This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: yniCHeFUiEJ9YPBhE4rT3/DEsJFYB0yhNFILxSUODVM= Subject key identifier: FE:1E:66:09:A7:67:A6:2D:29:58:6C:4C:4C:6B:BD:F2:65:AA:05:A1 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 4D7231778E63AC008CA152E030EFF033571EE464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 024D Signing time: Sat 06 Dec 2025 13:11:07 +0000 Manifest this update: Sat 06 Dec 2025 13:06:07 +0000 Manifest next update: Tue 09 Dec 2025 20:11:07 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: tlKYmyECdEbRTXTzOagaoOne1pU2nUl7S1+Oo8w4b5w=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:72:31:77:8e:63:ac:00:8c:a1:52:e0:30:ef:f0:33:57:1e:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Dec 6 13:06:07 2025 GMT Not After : Dec 9 20:11:07 2025 GMT Subject: CN=FE1E6609A767A62D29586C4C4C6BBDF265AA05A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:13:bb:06:7a:3d:8d:1c:f0:79:d8:a8:a2: ec:42:fe:36:d1:9c:a7:9f:a7:ca:80:2b:a6:a6:06: c1:4e:d3:27:00:64:d9:8d:36:71:d8:44:e7:8b:db: 30:46:18:00:fc:97:10:8e:d6:14:d6:56:b4:ed:a0: 96:65:12:b2:84:8f:b4:cf:d5:43:3f:ab:31:e3:76: 33:a2:5c:0a:35:1c:bf:6b:d4:6f:9d:1d:69:08:3b: f3:dc:7f:29:a7:9b:da:f2:9b:30:98:b4:1f:08:3a: f4:db:33:95:88:67:39:b8:93:3e:d1:ac:81:c4:ad: 20:75:b8:f4:aa:b8:11:05:d8:4c:88:97:6d:95:f2: f5:f2:d4:de:5b:1d:cf:e8:82:9b:dd:f1:91:24:1d: b7:d7:c9:72:d0:9f:f9:03:dc:9c:c0:6f:db:43:87: a6:9b:f4:21:32:e6:6f:5a:fb:3c:b1:5b:6a:1d:aa: dc:48:26:cf:12:52:28:c9:8f:49:fe:a4:63:79:d3: 43:81:ae:d1:57:1d:8f:41:8d:3e:b0:3b:17:7a:00: 9f:31:26:c9:5b:f0:7e:dc:88:2c:97:34:c3:23:48: 56:97:69:15:6b:ad:be:e3:88:8f:5c:54:4d:10:56: a8:79:f5:88:da:4b:da:da:11:4e:99:4a:ff:46:0d: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1E:66:09:A7:67:A6:2D:29:58:6C:4C:4C:6B:BD:F2:65:AA:05:A1 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:29:1c:29:68:23:d7:e2:c1:87:c7:26:0f:f0:b7:4a:1e:3b: a8:45:4f:f0:be:39:d1:a6:6f:4e:74:a5:36:77:a3:38:e9:f6: 19:fd:b1:2e:99:0d:4d:35:68:9b:13:a4:e4:80:13:c2:4c:08: 57:81:ae:60:5a:30:9a:3a:11:9a:c3:6c:c1:78:85:42:9e:aa: 5b:af:e6:5c:23:d6:ad:33:da:08:aa:3a:d5:2d:3b:36:da:97: 10:3d:4f:7c:aa:23:3b:4b:b2:c4:d8:28:24:87:a9:a6:4c:ab: 8c:cd:9e:7c:50:a0:a4:ba:99:00:40:78:85:c6:4f:be:6f:20: 1d:f9:e1:34:1b:4a:01:ba:eb:b8:8c:4e:4f:da:9b:e2:89:bf: 38:e8:9d:e4:f4:ac:bd:b3:54:f5:f2:4e:d5:ce:01:9d:f4:97: 85:20:b3:6b:75:95:cd:db:89:cc:4d:16:fa:30:81:b9:be:77: 2f:03:b8:88:36:0a:41:62:e7:43:83:88:ad:5c:a9:6a:50:f4: bb:df:30:12:1e:98:ce:7a:ae:bf:1f:f3:45:d5:ea:d9:32:03: 1c:da:13:87:04:dd:e6:a6:2b:0c:33:00:dd:a6:a8:e3:b6:88: 09:4a:4e:2e:ea:8e:72:36:aa:c5:a0:2c:51:f4:c2:e6:39:f0: 44:21:5d:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXIxd45jrACMoVLgMO/wM1ce5GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTEyMDYxMzA2MDdaFw0yNTEyMDkyMDExMDdaMDMxMTAvBgNV BAMTKEZFMUU2NjA5QTc2N0E2MkQyOTU4NkM0QzRDNkJCREYyNjVBQTA1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVxO7Bno9jRzwedioouxC/jbR nKefp8qAK6amBsFO0ycAZNmNNnHYROeL2zBGGAD8lxCO1hTWVrTtoJZlErKEj7TP 1UM/qzHjdjOiXAo1HL9r1G+dHWkIO/Pcfymnm9rymzCYtB8IOvTbM5WIZzm4kz7R rIHErSB1uPSquBEF2EyIl22V8vXy1N5bHc/ogpvd8ZEkHbfXyXLQn/kD3JzAb9tD h6ab9CEy5m9a+zyxW2odqtxIJs8SUijJj0n+pGN500OBrtFXHY9BjT6wOxd6AJ8x Jslb8H7ciCyXNMMjSFaXaRVrrb7jiI9cVE0QVqh59YjaS9raEU6ZSv9GDUzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/h5mCadnpi0pWGxMTGu98mWqBaEwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgpHCloI9fiwYfHJg/wt0oeO6hFT/C+OdGm b050pTZ3ozjp9hn9sS6ZDU01aJsTpOSAE8JMCFeBrmBaMJo6EZrDbMF4hUKeqluv 5lwj1q0z2giqOtUtOzbalxA9T3yqIztLssTYKCSHqaZMq4zNnnxQoKS6mQBAeIXG T75vIB354TQbSgG667iMTk/am+KJvzjoneT0rL2zVPXyTtXOAZ30l4Ugs2t1lc3b icxNFvowgbm+dy8DuIg2CkFi50ODiK1cqWpQ9LvfMBIemM56rr8f80XV6tkyAxza E4cE3eamKwwzAN2mqOO2iAlKTi7qjnI2qsWgLFH0wuY58EQhXS0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:44 2025 by rpki-client