This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft File: 0310C64163DFFAE5A8F4065429C26B631D9834D9.mft (raw, json) Hash identifier: bRldt1u7JMH88gyC8vjdy2LMspPYI1DyurbMEnqaGOk= Subject key identifier: A7:2C:31:29:32:FF:1B:79:EC:88:87:F7:BE:C8:2B:DD:63:A1:E8:FC Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9 Certificate issuer: /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9 Certificate serial: 677262D60FF71045951C36378AB273C1B269E241 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft Manifest number: 01E9 Signing time: Wed 17 Dec 2025 08:10:41 +0000 Manifest this update: Wed 17 Dec 2025 08:05:41 +0000 Manifest next update: Sat 20 Dec 2025 10:32:41 +0000 Files and hashes: 1: 0310C64163DFFAE5A8F4065429C26B631D9834D9.crl (hash: qcifWNmFz4I+83oLd6YmucoEf32/MSHz+njKxDoy32c=) 2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: 1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:72:62:d6:0f:f7:10:45:95:1c:36:37:8a:b2:73:c1:b2:69:e2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9 Validity Not Before: Dec 17 08:05:41 2025 GMT Not After : Dec 20 10:32:41 2025 GMT Subject: CN=A72C312932FF1B79EC8887F7BEC82BDD63A1E8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:a2:bb:59:46:21:b8:4f:3a:d6:6c:11:56: bf:f0:d0:2e:b0:de:07:32:7b:99:a1:31:fc:b5:3c: 90:29:75:b0:80:2b:89:95:40:aa:f5:a1:4a:23:fd: 9b:9b:79:2c:bc:c0:51:75:c3:e5:27:95:8a:e6:fb: a3:d3:b8:95:a0:0e:d8:52:b4:79:a6:9b:7e:5b:b3: 6f:e7:0a:09:86:39:60:d4:85:12:a6:55:97:b3:d7: 2a:cd:c0:cf:28:d2:fa:d3:ab:ad:6e:f0:64:bc:cf: a9:69:ba:61:28:b9:f1:db:7f:c3:d7:4d:df:f3:c5: cf:cd:bc:0f:90:a3:e2:62:c7:28:10:46:13:c4:c9: 8a:7e:9f:0b:9a:af:8a:72:29:8f:09:b0:fe:98:5e: 9c:0e:2d:94:f8:32:72:2d:25:9b:a2:26:fe:c5:04: f9:25:71:85:07:57:40:b8:51:11:39:86:b2:e3:d3: 66:c6:f0:e6:58:bf:6c:86:80:ce:51:9c:d9:5c:31: e5:82:a9:87:17:58:6c:98:c4:08:46:c1:40:47:ff: df:6e:d4:3e:1f:b1:fc:2c:a6:74:37:b9:5f:48:2a: 71:73:71:45:45:d5:ec:92:db:0c:f5:a3:86:74:b8: 52:bd:b7:f5:4f:8e:44:c8:73:c1:61:5d:ad:9a:38: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:31:29:32:FF:1B:79:EC:88:87:F7:BE:C8:2B:DD:63:A1:E8:FC X509v3 Authority Key Identifier: keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e5:8b:49:fe:5d:d0:27:56:6e:70:b9:63:33:9e:1d:16:60: 31:d9:37:a3:71:1b:e2:7b:c1:0d:c4:ca:78:2e:44:7b:5a:81: e7:f6:a9:50:2d:b4:4e:5e:ce:8b:4f:80:85:a9:3f:d2:f7:9b: 8e:9b:82:33:f6:c7:d6:03:23:4e:d0:95:75:77:fc:d4:84:3e: d1:1a:eb:7a:07:a6:ae:0f:c2:bd:d0:1a:6c:37:79:fd:19:6f: ea:d8:41:7a:d0:dd:3c:71:e4:b1:72:30:5d:83:60:f5:fb:86: aa:9d:60:e3:d4:49:c0:d7:21:7c:76:18:23:b5:ba:6d:9a:df: 94:5f:5a:04:9e:b8:76:0c:17:df:4a:84:bb:f4:68:59:ff:fb: 74:65:68:37:20:aa:0d:f9:d8:f2:f9:9b:b9:7b:0f:fc:05:4d: 66:62:04:20:70:9e:07:66:5b:a1:ca:5e:9e:89:15:08:86:55: f9:84:4c:41:15:b7:ad:c8:2c:01:8e:10:88:13:42:c1:0f:56: c6:a4:a7:8a:dd:d9:fe:83:69:ff:69:6a:ca:c1:c0:c9:2a:00: 0a:bc:55:e8:e5:6c:69:e4:12:61:1e:fa:0f:fb:ca:0d:b9:82: ef:50:8f:fc:6c:6c:cb:a1:96:13:61:9e:fd:f0:d0:25:13:e7: 83:27:75:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3Ji1g/3EEWVHDY3irJzwbJp4kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMx RDk4MzREOTAeFw0yNTEyMTcwODA1NDFaFw0yNTEyMjAxMDMyNDFaMDMxMTAvBgNV BAMTKEE3MkMzMTI5MzJGRjFCNzlFQzg4ODdGN0JFQzgyQkRENjNBMUU4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQs6K7WUYhuE861mwRVr/w0C6w 3gcye5mhMfy1PJApdbCAK4mVQKr1oUoj/ZubeSy8wFF1w+UnlYrm+6PTuJWgDthS tHmmm35bs2/nCgmGOWDUhRKmVZez1yrNwM8o0vrTq61u8GS8z6lpumEoufHbf8PX Td/zxc/NvA+Qo+JixygQRhPEyYp+nwuar4pyKY8JsP6YXpwOLZT4MnItJZuiJv7F BPklcYUHV0C4URE5hrLj02bG8OZYv2yGgM5RnNlcMeWCqYcXWGyYxAhGwUBH/99u 1D4fsfwspnQ3uV9IKnFzcUVF1eyS2wz1o4Z0uFK9t/VPjkTIc8FhXa2aOBL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpywxKTL/G3nsiIf3vsgr3WOh6PwwHwYDVR0j BBgwFoAUAxDGQWPf+uWo9AZUKcJrYx2YNNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDk4MTk3Yy1hNTI2LTQ1YmQtOWNlOS0xNTM4M2M1ZDk1MzYvMC8wMzEwQzY0MTYz REZGQUU1QThGNDA2NTQyOUMyNkI2MzFEOTgzNEQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMxRDk4 MzREOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZC NjMxRDk4MzREOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHli0n+XdAnVm5wuWMznh0WYDHZN6NxG+J7 wQ3EynguRHtagef2qVAttE5ezotPgIWpP9L3m46bgjP2x9YDI07QlXV3/NSEPtEa 63oHpq4Pwr3QGmw3ef0Zb+rYQXrQ3Txx5LFyMF2DYPX7hqqdYOPUScDXIXx2GCO1 um2a35RfWgSeuHYMF99KhLv0aFn/+3RlaDcgqg352PL5m7l7D/wFTWZiBCBwngdm W6HKXp6JFQiGVfmETEEVt63ILAGOEIgTQsEPVsakp4rd2f6Daf9pasrBwMkqAAq8 VejlbGnkEmEe+g/7yg25gu9Qj/xsbMuhlhNhnv3w0CUT54Mnda0= -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:06 2025 by rpki-client