This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: b1y1Lqo+/pQ9wUPYKPKEdgjyea+HR/eXLV0CCY+nF/U= Subject key identifier: 5A:3B:2B:7F:C1:C0:63:B8:BA:17:0E:06:36:4B:90:C5:98:5E:7A:CB Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 1D6586CD338E5B445BA14D4E54ABECC38E9181F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: C5 Signing time: Wed 24 Dec 2025 11:22:57 +0000 Manifest this update: Wed 24 Dec 2025 11:17:57 +0000 Manifest next update: Sat 27 Dec 2025 13:43:57 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: WKtk247VqC7yqZyn5TzG1RUnNMBMRNS/OO0ai+B95CA=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:65:86:cd:33:8e:5b:44:5b:a1:4d:4e:54:ab:ec:c3:8e:91:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Dec 24 11:17:57 2025 GMT Not After : Dec 27 13:43:57 2025 GMT Subject: CN=5A3B2B7FC1C063B8BA170E06364B90C5985E7ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:f0:07:6e:b6:dd:6d:d7:03:46:d4:89:9a: 85:5f:5a:9b:14:02:8b:24:9b:71:91:0a:2d:14:35: c8:18:f9:af:f4:cb:e2:98:29:79:f1:c2:57:3a:70: e4:50:0f:9a:5c:1c:1f:ec:e1:13:41:59:e7:c5:05: 10:d7:e4:e9:c2:98:78:be:25:ed:92:40:85:af:61: 68:da:75:a6:ce:52:da:3e:4b:11:96:19:97:e0:17: dd:a2:45:0c:6a:e1:61:be:b2:30:76:49:49:36:1f: 98:e8:85:1b:86:31:37:46:e3:14:4d:de:fa:0b:e8: 0e:97:e6:7d:d3:51:7c:d2:18:00:cf:28:c9:6f:1f: a3:08:20:7a:da:c8:71:07:ec:37:ae:76:4c:af:07: 6d:50:2e:ba:b0:77:fc:c5:fa:03:65:d8:a6:76:40: fc:ca:3f:46:87:a6:ec:ea:35:f7:e7:63:95:ae:8e: f7:b5:cf:f9:7b:36:7a:52:7b:eb:fc:ba:b3:70:a5: 70:13:ae:a8:6e:27:27:26:ac:c3:1a:96:b1:51:8f: 72:30:1d:9f:be:08:fa:d3:85:fc:e3:5f:60:77:f0: 36:89:5c:32:dd:53:ba:d2:59:7e:71:69:dd:c4:18: e9:2c:e5:0d:b0:cb:b2:13:1b:ba:f8:47:cb:f7:1f: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:2B:7F:C1:C0:63:B8:BA:17:0E:06:36:4B:90:C5:98:5E:7A:CB X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:67:9e:c7:ea:20:fb:a4:41:92:b6:a1:6c:a4:fc:50:42:da: f3:1a:76:64:0e:a3:f4:03:56:92:ab:fc:31:11:15:36:0f:ab: 30:2a:7b:15:9c:bc:81:76:01:d4:10:d0:86:2d:f8:29:d5:7b: 9e:79:00:00:2c:62:64:ca:40:6a:b5:c0:5c:c3:a3:aa:a0:9f: 39:bc:e1:30:cd:b5:30:f7:29:2c:05:ca:57:42:53:a0:7b:e4: 90:98:99:b4:d9:8c:cc:a8:fa:79:3f:2c:58:2d:d6:01:2c:88: 98:52:24:cb:18:e4:08:b2:9d:ef:7d:ca:86:2c:cc:63:85:9d: a2:d5:f0:f4:70:0f:2b:05:91:8f:48:7a:e8:01:d1:71:6b:1f: da:e1:4a:36:28:56:d1:b8:30:89:f2:2b:53:42:f9:65:db:e4: fd:35:cd:94:d8:e1:34:51:e8:30:a7:3f:b7:9d:fd:16:24:35: aa:fb:d3:cc:17:25:5f:c3:05:d2:0d:f3:a2:bf:50:c8:53:48: 69:df:2c:d0:f5:b6:f0:f6:cf:ee:7b:1d:fb:5b:a0:81:ae:bf: 15:d4:d1:92:91:b9:2c:58:44:34:3c:4e:cc:67:64:b0:88:20: ce:87:01:64:85:9d:05:c6:6d:81:32:e8:70:78:60:15:a0:33: ae:3a:e1:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWWGzTOOW0RboU1OVKvsw46RgfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTEyMjQxMTE3NTdaFw0yNTEyMjcxMzQzNTdaMDMxMTAvBgNV BAMTKDVBM0IyQjdGQzFDMDYzQjhCQTE3MEUwNjM2NEI5MEM1OTg1RTdBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjvAHbrbdbdcDRtSJmoVfWpsU Aoskm3GRCi0UNcgY+a/0y+KYKXnxwlc6cORQD5pcHB/s4RNBWefFBRDX5OnCmHi+ Je2SQIWvYWjadabOUto+SxGWGZfgF92iRQxq4WG+sjB2SUk2H5johRuGMTdG4xRN 3voL6A6X5n3TUXzSGADPKMlvH6MIIHrayHEH7DeudkyvB21QLrqwd/zF+gNl2KZ2 QPzKP0aHpuzqNffnY5Wujve1z/l7NnpSe+v8urNwpXATrqhuJycmrMMalrFRj3Iw HZ++CPrThfzjX2B38DaJXDLdU7rSWX5xad3EGOks5Q2wy7ITG7r4R8v3H3QJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjsrf8HAY7i6Fw4GNkuQxZheesswHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxnnsfqIPukQZK2oWyk/FBC2vMadmQOo/QD VpKr/DERFTYPqzAqexWcvIF2AdQQ0IYt+CnVe555AAAsYmTKQGq1wFzDo6qgnzm8 4TDNtTD3KSwFyldCU6B75JCYmbTZjMyo+nk/LFgt1gEsiJhSJMsY5Aiyne99yoYs zGOFnaLV8PRwDysFkY9IeugB0XFrH9rhSjYoVtG4MInyK1NC+WXb5P01zZTY4TRR 6DCnP7ed/RYkNar708wXJV/DBdIN86K/UMhTSGnfLND1tvD2z+57HftboIGuvxXU 0ZKRuSxYRDQ8TsxnZLCIIM6HAWSFnQXGbYEy6HB4YBWgM6464a8= -----END CERTIFICATE-----Generated at Wed Dec 24 18:11:28 2025 by rpki-client