This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: QNROKaD7WtRb92Tbgjek8u94fDH3Kec8XS77gmeKoMg= Subject key identifier: 0F:2F:95:25:FE:80:6A:CB:86:20:73:CD:6A:F0:40:5A:7A:DA:77:90 Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 1EA0C7CF97CD3FC68F27CE660D987BEE554A3D50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01C1 Signing time: Mon 15 Dec 2025 03:41:37 +0000 Manifest this update: Mon 15 Dec 2025 03:36:37 +0000 Manifest next update: Thu 18 Dec 2025 13:43:37 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: gEA4WY9BTaNlzhDZEUKi3RrMnBqzOLwGDE9igiSIDOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 13:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a0:c7:cf:97:cd:3f:c6:8f:27:ce:66:0d:98:7b:ee:55:4a:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Dec 15 03:36:37 2025 GMT Not After : Dec 18 13:43:37 2025 GMT Subject: CN=0F2F9525FE806ACB862073CD6AF0405A7ADA7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:a5:df:10:33:fa:f3:5d:d9:03:e1:78:0e: c4:21:33:e9:67:25:74:bd:dd:70:42:e2:ff:ab:be: ba:72:33:45:8b:83:32:95:90:dd:02:4d:ef:d2:77: f5:c8:39:1d:98:20:98:2d:b0:1f:34:a6:f9:9c:72: a0:15:50:13:6a:1c:02:45:88:46:09:72:cd:14:0b: 76:5f:8a:2c:4b:07:d9:1a:8b:65:9a:1d:9d:45:76: d8:8a:c6:8a:dd:54:3a:eb:b7:28:75:a7:f7:36:c3: 56:d1:ea:69:e0:6c:58:dd:9c:b3:cc:85:80:c2:12: 8c:a9:07:cb:10:d6:1e:08:69:de:45:e9:95:6e:13: 83:e7:26:d9:15:f9:b8:41:6d:18:61:b3:5c:73:04: f9:97:62:3e:6d:64:03:24:99:c0:6e:10:75:de:a3: 53:37:06:6c:c8:53:d5:f2:f7:f4:60:86:6a:59:eb: 6f:d2:60:45:1d:de:f6:ee:8e:3f:6e:74:2f:a7:d0: 42:0a:7d:7b:c5:7f:bf:48:0a:50:94:56:36:5d:3d: 5e:54:ae:3b:45:c7:01:b8:5d:dc:5c:94:92:7d:81: 21:64:6a:07:0a:1c:b2:cd:58:be:4e:38:6d:35:51: 69:2f:49:cd:80:d1:09:74:54:7e:f2:cc:ef:25:60: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:95:25:FE:80:6A:CB:86:20:73:CD:6A:F0:40:5A:7A:DA:77:90 X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:44:74:15:0f:ae:4b:28:8b:fb:5e:a2:45:51:c1:3b:4a:31: 2c:2b:36:c3:da:e4:8b:3a:e2:22:d7:a5:36:bf:82:36:93:5c: 7e:ac:fa:8a:4e:3b:57:11:15:1a:f4:ae:d9:03:db:ca:0a:0b: 9c:93:59:da:d2:96:bd:ac:47:73:f8:18:84:a5:f7:25:ce:6b: a5:d5:5d:32:32:56:f2:f9:f9:95:b9:93:5c:e7:4b:44:2b:b0: d6:c8:2f:dc:2e:fb:de:32:ab:ef:0a:48:e6:67:f6:1c:c3:47: 98:a5:0a:fe:ee:cd:26:00:dc:b1:9c:58:51:69:31:0e:e2:de: 9d:6b:15:4d:f5:34:01:89:96:64:fa:f4:bc:c9:0a:7e:b8:c3: 14:af:f6:19:16:2d:71:6e:26:b7:26:36:80:4d:14:25:99:65: 74:87:83:d4:89:fe:76:a9:f7:bb:75:90:9e:55:cc:0c:36:9b: 20:7c:1c:78:8a:10:ba:44:0b:1a:c0:40:77:ee:9c:60:5a:a4: a6:ca:b3:a8:b0:76:27:24:e1:89:d3:95:97:06:ec:25:c7:4f: 82:46:28:c2:72:e8:ff:02:92:3d:82:0c:39:16:30:19:ae:72: ee:1d:bc:ce:7f:7e:05:f3:d1:4b:45:37:3b:e0:c1:5e:04:65: 1d:c6:92:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqDHz5fNP8aPJ85mDZh77lVKPVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTEyMTUwMzM2MzdaFw0yNTEyMTgxMzQzMzdaMDMxMTAvBgNV BAMTKDBGMkY5NTI1RkU4MDZBQ0I4NjIwNzNDRDZBRjA0MDVBN0FEQTc3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+KXfEDP6813ZA+F4DsQhM+ln JXS93XBC4v+rvrpyM0WLgzKVkN0CTe/Sd/XIOR2YIJgtsB80pvmccqAVUBNqHAJF iEYJcs0UC3ZfiixLB9kai2WaHZ1FdtiKxordVDrrtyh1p/c2w1bR6mngbFjdnLPM hYDCEoypB8sQ1h4Iad5F6ZVuE4PnJtkV+bhBbRhhs1xzBPmXYj5tZAMkmcBuEHXe o1M3BmzIU9Xy9/RghmpZ62/SYEUd3vbujj9udC+n0EIKfXvFf79IClCUVjZdPV5U rjtFxwG4XdxclJJ9gSFkagcKHLLNWL5OOG01UWkvSc2A0Ql0VH7yzO8lYHHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDy+VJf6AasuGIHPNavBAWnrad5AwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpEdBUPrksoi/teokVRwTtKMSwrNsPa5Is6 4iLXpTa/gjaTXH6s+opOO1cRFRr0rtkD28oKC5yTWdrSlr2sR3P4GISl9yXOa6XV XTIyVvL5+ZW5k1znS0QrsNbIL9wu+94yq+8KSOZn9hzDR5ilCv7uzSYA3LGcWFFp MQ7i3p1rFU31NAGJlmT69LzJCn64wxSv9hkWLXFuJrcmNoBNFCWZZXSHg9SJ/nap 97t1kJ5VzAw2myB8HHiKELpECxrAQHfunGBapKbKs6iwdick4YnTlZcG7CXHT4JG KMJy6P8Ckj2CDDkWMBmucu4dvM5/fgXz0UtFNzvgwV4EZR3Gkl0= -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:31 2025 by rpki-client