This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: WuNk0BK2zo/LQgSwQNJy49CM+OFV1xGWjmf+z/mxQ8o= Subject key identifier: 32:97:F4:59:B7:D8:07:8A:E5:07:31:43:1A:99:9F:8B:91:FE:D3:02 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 0B29FB9A76B39B76FAEFA99BF3D3A9585FAFC89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0224 Signing time: Wed 17 Dec 2025 19:12:31 +0000 Manifest this update: Wed 17 Dec 2025 19:07:31 +0000 Manifest next update: Sun 21 Dec 2025 02:13:31 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: z3n/tIXZwtPYvBaaNLrRacxN7HfPUi9J+DnSjLm+L1k=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: CJwDDSMiwOT7PHdpVWyu2fUlHN4exxLsfZEVCyqjNuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:29:fb:9a:76:b3:9b:76:fa:ef:a9:9b:f3:d3:a9:58:5f:af:c8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Dec 17 19:07:31 2025 GMT Not After : Dec 21 02:13:31 2025 GMT Subject: CN=3297F459B7D8078AE50731431A999F8B91FED302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:e1:75:5e:65:44:63:d9:3c:1b:af:9e:35: 9a:fb:84:e4:5a:ed:7f:83:49:47:22:0b:67:69:9e: de:dd:1f:21:41:d5:c5:a1:22:d6:22:8f:98:b2:79: 8b:51:9b:5c:cd:bd:89:56:0f:80:a7:6c:38:bc:0d: c0:ba:3b:11:8f:f5:e1:9c:f5:f8:3b:02:b6:45:73: 99:43:85:c8:02:75:00:85:77:2b:96:ce:27:ae:a5: 3f:3a:5b:ab:49:58:01:48:11:1b:22:9c:f2:32:aa: c3:07:4f:0b:e3:dd:ec:74:19:d7:a3:a7:1c:b0:2f: f3:72:5a:9e:d2:75:b4:b1:b1:15:e5:f9:a1:da:a2: 1e:39:07:54:3b:3a:03:20:ba:96:e2:9e:e5:f3:92: 3e:87:20:40:5d:94:ea:bb:9f:94:a2:f8:59:85:38: 3c:42:84:14:0a:45:3a:e9:e2:90:22:d8:f9:5c:b9: 91:8b:01:08:bd:79:45:5e:ca:ba:7e:e5:08:7f:72: 45:dc:3d:a9:bb:06:34:07:76:a6:5e:5f:da:b4:a2: 2f:a9:b9:ec:c7:6e:69:31:2d:8d:d3:2d:5c:8f:d2: 16:1c:d8:90:76:72:7a:94:27:02:49:1b:f2:e6:43: ef:e6:41:a6:f3:3c:0f:9b:09:f6:f9:43:83:b8:1f: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:F4:59:B7:D8:07:8A:E5:07:31:43:1A:99:9F:8B:91:FE:D3:02 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:92:9d:22:c1:cb:7f:5b:9c:d5:50:9b:6f:8f:46:55:4b:13: c3:a1:ee:da:76:67:3d:d1:ab:fb:5f:b3:77:5b:c3:68:ef:36: 67:75:9f:4a:83:e6:ce:4b:16:5b:95:20:9d:f6:05:05:b6:6f: ea:07:23:3c:76:c3:76:09:60:fb:dc:43:0d:fd:18:83:79:20: e3:be:df:96:26:69:19:69:60:d8:cb:ea:7b:2c:f2:3a:8c:ce: a2:c2:6a:ee:87:20:67:af:ba:f9:65:38:bc:85:8f:36:b1:1a: 26:da:7b:08:33:45:77:a9:fc:5c:89:18:23:14:85:9f:34:27: dd:56:06:d2:75:38:6f:a8:61:2b:80:0d:b9:b0:b6:32:d7:2d: 36:61:33:cf:50:d6:b1:35:95:ef:48:77:11:78:d9:9b:0f:ae: 02:74:5f:6f:cb:6e:50:ae:d9:15:d4:21:b8:a2:e8:a2:c0:c5: 30:f1:7b:f2:df:70:5c:29:90:59:d1:16:0b:14:8d:51:88:e0: 33:b9:d3:7d:ef:dc:93:35:8a:8f:35:3d:c1:c8:3a:ec:61:b3: 31:06:ac:60:a2:1c:49:10:68:61:ca:21:56:3c:28:1b:a6:c6: 17:88:8d:4a:e6:b3:83:5f:4e:8e:e3:e5:6f:23:b1:c6:0d:fd: 4e:c5:ac:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyn7mnazm3b676mb89OpWF+vyJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTEyMTcxOTA3MzFaFw0yNTEyMjEwMjEzMzFaMDMxMTAvBgNV BAMTKDMyOTdGNDU5QjdEODA3OEFFNTA3MzE0MzFBOTk5RjhCOTFGRUQzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKOF1XmVEY9k8G6+eNZr7hORa 7X+DSUciC2dpnt7dHyFB1cWhItYij5iyeYtRm1zNvYlWD4CnbDi8DcC6OxGP9eGc 9fg7ArZFc5lDhcgCdQCFdyuWzieupT86W6tJWAFIERsinPIyqsMHTwvj3ex0Gdej pxywL/NyWp7SdbSxsRXl+aHaoh45B1Q7OgMgupbinuXzkj6HIEBdlOq7n5Si+FmF ODxChBQKRTrp4pAi2PlcuZGLAQi9eUVeyrp+5Qh/ckXcPam7BjQHdqZeX9q0oi+p uezHbmkxLY3TLVyP0hYc2JB2cnqUJwJJG/LmQ+/mQabzPA+bCfb5Q4O4H01TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpf0WbfYB4rlBzFDGpmfi5H+0wIwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCSnSLBy39bnNVQm2+PRlVLE8Oh7tp2Zz3R q/tfs3dbw2jvNmd1n0qD5s5LFluVIJ32BQW2b+oHIzx2w3YJYPvcQw39GIN5IOO+ 35YmaRlpYNjL6nss8jqMzqLCau6HIGevuvllOLyFjzaxGibaewgzRXep/FyJGCMU hZ80J91WBtJ1OG+oYSuADbmwtjLXLTZhM89Q1rE1le9IdxF42ZsPrgJ0X2/LblCu 2RXUIbii6KLAxTDxe/LfcFwpkFnRFgsUjVGI4DO5033v3JM1io81PcHIOuxhszEG rGCiHEkQaGHKIVY8KBumxheIjUrms4NfTo7j5W8jscYN/U7FrKo= -----END CERTIFICATE-----Generated at Thu Dec 18 07:16:10 2025 by rpki-client