This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: /DAPe946Bz67ihlbQMDELS08S9Y8+Ad4hrSgNfp92KI= Subject key identifier: 44:D1:E9:BA:97:83:B4:1E:14:B2:A8:E1:F7:88:C0:5B:3E:38:25:9F Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 0B488B869E27A1E22F6F8F07FB278844D831FBB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01BD Signing time: Sat 06 Dec 2025 15:41:36 +0000 Manifest this update: Sat 06 Dec 2025 15:36:36 +0000 Manifest next update: Tue 09 Dec 2025 20:21:36 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: atdlOTBS/2XhpB8d/txoiLkxh6dsvyG11PMXaCxwwOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:48:8b:86:9e:27:a1:e2:2f:6f:8f:07:fb:27:88:44:d8:31:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Dec 6 15:36:36 2025 GMT Not After : Dec 9 20:21:36 2025 GMT Subject: CN=44D1E9BA9783B41E14B2A8E1F788C05B3E38259F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:5b:ca:cf:ce:f2:20:15:be:a1:af:c8:d4: 21:7e:78:9f:72:20:ae:fb:e9:18:89:78:f2:41:81: 8e:77:ae:ed:92:3c:65:ca:c8:fe:f3:ce:e5:c9:46: e7:5d:37:ca:1d:f5:6d:a6:ea:9c:82:74:59:23:a3: 48:27:e9:e4:3b:c7:ce:71:14:9e:66:83:db:05:c3: 4b:11:f7:e0:69:c7:5b:44:c5:5f:57:ae:e6:d2:70: 64:13:fd:57:8a:dd:15:5e:88:d4:73:5e:d4:35:d1: 85:c9:dc:aa:fe:95:3a:fe:90:78:9e:7b:55:8e:18: 4f:8c:d9:6a:62:dd:2a:d9:28:bd:d4:73:f2:24:a4: 2f:23:d9:b3:86:99:d3:36:11:50:67:1b:c9:c3:d6: 5b:fd:4d:4a:3d:bc:25:c0:65:3c:19:a2:49:50:87: 84:3f:1b:a8:74:02:2f:90:b9:31:83:93:ab:46:ce: b7:1a:3f:9a:d2:d0:19:be:df:f3:a0:88:e6:35:15: ec:35:29:3e:70:60:7a:1c:ca:7c:59:67:92:d6:34: 91:50:bb:9b:ae:6d:d1:5f:94:48:ed:d2:f6:b9:65: e7:a6:32:fa:ee:40:bc:b5:0b:d9:5a:27:fe:58:27: c6:b3:a4:d1:cb:c9:2c:60:f2:e5:aa:02:99:58:c7: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:E9:BA:97:83:B4:1E:14:B2:A8:E1:F7:88:C0:5B:3E:38:25:9F X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:79:e0:85:91:ed:47:e6:3a:ad:54:b7:2b:db:e0:d0:17:a0: 5c:a7:0c:f7:66:29:3b:d8:0d:af:27:49:d8:6b:27:ce:2c:17: 61:7a:56:98:55:38:95:dc:55:85:69:25:ec:80:ef:08:66:c3: ee:a8:1e:40:26:25:fb:a6:ba:0c:45:fe:e8:4c:2c:2b:dc:d3: da:1d:b5:84:74:81:b4:42:5d:a4:66:9f:e2:ba:1a:d0:07:05: df:bf:3a:14:ae:52:a9:ed:07:a5:87:6b:e0:cb:bc:e9:55:db: 65:9c:64:a9:5a:ad:db:80:12:bb:fa:26:a0:20:b7:48:2f:40: cc:d7:41:18:98:31:93:e6:08:c6:73:a0:9d:80:62:13:86:79: 9e:93:83:43:35:64:5d:dd:d0:ef:8e:d3:57:df:c4:80:f4:e1: 01:66:6b:2f:5f:82:0c:a2:c4:e0:8f:83:b1:85:42:5e:89:9c: 07:e1:59:47:14:f6:bf:40:cd:3f:fe:8e:5f:21:0f:0c:00:1d: ed:23:25:1f:86:99:19:ec:9f:ba:6e:0f:0d:08:90:76:02:df: 58:91:a3:e6:be:fb:8e:83:04:00:ab:c0:8a:fa:61:62:ee:91: 25:9f:1a:bc:ab:08:48:c6:c4:b5:48:ca:57:3e:80:f3:2b:c5: 43:c8:c7:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0iLhp4noeIvb48H+yeIRNgx+7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTEyMDYxNTM2MzZaFw0yNTEyMDkyMDIxMzZaMDMxMTAvBgNV BAMTKDQ0RDFFOUJBOTc4M0I0MUUxNEIyQThFMUY3ODhDMDVCM0UzODI1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG01vKz87yIBW+oa/I1CF+eJ9y IK776RiJePJBgY53ru2SPGXKyP7zzuXJRuddN8od9W2m6pyCdFkjo0gn6eQ7x85x FJ5mg9sFw0sR9+Bpx1tExV9XrubScGQT/VeK3RVeiNRzXtQ10YXJ3Kr+lTr+kHie e1WOGE+M2Wpi3SrZKL3Uc/IkpC8j2bOGmdM2EVBnG8nD1lv9TUo9vCXAZTwZoklQ h4Q/G6h0Ai+QuTGDk6tGzrcaP5rS0Bm+3/OgiOY1Few1KT5wYHocynxZZ5LWNJFQ u5uubdFflEjt0va5ZeemMvruQLy1C9laJ/5YJ8azpNHLySxg8uWqAplYx4yvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNHpupeDtB4Usqjh94jAWz44JZ8wHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF54IWR7UfmOq1Utyvb4NAXoFynDPdmKTvY Da8nSdhrJ84sF2F6VphVOJXcVYVpJeyA7whmw+6oHkAmJfumugxF/uhMLCvc09od tYR0gbRCXaRmn+K6GtAHBd+/OhSuUqntB6WHa+DLvOlV22WcZKlarduAErv6JqAg t0gvQMzXQRiYMZPmCMZzoJ2AYhOGeZ6Tg0M1ZF3d0O+O01ffxID04QFmay9fggyi xOCPg7GFQl6JnAfhWUcU9r9AzT/+jl8hDwwAHe0jJR+GmRnsn7puDw0IkHYC31iR o+a++46DBACrwIr6YWLukSWfGryrCEjGxLVIylc+gPMrxUPIx9w= -----END CERTIFICATE-----Generated at Sun Dec 7 05:54:55 2025 by rpki-client