This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: CSivyszZNNgbY/vLqiy/mIDsH6nP0zv49Bi8Z3x1+wM= Subject key identifier: 7D:B9:03:A9:7B:90:46:AF:13:17:D7:6F:50:73:6C:48:DC:1E:26:7A Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 3A8AF3D5D95C8F97AA81E6051EA7006DEDD1328B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 053A Signing time: Fri 05 Dec 2025 15:51:44 +0000 Manifest this update: Fri 05 Dec 2025 15:46:44 +0000 Manifest next update: Tue 09 Dec 2025 03:45:44 +0000 Files and hashes: 1: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 2: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 3: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 4: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 5: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 6: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: NQ0zg6rs/GZgY+Q2bXit2HIqhHvFkyln6ppcMi0g2g8=) 7: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 8: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 9: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 10: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 11: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 12: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 13: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8a:f3:d5:d9:5c:8f:97:aa:81:e6:05:1e:a7:00:6d:ed:d1:32:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Dec 5 15:46:44 2025 GMT Not After : Dec 9 03:45:44 2025 GMT Subject: CN=7DB903A97B9046AF1317D76F50736C48DC1E267A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:b1:85:50:2d:05:b8:dc:9c:b2:20:5d:ed: e3:a6:5d:05:d8:14:a2:ec:ff:70:83:01:74:47:d9: 60:1b:dd:10:90:d3:99:ea:e7:2b:53:c7:6f:6a:09: 63:1e:8d:cb:da:90:62:56:c8:11:5b:2f:ad:4e:eb: bf:f6:b4:a9:3b:a9:d2:8e:6e:84:2f:4a:d4:34:81: 6b:69:15:68:1d:ec:1d:81:70:95:6e:27:c8:5d:b6: 50:48:a2:39:95:41:9d:42:ce:32:2f:53:05:ec:e4: 60:4c:40:d4:8d:77:7d:fb:6b:a6:68:11:cb:54:dc: 6c:91:fd:cf:18:fc:6b:5e:00:25:9f:82:d4:16:87: b9:70:40:2a:fe:3d:f6:32:1c:5b:b0:44:17:10:96: 2e:ba:95:fc:69:3c:ed:4a:bb:84:f8:d4:d7:8f:06: 07:5a:d9:61:fe:ca:27:63:cc:44:8b:64:63:2a:18: c6:5a:4e:2c:f9:c1:2f:3f:3e:12:4b:a4:cd:7b:9e: f0:f8:a6:9b:d0:9f:2e:8d:e1:2f:5a:52:cb:e8:17: c4:84:fb:f1:5c:f7:2f:4a:f5:fd:e9:32:a0:6d:ae: 9f:2e:30:21:a6:4f:9c:19:e6:e9:e1:42:62:d7:0a: b0:43:24:3e:27:75:25:15:8c:8d:d3:76:67:14:8c: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B9:03:A9:7B:90:46:AF:13:17:D7:6F:50:73:6C:48:DC:1E:26:7A X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2a:c4:a8:c2:b9:92:79:38:04:56:e5:54:55:67:94:3d:db: 63:fb:0b:8f:22:7b:ff:77:a6:59:63:1d:9f:73:a5:55:0c:71: 6b:be:c1:79:ad:cb:88:ff:d3:fb:62:0d:02:44:a2:af:30:94: d3:b3:a7:97:e2:5a:7e:ef:a8:4e:be:29:f1:c4:21:ab:bf:76: 63:19:52:43:02:7b:8b:a3:b0:e1:b4:56:fb:c4:fa:8f:da:e1: fc:9f:bb:0d:19:0d:9f:a1:63:85:28:fe:5b:25:37:de:8c:cf: 25:6e:ac:1b:cd:fa:fc:8b:11:73:30:51:38:f2:a5:7d:e0:aa: f6:7d:71:67:ac:b5:b0:24:aa:d8:a8:28:7f:7d:f8:33:97:a6: 0a:88:82:58:69:cc:9c:af:d1:aa:b8:27:f2:1a:ff:df:05:1e: 31:88:32:42:2b:0e:78:d4:d6:c1:e8:c0:43:f8:d9:1e:93:d5: 80:3a:37:27:84:0e:ef:84:f7:7b:d8:ed:99:ca:b1:6f:19:83: c4:4a:89:a6:3f:7d:8e:ce:5c:0a:8e:de:f9:98:89:61:cd:83: d0:66:e4:f4:3c:4f:64:d3:bc:cb:b0:cb:08:b0:6c:6b:a3:74: a0:f3:5d:86:23:45:da:7b:c2:87:27:1e:be:d9:37:c5:70:f1: 95:2b:4e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOorz1dlcj5eqgeYFHqcAbe3RMoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEyMDUxNTQ2NDRaFw0yNTEyMDkwMzQ1NDRaMDMxMTAvBgNV BAMTKDdEQjkwM0E5N0I5MDQ2QUYxMzE3RDc2RjUwNzM2QzQ4REMxRTI2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZa7GFUC0FuNycsiBd7eOmXQXY FKLs/3CDAXRH2WAb3RCQ05nq5ytTx29qCWMejcvakGJWyBFbL61O67/2tKk7qdKO boQvStQ0gWtpFWgd7B2BcJVuJ8hdtlBIojmVQZ1CzjIvUwXs5GBMQNSNd337a6Zo EctU3GyR/c8Y/GteACWfgtQWh7lwQCr+PfYyHFuwRBcQli66lfxpPO1Ku4T41NeP Bgda2WH+yidjzESLZGMqGMZaTiz5wS8/PhJLpM17nvD4ppvQny6N4S9aUsvoF8SE +/Fc9y9K9f3pMqBtrp8uMCGmT5wZ5unhQmLXCrBDJD4ndSUVjI3TdmcUjA5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbkDqXuQRq8TF9dvUHNsSNweJnowHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoqxKjCuZJ5OARW5VRVZ5Q922P7C48ie/93 plljHZ9zpVUMcWu+wXmty4j/0/tiDQJEoq8wlNOzp5fiWn7vqE6+KfHEIau/dmMZ UkMCe4ujsOG0VvvE+o/a4fyfuw0ZDZ+hY4Uo/lslN96MzyVurBvN+vyLEXMwUTjy pX3gqvZ9cWestbAkqtioKH99+DOXpgqIglhpzJyv0aq4J/Ia/98FHjGIMkIrDnjU 1sHowEP42R6T1YA6NyeEDu+E93vY7ZnKsW8Zg8RKiaY/fY7OXAqO3vmYiWHNg9Bm 5PQ8T2TTvMuwywiwbGujdKDzXYYjRdp7wocnHr7ZN8Vw8ZUrToQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:50 2025 by rpki-client