This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: UHA8wKhWBMgoH7WpfN6TS2ShCmDj4jDjSvWsyeR7KTM= Subject key identifier: 57:9E:1D:88:97:77:7A:44:36:E4:E3:0F:BC:A4:B3:51:72:4F:97:0C Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 087D97EC203EE9FF8456A6A06084504D1649BE19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0242 Signing time: Mon 15 Dec 2025 07:02:19 +0000 Manifest this update: Mon 15 Dec 2025 06:57:19 +0000 Manifest next update: Thu 18 Dec 2025 10:16:19 +0000 Files and hashes: 1: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 2: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 3: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: OHaEONkmxK3vnOrH7YLCCJWsFaNsM/TwwDT8hIWgYXY=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 10:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7d:97:ec:20:3e:e9:ff:84:56:a6:a0:60:84:50:4d:16:49:be:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Dec 15 06:57:19 2025 GMT Not After : Dec 18 10:16:19 2025 GMT Subject: CN=579E1D8897777A4436E4E30FBCA4B351724F970C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:fe:1f:f3:b0:cf:8e:58:29:ab:55:d5:c0: 4e:a4:6c:15:9e:cf:90:39:78:66:2a:7a:da:f1:51: 2d:94:0a:c2:a9:b4:c6:5c:9f:7f:28:c7:65:8c:f0: b2:31:9b:f1:8e:fc:59:ef:fb:9f:ef:aa:f0:49:54: 06:de:af:54:db:47:26:58:c1:3b:6e:ff:e9:62:98: 14:3d:d3:2e:54:14:df:c9:20:02:ee:31:7d:b2:bc: 0c:f8:b2:13:ac:44:4a:b5:90:77:d6:78:22:f7:d2: 00:7a:df:60:f3:f8:ba:32:c6:de:e0:c1:ca:c3:00: 91:94:b3:8f:86:da:86:e3:e7:68:cf:3d:85:4c:08: 35:9c:0c:e8:3a:54:53:b1:ef:e3:50:57:55:30:e2: 96:c2:1f:4f:11:0e:71:c6:8f:2c:02:7c:6d:38:9e: 83:e0:c5:dd:0b:4d:d9:10:07:1f:61:e3:ee:71:ed: 4b:aa:02:fd:95:26:9b:5f:3e:c1:ee:3d:71:7b:62: 50:88:2d:6f:b0:7a:6b:2a:3d:2c:f0:e7:21:48:6f: d1:55:4b:0c:52:e9:7c:8f:c9:95:9f:86:1b:da:49: 33:2e:18:98:ef:09:6e:ab:ea:51:33:e8:1b:3e:7f: e2:a6:21:3f:00:61:0a:90:9d:16:2b:50:75:73:dc: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9E:1D:88:97:77:7A:44:36:E4:E3:0F:BC:A4:B3:51:72:4F:97:0C X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:8f:b6:db:ef:61:21:9a:2e:d2:d3:6c:14:4e:16:2a:34: 74:38:de:84:20:f8:1b:37:51:f6:2a:b7:ac:20:ff:70:f8:27: dd:c5:26:bc:b5:68:4f:d0:01:44:2a:4f:fc:31:84:e4:db:21: 82:b5:44:c0:8c:f4:02:af:e9:d6:02:f2:d8:0b:8e:6d:6a:86: eb:af:6b:62:9f:52:70:ca:77:5c:79:cf:4d:dc:a2:d8:80:87: b8:08:15:29:05:73:d9:48:d9:c7:4e:9c:75:f4:b4:68:a5:ac: 2c:3f:04:6d:fd:01:cb:7a:e8:ff:d1:3e:fa:24:84:4d:ae:47: b2:18:50:33:c4:b8:6a:44:88:84:c3:f5:c5:1f:30:62:19:19: 76:f8:6f:3d:76:c8:5c:a0:d9:65:d6:a0:d1:fa:aa:26:bf:5e: 22:04:0d:5c:ea:d2:f3:f0:96:57:17:d4:2d:be:4e:7b:11:ea: 0e:b0:c2:b0:1b:00:ac:4a:a3:65:43:4c:db:7f:96:a6:23:e6: 5f:56:2f:09:d2:42:34:84:74:f9:df:e0:3f:fa:ae:30:9a:14: 73:53:dd:8d:5a:39:1e:84:99:72:c6:d9:2d:d2:bb:27:74:b7: 63:cf:d9:4b:73:78:a3:55:7a:f2:2d:04:4f:2f:11:57:e7:5f: 0c:9f:ea:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCH2X7CA+6f+EVqagYIRQTRZJvhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTEyMTUwNjU3MTlaFw0yNTEyMTgxMDE2MTlaMDMxMTAvBgNV BAMTKDU3OUUxRDg4OTc3NzdBNDQzNkU0RTMwRkJDQTRCMzUxNzI0Rjk3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsW/4f87DPjlgpq1XVwE6kbBWe z5A5eGYqetrxUS2UCsKptMZcn38ox2WM8LIxm/GO/Fnv+5/vqvBJVAber1TbRyZY wTtu/+limBQ90y5UFN/JIALuMX2yvAz4shOsREq1kHfWeCL30gB632Dz+Loyxt7g wcrDAJGUs4+G2obj52jPPYVMCDWcDOg6VFOx7+NQV1Uw4pbCH08RDnHGjywCfG04 noPgxd0LTdkQBx9h4+5x7UuqAv2VJptfPsHuPXF7YlCILW+wemsqPSzw5yFIb9FV SwxS6XyPyZWfhhvaSTMuGJjvCW6r6lEz6Bs+f+KmIT8AYQqQnRYrUHVz3O4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV54diJd3ekQ25OMPvKSzUXJPlwwwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX6j7bb72Ehmi7S02wUThYqNHQ43oQg+Bs3 UfYqt6wg/3D4J93FJry1aE/QAUQqT/wxhOTbIYK1RMCM9AKv6dYC8tgLjm1qhuuv a2KfUnDKd1x5z03cotiAh7gIFSkFc9lI2cdOnHX0tGilrCw/BG39Act66P/RPvok hE2uR7IYUDPEuGpEiITD9cUfMGIZGXb4bz12yFyg2WXWoNH6qia/XiIEDVzq0vPw llcX1C2+TnsR6g6wwrAbAKxKo2VDTNt/lqYj5l9WLwnSQjSEdPnf4D/6rjCaFHNT 3Y1aOR6EmXLG2S3Suyd0t2PP2UtzeKNVevItBE8vEVfnXwyf6qY= -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:56 2025 by rpki-client