This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft (raw, json) Hash identifier: DhlfC0sdSxH7PN5czUqorNFm+PCMmnvBbfcsBBcFy0U= Subject key identifier: 69:39:9B:A2:A2:76:CA:10:3E:F0:4E:30:A6:8D:96:E8:03:ED:CB:AA Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Certificate serial: 2B7539E06FD889013A4E07CE082196AC63025D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft Manifest number: 01BF Signing time: Tue 23 Dec 2025 14:52:05 +0000 Manifest this update: Tue 23 Dec 2025 14:47:05 +0000 Manifest next update: Sat 27 Dec 2025 01:04:05 +0000 Files and hashes: 1: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: 50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=) 2: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl (hash: q8w6s768+y1lMuqpwyncvd2iAbdxgaBCKSR+NFD5eTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:75:39:e0:6f:d8:89:01:3a:4e:07:ce:08:21:96:ac:63:02:5d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Validity Not Before: Dec 23 14:47:05 2025 GMT Not After : Dec 27 01:04:05 2025 GMT Subject: CN=69399BA2A276CA103EF04E30A68D96E803EDCBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:00:a0:99:f3:aa:56:11:ba:e1:ea:e6:16: 71:77:bc:5b:8d:21:b9:a0:ad:7e:fc:0c:34:3e:99: ad:ce:2f:78:b8:5d:5f:07:67:c4:cf:50:96:2c:01: d4:8b:7a:9e:0f:83:99:d9:8e:96:42:48:14:13:68: e3:5e:85:0e:6f:ea:42:02:55:91:7c:41:93:63:7d: e9:f3:22:bc:39:1c:97:80:b9:2f:3a:e0:0e:c9:e9: 09:10:06:7c:1f:b3:ea:bb:1d:6a:4d:92:72:cb:5f: b1:98:d9:72:65:73:6b:6e:2f:e6:10:60:15:1d:1e: 48:5c:24:fa:6c:74:a6:af:bf:16:60:7b:a4:f8:3f: 7b:2e:3f:a0:68:82:cd:85:79:67:16:6d:66:36:1b: 58:19:0a:af:36:bd:ce:bf:50:d3:de:f5:d0:69:6c: ad:53:4c:b6:92:26:20:07:49:69:76:77:57:42:90: 38:ee:cc:27:58:1e:86:51:a2:42:12:a2:04:83:3b: ae:c3:a6:02:ef:fd:a7:e7:50:fc:98:b7:26:ab:73: 6e:a2:b4:b0:e7:81:88:05:07:1f:a5:a7:66:d4:8b: 9c:41:ac:a5:bc:e8:ef:82:3a:13:5b:89:09:be:bf: da:cb:f9:ca:62:fd:75:50:62:eb:f1:b4:47:70:8f: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:39:9B:A2:A2:76:CA:10:3E:F0:4E:30:A6:8D:96:E8:03:ED:CB:AA X509v3 Authority Key Identifier: keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:96:9a:cb:d1:2e:9e:0d:bf:45:7b:54:85:46:06:21:92:77: db:02:e0:b8:2a:2e:fe:90:2b:ca:7d:d1:9e:89:a4:ff:00:2f: fa:c6:47:15:2b:3a:fe:30:ef:b0:e6:d6:7e:b3:3c:13:72:33: 6b:1d:cf:23:2b:57:ad:ba:80:75:10:61:07:91:d6:87:79:6e: 6a:d0:43:cf:14:3f:6f:3d:df:64:3a:07:2d:cc:f3:12:48:71: 42:0c:dc:d5:b4:55:25:89:2f:c7:93:7b:af:ac:a0:05:71:33: 25:ab:79:73:16:ff:fe:6b:67:46:a3:91:83:e9:e3:ab:08:d9: 26:82:5c:0e:ae:66:fc:76:cf:17:cd:d6:3a:2d:72:b4:ba:9f: d7:53:88:8e:cc:65:77:4c:6d:05:0d:6a:96:19:d6:f5:4e:f3: a4:fc:e3:10:6f:b4:6b:a3:a9:97:fc:76:9d:bf:d0:df:3e:43: 07:49:d9:58:f4:13:ea:b5:c0:93:7d:bf:f6:1d:a9:7c:20:65: 2d:f4:8d:47:5b:94:7f:17:d7:10:73:67:9e:08:32:c2:0a:66: 92:50:21:42:e5:f8:42:cf:fa:ab:23:4d:06:13:f1:15:d0:03: 1a:7e:3e:75:8f:a6:a4:16:31:bb:41:1f:25:04:da:26:7a:11: 46:46:f0:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3U54G/YiQE6TgfOCCGWrGMCXXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG NDZDOEE4NTAeFw0yNTEyMjMxNDQ3MDVaFw0yNTEyMjcwMTA0MDVaMDMxMTAvBgNV BAMTKDY5Mzk5QkEyQTI3NkNBMTAzRUYwNEUzMEE2OEQ5NkU4MDNFRENCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwdACgmfOqVhG64ermFnF3vFuN IbmgrX78DDQ+ma3OL3i4XV8HZ8TPUJYsAdSLep4Pg5nZjpZCSBQTaONehQ5v6kIC VZF8QZNjfenzIrw5HJeAuS864A7J6QkQBnwfs+q7HWpNknLLX7GY2XJlc2tuL+YQ YBUdHkhcJPpsdKavvxZge6T4P3suP6Bogs2FeWcWbWY2G1gZCq82vc6/UNPe9dBp bK1TTLaSJiAHSWl2d1dCkDjuzCdYHoZRokISogSDO67DpgLv/afnUPyYtyarc26i tLDngYgFBx+lp2bUi5xBrKW86O+COhNbiQm+v9rL+cpi/XVQYuvxtEdwj2MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTmboqJ2yhA+8E4wpo2W6APty6owHwYDVR0j BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD OEE4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTkwMjM0ZmUtYTcxNS00M2U1LThh YTQtZDk3OWNkMzU3ZDM5LzAvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4 QUZGNDZDOEE4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeWmsvRLp4Nv0V7VIVGBiGSd9sC4LgqLv6Q K8p90Z6JpP8AL/rGRxUrOv4w77Dm1n6zPBNyM2sdzyMrV626gHUQYQeR1od5bmrQ Q88UP28932Q6By3M8xJIcUIM3NW0VSWJL8eTe6+soAVxMyWreXMW//5rZ0ajkYPp 46sI2SaCXA6uZvx2zxfN1jotcrS6n9dTiI7MZXdMbQUNapYZ1vVO86T84xBvtGuj qZf8dp2/0N8+QwdJ2Vj0E+q1wJN9v/YdqXwgZS30jUdblH8X1xBzZ54IMsIKZpJQ IULl+ELP+qsjTQYT8RXQAxp+PnWPpqQWMbtBHyUE2iZ6EUZG8JY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:03 2025 by rpki-client