This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: LPpLac6zr6Fyp+af9QQh2VC0SSI7f2zFRUi25BiTDCM= Subject key identifier: 01:65:61:52:FC:5D:2D:FF:64:B5:89:8C:F8:36:1B:6A:2F:2F:08:7B Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 5EF48DD7BEE4C0F5F00E5974E8BE17EC02595997 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 22:12:17 +0000 Manifest this update: Fri 05 Dec 2025 22:07:17 +0000 Manifest next update: Tue 09 Dec 2025 07:49:17 +0000 Files and hashes: 1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: UnxIXWTvLgJI5W34XyaPwJAL6w6Kpvv0Mk0aVwgeGoo=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f4:8d:d7:be:e4:c0:f5:f0:0e:59:74:e8:be:17:ec:02:59:59:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Dec 5 22:07:17 2025 GMT Not After : Dec 9 07:49:17 2025 GMT Subject: CN=01656152FC5D2DFF64B5898CF8361B6A2F2F087B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:5f:32:5c:fa:3f:5f:59:f0:75:b0:ca:86: e8:5e:2a:4d:f2:f7:87:31:a5:75:5a:3b:dd:9a:10: 4f:f9:02:8b:8b:60:36:20:23:2a:29:35:70:b7:10: cf:05:e5:db:33:d3:ae:0e:9f:40:3d:ca:37:db:c2: 86:b5:1a:62:5d:6b:06:5e:6c:ae:ea:e7:50:13:5b: cc:8a:48:fd:86:80:b4:a2:0b:ea:05:d3:33:34:7b: d0:2d:31:92:57:68:58:c1:d4:c6:dc:32:bb:7b:c3: 73:c8:bc:d2:74:ee:63:8b:0c:94:76:65:e9:77:31: 2b:8b:d3:9b:25:9f:ec:fd:bb:25:20:ad:05:93:25: d1:74:c0:33:b2:af:eb:40:4e:cb:e1:8c:94:c2:4b: a9:c8:76:cc:ef:aa:7e:e9:9b:01:61:08:9f:a1:6f: 2d:64:9b:51:65:1b:14:0f:3c:b9:cc:2d:52:83:39: a9:8c:76:c1:17:b5:ea:85:56:73:b8:99:9f:06:6c: 99:f8:45:1b:9d:43:98:5a:ab:d5:13:42:22:46:0e: 8c:d3:c7:38:d6:35:11:0d:15:a5:f9:07:be:9f:a6: cc:8d:37:06:c0:df:31:bb:1a:98:f6:68:c6:ad:99: f9:ca:ea:16:00:bf:88:05:bd:46:17:b3:4e:9a:8b: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:61:52:FC:5D:2D:FF:64:B5:89:8C:F8:36:1B:6A:2F:2F:08:7B X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7e:34:1e:10:e7:47:64:40:a1:a2:ed:f0:d0:5d:e7:1e:12: ae:1b:a9:7b:b8:95:a3:82:ba:8b:b0:6d:27:91:bd:1a:ac:ab: 15:5b:3d:7f:62:af:d7:d5:83:04:96:fb:b3:f6:b8:91:3f:77: 0b:3f:6c:f2:d0:b0:b5:21:72:a5:a6:f7:b0:2b:86:a7:c7:0a: 6b:e6:bf:4e:39:6c:0a:c3:6e:c8:11:3f:ed:26:5c:88:4c:e9: fa:ff:f4:2e:dd:27:44:7b:ac:e2:fe:ea:b8:49:6d:ff:1d:62: f7:ef:1c:14:79:59:18:4d:d2:a5:e3:23:56:b5:ca:00:94:b0: 88:66:5e:4e:3c:da:75:7c:2c:56:82:4d:4a:67:1a:cd:17:e0: b4:ce:46:11:5b:04:63:43:68:87:d4:cd:99:ed:36:80:5e:6a: 0a:d5:46:7e:99:c0:35:a4:b4:8e:64:dd:28:7c:36:dc:58:df: 41:2c:33:05:cc:af:83:a1:98:5b:e2:ee:a9:23:4c:d2:0c:a3: 0d:36:74:25:d6:96:0b:56:06:e3:bb:9e:81:be:ae:fe:bb:8d: 67:cc:46:d7:62:52:d4:27:ac:91:ec:0b:10:04:3e:e1:17:c2: 9e:19:96:5b:df:9a:39:bd:7b:0c:73:0b:5a:d2:5b:40:ac:b7: b2:ee:33:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvSN177kwPXwDll06L4X7AJZWZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNTEyMDUyMjA3MTdaFw0yNTEyMDkwNzQ5MTdaMDMxMTAvBgNV BAMTKDAxNjU2MTUyRkM1RDJERkY2NEI1ODk4Q0Y4MzYxQjZBMkYyRjA4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyV8yXPo/X1nwdbDKhuheKk3y 94cxpXVaO92aEE/5AouLYDYgIyopNXC3EM8F5dsz064On0A9yjfbwoa1GmJdawZe bK7q51ATW8yKSP2GgLSiC+oF0zM0e9AtMZJXaFjB1MbcMrt7w3PIvNJ07mOLDJR2 Zel3MSuL05sln+z9uyUgrQWTJdF0wDOyr+tATsvhjJTCS6nIdszvqn7pmwFhCJ+h by1km1FlGxQPPLnMLVKDOamMdsEXteqFVnO4mZ8GbJn4RRudQ5haq9UTQiJGDozT xzjWNRENFaX5B76fpsyNNwbA3zG7Gpj2aMatmfnK6hYAv4gFvUYXs06ai9QLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWVhUvxdLf9ktYmM+DYbai8vCHswHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId+NB4Q50dkQKGi7fDQXeceEq4bqXu4laOC uouwbSeRvRqsqxVbPX9ir9fVgwSW+7P2uJE/dws/bPLQsLUhcqWm97ArhqfHCmvm v045bArDbsgRP+0mXIhM6fr/9C7dJ0R7rOL+6rhJbf8dYvfvHBR5WRhN0qXjI1a1 ygCUsIhmXk482nV8LFaCTUpnGs0X4LTORhFbBGNDaIfUzZntNoBeagrVRn6ZwDWk tI5k3Sh8NtxY30EsMwXMr4OhmFvi7qkjTNIMow02dCXWlgtWBuO7noG+rv67jWfM RtdiUtQnrJHsCxAEPuEXwp4Zllvfmjm9ewxzC1rSW0Cst7LuMy4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:11 2025 by rpki-client