This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: lRE2JLudVQllxxWzTtuvJyZ+Edevsy4yRomQnoGubsA= Subject key identifier: D0:64:CB:83:38:FC:9E:FE:86:65:A9:06:31:83:48:8C:84:7F:11:87 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 6FCECDBEE9C5C87AB7AF0B12279B7D67120A1871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 034F Signing time: Sun 07 Dec 2025 00:30:52 +0000 Manifest this update: Sun 07 Dec 2025 00:25:52 +0000 Manifest next update: Wed 10 Dec 2025 08:37:52 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: LKlw0MQaWaJ5TIjPpeUjri/EwCPBwHN+nMU435SiKdA=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ce:cd:be:e9:c5:c8:7a:b7:af:0b:12:27:9b:7d:67:12:0a:18:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Dec 7 00:25:52 2025 GMT Not After : Dec 10 08:37:52 2025 GMT Subject: CN=D064CB8338FC9EFE8665A9063183488C847F1187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:e8:72:f1:9b:f5:5e:54:d5:25:07:b7:54: 0b:92:8b:ee:09:65:48:7e:e7:13:2e:96:c5:1e:96: 3d:fc:67:a8:f3:80:7a:c3:34:ed:27:b3:44:78:3a: 1b:06:ba:28:12:63:94:14:4d:41:3e:76:48:ef:04: df:62:73:96:eb:0e:6b:2c:c8:98:84:14:a8:ab:c7: 75:bf:29:11:32:12:e9:6a:01:f6:4a:3d:ca:ed:56: 50:62:0f:1f:5b:4d:77:49:4d:87:6c:ee:29:1a:bb: c2:1c:b1:3c:39:90:45:be:1e:20:78:7d:6f:7e:9d: 05:1e:5f:68:17:92:ba:1f:78:47:c0:32:82:87:b7: fd:ef:8b:12:37:cc:c6:bb:05:a4:9c:8c:79:d3:2a: f4:cc:9a:2d:65:57:1d:ae:37:b1:91:14:c1:93:e1: c5:4e:15:f3:35:2d:da:64:54:be:64:7a:5f:3b:b5: 80:20:1a:62:77:73:94:aa:dd:2e:58:f5:3b:f1:10: f4:0f:48:3d:97:9c:54:c5:7c:06:71:56:5d:8e:ab: 86:d7:71:3e:bc:22:1a:66:3f:13:51:8f:02:61:08: 48:3f:b3:8f:49:66:eb:90:82:fa:c4:3a:2a:21:df: 60:46:cd:fc:e0:5d:a2:ee:b9:33:08:87:0f:4d:c1: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:CB:83:38:FC:9E:FE:86:65:A9:06:31:83:48:8C:84:7F:11:87 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a1:de:e8:f3:22:19:7d:68:2a:1a:6a:2b:a1:73:cf:60:3c: 14:ff:ca:02:5a:b5:67:2f:d5:f7:f0:46:ca:53:78:cf:8e:5c: 88:fa:60:77:c8:95:84:cd:e6:e8:74:1f:2d:8b:3a:cb:ff:11: 51:a4:e4:ff:31:d3:f5:e4:6d:c2:91:5e:08:e1:c0:f7:63:2c: 73:c6:68:99:38:b6:88:93:1d:af:e8:5b:8b:28:b4:11:85:71: 68:ec:87:d7:28:76:55:0c:fa:22:f3:ca:4f:6b:8d:26:f4:73: e4:c1:4a:36:cb:ba:42:3b:be:0b:93:8a:7c:a4:1c:47:85:3a: 29:a3:e4:4d:bc:b5:e7:51:3d:5a:9e:ea:7b:23:1a:41:b5:0a: 09:95:a2:a0:bf:4d:9e:43:48:97:c2:93:2e:59:3f:8d:63:ee: 71:f0:63:8a:5f:f7:05:6b:d3:5b:7a:b9:6d:5c:a3:1e:c3:e8: 74:97:4c:21:04:83:08:fd:e4:2a:1c:2b:e7:db:12:9d:fb:91: fa:d2:2b:44:07:9e:57:f0:ce:56:06:b8:2f:9c:d1:ec:fb:7a: 02:aa:9b:69:d9:41:8c:5b:e1:9c:ce:bc:0a:20:73:90:d3:c0: 34:28:ba:d1:6d:02:61:39:9a:6a:95:83:af:00:44:3d:87:0c: a7:24:0a:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb87NvunFyHq3rwsSJ5t9ZxIKGHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTEyMDcwMDI1NTJaFw0yNTEyMTAwODM3NTJaMDMxMTAvBgNV BAMTKEQwNjRDQjgzMzhGQzlFRkU4NjY1QTkwNjMxODM0ODhDODQ3RjExODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9ehy8Zv1XlTVJQe3VAuSi+4J ZUh+5xMulsUelj38Z6jzgHrDNO0ns0R4OhsGuigSY5QUTUE+dkjvBN9ic5brDmss yJiEFKirx3W/KREyEulqAfZKPcrtVlBiDx9bTXdJTYds7ikau8IcsTw5kEW+HiB4 fW9+nQUeX2gXkrofeEfAMoKHt/3vixI3zMa7BaScjHnTKvTMmi1lVx2uN7GRFMGT 4cVOFfM1LdpkVL5kel87tYAgGmJ3c5Sq3S5Y9TvxEPQPSD2XnFTFfAZxVl2Oq4bX cT68IhpmPxNRjwJhCEg/s49JZuuQgvrEOioh32BGzfzgXaLuuTMIhw9NwVHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0GTLgzj8nv6GZakGMYNIjIR/EYcwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGh3ujzIhl9aCoaaiuhc89gPBT/ygJatWcv 1ffwRspTeM+OXIj6YHfIlYTN5uh0Hy2LOsv/EVGk5P8x0/XkbcKRXgjhwPdjLHPG aJk4toiTHa/oW4sotBGFcWjsh9codlUM+iLzyk9rjSb0c+TBSjbLukI7vguTinyk HEeFOimj5E28tedRPVqe6nsjGkG1CgmVoqC/TZ5DSJfCky5ZP41j7nHwY4pf9wVr 01t6uW1cox7D6HSXTCEEgwj95CocK+fbEp37kfrSK0QHnlfwzlYGuC+c0ez7egKq m2nZQYxb4ZzOvAogc5DTwDQoutFtAmE5mmqVg68ARD2HDKckCvc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:43 2025 by rpki-client