This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: PrvRb3+bWC+eSTX8uyDxsSglpwFQXhRl+QZ6r3VHDjs= Subject key identifier: 07:78:1E:89:EC:C0:54:23:7C:76:46:34:A5:B9:01:8E:FB:D7:4A:6D Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 24A7413C34F8C0405EA2A4669BF916D233901C20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 0252 Signing time: Wed 17 Dec 2025 18:21:07 +0000 Manifest this update: Wed 17 Dec 2025 18:16:07 +0000 Manifest next update: Sun 21 Dec 2025 00:29:07 +0000 Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) 2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: JDPBcYr0MoQAMMWT2FsyNAg4LHk1DSTAsxoB9gytA+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a7:41:3c:34:f8:c0:40:5e:a2:a4:66:9b:f9:16:d2:33:90:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Dec 17 18:16:07 2025 GMT Not After : Dec 21 00:29:07 2025 GMT Subject: CN=07781E89ECC054237C764634A5B9018EFBD74A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:0b:92:e2:43:00:c3:79:f3:11:7d:7e:b4: 8b:de:86:d0:ca:26:9c:20:01:56:f8:66:fe:73:2f: 5c:c4:15:d5:f5:69:df:eb:b1:87:f5:01:03:75:4b: ea:67:15:da:94:42:9f:1a:c3:a2:72:99:36:1e:00: 2e:ef:f0:90:ad:47:d4:17:22:51:6f:1f:0d:e2:05: ea:a1:b0:33:fe:f4:b0:bd:6d:e6:8d:83:fe:fd:d6: 69:e3:65:4b:b6:77:4f:f7:05:4e:1d:0b:54:40:55: 81:72:c8:84:66:59:08:d7:bb:a1:a2:c1:3f:0e:3a: 8a:65:fc:42:99:ea:45:37:02:8f:3b:54:9e:bc:65: 12:06:ed:aa:8f:ba:23:ea:2f:3f:fc:d9:34:e0:a6: a7:bf:91:86:aa:eb:3c:c7:28:82:ff:94:92:bb:ca: ab:93:06:60:9c:73:0b:6a:3e:4c:bf:ae:64:84:b3: 9c:1a:9b:31:91:2f:0b:54:d7:69:63:d0:bb:2f:57: 83:6e:8e:5b:39:68:ec:33:9e:45:bc:c7:92:d8:c3: 6b:5d:34:a6:e7:b7:62:83:1b:82:e7:38:d1:d0:61: 78:48:ed:65:26:cb:be:75:f9:82:2a:bc:30:b2:73: da:c3:66:71:08:26:a2:55:86:39:e6:8b:35:bd:92: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:78:1E:89:EC:C0:54:23:7C:76:46:34:A5:B9:01:8E:FB:D7:4A:6D X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:9a:91:2b:af:a1:ba:18:f6:f2:e3:57:73:74:1d:27:01: 30:c5:24:3c:eb:f3:f7:ac:f4:be:e3:3c:52:85:8d:4d:ac:d6: 31:75:2d:73:b9:f3:09:d7:78:f5:1e:9e:4a:a4:0d:c3:d5:cd: f9:fb:63:20:60:c7:b3:75:d2:7a:d4:7b:fc:a9:1c:f2:69:10: 13:ed:2a:b6:1c:53:cc:16:73:c8:40:18:bb:15:bf:7c:78:62: 53:ed:1b:a9:4d:21:26:2e:6a:7f:19:ba:70:ea:c4:f0:30:5f: 45:2a:e7:e2:e1:27:3c:3d:82:d6:8c:ee:bd:a1:26:94:49:a4: d4:95:c3:e2:38:3c:5f:27:fe:2b:d8:43:e2:9b:e3:31:49:fc: 79:cf:39:39:4a:a8:ef:41:63:c1:e7:a3:79:27:5c:11:fe:e6: 8d:cd:36:f0:c6:7b:29:bd:44:9b:28:ae:63:85:90:bc:21:a6: 7e:f6:f6:55:c5:ac:f7:4e:34:ef:8b:6a:b1:1a:21:b6:31:b8: 58:95:f5:05:1c:8f:f1:3e:51:6b:cd:cf:cf:8d:37:43:11:2d: 7e:e2:12:84:c0:87:c6:e5:9d:81:63:d4:87:c3:04:7a:4f:ed: cf:0c:8f:4d:3a:91:4a:2b:27:09:84:50:5b:15:e4:47:de:9a: 85:b7:64:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKdBPDT4wEBeoqRmm/kW0jOQHCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTEyMTcxODE2MDdaFw0yNTEyMjEwMDI5MDdaMDMxMTAvBgNV BAMTKDA3NzgxRTg5RUNDMDU0MjM3Qzc2NDYzNEE1QjkwMThFRkJENzRBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXguS4kMAw3nzEX1+tIvehtDK JpwgAVb4Zv5zL1zEFdX1ad/rsYf1AQN1S+pnFdqUQp8aw6JymTYeAC7v8JCtR9QX IlFvHw3iBeqhsDP+9LC9beaNg/791mnjZUu2d0/3BU4dC1RAVYFyyIRmWQjXu6Gi wT8OOopl/EKZ6kU3Ao87VJ68ZRIG7aqPuiPqLz/82TTgpqe/kYaq6zzHKIL/lJK7 yquTBmCccwtqPky/rmSEs5wamzGRLwtU12lj0LsvV4Nujls5aOwznkW8x5LYw2td NKbnt2KDG4LnONHQYXhI7WUmy751+YIqvDCyc9rDZnEIJqJVhjnmizW9kn9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3geiezAVCN8dkY0pbkBjvvXSm0wHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhLmpErr6G6GPby41dzdB0nATDFJDzr8/es 9L7jPFKFjU2s1jF1LXO58wnXePUenkqkDcPVzfn7YyBgx7N10nrUe/ypHPJpEBPt KrYcU8wWc8hAGLsVv3x4YlPtG6lNISYuan8ZunDqxPAwX0Uq5+LhJzw9gtaM7r2h JpRJpNSVw+I4PF8n/ivYQ+Kb4zFJ/HnPOTlKqO9BY8Hno3knXBH+5o3NNvDGeym9 RJsormOFkLwhpn729lXFrPdONO+LarEaIbYxuFiV9QUcj/E+UWvNz8+NN0MRLX7i EoTAh8blnYFj1IfDBHpP7c8Mj006kUorJwmEUFsV5EfemoW3ZKk= -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:07 2025 by rpki-client