This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: h4i28aYboj+Gf8RMgyPxCCip4/oEQDKv2JtKtMzJUzc= Subject key identifier: 94:CD:3E:CB:58:18:EF:1D:00:5D:11:5C:78:85:03:81:62:F6:A9:71 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 40B1FEDD1F76C74B5DCF71B8EC2E8BAA7C294DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0150 Signing time: Sat 06 Dec 2025 02:41:00 +0000 Manifest this update: Sat 06 Dec 2025 02:36:00 +0000 Manifest next update: Tue 09 Dec 2025 07:51:00 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) 2: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: ymEMlAMW14igz0oj6wmTlGpOPhRZx0FHyayal3f1MPY=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b1:fe:dd:1f:76:c7:4b:5d:cf:71:b8:ec:2e:8b:aa:7c:29:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Dec 6 02:36:00 2025 GMT Not After : Dec 9 07:51:00 2025 GMT Subject: CN=94CD3ECB5818EF1D005D115C7885038162F6A971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:23:17:ef:f6:94:22:47:fa:f2:02:76:54: 4c:1a:8b:bd:a0:1b:d1:52:c4:ad:21:ff:45:bc:49: d8:e4:24:d8:eb:1a:03:88:3a:0d:86:6a:8d:39:f8: 9a:c9:bc:a0:89:f0:77:b9:56:48:c8:bb:16:48:27: 5d:ba:32:84:55:f9:a8:3f:2c:ea:18:0e:5e:d2:60: d1:88:98:ae:ed:13:d0:04:6f:24:97:63:50:64:60: 2d:eb:75:de:e9:eb:bb:de:4a:73:04:b6:cc:9e:9e: ef:cb:b8:9d:90:f6:d1:73:b3:37:f3:7d:10:47:7b: 68:c8:ef:f3:f1:51:6e:f5:53:db:6a:87:24:1b:e1: d5:7a:0f:40:4b:f1:40:95:09:a5:20:77:0f:0e:53: 29:2a:b7:e3:15:53:ca:1b:28:a6:e1:77:bb:8c:75: 60:f7:07:8e:df:37:1e:cb:9e:01:98:be:97:b0:a4: 71:b5:05:a1:03:66:f1:ac:09:87:0b:1c:59:d0:f0: 50:93:40:5a:ee:2a:c8:7e:be:2f:b9:ee:20:e4:a9: ea:2f:65:8a:fa:66:5d:1c:a0:5e:c8:02:e2:5a:31: bc:fd:d8:8b:11:67:cf:e4:a3:b9:5a:bd:8a:87:0c: b7:d7:c7:e1:ba:6c:b6:c1:fb:70:a7:fe:d4:65:55: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CD:3E:CB:58:18:EF:1D:00:5D:11:5C:78:85:03:81:62:F6:A9:71 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cf:b4:01:4a:c2:3c:19:17:6e:12:fa:4c:18:4a:bf:a6:bf: cf:1e:d3:78:a4:4f:52:4d:46:b8:c7:e7:b4:cf:07:5c:2e:0d: 72:f0:de:40:c4:10:ea:7c:37:08:9d:30:a8:59:a1:f5:15:7e: 74:84:87:86:9e:31:14:9c:81:bb:c4:fa:ca:cd:1f:bd:4c:2f: 6d:cb:23:0d:f3:71:c5:e3:50:d2:57:ff:89:7f:b0:6d:9b:1a: 38:cf:c1:26:55:e3:72:be:fb:aa:fd:4f:67:ca:80:14:a6:66: ce:cd:ba:4e:60:1b:d8:6f:23:2b:36:f7:9f:75:7c:9d:b2:ca: c1:66:f9:7a:46:e3:76:6b:bb:b2:5f:4c:74:86:27:7b:8c:7e: 4d:fc:0b:07:ee:a0:39:5f:1b:4a:8a:06:c5:b1:17:37:54:87: d7:37:27:b9:1a:f1:98:9a:64:2f:62:3e:27:01:01:26:5f:a8: cb:94:fc:38:40:ff:c8:15:85:1e:02:de:74:e6:62:fb:4c:2e: 62:77:eb:25:54:a6:96:b6:07:08:ca:b6:06:10:99:fc:16:cd: f2:ec:c7:e1:3b:ea:ef:03:f2:43:ed:cd:75:a6:14:d6:bd:64: fb:aa:00:15:32:49:fc:6b:95:fc:21:9f:c8:3d:58:ae:3a:ec: a9:16:e5:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLH+3R92x0tdz3G47C6LqnwpTa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTEyMDYwMjM2MDBaFw0yNTEyMDkwNzUxMDBaMDMxMTAvBgNV BAMTKDk0Q0QzRUNCNTgxOEVGMUQwMDVEMTE1Qzc4ODUwMzgxNjJGNkE5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bSMX7/aUIkf68gJ2VEwai72g G9FSxK0h/0W8SdjkJNjrGgOIOg2Gao05+JrJvKCJ8He5VkjIuxZIJ126MoRV+ag/ LOoYDl7SYNGImK7tE9AEbySXY1BkYC3rdd7p67veSnMEtsyenu/LuJ2Q9tFzszfz fRBHe2jI7/PxUW71U9tqhyQb4dV6D0BL8UCVCaUgdw8OUykqt+MVU8obKKbhd7uM dWD3B47fNx7LngGYvpewpHG1BaEDZvGsCYcLHFnQ8FCTQFruKsh+vi+57iDkqeov ZYr6Zl0coF7IAuJaMbz92IsRZ8/ko7lavYqHDLfXx+G6bLbB+3Cn/tRlVXtbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlM0+y1gY7x0AXRFceIUDgWL2qXEwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLPtAFKwjwZF24S+kwYSr+mv88e03ikT1JN RrjH57TPB1wuDXLw3kDEEOp8NwidMKhZofUVfnSEh4aeMRScgbvE+srNH71ML23L Iw3zccXjUNJX/4l/sG2bGjjPwSZV43K++6r9T2fKgBSmZs7Nuk5gG9hvIys29591 fJ2yysFm+XpG43Zru7JfTHSGJ3uMfk38CwfuoDlfG0qKBsWxFzdUh9c3J7ka8Zia ZC9iPicBASZfqMuU/DhA/8gVhR4C3nTmYvtMLmJ36yVUppa2BwjKtgYQmfwWzfLs x+E76u8D8kPtzXWmFNa9ZPuqABUySfxrlfwhn8g9WK467KkW5TI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:27 2025 by rpki-client