This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json) Hash identifier: UmpU8afgcXoA42y5V682MJKzdLkFZhrkXeF9lksSeKE= Subject key identifier: E6:DF:C5:85:7C:1C:2E:1A:F5:EA:E2:A7:51:95:17:07:3A:50:0D:96 Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 33C15003005B2118689FC7A0AD73DE0B3D860CE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft Manifest number: 0494 Signing time: Fri 05 Dec 2025 11:00:48 +0000 Manifest this update: Fri 05 Dec 2025 10:55:48 +0000 Manifest next update: Mon 08 Dec 2025 15:40:48 +0000 Files and hashes: 1: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: co/wQBiL0RpLY6P467a3M69DDZurctNxBSkdOQmXOds=) 2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:50:03:00:5b:21:18:68:9f:c7:a0:ad:73:de:0b:3d:86:0c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Dec 5 10:55:48 2025 GMT Not After : Dec 8 15:40:48 2025 GMT Subject: CN=E6DFC5857C1C2E1AF5EAE2A7519517073A500D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:58:6d:97:39:c9:ec:ea:f5:d0:10:09:7e: f0:77:74:b5:a1:37:08:ed:60:59:f5:03:9c:4d:d6: 73:d2:4a:0e:a0:9f:ff:67:e8:c9:ff:cd:15:82:29: 35:0e:a5:56:e1:80:70:21:84:61:1d:47:6b:26:ab: 66:1c:e8:0c:f8:d1:e1:ed:8d:dc:e9:57:11:c1:6e: 3f:fd:39:b1:9d:bf:c9:18:54:72:bb:66:9b:d0:95: ef:c5:50:ad:58:14:33:6d:d4:9c:02:4f:8c:5f:9a: 14:d4:c1:fa:1f:f5:63:ba:49:0f:54:60:ac:86:60: c0:95:80:ee:bf:e0:8b:6d:36:18:79:df:24:47:ba: 96:ba:a5:40:37:51:31:19:d0:3e:11:45:22:aa:81: 5e:4d:ea:5f:ac:6c:af:e7:b5:d6:58:bb:ab:54:2f: a6:a9:a6:dc:b2:23:82:31:d7:2e:01:ff:7a:ea:23: 25:d4:0d:46:2b:83:91:65:6d:8e:b1:4b:7e:90:c3: 11:0b:85:54:4d:50:fb:6a:da:37:6b:cf:f7:87:55: 0d:b2:df:85:86:16:ac:98:d1:11:68:c9:bb:f0:d9: 52:51:d1:87:4b:c9:12:a6:6e:0d:b8:c2:b7:7b:34: fc:3e:3a:da:d4:3b:bd:79:be:79:ec:ae:41:ee:be: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DF:C5:85:7C:1C:2E:1A:F5:EA:E2:A7:51:95:17:07:3A:50:0D:96 X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ea:30:db:b7:d0:f4:58:9f:ae:03:d9:d5:1d:93:6c:5c:c1: 8b:82:c9:69:ed:57:1b:ee:64:bd:55:1f:e9:62:85:0c:af:d9: 2a:75:e8:31:59:42:cd:7d:6e:bd:20:2a:61:9d:dd:7c:84:59: 75:66:b8:16:c7:f0:df:f0:16:6f:25:6a:fc:d1:b2:7d:26:a5: b1:dc:56:24:45:3d:08:bc:2f:85:34:16:34:f2:88:01:b1:72: cf:f3:17:7b:4c:62:9c:df:0c:28:e3:c6:e7:61:fc:3e:c1:8a: 03:6a:25:f1:bb:9f:61:85:40:64:90:70:e3:17:bd:00:91:ba: 4b:b0:6f:43:a0:9f:ef:27:8a:48:39:f4:c2:53:c9:5e:57:fe: 6c:97:d2:02:3d:7e:2f:66:9b:a8:03:04:54:79:27:19:aa:01: 03:bb:e8:f8:5e:8b:ab:08:6d:12:ab:50:55:e5:10:ee:ce:d4: 02:92:5e:2d:09:52:66:04:4f:7c:b1:0b:c1:b4:d8:3a:3b:f6: 7a:a5:10:26:b4:88:cc:cd:bd:f0:cd:f4:71:e0:1f:ac:cd:b7: 22:96:84:b5:df:aa:7b:fb:1f:02:50:83:e7:34:04:41:1c:81: b5:07:fb:03:5f:1c:49:d4:45:52:87:4f:f5:e2:68:18:fe:6d: 8b:7e:10:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8FQAwBbIRhon8egrXPeCz2GDOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNTEyMDUxMDU1NDhaFw0yNTEyMDgxNTQwNDhaMDMxMTAvBgNV BAMTKEU2REZDNTg1N0MxQzJFMUFGNUVBRTJBNzUxOTUxNzA3M0E1MDBEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlVhtlznJ7Or10BAJfvB3dLWh NwjtYFn1A5xN1nPSSg6gn/9n6Mn/zRWCKTUOpVbhgHAhhGEdR2smq2Yc6Az40eHt jdzpVxHBbj/9ObGdv8kYVHK7ZpvQle/FUK1YFDNt1JwCT4xfmhTUwfof9WO6SQ9U YKyGYMCVgO6/4IttNhh53yRHupa6pUA3UTEZ0D4RRSKqgV5N6l+sbK/ntdZYu6tU L6apptyyI4Ix1y4B/3rqIyXUDUYrg5FlbY6xS36QwxELhVRNUPtq2jdrz/eHVQ2y 34WGFqyY0RFoybvw2VJR0YdLyRKmbg24wrd7NPw+OtrUO715vnnsrkHuvuHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5t/FhXwcLhr16uKnUZUXBzpQDZYwHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1 OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrqMNu30PRYn64D2dUdk2xcwYuCyWntVxvu ZL1VH+lihQyv2Sp16DFZQs19br0gKmGd3XyEWXVmuBbH8N/wFm8lavzRsn0mpbHc ViRFPQi8L4U0FjTyiAGxcs/zF3tMYpzfDCjjxudh/D7BigNqJfG7n2GFQGSQcOMX vQCRukuwb0Ogn+8nikg59MJTyV5X/myX0gI9fi9mm6gDBFR5JxmqAQO76Phei6sI bRKrUFXlEO7O1AKSXi0JUmYET3yxC8G02Do79nqlECa0iMzNvfDN9HHgH6zNtyKW hLXfqnv7HwJQg+c0BEEcgbUH+wNfHEnURVKHT/XiaBj+bYt+EAA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:46 2025 by rpki-client