This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: 7I0ED3ET73pfTc3H1RWMGJ3yL/3TjIFClYRMGFeARRY= Subject key identifier: F6:11:88:BD:88:A6:3B:CE:8C:0E:A7:06:E4:00:42:64:63:14:98:F9 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 408065BBAD69D5D68A2E202DD8F8D2CE751DCCE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: DE Signing time: Fri 05 Dec 2025 05:10:55 +0000 Manifest this update: Fri 05 Dec 2025 05:05:55 +0000 Manifest next update: Mon 08 Dec 2025 09:02:55 +0000 Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: NbP13eF2dPk4ZgVFvu8LOaxfCEuoF7kNkn26AC0dmBE=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:65:bb:ad:69:d5:d6:8a:2e:20:2d:d8:f8:d2:ce:75:1d:cc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Dec 5 05:05:55 2025 GMT Not After : Dec 8 09:02:55 2025 GMT Subject: CN=F61188BD88A63BCE8C0EA706E4004264631498F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:18:3b:ca:2a:19:6a:e9:a7:7a:4e:a5:ce: dd:cb:4b:02:60:07:b5:78:bf:d8:db:85:63:86:2a: 2b:49:f8:02:a6:1e:46:3d:37:eb:7d:88:bc:85:06: 06:a8:22:5f:e7:ab:02:af:6f:fb:31:f6:bc:07:1c: 58:79:bc:1e:c8:35:4a:91:37:c9:b4:ef:ea:d7:1e: d3:27:04:2e:29:ca:82:cb:5b:7b:c3:0f:97:1d:d9: 35:ba:86:00:cc:86:f9:b9:6b:d8:31:86:04:e9:47: 5e:0b:4d:82:cb:f2:04:a1:a5:ff:8c:08:59:8a:18: b4:e9:21:a0:84:14:4f:47:65:64:c3:dc:33:9e:ec: 7d:aa:28:7e:20:9b:12:70:06:76:a3:6d:77:8a:43: 09:c5:b3:89:25:75:3f:68:25:eb:01:93:81:85:5b: 60:7c:58:f9:4e:ef:61:9a:52:1c:87:83:14:68:b9: be:ed:74:38:45:79:e7:46:15:c9:48:53:5f:a4:a6: 27:c1:af:1a:08:58:8c:dd:a6:62:13:9a:d6:46:c2: f7:8b:e1:44:da:cf:81:28:17:64:0e:77:c8:bd:c6: 7a:3f:27:27:9f:67:8c:4c:25:0a:08:19:ca:44:84: 74:cd:54:d1:de:53:60:76:47:c2:a2:20:e6:0b:70: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:88:BD:88:A6:3B:CE:8C:0E:A7:06:E4:00:42:64:63:14:98:F9 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:01:b0:e8:e2:8e:57:a0:69:a2:0d:12:2e:75:7c:35:17: 97:bc:58:d3:bb:38:f4:f9:cb:be:f3:d4:a1:07:28:26:02:89: 54:4e:49:94:75:b8:37:fd:c8:0c:29:d6:9d:1d:27:28:a0:f8: f4:13:d2:ef:49:bf:ae:7c:02:82:97:50:c3:e0:c6:27:c6:d7: ba:23:f1:93:5c:c6:d9:fe:4a:a2:9c:47:d2:d9:f2:ba:3b:c1: db:16:22:a9:d4:f3:6f:9a:37:27:1b:98:54:88:2e:15:a0:c3: 70:b8:75:11:26:33:f5:6b:13:f5:d1:6c:4b:74:07:24:59:0c: 2a:57:8f:0d:97:6d:07:16:2d:1d:6e:48:b2:a9:c8:54:97:22: ae:90:ed:c0:16:22:2d:9a:27:8c:f7:19:43:40:5f:5f:d8:e4: d6:a9:bf:9c:f7:5a:96:14:e0:30:02:02:c9:5d:93:3b:e7:3e: b2:d1:ec:bf:31:e0:5d:4a:9c:26:54:8e:52:84:5f:e0:27:21: 47:22:5d:e3:0f:d6:3b:a1:0d:dc:d2:de:68:ac:9b:68:dd:0c: 8e:4b:43:1c:a7:f7:c8:2f:97:c2:43:68:2f:b3:ad:9b:16:fe: 0e:88:39:bf:bb:ea:de:77:0e:5e:39:54:07:9a:f2:a6:97:cf: 3c:1c:a8:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIBlu61p1daKLiAt2PjSznUdzOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTEyMDUwNTA1NTVaFw0yNTEyMDgwOTAyNTVaMDMxMTAvBgNV BAMTKEY2MTE4OEJEODhBNjNCQ0U4QzBFQTcwNkU0MDA0MjY0NjMxNDk4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvhg7yioZaumnek6lzt3LSwJg B7V4v9jbhWOGKitJ+AKmHkY9N+t9iLyFBgaoIl/nqwKvb/sx9rwHHFh5vB7INUqR N8m07+rXHtMnBC4pyoLLW3vDD5cd2TW6hgDMhvm5a9gxhgTpR14LTYLL8gShpf+M CFmKGLTpIaCEFE9HZWTD3DOe7H2qKH4gmxJwBnajbXeKQwnFs4kldT9oJesBk4GF W2B8WPlO72GaUhyHgxRoub7tdDhFeedGFclIU1+kpifBrxoIWIzdpmITmtZGwveL 4UTaz4EoF2QOd8i9xno/JyefZ4xMJQoIGcpEhHTNVNHeU2B2R8KiIOYLcGtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hGIvYimO86MDqcG5ABCZGMUmPkwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzFAbDo4o5XoGmiDRIudXw1F5e8WNO7OPT5 y77z1KEHKCYCiVROSZR1uDf9yAwp1p0dJyig+PQT0u9Jv658AoKXUMPgxifG17oj 8ZNcxtn+SqKcR9LZ8ro7wdsWIqnU82+aNycbmFSILhWgw3C4dREmM/VrE/XRbEt0 ByRZDCpXjw2XbQcWLR1uSLKpyFSXIq6Q7cAWIi2aJ4z3GUNAX1/Y5Napv5z3WpYU 4DACAsldkzvnPrLR7L8x4F1KnCZUjlKEX+AnIUciXeMP1juhDdzS3mism2jdDI5L Qxyn98gvl8JDaC+zrZsW/g6IOb+76t53Dl45VAea8qaXzzwcqJo= -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:13 2025 by rpki-client