This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: N5EG5zQbBFbNRSFtb+GcD4P9RutzsHHjXLeVVrPc26s= Subject key identifier: 14:FF:20:D1:B7:D0:AE:A5:FB:F7:83:B8:63:41:D6:DB:3B:7C:58:4E Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 0B4E32B507B0BD331DE388F0608BB450D00AB4D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 021B Signing time: Fri 05 Dec 2025 00:21:21 +0000 Manifest this update: Fri 05 Dec 2025 00:16:21 +0000 Manifest next update: Mon 08 Dec 2025 08:52:21 +0000 Files and hashes: 1: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 2: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 3: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: HIiY/nUQdw1cRCxAj+sriOG8TuinbyH192iGMCxHgVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4e:32:b5:07:b0:bd:33:1d:e3:88:f0:60:8b:b4:50:d0:0a:b4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Dec 5 00:16:21 2025 GMT Not After : Dec 8 08:52:21 2025 GMT Subject: CN=14FF20D1B7D0AEA5FBF783B86341D6DB3B7C584E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:31:53:f7:ff:0f:02:7e:a4:66:7a:6d:99: e3:7c:86:d0:8d:21:da:7c:12:75:5b:66:3e:54:3b: d0:e9:00:0f:82:46:75:95:29:bf:b6:42:1b:bb:cc: 45:1a:14:01:cf:32:9b:12:b2:41:f0:c8:38:f9:3c: 8d:f6:31:64:9f:4f:b2:fe:a2:15:70:5a:de:b8:d7: 62:89:15:f1:ca:63:3d:bf:41:c5:6b:e1:1c:e6:c6: db:46:f9:98:64:94:18:ea:d2:14:a4:dd:81:32:8c: 38:ca:f8:5b:3e:42:77:81:00:ba:92:99:4f:be:16: 76:d6:22:c2:05:38:ab:80:83:50:e6:93:57:1e:ea: 25:a0:09:58:08:73:d7:c0:9d:fc:03:2a:04:30:cc: 55:fc:92:90:a6:2a:3a:94:8d:1a:2f:72:ca:f3:c3: c3:96:d2:50:03:98:50:dc:27:cd:07:7a:f8:fb:65: 46:88:c5:1d:67:25:f9:74:9b:a9:61:32:45:93:a9: c0:8d:c9:43:ee:59:fc:4f:fa:4a:42:76:33:15:54: 62:60:49:00:2f:57:ce:1c:b5:d4:30:81:f0:38:76: 3b:da:5e:5c:e0:9b:9b:54:cd:4f:bd:53:37:24:90: 67:6a:ea:d0:d5:77:6c:cb:08:bf:d1:db:b2:e0:52: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:20:D1:B7:D0:AE:A5:FB:F7:83:B8:63:41:D6:DB:3B:7C:58:4E X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:47:c7:a0:1d:fc:68:36:fa:a9:36:c0:45:a8:f1:2c:29:39: e7:47:75:19:38:fb:e4:03:e3:b8:a5:6e:a3:21:f1:98:1c:b3: 37:5c:b1:ff:64:f9:2c:cd:20:0f:bd:c5:50:85:d1:30:b4:49: fe:db:e3:f0:d6:7f:dd:67:8c:4e:55:cb:ad:83:46:57:bd:c7: 8a:ad:89:96:79:76:62:f6:08:ec:4c:82:02:42:70:6c:7b:96: f0:79:6f:33:19:5f:6a:67:0d:e3:96:d3:c3:75:21:c5:59:d8: 5e:24:7e:ec:eb:83:1e:14:0f:82:26:e4:27:d0:16:d0:81:45: 2c:10:42:4e:e9:16:da:f9:5e:54:71:7b:3f:b9:ec:c6:bc:b5: 8b:33:18:08:9d:73:e5:e2:7d:cd:ee:52:84:42:68:ce:fe:12: fe:d2:a8:37:95:d0:94:eb:f8:b3:6d:ba:63:ee:89:c4:ff:a2: aa:84:de:b9:67:54:a2:1e:fe:e7:43:14:de:5a:84:5d:24:12: ae:09:77:33:f3:2d:43:c1:59:04:cf:85:56:d5:c1:50:77:a1: 61:5a:61:1b:ef:da:11:b3:a1:d8:ad:9f:39:cc:3b:b8:0d:45: e7:c5:ef:30:bb:0b:75:dc:22:6d:77:2f:1f:7d:03:17:bf:48: c6:4a:37:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC04ytQewvTMd44jwYIu0UNAKtNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTEyMDUwMDE2MjFaFw0yNTEyMDgwODUyMjFaMDMxMTAvBgNV BAMTKDE0RkYyMEQxQjdEMEFFQTVGQkY3ODNCODYzNDFENkRCM0I3QzU4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKjFT9/8PAn6kZnptmeN8htCN Idp8EnVbZj5UO9DpAA+CRnWVKb+2Qhu7zEUaFAHPMpsSskHwyDj5PI32MWSfT7L+ ohVwWt6412KJFfHKYz2/QcVr4RzmxttG+ZhklBjq0hSk3YEyjDjK+Fs+QneBALqS mU++FnbWIsIFOKuAg1Dmk1ce6iWgCVgIc9fAnfwDKgQwzFX8kpCmKjqUjRovcsrz w8OW0lADmFDcJ80Hevj7ZUaIxR1nJfl0m6lhMkWTqcCNyUPuWfxP+kpCdjMVVGJg SQAvV84ctdQwgfA4djvaXlzgm5tUzU+9UzckkGdq6tDVd2zLCL/R27LgUkTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFP8g0bfQrqX794O4Y0HW2zt8WE4wHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5Hx6Ad/Gg2+qk2wEWo8SwpOedHdRk4++QD 47ilbqMh8Zgcszdcsf9k+SzNIA+9xVCF0TC0Sf7b4/DWf91njE5Vy62DRle9x4qt iZZ5dmL2COxMggJCcGx7lvB5bzMZX2pnDeOW08N1IcVZ2F4kfuzrgx4UD4Im5CfQ FtCBRSwQQk7pFtr5XlRxez+57Ma8tYszGAidc+Xifc3uUoRCaM7+Ev7SqDeV0JTr +LNtumPuicT/oqqE3rlnVKIe/udDFN5ahF0kEq4JdzPzLUPBWQTPhVbVwVB3oWFa YRvv2hGzoditnznMO7gNRefF7zC7C3XcIm13Lx99Axe/SMZKNys= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:15 2025 by rpki-client