This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: xcBq9plN2xfMmYjyWDp4BdgF+bqMM3LHxMDZAzXOHmo= Subject key identifier: 55:8A:D9:60:1C:E7:6F:A2:DC:C1:22:82:3D:92:2E:7B:C9:12:0B:EA Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 7A398DD284B524E6C059F58E1EAEF0EA01FA78D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 021F Signing time: Sat 06 Dec 2025 14:42:30 +0000 Manifest this update: Sat 06 Dec 2025 14:37:30 +0000 Manifest next update: Wed 10 Dec 2025 01:58:30 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: lvjwmmUIcToFeBvKtIpoH2i9eNsARwxiBWo6pp6VWB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:39:8d:d2:84:b5:24:e6:c0:59:f5:8e:1e:ae:f0:ea:01:fa:78:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Dec 6 14:37:30 2025 GMT Not After : Dec 10 01:58:30 2025 GMT Subject: CN=558AD9601CE76FA2DCC122823D922E7BC9120BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:a9:4a:af:db:36:a8:43:11:f7:8a:ce:83: da:2e:0b:c2:72:20:01:3a:32:97:65:e6:62:c1:91: 14:77:47:8b:77:0f:8a:ef:89:72:fc:97:a7:51:e7: 45:b9:31:a5:52:1e:46:1b:f5:e8:a7:bc:ff:b7:78: df:dd:be:17:d3:1e:d1:4b:a0:1d:aa:da:1f:88:91: a2:a1:4c:9b:ec:17:b7:bd:6e:63:5a:5f:52:34:2d: af:d9:22:85:e1:dc:ee:d7:49:7b:67:2c:7e:d4:bd: 88:c1:c0:7c:97:b2:bf:54:71:ad:2d:d2:17:63:ae: 6a:c1:77:ed:2e:b4:ae:f2:1e:6c:54:8d:2e:de:9e: 0b:46:dd:ac:1f:d3:0a:3c:62:ec:b3:53:cd:99:d5: 21:d4:35:e2:75:29:61:0c:ce:15:00:b2:1b:ea:3f: 6b:d0:7e:9b:4a:08:37:7e:9f:bb:3f:76:48:95:b2: fd:b6:17:1d:76:97:c8:2f:b9:46:d7:50:26:ba:bc: b4:9c:db:b7:cb:14:0e:41:19:9f:b6:7a:43:27:32: 74:85:7b:6b:7a:49:3b:2d:3c:15:7b:2f:49:9e:44: 26:b4:f8:01:07:e0:c3:d7:61:77:e5:35:9b:f0:05: 83:8c:98:81:c0:94:79:74:b1:0b:94:ab:e4:c5:34: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:D9:60:1C:E7:6F:A2:DC:C1:22:82:3D:92:2E:7B:C9:12:0B:EA X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ac:76:4d:72:ad:9f:aa:0f:69:45:f8:68:1b:8f:59:e1:81: d8:55:b0:20:72:73:77:56:05:db:7c:1c:f5:9b:31:b0:88:9d: dd:c3:51:f3:1c:e3:45:1a:74:cb:87:19:21:56:82:04:6d:ae: ee:47:ac:7c:e7:c1:be:59:4f:a6:b9:21:fc:01:55:23:67:62: f4:71:4a:06:79:c1:ea:f7:ea:9e:8a:88:1d:e6:0a:fe:c1:b2: 53:d7:f6:cb:94:1a:77:9d:9a:05:25:c8:1a:73:03:6d:40:53: 15:24:e7:0f:06:56:9f:d8:7c:c7:a0:14:97:d8:40:ad:bb:a8: b3:94:ec:45:e0:b0:47:4f:0c:a5:46:0d:38:e1:0c:e9:d9:70: 22:b5:a9:99:ad:d5:ab:d5:8e:14:7c:cd:ff:ec:04:fb:42:f9: fe:61:9b:cd:cc:16:54:95:40:87:a1:53:76:a1:63:ae:2f:7a: dd:ec:aa:48:d7:47:ee:67:2d:69:98:ff:bf:0f:73:1e:3a:fd: eb:dc:85:86:7e:31:0e:3d:8a:6b:10:4d:de:13:00:39:e2:9a: cf:c4:16:8e:52:94:0b:5d:a0:9f:76:2c:d3:78:db:ac:34:78: 6a:34:d0:2e:e6:dd:84:13:33:e5:57:8a:1e:18:5b:8a:77:6d: b4:e0:fb:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejmN0oS1JObAWfWOHq7w6gH6eNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTEyMDYxNDM3MzBaFw0yNTEyMTAwMTU4MzBaMDMxMTAvBgNV BAMTKDU1OEFEOTYwMUNFNzZGQTJEQ0MxMjI4MjNEOTIyRTdCQzkxMjBCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiqlKr9s2qEMR94rOg9ouC8Jy IAE6Mpdl5mLBkRR3R4t3D4rviXL8l6dR50W5MaVSHkYb9einvP+3eN/dvhfTHtFL oB2q2h+IkaKhTJvsF7e9bmNaX1I0La/ZIoXh3O7XSXtnLH7UvYjBwHyXsr9Uca0t 0hdjrmrBd+0utK7yHmxUjS7engtG3awf0wo8YuyzU82Z1SHUNeJ1KWEMzhUAshvq P2vQfptKCDd+n7s/dkiVsv22Fx12l8gvuUbXUCa6vLSc27fLFA5BGZ+2ekMnMnSF e2t6STstPBV7L0meRCa0+AEH4MPXYXflNZvwBYOMmIHAlHl0sQuUq+TFNOqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYrZYBznb6LcwSKCPZIue8kSC+owHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEesdk1yrZ+qD2lF+Ggbj1nhgdhVsCByc3dW Bdt8HPWbMbCInd3DUfMc40UadMuHGSFWggRtru5HrHznwb5ZT6a5IfwBVSNnYvRx SgZ5wer36p6KiB3mCv7BslPX9suUGnedmgUlyBpzA21AUxUk5w8GVp/YfMegFJfY QK27qLOU7EXgsEdPDKVGDTjhDOnZcCK1qZmt1avVjhR8zf/sBPtC+f5hm83MFlSV QIehU3ahY64vet3sqkjXR+5nLWmY/78Pcx46/evchYZ+MQ49imsQTd4TADnims/E Fo5SlAtdoJ92LNN426w0eGo00C7m3YQTM+VXih4YW4p3bbTg+xE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:00 2025 by rpki-client