This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: jhLxcM5sbB8+Q+ZFt0Q9Y//3yRlxo64dnU3tRk1ilmE= Subject key identifier: 64:A7:1E:51:B3:43:36:7B:52:B8:BE:16:1B:06:FC:B8:EF:2B:66:C4 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 6A1A021AAF3E64E2187A3CD7C2FECCE9F73DDA88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 0134 Signing time: Wed 24 Dec 2025 05:00:02 +0000 Manifest this update: Wed 24 Dec 2025 04:55:02 +0000 Manifest next update: Sat 27 Dec 2025 08:27:02 +0000 Files and hashes: 1: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: 3+C7KNVLkkeXH4Q6aCfPacCb6QKO1RmfOhT9j4ffkS8=) 2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: cgKUdu03d9YZgJDBkgVsdCKIBnJt4AGNHgikXYthwsI=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: tNNCYWCbEdiPKfhICvbEu1ERGWQQfGZS5vvTiRz7UTA=) 4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: JBRMsmUAdYzb3+gwoPUcR31Beca7hRL3R3vmPms0eZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:02:1a:af:3e:64:e2:18:7a:3c:d7:c2:fe:cc:e9:f7:3d:da:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Dec 24 04:55:02 2025 GMT Not After : Dec 27 08:27:02 2025 GMT Subject: CN=64A71E51B343367B52B8BE161B06FCB8EF2B66C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:cd:cc:dd:99:48:3f:ec:85:1d:47:36:29: 67:88:47:f9:d6:dd:76:2a:80:c2:49:e2:52:c5:f1: 54:11:91:70:41:f6:5a:f6:bc:da:ad:a3:0f:ef:d6: c0:1d:56:3a:53:b2:bc:a6:23:7a:39:b5:25:1c:ab: d4:4e:ed:3b:26:8d:5a:ec:8d:92:84:00:89:51:33: 0a:b1:37:62:8c:cd:66:05:e5:eb:5f:6e:3e:ea:c8: b2:05:d6:d7:ec:ef:86:6f:11:e5:64:0f:d3:ff:5d: 24:da:28:32:e3:c2:d1:55:4d:32:34:fd:78:83:e4: 89:eb:a0:58:6b:9d:fd:f0:b6:e3:12:6f:0c:38:95: c1:34:47:f6:4a:3f:b9:5e:e6:8d:b0:26:91:b5:f8: 01:5e:73:a1:a5:ff:57:c3:47:7e:58:96:89:07:79: b1:b7:66:36:14:1d:cb:49:a4:44:7e:19:45:1c:fc: 32:dd:fe:ff:f3:9f:6a:b4:24:6f:c1:60:9c:db:93: e6:06:8f:c3:9c:ce:5e:14:cc:7e:22:e6:04:a7:4d: a9:44:83:b2:24:4a:47:05:f0:11:80:26:25:e2:bc: bb:93:02:a2:22:7d:62:3c:14:88:6f:81:76:5e:4e: 0c:36:b9:6a:25:4f:71:3a:79:b6:db:48:cd:1a:e2: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A7:1E:51:B3:43:36:7B:52:B8:BE:16:1B:06:FC:B8:EF:2B:66:C4 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8b:9d:b1:b3:0e:11:c3:08:b0:80:0f:ca:8d:1a:27:1a:4d: b5:19:c2:2a:cb:ff:d6:2d:d8:1d:97:59:2a:67:84:d2:e3:17: c6:31:cb:04:be:a5:b6:14:60:4d:0c:56:89:d4:9c:e0:09:13: 2e:fc:08:98:45:c1:62:9d:2d:be:6c:9f:ad:7b:86:d2:76:88: d9:02:dc:81:87:a7:f7:4b:4e:f8:88:11:af:56:ec:3d:03:e6: 17:29:5b:6f:23:33:44:95:60:a3:fd:b0:12:ef:4d:80:a3:42: 0b:8c:1f:bf:51:7b:cd:50:27:31:72:76:45:e1:ad:cb:21:49: 0a:c7:d2:f7:81:c9:cc:19:2c:07:ba:9c:6e:11:61:1b:71:77: 77:f5:35:af:e2:b4:6a:b2:4c:db:08:3f:7b:5e:2c:da:f0:65: cd:28:1b:4e:75:f4:06:5f:40:51:29:03:16:44:fc:93:a1:4a: 7e:1d:61:7f:00:da:46:c6:60:ef:64:25:b4:1f:72:78:23:dd: 56:aa:db:b2:bc:b5:5c:df:98:1f:07:88:96:66:37:d2:a0:ac: 5e:4a:a6:6f:74:24:c8:e5:32:99:37:a6:0a:23:09:b4:ea:e7: e7:69:31:f5:8b:72:da:32:61:b3:89:a9:b8:ce:f5:df:a3:c3: f7:3f:6a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahoCGq8+ZOIYejzXwv7M6fc92ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTEyMjQwNDU1MDJaFw0yNTEyMjcwODI3MDJaMDMxMTAvBgNV BAMTKDY0QTcxRTUxQjM0MzM2N0I1MkI4QkUxNjFCMDZGQ0I4RUYyQjY2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhM3M3ZlIP+yFHUc2KWeIR/nW 3XYqgMJJ4lLF8VQRkXBB9lr2vNqtow/v1sAdVjpTsrymI3o5tSUcq9RO7TsmjVrs jZKEAIlRMwqxN2KMzWYF5etfbj7qyLIF1tfs74ZvEeVkD9P/XSTaKDLjwtFVTTI0 /XiD5InroFhrnf3wtuMSbww4lcE0R/ZKP7le5o2wJpG1+AFec6Gl/1fDR35YlokH ebG3ZjYUHctJpER+GUUc/DLd/v/zn2q0JG/BYJzbk+YGj8Oczl4UzH4i5gSnTalE g7IkSkcF8BGAJiXivLuTAqIifWI8FIhvgXZeTgw2uWolT3E6ebbbSM0a4hTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZKceUbNDNntSuL4WGwb8uO8rZsQwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6LnbGzDhHDCLCAD8qNGicaTbUZwirL/9Yt 2B2XWSpnhNLjF8YxywS+pbYUYE0MVonUnOAJEy78CJhFwWKdLb5sn617htJ2iNkC 3IGHp/dLTviIEa9W7D0D5hcpW28jM0SVYKP9sBLvTYCjQguMH79Re81QJzFydkXh rcshSQrH0veBycwZLAe6nG4RYRtxd3f1Na/itGqyTNsIP3teLNrwZc0oG0519AZf QFEpAxZE/JOhSn4dYX8A2kbGYO9kJbQfcngj3Vaq27K8tVzfmB8HiJZmN9KgrF5K pm90JMjlMpk3pgojCbTq5+dpMfWLctoyYbOJqbjO9d+jw/c/ar0= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:33 2025 by rpki-client