This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft File: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json) Hash identifier: hoXWII9VIgL+LiWt7cZNSr5b0WdSL+dLZcf96RyOHNY= Subject key identifier: D2:33:F2:B2:B7:D3:F7:59:DA:9A:22:A9:C3:83:98:6E:4D:F9:BF:5D Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 638AA5B3CEB8B4F79B69C8A1F18D7627C118DF66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft Manifest number: 0533 Signing time: Wed 17 Dec 2025 18:31:49 +0000 Manifest this update: Wed 17 Dec 2025 18:26:49 +0000 Manifest next update: Sat 20 Dec 2025 22:20:49 +0000 Files and hashes: 1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=) 2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=) 3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: ITFBqViISeD4QCJwq5D9AUcLjKrPR4gJ8CiimyhK+vQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8a:a5:b3:ce:b8:b4:f7:9b:69:c8:a1:f1:8d:76:27:c1:18:df:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Dec 17 18:26:49 2025 GMT Not After : Dec 20 22:20:49 2025 GMT Subject: CN=D233F2B2B7D3F759DA9A22A9C383986E4DF9BF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:35:39:68:c4:c5:c7:d3:43:40:7a:79:bd: 5e:d1:35:54:5a:ff:a9:5f:77:a9:f3:bb:63:20:1c: 0a:0d:f1:5e:b8:d4:99:56:c8:da:11:7d:ad:c6:48: 76:60:e6:48:91:d4:de:fa:92:c2:50:f7:6a:0c:e0: 4f:64:fe:7b:5f:b3:3c:65:e7:f2:11:4d:72:6b:3c: 60:f7:ea:62:eb:5a:04:63:1d:d2:82:97:df:b5:96: eb:3b:ed:4a:4a:b7:1c:f0:ab:ff:27:b8:ee:8e:1a: b8:04:22:45:c9:49:28:c0:dc:89:68:76:43:66:d7: ad:ea:7a:61:d7:25:90:37:a2:3d:0e:54:54:c2:50: a0:b5:0f:c2:32:b3:64:9c:69:cf:50:88:57:c3:71: e9:6d:e5:df:11:43:ee:c1:7b:f3:f5:45:96:d7:4c: 4f:c6:86:0c:bc:a6:9b:1a:c2:c8:9a:d2:21:07:b9: 27:86:23:9d:98:39:35:5e:87:3c:9b:41:af:41:9f: 4f:51:ab:a1:62:5a:e7:72:72:47:fb:61:02:d8:6b: 16:b4:9e:dd:58:14:ea:90:97:4f:b6:12:23:a9:5f: 07:19:5a:f5:2c:3d:32:c2:87:6e:45:d6:ff:17:e0: 90:87:b5:11:ed:06:ff:0a:fd:65:a1:ac:14:3a:9e: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:F2:B2:B7:D3:F7:59:DA:9A:22:A9:C3:83:98:6E:4D:F9:BF:5D X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:dc:72:51:b2:6c:fc:70:cb:cb:45:83:8b:d1:a7:ed:9d:87: 80:fe:a1:fa:53:27:78:2f:47:55:ec:bd:6e:da:f0:c7:36:e5: dc:32:71:2a:5c:81:7a:28:98:a5:7e:c0:a3:83:df:25:45:b5: 65:f9:ad:3c:ea:50:c0:8a:8d:f9:8b:47:3c:b0:3c:fd:1b:6c: c9:ec:d2:f7:97:52:0a:2d:64:59:a5:28:b8:ac:23:30:31:6a: 4a:ad:6f:5a:29:c2:f5:83:39:46:77:3e:05:a8:05:91:4c:15: fd:3a:1c:61:85:0e:f3:83:d8:08:55:ed:f7:d6:37:8f:1c:4b: 2c:bc:af:65:1e:6c:9f:44:00:8f:f4:ee:9e:62:c1:d9:b6:75: 36:39:7d:56:72:bc:dd:e9:ac:5f:0b:51:bd:bc:16:77:26:6b: 53:b4:2f:b9:7f:c2:57:23:a6:92:9d:bf:4a:aa:59:25:ae:d9: 40:9a:90:b6:07:52:b1:3b:a6:02:54:22:0e:2e:7a:3a:91:ca: c6:8c:78:66:72:5e:a7:93:67:e6:42:d7:cb:a7:f3:94:ea:b1: 9d:41:10:1c:0f:0e:bc:88:20:d3:de:4c:7b:cc:ce:4e:45:bb: 26:da:d7:c2:b5:09:a8:4f:29:33:44:1e:f3:80:2c:2a:ab:fa: 8e:e7:91:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4qls864tPebacih8Y12J8EY32YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTEyMTcxODI2NDlaFw0yNTEyMjAyMjIwNDlaMDMxMTAvBgNV BAMTKEQyMzNGMkIyQjdEM0Y3NTlEQTlBMjJBOUMzODM5ODZFNERGOUJGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SjU5aMTFx9NDQHp5vV7RNVRa /6lfd6nzu2MgHAoN8V641JlWyNoRfa3GSHZg5kiR1N76ksJQ92oM4E9k/ntfszxl 5/IRTXJrPGD36mLrWgRjHdKCl9+1lus77UpKtxzwq/8nuO6OGrgEIkXJSSjA3Ilo dkNm163qemHXJZA3oj0OVFTCUKC1D8Iys2Scac9QiFfDcelt5d8RQ+7Be/P1RZbX TE/Ghgy8ppsawsia0iEHuSeGI52YOTVehzybQa9Bn09Rq6FiWudyckf7YQLYaxa0 nt1YFOqQl0+2EiOpXwcZWvUsPTLCh25F1v8X4JCHtRHtBv8K/WWhrBQ6nke5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jPysrfT91namiKpw4OYbk35v10wHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENG OURERjY1NkI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXcclGybPxwy8tFg4vRp+2dh4D+ofpTJ3gv R1XsvW7a8Mc25dwycSpcgXoomKV+wKOD3yVFtWX5rTzqUMCKjfmLRzywPP0bbMns 0veXUgotZFmlKLisIzAxakqtb1opwvWDOUZ3PgWoBZFMFf06HGGFDvOD2AhV7ffW N48cSyy8r2UebJ9EAI/07p5iwdm2dTY5fVZyvN3prF8LUb28Fncma1O0L7l/wlcj ppKdv0qqWSWu2UCakLYHUrE7pgJUIg4uejqRysaMeGZyXqeTZ+ZC18un85TqsZ1B EBwPDryIINPeTHvMzk5Fuyba18K1CahPKTNEHvOALCqr+o7nkSc= -----END CERTIFICATE-----Generated at Fri Dec 19 13:42:50 2025 by rpki-client