d:43:8c:fd:45:0d:dd:90:5c:36:68:dd: 47:13:bc:1d:31:04:b8:0a:91:9a:e7:00:1e:dc:68: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:33:F2:B2:57:3D:A1:B3:90:C5:3F:C8:04:0D:38:05:41:36:F4:1B X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0b:a1:7e:7f:7a:0a:6e:dd:dc:9d:00:30:62:e9:41:8b:08: bb:cc:41:96:71:7c:d4:c2:c1:ae:06:a1:84:0c:46:51:52:34: c1:0f:dd:59:56:ec:8b:76:67:7b:f7:d8:a5:8c:a7:c7:9d:dd: 6a:50:e8:56:1f:55:77:b1:11:1f:0c:7f:d3:4e:b7:cb:58:3e: ef:69:e3:63:66:58:3e:10:6b:c2:79:37:48:f4:69:e1:9d:3d: 1d:81:cd:7b:da:ca:6e:e1:8b:b2:f9:bd:e2:a2:16:e8:48:fd: 76:da:8f:aa:67:cc:e5:c7:71:3e:f8:00:13:56:3a:56:45:3e: 5d:93:56:3b:dd:cc:6f:2d:7c:20:ec:7e:7b:f9:09:b8:fe:18: 0d:b4:87:3e:1d:10:58:ea:07:df:43:b7:9d:63:7e:4a:d9:58: a1:c4:12:ad:40:01:45:1b:a3:2f:6a:6f:99:26:f3:21:5e:95: b1:d7:74:76:5c:3e:96:51:0b:c4:62:36:2b:2a:0f:72:85:76: b1:b8:9a:a8:fa:32:7b:fc:d0:23:a5:5d:e0:79:a3:f0:3b:44: 40:d4:1b:6b:b3:fd:6f:9f:08:d8:a6:87:aa:9a:66:50:39:e2: 89:16:c2:0f:79:61:52:fb:65:27:1d:4f:81:68:f9:e8:88:15: 4e:0c:45:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJ6KTD3xPgNyUXU2LCKonx2fiq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTEyMTcwNTU2MTRaFw0yNTEyMjAxMzAyMTRaMDMxMTAvBgNV BAMTKEUwMzNGMkIyNTczREExQjM5MEM1M0ZDODA0MEQzODA1NDEzNkY0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5XDSpRWWZiXWqyKx8Nmkcs11 XaZ+2XDoY6PSkYcvLPh1kZU5BUtGufjaBwNtuL7aAKw39JbrVU4bI0C2MgqhW1Wz hZsUrPDctNJYaqn042cJ9nHgRdCg6j6um6uDBktl0G1p64Ygv8B57ZzaUt1WiqJ5 KoIJtENDVHIagU3mQMUImcyc3oCP9vVguBc/M1C58NYVqxe5GLg6iSsW0mYIVIZc Exro/MMbexPc0qrDEyvT/K1IOKroWhbqfEq+JoVlWdk4tN1L6bILfgE64EqacUBi eeWRhS1p2xvRuNc1UftBW41DjP1FDd2QXDZo3UcTvB0xBLgKkZrnAB7caBXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DPyslc9obOQxT/IBA04BUE29BswHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMLoX5/egpu3dydADBi6UGLCLvMQZZxfNTC wa4GoYQMRlFSNMEP3VlW7It2Z3v32KWMp8ed3WpQ6FYfVXexER8Mf9NOt8tYPu9p 42NmWD4Qa8J5N0j0aeGdPR2BzXvaym7hi7L5veKiFuhI/Xbaj6pnzOXHcT74ABNW OlZFPl2TVjvdzG8tfCDsfnv5Cbj+GA20hz4dEFjqB99Dt51jfkrZWKHEEq1AAUUb oy9qb5km8yFelbHXdHZcPpZRC8RiNisqD3KFdrG4mqj6Mnv80COlXeB5o/A7REDU G2uz/W+fCNimh6qaZlA54okWwg95YVL7ZScdT4Fo+eiIFU4MRWQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:33:05 2025 by rpki-client