This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: NfzBz1jFRj2Y9j6j/eBj8M0V5biJUIzW0LZp7iKC1yo= Subject key identifier: 0C:BA:43:E4:DA:00:9B:3B:24:32:28:51:F3:15:B9:5D:9A:8B:D6:B5 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 166E0590BAE2A4C45ECDFE58256753CE8EAE0558 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 022B Signing time: Thu 18 Dec 2025 15:10:00 +0000 Manifest this update: Thu 18 Dec 2025 15:05:00 +0000 Manifest next update: Sun 21 Dec 2025 21:20:00 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) 2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: 6OJHXO4Fmqzu+oIWD6O4mjL+v0jxey5rJkNjERfjOVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:05:90:ba:e2:a4:c4:5e:cd:fe:58:25:67:53:ce:8e:ae:05:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Dec 18 15:05:00 2025 GMT Not After : Dec 21 21:20:00 2025 GMT Subject: CN=0CBA43E4DA009B3B24322851F315B95D9A8BD6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:e1:be:3d:17:78:c0:cf:5d:db:7f:da:ca: f5:45:21:46:68:86:e3:25:30:06:91:0c:56:23:22: 7e:f4:95:05:56:01:04:37:c0:82:0e:8a:be:35:37: ed:ea:df:f0:3b:9f:99:a3:e5:d9:e9:fc:69:d4:d0: 52:6f:32:f1:58:6c:96:a6:23:6c:3c:13:c0:9f:54: 68:ea:de:c0:14:c9:0b:80:04:1f:29:fb:b2:ef:e2: 61:da:84:65:4b:00:7a:85:05:66:a3:47:67:77:6e: 97:b5:2d:3f:9e:62:27:38:a1:dc:67:01:eb:95:97: 2b:ac:8c:39:2d:1d:dd:27:fb:63:be:dd:a7:75:c5: e6:8b:d7:12:84:d2:74:66:ca:12:de:a7:ec:cd:93: 0b:32:e1:ba:0f:ef:c3:82:4f:18:7d:95:80:c6:07: 04:3e:2b:86:ae:54:89:9b:2b:2c:7d:e5:1c:dd:97: 22:80:59:99:e8:73:a1:04:a4:6f:57:2b:6f:70:45: f8:ec:78:b3:d0:62:ad:b6:20:c7:8c:2d:74:05:01: 97:16:6e:5f:6d:de:86:e3:f9:31:e6:b3:ef:dd:00: 22:08:0a:46:3f:c5:90:88:49:af:54:72:2c:bf:a6: a2:76:fb:23:aa:0f:4f:ab:93:23:1c:d7:78:dd:af: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:43:E4:DA:00:9B:3B:24:32:28:51:F3:15:B9:5D:9A:8B:D6:B5 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:70:e9:e3:54:98:4a:b8:b0:38:0f:8d:27:19:e5:22:db:d7: 1d:12:07:b2:f1:6c:c4:2d:6c:d4:e9:47:f9:90:b4:e2:0a:a3: 99:dd:22:33:15:4f:eb:dd:b0:f6:b0:9a:28:60:db:e2:47:1a: 17:34:57:e3:08:73:f6:86:41:f3:17:64:98:d4:0b:64:21:cc: 97:93:d2:40:95:b2:bc:14:a6:6d:3b:18:95:6b:c0:93:b6:dd: 8a:81:e7:00:22:fe:c9:a0:97:a1:10:98:9f:0a:97:01:61:f6: 8b:63:2e:66:d9:26:54:fc:1c:ff:80:64:a0:83:2a:8b:65:4c: 44:30:4b:5e:e5:e9:9c:36:c7:f7:57:d2:1c:1d:9c:f9:f5:93: 8a:51:21:1b:06:51:27:de:4c:9d:1a:11:78:26:55:93:03:d9: 76:f4:40:34:6e:f2:de:ae:02:41:a2:0f:00:f9:8f:87:47:5b: 9b:20:97:88:52:b1:61:c0:6a:65:58:55:6f:3f:67:ea:49:82: 8d:ee:ae:63:0a:25:0e:0e:9e:1f:08:16:16:d0:95:d1:17:f9: 2c:88:45:aa:6e:c6:4b:f5:6c:82:50:07:e6:31:0d:8d:24:05: 8f:ec:0d:68:6b:e3:ad:c2:c2:cd:d6:fc:6c:b6:2a:2e:36:18: 14:57:86:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFm4FkLripMRezf5YJWdTzo6uBVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNTEyMTgxNTA1MDBaFw0yNTEyMjEyMTIwMDBaMDMxMTAvBgNV BAMTKDBDQkE0M0U0REEwMDlCM0IyNDMyMjg1MUYzMTVCOTVEOUE4QkQ2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zuG+PRd4wM9d23/ayvVFIUZo huMlMAaRDFYjIn70lQVWAQQ3wIIOir41N+3q3/A7n5mj5dnp/GnU0FJvMvFYbJam I2w8E8CfVGjq3sAUyQuABB8p+7Lv4mHahGVLAHqFBWajR2d3bpe1LT+eYic4odxn AeuVlyusjDktHd0n+2O+3ad1xeaL1xKE0nRmyhLep+zNkwsy4boP78OCTxh9lYDG BwQ+K4auVImbKyx95RzdlyKAWZnoc6EEpG9XK29wRfjseLPQYq22IMeMLXQFAZcW bl9t3obj+THms+/dACIICkY/xZCISa9Uciy/pqJ2+yOqD0+rkyMc13jdrzPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLpD5NoAmzskMihR8xW5XZqL1rUwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpw6eNUmEq4sDgPjScZ5SLb1x0SB7LxbMQt bNTpR/mQtOIKo5ndIjMVT+vdsPawmihg2+JHGhc0V+MIc/aGQfMXZJjUC2QhzJeT 0kCVsrwUpm07GJVrwJO23YqB5wAi/smgl6EQmJ8KlwFh9otjLmbZJlT8HP+AZKCD KotlTEQwS17l6Zw2x/dX0hwdnPn1k4pRIRsGUSfeTJ0aEXgmVZMD2Xb0QDRu8t6u AkGiDwD5j4dHW5sgl4hSsWHAamVYVW8/Z+pJgo3urmMKJQ4Onh8IFhbQldEX+SyI Rapuxkv1bIJQB+YxDY0kBY/sDWhr463Cws3W/Gy2Ki42GBRXhtM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:00 2025 by rpki-client