This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: vWiMoQciRNXiAPlRuYINQGPDDyno/GfzTs0aq9XvCY8= Subject key identifier: F6:CE:EF:97:96:28:B9:51:40:B4:1C:2C:5E:A7:C0:21:99:0E:02:11 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 6D11E21B25F0717E5F1360B21CAFBB56BDBE8226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 035F Signing time: Wed 17 Dec 2025 09:31:45 +0000 Manifest this update: Wed 17 Dec 2025 09:26:45 +0000 Manifest next update: Sat 20 Dec 2025 20:46:45 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 2: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: Isf+q/JonrKZ4hL9pLXLd7xbM8fcZC5jRN7QinY85tQ=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:11:e2:1b:25:f0:71:7e:5f:13:60:b2:1c:af:bb:56:bd:be:82:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Dec 17 09:26:45 2025 GMT Not After : Dec 20 20:46:45 2025 GMT Subject: CN=F6CEEF979628B95140B41C2C5EA7C021990E0211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:8b:f1:12:f1:ac:42:16:89:b4:9e:05:80: 56:04:09:cd:76:d8:ba:a2:7b:4a:27:e7:e6:05:b9: 30:33:ee:f5:b9:e3:7f:68:bc:aa:c3:67:ba:9c:82: 15:6b:42:92:e2:ff:70:9c:e3:c0:f1:2f:b3:58:cd: 70:ae:e4:84:14:fc:9b:c2:fd:b8:2f:8d:7c:e0:28: 63:fb:1a:40:63:a0:65:c6:8e:f2:13:7c:0c:41:aa: 96:49:02:8b:f4:37:52:5c:fd:68:41:f7:96:a9:b7: c3:68:a5:13:23:60:30:52:26:51:63:09:45:2f:56: 40:cb:49:e8:82:aa:4a:85:27:13:c4:71:c6:e4:fc: 25:7e:9d:32:0e:b4:94:7c:f7:83:24:c6:78:12:4f: be:5b:9f:22:3b:7d:4d:81:e3:66:40:a8:9f:09:4f: 62:03:4d:ff:8f:78:c6:92:03:01:84:be:80:98:33: a8:48:91:05:6a:0f:02:02:1e:ed:51:43:4c:ae:ef: d5:b7:28:10:bb:e1:6c:bb:25:e4:04:82:7e:fc:ba: 48:d7:bd:29:31:c7:1d:8b:73:5c:8a:8e:7d:3b:aa: da:2b:0c:e3:23:e4:68:c8:20:ef:5f:bf:99:4e:9e: c2:b0:55:22:08:6f:da:6f:de:79:d7:41:73:e5:7b: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CE:EF:97:96:28:B9:51:40:B4:1C:2C:5E:A7:C0:21:99:0E:02:11 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:52:e9:8e:cf:b5:9f:11:c5:34:00:22:ab:15:ff:92:87:23: af:da:66:20:ca:ca:b4:db:14:e8:bc:7a:92:c9:34:e4:57:3d: e7:15:8d:fe:b6:0f:43:1d:3a:17:7d:bb:49:0d:1f:d6:2a:67: c5:ff:0e:18:fc:b5:0a:7d:46:ef:23:21:b0:c3:87:a3:20:ca: d7:d8:95:df:85:b6:b7:4a:ca:e2:7f:16:26:7a:97:ab:65:42: 5a:18:d5:b3:9d:2d:dd:48:ad:ba:ec:d6:e6:c7:55:1c:d3:17: cf:5d:f6:58:77:2e:7c:85:21:5a:be:eb:f6:96:f7:0e:60:43: f8:dd:d9:80:5f:30:59:64:47:a2:a8:24:d6:56:51:43:8f:71: 9c:fd:d8:ff:07:b6:53:d4:1f:ae:65:2b:62:91:77:d9:13:0d: bc:e3:45:9f:2d:b3:09:ec:f3:08:b5:26:23:25:61:f7:b8:99: 51:5c:a9:29:04:cf:07:8c:73:04:da:b2:28:a6:0d:5f:9d:cb: 2c:ef:81:15:e0:ae:c2:c0:94:92:87:1d:72:9a:c3:ab:dc:07: 7e:9c:6c:fb:80:c0:54:8d:02:aa:b2:42:46:e5:f5:98:81:09: ae:c2:78:67:5f:69:06:a6:ac:46:6f:36:75:5e:f1:40:c1:38: b0:ec:0a:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRHiGyXwcX5fE2CyHK+7Vr2+giYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTEyMTcwOTI2NDVaFw0yNTEyMjAyMDQ2NDVaMDMxMTAvBgNV BAMTKEY2Q0VFRjk3OTYyOEI5NTE0MEI0MUMyQzVFQTdDMDIxOTkwRTAyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW8ovxEvGsQhaJtJ4FgFYECc12 2Lqie0on5+YFuTAz7vW5439ovKrDZ7qcghVrQpLi/3Cc48DxL7NYzXCu5IQU/JvC /bgvjXzgKGP7GkBjoGXGjvITfAxBqpZJAov0N1Jc/WhB95apt8NopRMjYDBSJlFj CUUvVkDLSeiCqkqFJxPEccbk/CV+nTIOtJR894MkxngST75bnyI7fU2B42ZAqJ8J T2IDTf+PeMaSAwGEvoCYM6hIkQVqDwICHu1RQ0yu79W3KBC74Wy7JeQEgn78ukjX vSkxxx2Lc1yKjn07qtorDOMj5GjIIO9fv5lOnsKwVSIIb9pv3nnXQXPle0tDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9s7vl5YouVFAtBwsXqfAIZkOAhEwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINS6Y7PtZ8RxTQAIqsV/5KHI6/aZiDKyrTb FOi8epLJNORXPecVjf62D0MdOhd9u0kNH9YqZ8X/Dhj8tQp9Ru8jIbDDh6MgytfY ld+FtrdKyuJ/FiZ6l6tlQloY1bOdLd1Irbrs1ubHVRzTF89d9lh3LnyFIVq+6/aW 9w5gQ/jd2YBfMFlkR6KoJNZWUUOPcZz92P8HtlPUH65lK2KRd9kTDbzjRZ8tswns 8wi1JiMlYfe4mVFcqSkEzweMcwTasiimDV+dyyzvgRXgrsLAlJKHHXKaw6vcB36c bPuAwFSNAqqyQkbl9ZiBCa7CeGdfaQamrEZvNnVe8UDBOLDsCoI= -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:44 2025 by rpki-client