This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: OSsiM5avShsuzqgr2ZRfpBwXD8IayUHDR8zINb3d33A= Subject key identifier: 08:C1:4D:0C:BD:E4:83:6C:B6:CC:39:8F:B3:4B:3B:43:FC:51:58:F4 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 7F46155442C30D181013585E28C6A460F7CD4889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: FC Signing time: Sat 06 Dec 2025 06:31:53 +0000 Manifest this update: Sat 06 Dec 2025 06:26:53 +0000 Manifest next update: Tue 09 Dec 2025 07:10:53 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: wjjNxFs6dliQUjMPKm0HWEL5oijudoKknIhtn75H41A=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:46:15:54:42:c3:0d:18:10:13:58:5e:28:c6:a4:60:f7:cd:48:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Dec 6 06:26:53 2025 GMT Not After : Dec 9 07:10:53 2025 GMT Subject: CN=08C14D0CBDE4836CB6CC398FB34B3B43FC5158F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:f8:2d:c4:ef:c0:65:36:4c:cc:19:01:ae: db:3c:2a:c3:3c:5d:64:cf:36:57:0f:8a:9b:f0:e0: 33:db:d0:0a:f9:f9:59:f6:a1:69:48:4a:47:96:49: 72:c7:e7:f5:5a:f3:41:eb:96:82:ed:05:54:17:96: e6:78:fd:a4:ca:99:e6:c3:03:f2:78:5a:93:8f:34: 0f:5e:24:42:2d:9f:4e:ee:eb:6b:7c:02:30:40:0f: b2:a4:01:fb:da:69:6a:95:4d:ca:c6:88:9e:fb:da: d4:53:d0:b3:d5:d3:a0:5f:ca:07:bb:0d:1c:1c:6f: 15:da:87:a4:7c:bb:a3:b4:6d:8d:06:49:00:3f:51: dd:a4:ec:e8:3b:a5:60:12:da:25:b6:2c:22:c3:d9: 63:81:07:c5:60:bc:6a:ec:99:7b:cb:4c:4f:4a:0c: 68:c7:d1:8d:a9:b4:0e:82:55:23:2f:12:dc:2e:7d: 2e:5f:98:51:ce:30:6c:02:e9:e9:f4:49:d5:ab:70: 05:3c:6b:28:e9:e1:4e:3d:0c:9a:1a:3a:6b:3e:18: ee:29:0b:2a:2c:b1:5d:59:64:3c:97:f2:03:7e:b5: ce:5f:7b:88:06:ad:e9:27:70:c0:32:55:48:16:bf: 6f:d1:b7:8e:52:40:d3:93:c3:d3:37:ad:8a:59:16: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C1:4D:0C:BD:E4:83:6C:B6:CC:39:8F:B3:4B:3B:43:FC:51:58:F4 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:27:65:58:f6:68:86:26:0b:50:39:75:ec:f6:fc:b9:9d:12: d9:37:5a:49:71:4f:89:3a:58:fc:1d:7e:06:0c:7f:6c:90:00: 65:3b:22:05:e5:28:b9:a1:e5:d5:83:5b:76:a5:18:ce:98:24: 15:c4:57:78:f4:32:77:bf:24:a9:c7:4a:35:a2:57:7b:98:e7: e4:16:12:bf:03:e4:74:e2:fb:13:8f:08:81:7f:a0:e1:36:21: 09:26:22:1d:12:08:b1:2d:d7:33:3d:37:d3:41:48:0a:1a:b7: 84:27:b7:bf:00:33:e8:cb:5b:63:61:0a:ac:3a:87:9a:d8:5c: 68:ff:98:5f:b2:9f:89:81:a7:77:4e:28:80:7c:ce:c4:44:04: e8:e4:ba:27:32:44:01:a4:7f:ba:96:a9:93:ca:f0:8d:50:15: 59:ec:6b:14:09:18:32:49:28:03:40:61:e1:e3:b9:03:cf:1b: 8e:f0:7b:1c:11:7f:2b:4e:1e:70:22:8d:45:80:88:7b:d1:2f: 10:69:83:66:e2:a1:18:01:5c:31:b7:86:1d:37:76:10:01:d2: 21:c2:81:26:75:e7:88:ac:66:d0:e7:1e:69:ce:b7:c0:b3:05: 22:7f:53:52:5d:9c:a0:53:77:61:ad:97:38:08:ba:1f:54:81: 03:3c:a1:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0YVVELDDRgQE1heKMakYPfNSIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTEyMDYwNjI2NTNaFw0yNTEyMDkwNzEwNTNaMDMxMTAvBgNV BAMTKDA4QzE0RDBDQkRFNDgzNkNCNkNDMzk4RkIzNEIzQjQzRkM1MTU4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrx/gtxO/AZTZMzBkBrts8KsM8 XWTPNlcPipvw4DPb0Ar5+Vn2oWlISkeWSXLH5/Va80HrloLtBVQXluZ4/aTKmebD A/J4WpOPNA9eJEItn07u62t8AjBAD7KkAfvaaWqVTcrGiJ772tRT0LPV06Bfyge7 DRwcbxXah6R8u6O0bY0GSQA/Ud2k7Og7pWAS2iW2LCLD2WOBB8VgvGrsmXvLTE9K DGjH0Y2ptA6CVSMvEtwufS5fmFHOMGwC6en0SdWrcAU8ayjp4U49DJoaOms+GO4p CyossV1ZZDyX8gN+tc5fe4gGrekncMAyVUgWv2/Rt45SQNOTw9M3rYpZFqOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCMFNDL3kg2y2zDmPs0s7Q/xRWPQwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMnZVj2aIYmC1A5dez2/LmdEtk3WklxT4k6 WPwdfgYMf2yQAGU7IgXlKLmh5dWDW3alGM6YJBXEV3j0Mne/JKnHSjWiV3uY5+QW Er8D5HTi+xOPCIF/oOE2IQkmIh0SCLEt1zM9N9NBSAoat4Qnt78AM+jLW2NhCqw6 h5rYXGj/mF+yn4mBp3dOKIB8zsREBOjkuicyRAGkf7qWqZPK8I1QFVnsaxQJGDJJ KANAYeHjuQPPG47wexwRfytOHnAijUWAiHvRLxBpg2bioRgBXDG3hh03dhAB0iHC gSZ154isZtDnHmnOt8CzBSJ/U1JdnKBTd2GtlzgIuh9UgQM8oew= -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:43 2025 by rpki-client