This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: XF3nqKbPWh9VGutdJoLdxEbexMxQTte8dQ9oWoOBar8= Subject key identifier: A1:DE:3C:04:AA:19:D7:40:69:35:19:1F:65:0D:E1:B4:A1:BD:EE:E0 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 6C708E3070D2CBAC47E2EFEDC215F75049EB8A5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: C2 Signing time: Wed 17 Dec 2025 09:31:28 +0000 Manifest this update: Wed 17 Dec 2025 09:26:28 +0000 Manifest next update: Sat 20 Dec 2025 11:57:28 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: p7WjOJQ78+XAUwctL7mlY1H3/JUfDaDpYQ/A1yfaRgY=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:70:8e:30:70:d2:cb:ac:47:e2:ef:ed:c2:15:f7:50:49:eb:8a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Dec 17 09:26:28 2025 GMT Not After : Dec 20 11:57:28 2025 GMT Subject: CN=A1DE3C04AA19D7406935191F650DE1B4A1BDEEE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:87:d4:2e:81:b3:ae:16:e2:ea:4e:5a:67: 26:60:e4:d7:64:3e:05:6a:87:2b:cb:19:5b:99:b3: 6b:f3:b7:75:39:9a:ad:1c:e8:21:d0:de:20:a1:87: 21:28:2a:c0:6e:7b:17:e0:e9:b0:d9:ca:e0:4b:42: 59:30:a8:0c:79:fe:0a:77:dc:67:d5:4c:10:be:82: fb:d6:21:82:ae:d9:f8:a2:20:7e:dc:61:17:0b:d6: 25:75:f8:ef:dc:03:30:70:d7:d0:af:22:62:0a:83: 62:af:8e:dd:53:fa:46:81:86:66:20:20:0c:06:c1: 50:01:7b:a1:e2:6f:3c:96:b1:4f:45:d9:f7:0e:42: 2e:f2:47:07:ee:c0:4b:81:ad:1e:19:c5:1d:90:ce: ff:3b:9e:7a:83:8d:c7:c7:8c:e8:86:61:fe:d3:30: c7:d0:72:96:79:b5:31:46:de:7d:23:6b:a2:57:f5: 71:43:da:6f:4a:f3:be:8c:b1:8d:9a:77:79:d8:18: 2b:a4:72:d0:50:b9:1f:44:c2:61:ac:f3:fa:d5:ef: ae:04:80:97:e6:81:6d:96:f4:9d:0f:a2:7b:0f:3b: c2:5d:3c:da:4d:9b:33:fa:52:87:c4:ff:60:0c:af: dc:f6:bc:05:97:9e:ca:65:19:cf:87:f9:1b:f5:30: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DE:3C:04:AA:19:D7:40:69:35:19:1F:65:0D:E1:B4:A1:BD:EE:E0 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9e:01:b4:37:1a:43:41:f0:7a:7a:6f:c8:4c:f7:85:da:30: 38:ca:78:6c:ad:5e:77:d4:da:8a:d0:d0:8f:0c:01:59:a0:a3: 06:e3:87:86:66:18:dc:a2:87:69:72:7d:95:32:21:74:ca:67: 89:c3:19:fe:a6:37:b4:3d:29:a1:ff:42:78:7b:70:2a:26:d6: f8:4e:8b:27:fd:61:62:39:30:82:d5:a9:c3:51:bc:d5:cd:2a: 3f:6d:33:19:8c:0c:eb:8e:af:d2:51:de:a0:04:59:11:21:56: 9a:c9:0c:3b:d7:e5:b4:64:09:36:62:a5:ea:54:86:76:2e:59: 08:cc:16:c3:0f:18:c8:9e:a1:6c:53:04:b2:d2:c2:b0:d0:97: 5f:c1:54:47:03:72:c2:4f:e8:45:f7:91:27:ef:c9:94:46:61: 2e:4a:4c:6e:ce:30:48:b2:a6:4f:b9:25:23:82:16:e3:70:4f: 24:23:4e:8d:fc:f3:c6:8a:09:ba:a4:0d:65:91:07:20:58:2f: 02:d5:46:83:37:27:9c:9a:1d:ee:12:8e:50:63:56:08:e7:cd: 3e:c5:4f:7e:a4:3b:4c:d0:fc:9b:e2:fe:f7:6b:b5:f1:49:f4: 0d:d2:b1:09:1c:26:5c:cb:20:4e:d0:3e:2f:3c:bf:c0:b7:07: cd:f1:9b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHCOMHDSy6xH4u/twhX3UEnrilswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTEyMTcwOTI2MjhaFw0yNTEyMjAxMTU3MjhaMDMxMTAvBgNV BAMTKEExREUzQzA0QUExOUQ3NDA2OTM1MTkxRjY1MERFMUI0QTFCREVFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQYfULoGzrhbi6k5aZyZg5Ndk PgVqhyvLGVuZs2vzt3U5mq0c6CHQ3iChhyEoKsBuexfg6bDZyuBLQlkwqAx5/gp3 3GfVTBC+gvvWIYKu2fiiIH7cYRcL1iV1+O/cAzBw19CvImIKg2Kvjt1T+kaBhmYg IAwGwVABe6HibzyWsU9F2fcOQi7yRwfuwEuBrR4ZxR2Qzv87nnqDjcfHjOiGYf7T MMfQcpZ5tTFG3n0ja6JX9XFD2m9K876MsY2ad3nYGCukctBQuR9EwmGs8/rV764E gJfmgW2W9J0PonsPO8JdPNpNmzP6UofE/2AMr9z2vAWXnsplGc+H+Rv1MLFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod48BKoZ10BpNRkfZQ3htKG97uAwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaeAbQ3GkNB8Hp6b8hM94XaMDjKeGytXnfU 2orQ0I8MAVmgowbjh4ZmGNyih2lyfZUyIXTKZ4nDGf6mN7Q9KaH/Qnh7cCom1vhO iyf9YWI5MILVqcNRvNXNKj9tMxmMDOuOr9JR3qAEWREhVprJDDvX5bRkCTZipepU hnYuWQjMFsMPGMieoWxTBLLSwrDQl1/BVEcDcsJP6EX3kSfvyZRGYS5KTG7OMEiy pk+5JSOCFuNwTyQjTo3888aKCbqkDWWRByBYLwLVRoM3J5yaHe4SjlBjVgjnzT7F T36kO0zQ/Jvi/vdrtfFJ9A3SsQkcJlzLIE7QPi88v8C3B83xm6s= -----END CERTIFICATE-----Generated at Thu Dec 18 23:06:59 2025 by rpki-client