This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: AtYDpYQNCskitizaxw0YZSM3tPkVhgOlb4hrsC/rwlA= Subject key identifier: E1:1A:1F:54:42:61:B8:D2:A9:99:D5:9F:B3:50:60:05:B8:FA:E8:F3 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 2AA63A62200B21E334E0B08593E5800AC9B1B2E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 04:51:18 +0000 Manifest this update: Sat 06 Dec 2025 04:46:18 +0000 Manifest next update: Tue 09 Dec 2025 13:17:18 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 31/FQ2dTlRQi1M8fr41yX+tkHZ8Wl6D0ZbpjYHLg2gg=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a6:3a:62:20:0b:21:e3:34:e0:b0:85:93:e5:80:0a:c9:b1:b2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Dec 6 04:46:18 2025 GMT Not After : Dec 9 13:17:18 2025 GMT Subject: CN=E11A1F544261B8D2A999D59FB3506005B8FAE8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:42:b6:93:f3:0a:89:d5:19:9e:bb:31:97: 36:88:1a:ad:2e:bf:3a:88:e8:fe:7b:14:1e:9a:43: f2:15:5e:f6:27:11:35:82:a8:1a:79:8c:bf:fb:2a: bc:88:ca:c6:47:d8:14:d7:64:92:1e:6d:5a:a8:74: 4e:3a:1c:b2:13:67:18:86:1d:03:0d:3a:48:c8:e4: a3:08:05:1e:a8:02:e1:ca:a8:b6:23:2b:6e:d0:5d: f1:a4:03:74:5a:23:9d:94:68:23:24:a9:f9:fc:cf: 59:0c:12:49:a1:56:47:ea:e9:a8:56:22:95:fa:7b: 9a:1c:9d:3a:9d:79:c5:3a:41:87:e4:aa:16:50:38: e3:27:ee:fe:4d:a7:3c:84:02:8a:c5:de:25:bd:0f: a5:b3:31:58:c7:5e:e6:50:2e:21:5f:87:b3:1e:b6: c8:2c:02:a4:49:48:6d:a3:9c:18:12:ff:80:e5:b9: cf:8e:22:69:a8:5e:30:9d:97:58:25:9d:b0:f9:7a: d2:cc:fc:a1:3a:ad:5f:18:18:b1:eb:d0:6d:fd:c7: d7:85:2d:d2:07:6d:03:fc:08:9e:f8:1d:b8:76:33: db:cc:a7:d4:a0:8d:a7:9f:40:8a:e2:5c:18:49:a3: 54:19:23:87:8d:e2:cf:f5:75:6c:e7:ab:f6:8f:8e: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1A:1F:54:42:61:B8:D2:A9:99:D5:9F:B3:50:60:05:B8:FA:E8:F3 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0c:cd:3d:ee:39:0e:e0:68:6e:05:be:1a:7b:ac:9c:b8:8c: 45:e7:af:10:5d:9b:12:84:b7:46:7c:e1:2b:9c:85:bc:9f:b7: f7:45:3a:af:9b:ef:3d:90:ae:cc:b5:3f:f6:63:0a:c3:74:68: a9:73:2b:05:05:28:bd:ae:22:fa:3f:82:d3:7a:c4:e5:41:bb: 42:69:5e:a9:b4:5d:32:b7:ce:7a:05:96:d3:a4:60:a2:4d:24: c4:ec:62:5c:1c:0b:d0:fa:5f:bb:d9:a9:c0:3d:d7:19:44:f5: e5:2f:6c:ff:e1:82:e8:d8:00:d8:4b:10:40:66:58:3d:7b:a2: 39:fc:5f:9a:fa:2c:7b:60:0e:41:af:81:48:95:b5:1b:9c:a3: 26:a8:54:57:21:cb:9d:bf:b6:0c:e7:10:1c:91:e0:4b:cd:a2: 52:4b:90:ce:23:6c:49:9d:58:63:35:c3:95:3e:35:c1:f2:d9: 14:93:67:21:df:a4:14:59:18:df:78:2e:51:ca:b4:b7:20:bd: 24:e9:c6:75:10:95:e2:6e:62:86:9f:62:98:57:b4:bb:f8:3d: d5:2f:ac:4c:23:81:60:90:36:87:4b:89:b1:83:b9:e4:bd:28: 62:ae:59:8b:70:3a:37:48:2c:12:80:0f:e6:74:25:e9:c4:7a: ee:79:5e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqY6YiALIeM04LCFk+WACsmxsuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTEyMDYwNDQ2MThaFw0yNTEyMDkxMzE3MThaMDMxMTAvBgNV BAMTKEUxMUExRjU0NDI2MUI4RDJBOTk5RDU5RkIzNTA2MDA1QjhGQUU4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzkK2k/MKidUZnrsxlzaIGq0u vzqI6P57FB6aQ/IVXvYnETWCqBp5jL/7KryIysZH2BTXZJIebVqodE46HLITZxiG HQMNOkjI5KMIBR6oAuHKqLYjK27QXfGkA3RaI52UaCMkqfn8z1kMEkmhVkfq6ahW IpX6e5ocnTqdecU6QYfkqhZQOOMn7v5NpzyEAorF3iW9D6WzMVjHXuZQLiFfh7Me tsgsAqRJSG2jnBgS/4Dluc+OImmoXjCdl1glnbD5etLM/KE6rV8YGLHr0G39x9eF LdIHbQP8CJ74Hbh2M9vMp9SgjaefQIriXBhJo1QZI4eN4s/1dWznq/aPjgqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RofVEJhuNKpmdWfs1BgBbj66PMwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIMzT3uOQ7gaG4Fvhp7rJy4jEXnrxBdmxKE t0Z84Suchbyft/dFOq+b7z2Qrsy1P/ZjCsN0aKlzKwUFKL2uIvo/gtN6xOVBu0Jp Xqm0XTK3znoFltOkYKJNJMTsYlwcC9D6X7vZqcA91xlE9eUvbP/hgujYANhLEEBm WD17ojn8X5r6LHtgDkGvgUiVtRucoyaoVFchy52/tgznEByR4EvNolJLkM4jbEmd WGM1w5U+NcHy2RSTZyHfpBRZGN94LlHKtLcgvSTpxnUQleJuYoafYphXtLv4PdUv rEwjgWCQNodLibGDueS9KGKuWYtwOjdILBKAD+Z0JenEeu55Xpc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:45 2025 by rpki-client