This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: +QBpfmKjoroItXNPAyp0EfLPPQj1KSk8QrSGXbI9mng= Subject key identifier: E4:8E:00:F3:39:72:34:D2:3F:09:32:EC:AE:12:55:A3:8B:71:C2:CD Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 463D67E913339B033992B1D2C2DADCACDA7C0FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: E3 Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 13:56:31 +0000 Manifest next update: Tue 09 Dec 2025 17:24:31 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 2: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: AgSVAKrVXT7kYpliFWKAma/KC3WOmCvaqVbkLzkciGk=) 3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 4: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 5: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) 6: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3d:67:e9:13:33:9b:03:39:92:b1:d2:c2:da:dc:ac:da:7c:0f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Dec 6 13:56:31 2025 GMT Not After : Dec 9 17:24:31 2025 GMT Subject: CN=E48E00F3397234D23F0932ECAE1255A38B71C2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:22:08:60:06:46:bc:c4:30:6f:38:23:39: c7:41:c4:22:a1:a1:57:0e:50:e9:46:e7:20:8e:d5: 07:ca:c0:25:9e:e5:31:45:76:f9:f3:00:b4:e8:16: b6:11:b7:e4:d5:9d:12:25:36:fc:18:b8:1b:b6:06: 8f:10:41:5e:e9:b9:82:61:ed:49:d2:b4:88:b7:20: e6:91:ef:7d:89:02:eb:fe:1f:a4:f4:fe:9c:7f:bf: 49:79:ab:11:1f:2b:64:1f:c4:c8:eb:30:48:b6:88: e3:b8:1b:21:85:29:40:4d:e8:3e:5b:16:27:03:38: d4:9d:67:89:25:18:70:9e:fc:10:08:e7:64:7d:4b: 4f:ff:80:5c:f3:b4:aa:40:c4:2f:42:7e:61:5f:7d: 7d:32:16:df:61:2c:22:15:2d:32:a2:b9:8d:79:4d: b7:c2:11:32:25:b3:dd:0b:87:1c:b4:cc:67:a7:fd: 1e:b7:20:c8:8a:12:bd:1f:ce:f0:61:b0:df:e4:34: d4:e2:40:81:e0:a8:08:fa:a9:c2:7a:e2:52:03:12: 55:b8:ec:c4:07:04:f3:0d:3b:61:d2:88:ce:8e:e6: 6b:e6:d0:f0:95:74:a3:7f:a6:82:40:77:57:9a:36: 7d:c6:89:90:27:1b:a7:05:31:0e:e7:6f:a0:48:bd: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:00:F3:39:72:34:D2:3F:09:32:EC:AE:12:55:A3:8B:71:C2:CD X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:11:4d:9c:db:49:f0:b3:91:cd:1b:01:5c:a0:20:0b:a6:37: 83:ff:2d:4d:4c:f6:7d:36:b8:83:b4:5e:1f:f1:ce:95:de:ed: 39:63:82:1f:67:8a:29:2a:fa:23:3b:8c:ba:43:ab:e6:59:88: 90:1e:4d:d8:69:ae:6b:a2:89:a1:c9:93:ba:02:d4:19:0c:f6: 3e:33:5d:d0:7a:dc:10:3d:50:ba:62:61:ee:f3:57:07:7b:17: 0c:d4:ad:35:ed:14:0f:f1:46:71:a8:44:a4:e7:b4:fd:50:91: 14:b8:36:ce:fe:1d:43:7c:5a:04:4f:ba:ad:2e:80:fd:a3:58: c8:b5:6e:76:ce:8a:f1:3d:ba:6e:26:24:00:b0:f2:b5:fd:cc: 53:ea:73:d1:73:0f:80:86:85:d3:4f:ff:43:b5:14:f6:1d:c3: b9:85:5f:2a:9b:63:9f:90:05:e9:f7:3a:79:e0:3f:43:50:54: 1d:55:f9:c2:98:41:94:b1:5d:83:f4:3d:d7:f2:4d:c8:7f:c1: c6:d1:0c:0c:c8:cc:8b:1a:9e:90:5e:c4:9b:1f:15:4f:f6:60: ae:d2:ca:64:59:46:88:90:75:f9:d3:13:f0:82:82:49:72:e7: 59:e9:2a:d3:d4:ec:aa:bb:4c:ba:34:c6:ea:d4:eb:ed:1c:65: 9b:16:a2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURj1n6RMzmwM5krHSwtrcrNp8D9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTEyMDYxMzU2MzFaFw0yNTEyMDkxNzI0MzFaMDMxMTAvBgNV BAMTKEU0OEUwMEYzMzk3MjM0RDIzRjA5MzJFQ0FFMTI1NUEzOEI3MUMyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsCIIYAZGvMQwbzgjOcdBxCKh oVcOUOlG5yCO1QfKwCWe5TFFdvnzALToFrYRt+TVnRIlNvwYuBu2Bo8QQV7puYJh 7UnStIi3IOaR732JAuv+H6T0/px/v0l5qxEfK2QfxMjrMEi2iOO4GyGFKUBN6D5b FicDONSdZ4klGHCe/BAI52R9S0//gFzztKpAxC9CfmFffX0yFt9hLCIVLTKiuY15 TbfCETIls90Lhxy0zGen/R63IMiKEr0fzvBhsN/kNNTiQIHgqAj6qcJ64lIDElW4 7MQHBPMNO2HSiM6O5mvm0PCVdKN/poJAd1eaNn3GiZAnG6cFMQ7nb6BIvZbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5I4A8zlyNNI/CTLsrhJVo4txws0wHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABURTZzbSfCzkc0bAVygIAumN4P/LU1M9n02 uIO0Xh/xzpXe7Tljgh9niikq+iM7jLpDq+ZZiJAeTdhprmuiiaHJk7oC1BkM9j4z XdB63BA9ULpiYe7zVwd7FwzUrTXtFA/xRnGoRKTntP1QkRS4Ns7+HUN8WgRPuq0u gP2jWMi1bnbOivE9um4mJACw8rX9zFPqc9FzD4CGhdNP/0O1FPYdw7mFXyqbY5+Q Ben3OnngP0NQVB1V+cKYQZSxXYP0PdfyTch/wcbRDAzIzIsanpBexJsfFU/2YK7S ymRZRoiQdfnTE/CCgkly51npKtPU7Kq7TLo0xurU6+0cZZsWops= -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:05 2025 by rpki-client