This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: wwT3wlShqFvqDNoixQ0QwtfkvhyUPVdR1Sf5HqvCgAE= Subject key identifier: 93:A0:D8:6D:6D:14:03:27:1A:D6:D2:D2:5C:A5:2C:64:E4:AB:56:02 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 63EC2FC696CD7297E7073D56CAF1AD0C4E8D7006 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 03A3 Signing time: Tue 23 Dec 2025 11:02:00 +0000 Manifest this update: Tue 23 Dec 2025 10:57:00 +0000 Manifest next update: Fri 26 Dec 2025 12:15:00 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: KvSwZ0n60keFptlcTFTUK/0nNJDFdjS5gwon3QvcmzU=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ec:2f:c6:96:cd:72:97:e7:07:3d:56:ca:f1:ad:0c:4e:8d:70:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Dec 23 10:57:00 2025 GMT Not After : Dec 26 12:15:00 2025 GMT Subject: CN=93A0D86D6D1403271AD6D2D25CA52C64E4AB5602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:c0:89:74:0c:7b:ad:95:01:50:f9:41:4b: e8:cd:d7:69:01:3e:5a:9b:88:b6:11:d9:61:f1:82: d4:94:6f:51:76:87:bb:37:d5:87:77:e4:1d:85:ab: 98:f9:6b:d2:30:d8:e0:10:23:7c:31:42:46:3f:1a: 9f:56:df:03:2d:73:c0:be:d1:50:fc:7d:1f:7e:dd: 59:16:0a:5a:b5:58:1a:b5:ba:e1:99:62:ea:9a:37: 6f:9b:78:99:d1:f7:f1:00:61:79:11:85:56:d7:72: 61:a4:25:ad:57:09:77:54:bc:1f:3a:4b:63:6d:4c: 60:a0:0e:e3:45:d2:26:8d:2d:6f:62:de:f3:2f:6c: 0f:e5:23:ab:ba:74:75:5d:d0:7c:4a:56:6c:df:45: 75:06:27:bd:9d:f9:71:86:86:03:fd:aa:27:54:97: 47:35:e5:72:5a:1e:5b:05:71:1f:c6:d4:94:b8:4e: 0b:24:21:a9:5a:b2:5b:98:a9:be:f1:1b:60:50:5c: c4:51:d2:23:52:62:61:23:b2:0e:20:72:42:e2:6c: 8d:e6:38:01:84:5e:39:d5:5f:70:e5:c9:ae:81:a2: ea:38:90:47:21:d4:4e:85:ca:70:42:7c:0e:51:ea: b8:4b:51:14:e0:29:9d:1f:40:15:d8:7b:cf:89:46: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:D8:6D:6D:14:03:27:1A:D6:D2:D2:5C:A5:2C:64:E4:AB:56:02 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:7a:99:da:89:a8:a4:06:0b:20:b9:ea:b6:5a:88:ab:65:30: 0f:70:8c:1d:f5:42:d5:e7:0c:ff:9c:e0:6c:23:88:d1:0e:1d: 16:a3:76:48:5c:89:80:b6:50:26:a1:74:ca:27:aa:26:be:a4: af:08:b3:cb:e1:e5:89:ca:a3:26:cb:41:e9:d2:ca:aa:56:43: 28:6e:8c:47:b8:0e:6c:cd:c2:39:d8:85:0c:4c:23:82:ec:0e: c9:64:9f:b3:d1:2c:6c:b6:98:a6:3e:c2:4e:01:6b:cd:0c:f0: 4a:5c:cb:a5:b4:3e:a1:46:7d:9a:40:3a:a8:23:40:4f:01:41: 31:ed:fa:e0:68:ee:f1:ee:b5:82:a7:d3:c2:18:71:71:18:1a: d9:44:50:c9:2d:42:fc:55:ed:89:51:ca:d3:7e:ac:c0:8e:1e: e7:c4:55:5a:55:5b:9e:00:95:cf:2e:5b:e2:7e:b5:28:74:a6: 68:46:7f:66:1a:6b:cd:fc:f4:df:26:7d:32:42:f4:aa:ea:e6: 45:14:4f:15:7a:cd:ba:dd:52:fc:c5:dd:09:19:5a:f6:f8:30: ae:ef:bd:5e:68:e7:59:bc:35:01:91:ad:f8:0b:3b:71:c8:84: 68:34:56:f4:51:2f:8e:e5:5a:b0:2e:45:d7:b9:8b:d4:66:ea: 60:8e:85:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+wvxpbNcpfnBz1WyvGtDE6NcAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTEyMjMxMDU3MDBaFw0yNTEyMjYxMjE1MDBaMDMxMTAvBgNV BAMTKDkzQTBEODZENkQxNDAzMjcxQUQ2RDJEMjVDQTUyQzY0RTRBQjU2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcMCJdAx7rZUBUPlBS+jN12kB PlqbiLYR2WHxgtSUb1F2h7s31Yd35B2Fq5j5a9Iw2OAQI3wxQkY/Gp9W3wMtc8C+ 0VD8fR9+3VkWClq1WBq1uuGZYuqaN2+beJnR9/EAYXkRhVbXcmGkJa1XCXdUvB86 S2NtTGCgDuNF0iaNLW9i3vMvbA/lI6u6dHVd0HxKVmzfRXUGJ72d+XGGhgP9qidU l0c15XJaHlsFcR/G1JS4TgskIalasluYqb7xG2BQXMRR0iNSYmEjsg4gckLibI3m OAGEXjnVX3Dlya6Bouo4kEch1E6FynBCfA5R6rhLURTgKZ0fQBXYe8+JRgudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6DYbW0UAyca1tLSXKUsZOSrVgIwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALd6mdqJqKQGCyC56rZaiKtlMA9wjB31QtXn DP+c4GwjiNEOHRajdkhciYC2UCahdMonqia+pK8Is8vh5YnKoybLQenSyqpWQyhu jEe4DmzNwjnYhQxMI4LsDslkn7PRLGy2mKY+wk4Ba80M8Epcy6W0PqFGfZpAOqgj QE8BQTHt+uBo7vHutYKn08IYcXEYGtlEUMktQvxV7YlRytN+rMCOHufEVVpVW54A lc8uW+J+tSh0pmhGf2Yaa8389N8mfTJC9Krq5kUUTxV6zbrdUvzF3QkZWvb4MK7v vV5o51m8NQGRrfgLO3HIhGg0VvRRL47lWrAuRde5i9Rm6mCOhcA= -----END CERTIFICATE-----Generated at Wed Dec 24 16:04:44 2025 by rpki-client