This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: mpuxzb7fbCDhwpWl1EOykmULAtpgCsXUyruJxAZEZFg= Subject key identifier: 1F:BC:29:B2:0B:6A:2D:F6:F2:D2:C6:95:55:9C:59:5C:95:DF:DF:30 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 4D7E4D1D5EA9684970E93279A82A6969E153A167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02B6 Signing time: Sat 06 Dec 2025 17:52:29 +0000 Manifest this update: Sat 06 Dec 2025 17:47:29 +0000 Manifest next update: Tue 09 Dec 2025 22:24:29 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 2: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: 8/BzRUFHCNrwaARAPybenTf2jPc/vzALSf7D6NQ1wy0=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:4d:1d:5e:a9:68:49:70:e9:32:79:a8:2a:69:69:e1:53:a1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Dec 6 17:47:29 2025 GMT Not After : Dec 9 22:24:29 2025 GMT Subject: CN=1FBC29B20B6A2DF6F2D2C695559C595C95DFDF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:37:77:ad:a9:dc:fe:45:d5:34:80:1b:4b:7a: d9:e8:89:35:23:b5:0a:57:01:82:cb:a7:bc:50:1c: e8:44:49:f3:fa:d7:30:ce:4f:db:e0:2a:13:59:21: d3:a1:d5:52:6d:23:de:a1:7f:78:48:a7:9d:3a:60: eb:47:db:b0:c9:27:3c:25:a4:1d:e8:07:d4:01:fa: 6a:af:72:04:87:01:ee:ab:db:30:08:5b:02:32:ea: df:d2:48:9e:cc:e7:da:1b:57:95:4a:a7:9f:22:67: 3b:e8:10:66:1b:2e:29:ab:8d:37:01:81:cc:9f:e6: 0e:91:67:9c:6a:95:42:e0:a9:53:76:c9:32:c0:dc: c0:c2:d8:0e:d2:0f:d7:d6:9a:e1:d4:b2:cb:1e:2f: 14:96:10:51:20:82:1b:a2:f8:18:43:d5:99:9a:28: 87:0a:49:53:ab:64:04:1a:f1:a0:a1:4a:78:de:f1: 94:39:fb:ce:50:cb:8f:13:18:72:6c:01:03:10:e0: f9:6a:e6:46:04:a2:1c:e0:94:99:6e:b1:9e:cd:aa: 9e:3e:f2:6e:fc:88:14:87:0d:99:5b:eb:74:e0:14: 30:1a:84:70:3a:83:7b:b7:32:6d:97:78:3e:03:06: 16:c9:01:53:14:57:65:8c:ea:4b:bb:c5:65:e8:dd: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:29:B2:0B:6A:2D:F6:F2:D2:C6:95:55:9C:59:5C:95:DF:DF:30 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b8:2f:21:b6:75:41:64:cc:90:1d:82:2d:6c:6d:d7:9f:c4: 94:a6:1b:39:48:8b:b1:12:45:0e:05:32:71:f2:77:4e:5b:9b: 58:3d:45:15:ec:5b:ea:49:69:c4:b7:50:ac:6f:8a:79:38:68: bb:f3:a1:05:26:ee:98:59:52:df:c9:e6:70:a6:33:7b:c0:cc: 55:b0:00:09:93:1f:f6:f5:9f:70:71:d3:6c:26:fb:28:89:5e: a8:f1:a2:ee:47:b6:7b:37:a3:7f:df:db:05:7c:27:25:f9:91: f1:2b:84:79:f9:33:fd:0c:71:42:73:68:a4:43:96:a2:b8:ca: e0:b1:54:ba:78:ab:91:a1:e0:22:11:9f:08:29:88:ba:c2:f3: 63:bb:fb:87:75:5b:1b:05:19:84:8a:99:d6:83:45:e7:18:82: 53:2e:1d:ee:bb:f2:7c:fc:45:0c:0f:07:9c:b2:b5:8f:85:c3: 12:cf:4a:49:f8:21:06:80:e0:2a:d3:93:fd:b5:b4:5a:cb:dc: d5:08:be:b2:53:55:2a:8e:61:81:f6:71:59:28:f2:b8:fc:94: cf:09:9f:87:81:86:f0:c9:0d:aa:00:ee:64:3d:dc:9e:32:94: c7:ba:14:4a:2c:f6:fc:ee:fe:9d:7c:af:26:f2:62:64:bd:d5: 49:40:5e:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTX5NHV6paElw6TJ5qCppaeFToWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTEyMDYxNzQ3MjlaFw0yNTEyMDkyMjI0MjlaMDMxMTAvBgNV BAMTKDFGQkMyOUIyMEI2QTJERjZGMkQyQzY5NTU1OUM1OTVDOTVERkRGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5N3etqdz+RdU0gBtLetnoiTUj tQpXAYLLp7xQHOhESfP61zDOT9vgKhNZIdOh1VJtI96hf3hIp506YOtH27DJJzwl pB3oB9QB+mqvcgSHAe6r2zAIWwIy6t/SSJ7M59obV5VKp58iZzvoEGYbLimrjTcB gcyf5g6RZ5xqlULgqVN2yTLA3MDC2A7SD9fWmuHUssseLxSWEFEgghui+BhD1Zma KIcKSVOrZAQa8aChSnje8ZQ5+85Qy48TGHJsAQMQ4Plq5kYEohzglJlusZ7Nqp4+ 8m78iBSHDZlb63TgFDAahHA6g3u3Mm2XeD4DBhbJAVMUV2WM6ku7xWXo3YpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7wpsgtqLfby0saVVZxZXJXf3zAwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABC4LyG2dUFkzJAdgi1sbdefxJSmGzlIi7ES RQ4FMnHyd05bm1g9RRXsW+pJacS3UKxvink4aLvzoQUm7phZUt/J5nCmM3vAzFWw AAmTH/b1n3Bx02wm+yiJXqjxou5Htns3o3/f2wV8JyX5kfErhHn5M/0McUJzaKRD lqK4yuCxVLp4q5Gh4CIRnwgpiLrC82O7+4d1WxsFGYSKmdaDRecYglMuHe678nz8 RQwPB5yytY+FwxLPSkn4IQaA4CrTk/21tFrL3NUIvrJTVSqOYYH2cVko8rj8lM8J n4eBhvDJDaoA7mQ93J4ylMe6FEos9vzu/p18rybyYmS91UlAXrc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:26:24 2025 by rpki-client