This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: dXXIz3Ihay4BvkOVcvNMDKZAr46gWbG4hsSvppKVltM= Subject key identifier: 4E:13:69:6E:E8:75:D5:33:18:17:82:67:64:7A:84:1F:00:E9:EC:39 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 5638A16FE1FA3B7153D4D265B88A6E3BC21E77B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: E4 Signing time: Thu 18 Dec 2025 17:30:54 +0000 Manifest this update: Thu 18 Dec 2025 17:25:54 +0000 Manifest next update: Mon 22 Dec 2025 00:58:54 +0000 Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 2: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) 3: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: iyzr3Hlz1FyaLaqJBHyBbG4g0zn7ImYM9Yk9D/QaURg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:38:a1:6f:e1:fa:3b:71:53:d4:d2:65:b8:8a:6e:3b:c2:1e:77:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Dec 18 17:25:54 2025 GMT Not After : Dec 22 00:58:54 2025 GMT Subject: CN=4E13696EE875D53318178267647A841F00E9EC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:e7:d9:57:fa:48:ec:69:9b:5a:5c:e4:9a: 08:41:8f:34:10:0e:34:cb:75:08:9e:fb:6e:75:c7: 29:fd:c4:f2:a6:fa:88:23:6f:7e:6e:b9:de:74:dd: 2c:53:a3:56:b7:7e:ee:6e:69:d0:31:e6:db:ab:c0: c4:92:33:fb:4a:b9:cc:e3:43:87:08:f9:3f:ef:39: 89:3c:1d:5c:6e:6c:35:64:b1:8a:55:a2:b8:c9:56: 72:8e:30:d9:24:0f:e0:db:db:8a:21:77:d8:85:90: 5d:6c:5d:59:b3:b1:d2:c4:30:dd:cd:6e:36:2c:02: a5:c5:75:45:60:54:e7:df:1e:d1:03:f3:62:9b:47: ed:0a:dd:57:fa:1f:5f:e1:af:a7:12:f4:b9:2b:5f: a4:40:55:d5:6c:a1:8b:9f:b0:76:cc:25:06:bd:ee: e4:2f:af:c0:5a:2c:b6:9e:1c:17:69:0a:17:1c:37: 23:3e:bb:e7:58:ca:44:69:52:3d:0e:d9:c0:88:58: 41:d1:98:f6:5b:6c:e9:79:2e:5c:02:df:bb:30:ac: 75:31:a3:ae:cb:dd:14:a5:ff:5c:92:88:c3:06:cf: e7:cb:8c:08:28:06:91:bd:a2:c7:0f:0e:24:04:b0: 49:14:43:68:0b:a4:e9:9e:78:ba:c2:10:84:a5:4d: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:13:69:6E:E8:75:D5:33:18:17:82:67:64:7A:84:1F:00:E9:EC:39 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ba:82:dc:66:d3:02:11:23:23:ba:6c:50:33:21:78:b0:5f: 09:7e:09:06:ff:e2:00:da:bb:85:0c:26:46:08:9b:e2:61:6c: 58:ab:52:55:89:dd:19:d5:fe:ba:83:b5:67:67:eb:dd:ad:4f: bb:3a:3d:a7:64:b3:85:1e:83:51:ec:84:55:35:5d:16:f7:9d: 78:f5:aa:8f:cc:fe:ae:8d:77:e8:29:34:d1:94:92:e1:7b:75: cf:3c:5b:f5:f4:ff:85:19:11:29:4c:3c:0d:c6:9d:3e:cb:9f: 1e:bc:69:06:df:bc:68:e4:f1:d3:34:a1:bc:31:ff:cb:b5:55: 17:21:7e:0d:26:87:70:47:32:45:3f:dd:41:58:bb:b9:d5:b0: 28:88:e2:6a:da:bc:66:ec:9b:bf:5e:a4:75:a0:6d:6b:f5:6a: f7:30:e8:b4:01:85:2c:15:9a:15:e3:c6:8a:16:d6:27:91:ca: b4:15:a0:e2:c8:c5:bf:cd:fd:3f:11:39:8e:6d:81:a3:fc:70: 3f:71:4b:13:da:49:d9:1f:44:4e:10:e1:2b:3a:33:29:a5:0c: 48:fa:08:73:3a:e0:d8:75:48:41:ad:61:f3:01:8e:ea:d7:47: 7c:13:d5:8c:3a:c6:a9:9b:a3:cf:32:35:d3:8a:d0:3e:a5:64: 29:a2:06:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjihb+H6O3FT1NJluIpuO8Ied7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTEyMTgxNzI1NTRaFw0yNTEyMjIwMDU4NTRaMDMxMTAvBgNV BAMTKDRFMTM2OTZFRTg3NUQ1MzMxODE3ODI2NzY0N0E4NDFGMDBFOUVDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzefZV/pI7GmbWlzkmghBjzQQ DjTLdQie+251xyn9xPKm+ogjb35uud503SxTo1a3fu5uadAx5turwMSSM/tKuczj Q4cI+T/vOYk8HVxubDVksYpVorjJVnKOMNkkD+Db24ohd9iFkF1sXVmzsdLEMN3N bjYsAqXFdUVgVOffHtED82KbR+0K3Vf6H1/hr6cS9LkrX6RAVdVsoYufsHbMJQa9 7uQvr8BaLLaeHBdpChccNyM+u+dYykRpUj0O2cCIWEHRmPZbbOl5LlwC37swrHUx o67L3RSl/1ySiMMGz+fLjAgoBpG9oscPDiQEsEkUQ2gLpOmeeLrCEISlTfepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThNpbuh11TMYF4JnZHqEHwDp7DkwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu6gtxm0wIRIyO6bFAzIXiwXwl+CQb/4gDa u4UMJkYIm+JhbFirUlWJ3RnV/rqDtWdn692tT7s6Padks4Ueg1HshFU1XRb3nXj1 qo/M/q6Nd+gpNNGUkuF7dc88W/X0/4UZESlMPA3GnT7Lnx68aQbfvGjk8dM0obwx /8u1VRchfg0mh3BHMkU/3UFYu7nVsCiI4mravGbsm79epHWgbWv1avcw6LQBhSwV mhXjxooW1ieRyrQVoOLIxb/N/T8ROY5tgaP8cD9xSxPaSdkfRE4Q4Ss6MymlDEj6 CHM64Nh1SEGtYfMBjurXR3wT1Yw6xqmbo88yNdOK0D6lZCmiBr8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:40 2025 by rpki-client