This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: cN6ypfoo3uvWxIgUEwV3cs6cOXzbxkdzrxA8JJnuu00= Subject key identifier: 56:D7:63:B5:4D:91:AD:0E:1C:27:6C:A4:DC:43:5E:51:DC:60:9A:D0 Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 2D64BBA064441012EEED881CCC3E55EE7E53283C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01C2 Signing time: Wed 17 Dec 2025 13:51:36 +0000 Manifest this update: Wed 17 Dec 2025 13:46:36 +0000 Manifest next update: Sat 20 Dec 2025 22:22:36 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: 2eltIQcqdqPaN+/Fcg7U/W30lwFC1JtPQlEWh5FGGW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:64:bb:a0:64:44:10:12:ee:ed:88:1c:cc:3e:55:ee:7e:53:28:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Dec 17 13:46:36 2025 GMT Not After : Dec 20 22:22:36 2025 GMT Subject: CN=56D763B54D91AD0E1C276CA4DC435E51DC609AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:4c:4a:1a:b1:33:72:e4:1f:1b:04:c6:91: e1:33:f1:98:22:3f:71:c5:ae:8b:b7:70:b7:2c:84: 45:db:85:32:bf:6f:5f:75:c5:91:78:1e:84:15:51: b5:6b:28:cd:02:1a:9e:6a:f3:6d:b7:48:c2:0e:42: dd:be:78:05:5c:fc:22:94:2a:d1:8e:83:08:29:d6: b5:8e:6b:f5:c3:30:c5:00:c0:b6:c0:ac:d9:2d:e1: 81:d4:82:94:68:5d:70:32:59:f9:22:0e:8c:82:1d: d8:b6:3b:f9:95:a7:f0:c4:fa:e9:a3:93:3f:4f:53: ba:2a:e4:3e:30:6d:df:2f:dd:50:61:b8:2d:af:14: ab:8a:f8:cf:67:69:ff:69:83:db:22:22:46:18:e6: a6:fd:8f:7c:67:92:c0:ef:fa:87:40:89:8e:8c:2f: e2:30:12:26:83:8d:a6:97:ea:dd:5a:76:91:dd:3e: 6a:db:48:64:b1:5c:87:5a:ca:c5:de:2a:0c:37:88: ec:a4:17:a3:97:df:35:63:08:31:b3:4b:e2:b2:13: f8:b7:b3:91:5a:16:8f:a0:f1:e7:82:ad:0d:05:ab: 0b:68:2b:6a:92:a3:c0:80:9d:a0:6d:8b:2b:61:04: b2:a0:97:0c:3b:41:86:2a:fb:c4:8b:de:8c:b8:07: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:63:B5:4D:91:AD:0E:1C:27:6C:A4:DC:43:5E:51:DC:60:9A:D0 X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d2:66:f0:6d:6b:81:3c:02:6f:e0:69:c0:50:4c:0e:9e:7d: 23:30:8d:d5:7d:ec:22:53:e2:62:99:92:12:38:55:67:d4:73: 37:e4:eb:42:16:37:6b:6b:59:e8:08:d1:4a:5e:5a:67:71:4d: 1e:27:42:8e:08:cd:60:34:6e:27:d9:36:8c:e0:ed:d1:1f:18: ba:6b:ca:6a:4a:24:81:18:df:57:f7:de:00:84:7f:52:af:c0: 92:fa:dc:2c:7c:fe:a4:8f:d0:47:38:a0:20:c0:f6:5c:0a:8a: 36:4a:73:b4:02:f2:78:92:66:00:b4:7f:99:de:dd:c3:ed:ce: be:62:27:d3:72:1f:d9:9c:a9:6a:3e:e1:f0:d9:3d:26:bd:8f: 72:6b:5c:b3:bd:23:9c:10:78:eb:d8:51:b4:1f:37:1a:4e:8a: ff:bd:38:a3:f1:45:de:f3:3f:82:c5:74:11:c7:a0:51:2e:58: 90:00:73:ff:8d:97:d5:2f:a7:3e:d2:fb:78:e8:7e:26:be:3d: 27:52:4a:9e:5e:3f:cb:89:d6:44:cc:e5:8c:cd:85:3c:95:f0: 5e:2d:e1:e4:da:60:72:7a:45:97:85:73:37:4f:e2:14:93:ec: 31:1c:2d:c8:04:38:21:f5:51:b4:ac:0d:0c:a1:98:1d:c1:3e: 2c:53:3e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWS7oGREEBLu7YgczD5V7n5TKDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTEyMTcxMzQ2MzZaFw0yNTEyMjAyMjIyMzZaMDMxMTAvBgNV BAMTKDU2RDc2M0I1NEQ5MUFEMEUxQzI3NkNBNERDNDM1RTUxREM2MDlBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7kxKGrEzcuQfGwTGkeEz8Zgi P3HFrou3cLcshEXbhTK/b191xZF4HoQVUbVrKM0CGp5q8223SMIOQt2+eAVc/CKU KtGOgwgp1rWOa/XDMMUAwLbArNkt4YHUgpRoXXAyWfkiDoyCHdi2O/mVp/DE+umj kz9PU7oq5D4wbd8v3VBhuC2vFKuK+M9naf9pg9siIkYY5qb9j3xnksDv+odAiY6M L+IwEiaDjaaX6t1adpHdPmrbSGSxXIdaysXeKgw3iOykF6OX3zVjCDGzS+KyE/i3 s5FaFo+g8eeCrQ0FqwtoK2qSo8CAnaBtiythBLKglww7QYYq+8SL3oy4B/J5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtdjtU2RrQ4cJ2yk3ENeUdxgmtAwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELSZvBta4E8Am/gacBQTA6efSMwjdV97CJT 4mKZkhI4VWfUczfk60IWN2trWegI0UpeWmdxTR4nQo4IzWA0bifZNozg7dEfGLpr ympKJIEY31f33gCEf1KvwJL63Cx8/qSP0Ec4oCDA9lwKijZKc7QC8niSZgC0f5ne 3cPtzr5iJ9NyH9mcqWo+4fDZPSa9j3JrXLO9I5wQeOvYUbQfNxpOiv+9OKPxRd7z P4LFdBHHoFEuWJAAc/+Nl9Uvpz7S+3jofia+PSdSSp5eP8uJ1kTM5YzNhTyV8F4t 4eTaYHJ6RZeFczdP4hST7DEcLcgEOCH1UbSsDQyhmB3BPixTPvI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:36 2025 by rpki-client