This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: 4LkwNfoHlIZYCIVRFu3PSYo50CEeq7lmffgVNzBQ1nQ= Subject key identifier: AF:63:A4:4B:83:D2:ED:4A:BA:9D:C2:0A:6E:8A:A0:57:AF:74:3F:FD Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 0A23074D47454863E5661DB37CEDA25530F1D69D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0121 Signing time: Fri 05 Dec 2025 08:02:05 +0000 Manifest this update: Fri 05 Dec 2025 07:57:05 +0000 Manifest next update: Mon 08 Dec 2025 15:38:05 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: nYZXJEbnystgrWIXJtfTe/LA/eBy2yZiPRVqlgfEHIY=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:23:07:4d:47:45:48:63:e5:66:1d:b3:7c:ed:a2:55:30:f1:d6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Dec 5 07:57:05 2025 GMT Not After : Dec 8 15:38:05 2025 GMT Subject: CN=AF63A44B83D2ED4ABA9DC20A6E8AA057AF743FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:f8:27:22:74:af:67:f1:92:58:01:93:4e: 78:70:cd:b4:ee:e0:81:9a:b7:df:2c:5c:da:15:f2: e3:79:97:08:9f:75:a2:71:e0:12:ba:03:3b:92:96: 28:7f:1b:df:e4:62:23:07:96:25:d9:c8:2d:b2:33: c1:29:44:eb:55:67:3e:cf:01:b0:be:e0:fa:d9:5b: 53:aa:ba:a7:70:dc:d3:74:c5:37:5e:be:e1:4e:e8: a2:ed:1d:a2:9b:b7:66:57:39:78:d7:b3:ed:8d:e3: e7:3d:78:dc:f3:a5:25:30:91:c8:f0:be:83:6c:df: 55:38:c2:e1:97:06:84:0b:0c:7e:d6:cd:b3:93:a0: ac:9b:85:ad:3e:69:1e:bd:2b:59:04:4a:d3:b5:5e: e2:03:9a:48:0c:fc:5e:07:52:14:00:00:2b:32:53: 48:e7:ba:2a:ae:80:5c:e3:2e:c4:cd:e5:18:ec:91: 0b:09:92:68:5e:1f:ea:e6:a8:dd:48:a4:40:99:dd: 64:40:da:a5:af:ed:2e:e6:4a:80:5a:98:b5:d1:64: 02:5e:ff:b3:40:b8:1d:31:58:08:e4:b4:15:42:31: f3:ad:a4:9f:15:15:35:ee:4e:4c:58:b4:a3:25:b1: f9:48:89:0f:e7:5a:0f:04:d3:0e:d3:24:70:79:7b: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:A4:4B:83:D2:ED:4A:BA:9D:C2:0A:6E:8A:A0:57:AF:74:3F:FD X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7e:06:91:7e:9e:e0:f6:03:3d:79:61:30:a8:b3:3c:94:1b: dd:3a:79:fe:bf:41:fd:29:13:00:73:6b:4d:6a:3a:fe:ab:bf: 61:f3:82:b5:dc:35:53:fa:24:5b:ae:1f:56:47:25:93:e3:a9: 88:e2:c5:e8:13:5c:44:f4:8f:18:a3:c1:9a:13:5e:c7:15:3a: 6d:a8:c5:cb:03:fe:65:50:30:05:d3:70:07:87:ac:12:41:65: 5f:5c:56:32:f3:0d:e0:a7:a4:04:05:1f:78:c7:6f:39:25:0d: 30:5e:42:da:02:e5:aa:26:55:86:53:5b:f8:ec:65:1f:a6:98: 40:19:e1:4a:db:c9:9b:7a:14:c4:cc:93:f5:a7:46:ed:a2:0d: 2c:eb:a1:29:30:fb:de:1c:0d:d7:80:6c:e4:1b:fa:ed:ca:46: 53:29:43:3e:dd:ba:61:be:38:ad:d5:60:53:60:66:88:1f:69: c2:08:2f:a1:8b:e5:a0:1c:d1:7f:7c:93:2b:ad:a7:2f:22:0a: 85:36:d0:9e:8c:69:a3:ba:a3:49:eb:38:39:c4:bb:9a:3f:00: 4b:1d:5b:d4:34:be:c6:f8:4e:2b:fd:fd:c8:84:9e:d3:44:ae: cf:ab:eb:5b:3b:7c:3a:ab:39:f8:a2:ad:ca:e5:85:b4:2a:a9: 7d:aa:cd:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiMHTUdFSGPlZh2zfO2iVTDx1p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTEyMDUwNzU3MDVaFw0yNTEyMDgxNTM4MDVaMDMxMTAvBgNV BAMTKEFGNjNBNDRCODNEMkVENEFCQTlEQzIwQTZFOEFBMDU3QUY3NDNGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLPgnInSvZ/GSWAGTTnhwzbTu 4IGat98sXNoV8uN5lwifdaJx4BK6AzuSlih/G9/kYiMHliXZyC2yM8EpROtVZz7P AbC+4PrZW1Oquqdw3NN0xTdevuFO6KLtHaKbt2ZXOXjXs+2N4+c9eNzzpSUwkcjw voNs31U4wuGXBoQLDH7WzbOToKybha0+aR69K1kEStO1XuIDmkgM/F4HUhQAACsy U0jnuiqugFzjLsTN5RjskQsJkmheH+rmqN1IpECZ3WRA2qWv7S7mSoBamLXRZAJe /7NAuB0xWAjktBVCMfOtpJ8VFTXuTkxYtKMlsflIiQ/nWg8E0w7TJHB5e82TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2OkS4PS7Uq6ncIKboqgV690P/0wHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF+BpF+nuD2Az15YTCoszyUG906ef6/Qf0p EwBza01qOv6rv2HzgrXcNVP6JFuuH1ZHJZPjqYjixegTXET0jxijwZoTXscVOm2o xcsD/mVQMAXTcAeHrBJBZV9cVjLzDeCnpAQFH3jHbzklDTBeQtoC5aomVYZTW/js ZR+mmEAZ4UrbyZt6FMTMk/WnRu2iDSzroSkw+94cDdeAbOQb+u3KRlMpQz7dumG+ OK3VYFNgZogfacIIL6GL5aAc0X98kyutpy8iCoU20J6MaaO6o0nrODnEu5o/AEsd W9Q0vsb4Tiv9/ciEntNErs+r61s7fDqrOfiircrlhbQqqX2qzUs= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:55 2025 by rpki-client