This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: EBVYhKd3F1+VefI0SmXMb5UhjI2nfzaDnT836AhgzDk= Subject key identifier: B5:C6:07:DB:BC:59:2B:BF:3D:86:0D:DD:40:08:36:7B:F6:C9:CC:23 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 32B7A0385D9E764D45D0C2028F04D333EC701101 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0413 Signing time: Fri 05 Dec 2025 11:41:05 +0000 Manifest this update: Fri 05 Dec 2025 11:36:05 +0000 Manifest next update: Mon 08 Dec 2025 20:21:05 +0000 Files and hashes: 1: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=) 2: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=) 5: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: ftslCaMVcDteBVs2LEyGhMtf2luteLRaNv0ARaZL0Sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b7:a0:38:5d:9e:76:4d:45:d0:c2:02:8f:04:d3:33:ec:70:11:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Dec 5 11:36:05 2025 GMT Not After : Dec 8 20:21:05 2025 GMT Subject: CN=B5C607DBBC592BBF3D860DDD4008367BF6C9CC23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:9f:22:99:f9:c1:94:c6:9e:b9:34:f9:41: 4a:fe:cc:1c:96:8a:3c:cb:a1:ec:14:42:29:4c:1d: 1f:ce:bd:0f:f9:e0:ae:eb:96:11:3f:e9:bd:e6:9a: d2:5b:d7:a2:fd:5e:ae:a6:8b:3a:65:d3:69:a9:be: 8a:58:fe:34:7a:0a:b6:4c:b3:d1:f7:04:82:50:91: 4d:f9:bb:0b:84:0c:01:f4:1b:ef:e1:9d:81:23:5f: 28:9f:3d:7e:d4:2b:e6:09:06:40:1f:dd:8e:f1:a7: df:ee:e9:1c:4b:e3:98:68:47:21:ac:e9:74:fb:59: 83:30:f7:82:63:e0:f7:8e:d6:fe:1c:a7:15:d2:a5: 48:c3:5b:61:83:50:c3:61:e0:67:40:08:54:ee:d0: 01:08:4c:3a:e3:ca:4a:67:e6:62:a4:c9:0d:a8:f8: a2:b7:df:f7:6f:f6:8c:0b:51:e0:67:fd:29:18:a4: ea:63:82:25:4e:73:bc:46:67:60:d1:01:f3:b6:4c: b7:74:13:84:db:17:2d:c2:1c:3d:48:a3:08:35:15: 95:1e:bc:84:c1:0b:2f:13:d0:0d:51:46:09:d3:91: 43:54:50:08:40:c0:9a:8e:cc:95:fa:1a:02:28:a3: 06:b7:b1:48:39:ac:5a:ea:f7:ee:d0:02:90:30:41: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C6:07:DB:BC:59:2B:BF:3D:86:0D:DD:40:08:36:7B:F6:C9:CC:23 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:15:1b:a0:98:3c:2c:be:4f:cd:ee:5a:53:ff:c6:ec:a6: a7:6f:4c:12:be:3d:5e:ee:ba:2a:07:4d:20:37:32:b3:5b:e7: cd:a8:a6:2c:8f:79:cd:ff:d2:fe:45:1e:92:db:99:1c:fb:37: 48:f2:f3:23:7d:b5:f2:93:2a:2a:ad:c6:13:c2:7c:ae:89:65: 92:6c:42:08:6c:86:b6:88:f6:99:8a:fc:9e:70:ab:cb:d7:1f: 0a:ec:b0:8f:3c:a6:50:6e:10:06:f4:e8:44:2d:cb:21:8b:2b: 08:73:93:80:ce:f7:68:38:4d:28:1e:f0:3a:d9:8a:31:50:35: d8:4e:a5:56:28:e1:d2:13:42:6e:44:43:48:f7:77:8c:18:1e: 8a:24:20:df:21:e6:62:0b:bc:71:0b:45:2d:c3:9e:25:ab:85: ac:48:e1:9c:55:9e:94:ae:f1:0f:1b:0c:8b:ff:6e:ac:31:78: 13:fb:38:f8:72:cb:d0:b5:f3:76:de:c9:30:bb:2e:d8:10:3e: ef:bc:6d:df:62:8b:54:78:90:81:66:28:d1:f9:b7:bb:b3:f0: f5:0a:6d:22:62:3c:c6:08:cf:f1:28:e1:6c:11:2f:82:65:77: d3:df:84:21:d4:b1:12:2e:4c:70:3c:69:01:40:d6:5c:3b:38: 9b:72:8b:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMregOF2edk1F0MICjwTTM+xwEQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTEyMDUxMTM2MDVaFw0yNTEyMDgyMDIxMDVaMDMxMTAvBgNV BAMTKEI1QzYwN0RCQkM1OTJCQkYzRDg2MERERDQwMDgzNjdCRjZDOUNDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BZ8imfnBlMaeuTT5QUr+zByW ijzLoewUQilMHR/OvQ/54K7rlhE/6b3mmtJb16L9Xq6mizpl02mpvopY/jR6CrZM s9H3BIJQkU35uwuEDAH0G+/hnYEjXyifPX7UK+YJBkAf3Y7xp9/u6RxL45hoRyGs 6XT7WYMw94Jj4PeO1v4cpxXSpUjDW2GDUMNh4GdACFTu0AEITDrjykpn5mKkyQ2o +KK33/dv9owLUeBn/SkYpOpjgiVOc7xGZ2DRAfO2TLd0E4TbFy3CHD1Iowg1FZUe vITBCy8T0A1RRgnTkUNUUAhAwJqOzJX6GgIoowa3sUg5rFrq9+7QApAwQQx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtcYH27xZK789hg3dQAg2e/bJzCMwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLwFRugmDwsvk/N7lpT/8bspqdvTBK+PV7u uioHTSA3MrNb582opiyPec3/0v5FHpLbmRz7N0jy8yN9tfKTKiqtxhPCfK6JZZJs QghshraI9pmK/J5wq8vXHwrssI88plBuEAb06EQtyyGLKwhzk4DO92g4TSge8DrZ ijFQNdhOpVYo4dITQm5EQ0j3d4wYHookIN8h5mILvHELRS3DniWrhaxI4ZxVnpSu 8Q8bDIv/bqwxeBP7OPhyy9C183beyTC7LtgQPu+8bd9ii1R4kIFmKNH5t7uz8PUK bSJiPMYIz/Eo4WwRL4Jld9PfhCHUsRIuTHA8aQFA1lw7OJtyiys= -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:22 2025 by rpki-client