This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: gMV4VFSA669hVFh/qLxAVTrfwMLxcJALjPLOYSA7/LA= Subject key identifier: 3B:CE:27:E9:3F:99:94:05:AD:17:A7:C4:75:C8:E0:1C:2B:BF:BA:33 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 4E67097DE14F1FCE0BAEF890D0350F68B8E25C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0252 Signing time: Tue 23 Dec 2025 08:01:42 +0000 Manifest this update: Tue 23 Dec 2025 07:56:42 +0000 Manifest next update: Fri 26 Dec 2025 16:50:42 +0000 Files and hashes: 1: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 2: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc=) 3: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 4: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: tyVL27TEQfjFoC6al9aRw16foVoU9YFuXoKUh//INlM=) 5: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 6: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 7: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 8: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 9: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 10: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 11: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 12: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 13: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 14: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 15: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 16: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 17: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 18: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 19: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:67:09:7d:e1:4f:1f:ce:0b:ae:f8:90:d0:35:0f:68:b8:e2:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Dec 23 07:56:42 2025 GMT Not After : Dec 26 16:50:42 2025 GMT Subject: CN=3BCE27E93F999405AD17A7C475C8E01C2BBFBA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:c4:4f:58:ce:b5:8a:83:cc:0f:80:c2:e9: 58:5b:48:14:0f:dd:b3:f1:ba:f5:f7:21:d7:de:ff: 03:20:2a:67:5b:7c:2d:06:ff:d8:0c:4e:27:b8:e2: 2b:d1:05:b4:4f:dc:5d:6c:6d:d8:b1:f4:04:2f:1c: af:5c:41:b6:f7:64:60:43:69:4d:97:2e:f1:45:0d: f4:b2:8c:fc:af:98:48:a7:5b:8b:7d:97:55:71:b8: ff:d6:1e:b7:31:2b:43:96:e2:0e:bc:97:df:0a:f2: 15:1b:1c:9f:17:16:f4:68:fb:62:ac:5e:76:e2:00: f4:89:b5:c2:f2:39:37:27:de:b4:e8:e7:06:61:8c: 68:66:2d:3f:a1:5f:2d:b8:f4:bc:0c:bc:56:23:92: 67:06:6b:9f:bd:ac:c2:dc:27:a7:e2:84:8f:32:fe: dc:5b:8f:00:99:e4:0a:1e:ed:f9:97:6c:3c:f8:d4: 08:24:43:bc:ad:b3:4c:41:94:a7:8c:70:52:39:ce: 42:ea:95:f8:2d:b9:5f:40:a2:65:1d:f1:a7:b6:31: 62:8d:bb:71:3b:13:9d:63:ab:28:b5:61:29:2f:01: b6:10:5f:93:d0:1a:9a:96:be:06:b1:32:0f:56:65: dd:f4:b6:bb:a2:53:6a:d0:b2:a5:a1:90:d9:34:34: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:27:E9:3F:99:94:05:AD:17:A7:C4:75:C8:E0:1C:2B:BF:BA:33 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:47:2e:22:05:bc:f4:ba:35:9c:34:38:c3:a1:70:6b:00:73: 26:dc:09:2d:89:5d:ac:d4:66:66:cf:3e:b3:26:e8:b6:08:29: 6d:e0:0d:62:96:c0:a2:67:0f:43:1a:f4:d2:90:6f:83:99:4a: 01:bd:1c:15:3f:9a:72:2c:c6:1f:44:47:31:45:3b:b1:d3:45: 96:bb:98:27:f2:46:4a:ad:e2:17:d6:19:5f:fd:b2:76:f1:1c: 90:8d:6b:4f:4a:18:0e:8d:ad:36:43:68:40:90:c4:40:b0:6b: 50:53:bf:54:e4:49:0d:3d:00:87:12:c2:ff:b3:d7:71:e9:b2: 81:7c:8f:75:bb:ad:3e:e1:e9:89:07:ad:17:9a:11:dc:f1:66: 12:39:46:87:d7:75:39:2b:1b:30:f8:50:04:2e:dd:bb:12:cc: 09:f2:74:f2:9f:1c:cd:0b:7a:07:34:15:ca:87:b5:8e:dc:f9: 51:99:3c:a0:f8:f3:f1:a4:3c:de:b7:81:47:39:23:4d:b6:07: 18:81:de:ad:db:29:0a:1c:ff:50:1e:1e:b4:44:b3:f2:f4:18: fa:c5:ed:5b:70:40:e0:4c:34:7b:44:73:da:92:aa:c1:c4:fa: e9:be:2c:92:7b:9b:01:22:1c:16:16:0b:c2:e4:a6:77:e3:c8: 8a:46:6c:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmcJfeFPH84LrviQ0DUPaLjiXIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTEyMjMwNzU2NDJaFw0yNTEyMjYxNjUwNDJaMDMxMTAvBgNV BAMTKDNCQ0UyN0U5M0Y5OTk0MDVBRDE3QTdDNDc1QzhFMDFDMkJCRkJBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFsRPWM61ioPMD4DC6VhbSBQP 3bPxuvX3Idfe/wMgKmdbfC0G/9gMTie44ivRBbRP3F1sbdix9AQvHK9cQbb3ZGBD aU2XLvFFDfSyjPyvmEinW4t9l1VxuP/WHrcxK0OW4g68l98K8hUbHJ8XFvRo+2Ks XnbiAPSJtcLyOTcn3rTo5wZhjGhmLT+hXy249LwMvFYjkmcGa5+9rMLcJ6fihI8y /txbjwCZ5Aoe7fmXbDz41AgkQ7yts0xBlKeMcFI5zkLqlfgtuV9AomUd8ae2MWKN u3E7E51jqyi1YSkvAbYQX5PQGpqWvgaxMg9WZd30truiU2rQsqWhkNk0NCUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO84n6T+ZlAWtF6fEdcjgHCu/ujMwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxHLiIFvPS6NZw0OMOhcGsAcybcCS2JXazU ZmbPPrMm6LYIKW3gDWKWwKJnD0Ma9NKQb4OZSgG9HBU/mnIsxh9ERzFFO7HTRZa7 mCfyRkqt4hfWGV/9snbxHJCNa09KGA6NrTZDaECQxECwa1BTv1TkSQ09AIcSwv+z 13HpsoF8j3W7rT7h6YkHrReaEdzxZhI5RofXdTkrGzD4UAQu3bsSzAnydPKfHM0L egc0FcqHtY7c+VGZPKD48/GkPN63gUc5I022BxiB3q3bKQoc/1AeHrREs/L0GPrF 7VtwQOBMNHtEc9qSqsHE+um+LJJ7mwEiHBYWC8LkpnfjyIpGbH4= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:32 2025 by rpki-client