This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: Ud/OGEvYmUjuvS3YA63k/349P/+Q186UTxXfwTJ1z6M= Subject key identifier: 23:F5:E1:64:CB:99:20:DB:47:E6:31:18:7E:75:59:57:64:17:15:3C Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 1FE5F72B64167463F5640DBBE7131677C985C69A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 024E Signing time: Sat 06 Dec 2025 14:42:14 +0000 Manifest this update: Sat 06 Dec 2025 14:37:14 +0000 Manifest next update: Tue 09 Dec 2025 21:23:14 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: 3nCGL+ZXoTAAXAyUCeP+30ValrKWJJYvSOnlNfq+m7Q=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e5:f7:2b:64:16:74:63:f5:64:0d:bb:e7:13:16:77:c9:85:c6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Dec 6 14:37:14 2025 GMT Not After : Dec 9 21:23:14 2025 GMT Subject: CN=23F5E164CB9920DB47E631187E7559576417153C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:84:73:e9:0e:ce:65:7c:79:13:06:f7:72: ef:17:92:d0:4a:74:95:b1:e1:e6:f1:05:cc:e4:66: 1d:d6:9a:5e:7e:1b:71:10:6e:c8:ed:ed:c4:94:a2: af:8b:c8:e8:3f:d1:50:7c:43:73:a5:d1:bb:08:7b: a2:b3:cf:8f:fe:b7:98:c0:0c:86:e5:65:6e:b2:3e: 66:f0:56:d9:87:94:6c:6f:88:bd:66:5f:13:9f:4f: b7:f5:7a:80:a0:fa:68:ae:92:2f:26:a7:e7:b5:fd: c2:80:74:46:12:af:69:03:18:8f:ed:23:c4:02:d4: 82:6a:1c:71:7b:e0:3f:93:3a:7e:6d:cf:5e:c2:5f: 9b:5f:a6:08:d7:75:b5:c2:4c:55:7f:04:f3:d5:d6: 60:73:4d:04:8f:fa:b0:55:ea:1c:5d:1d:fd:26:43: 2c:16:f2:64:95:a4:f2:46:27:b2:af:5e:1d:57:cb: 90:ce:3e:f5:cf:06:7f:9f:2f:1c:f4:b8:ec:69:67: 79:ff:48:03:72:25:4b:d1:44:3c:e5:0c:d9:34:15: 39:ea:93:95:14:16:56:5a:cd:69:3f:c0:c2:98:db: 67:12:c6:8a:0d:93:ce:c7:45:e8:38:54:89:8e:83: 0f:b6:7d:3b:51:a5:a4:fc:75:bc:98:59:f0:6f:31: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F5:E1:64:CB:99:20:DB:47:E6:31:18:7E:75:59:57:64:17:15:3C X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:08:09:0e:e1:83:e5:cf:0f:28:a1:eb:d5:8a:ec:da:95: 37:95:3b:63:6c:f0:25:15:13:b0:da:a5:d4:79:eb:66:d3:9f: f1:d5:9b:bb:86:45:a1:33:4f:df:46:57:85:f9:79:b8:1a:c1: 5e:cb:bb:b7:03:c8:b7:d2:5c:5e:d8:98:45:23:7a:79:05:05: 26:0c:ab:4d:90:79:8a:e4:b5:a6:cd:64:71:3c:0a:5c:eb:13: 2c:bb:e8:e7:19:41:ed:12:26:97:d4:09:79:da:19:08:56:68: 5d:26:43:d4:78:a3:64:87:7d:2a:8e:63:3e:c0:02:7e:1e:67: 5b:df:eb:00:84:62:ee:07:4c:cb:75:71:d5:80:55:52:40:95: b5:d3:5d:17:80:81:74:af:0f:dc:1a:42:61:88:f5:50:ff:3d: fb:c5:db:72:7e:f9:8d:d3:33:13:a6:54:7e:e9:a3:01:bf:26: fd:22:4d:f2:bc:9a:a8:03:0d:88:66:3d:00:f0:f7:30:a7:e8: cc:bf:e9:01:14:22:6e:e4:dc:b2:31:6a:59:26:4a:c6:74:27: 2a:18:ae:21:7f:a1:71:e5:91:46:ea:1c:c1:af:5b:76:86:e3: 9e:a9:63:43:9f:8a:a1:21:b6:bb:95:d0:26:01:bf:de:b3:6d: 57:f1:5b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+X3K2QWdGP1ZA275xMWd8mFxpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTEyMDYxNDM3MTRaFw0yNTEyMDkyMTIzMTRaMDMxMTAvBgNV BAMTKDIzRjVFMTY0Q0I5OTIwREI0N0U2MzExODdFNzU1OTU3NjQxNzE1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfoRz6Q7OZXx5Ewb3cu8XktBK dJWx4ebxBczkZh3Wml5+G3EQbsjt7cSUoq+LyOg/0VB8Q3Ol0bsIe6Kzz4/+t5jA DIblZW6yPmbwVtmHlGxviL1mXxOfT7f1eoCg+miuki8mp+e1/cKAdEYSr2kDGI/t I8QC1IJqHHF74D+TOn5tz17CX5tfpgjXdbXCTFV/BPPV1mBzTQSP+rBV6hxdHf0m QywW8mSVpPJGJ7KvXh1Xy5DOPvXPBn+fLxz0uOxpZ3n/SANyJUvRRDzlDNk0FTnq k5UUFlZazWk/wMKY22cSxooNk87HReg4VImOgw+2fTtRpaT8dbyYWfBvMWjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/XhZMuZINtH5jEYfnVZV2QXFTwwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLDCAkO4YPlzw8ooevViuzalTeVO2Ns8CUV E7DapdR562bTn/HVm7uGRaEzT99GV4X5ebgawV7Lu7cDyLfSXF7YmEUjenkFBSYM q02QeYrktabNZHE8ClzrEyy76OcZQe0SJpfUCXnaGQhWaF0mQ9R4o2SHfSqOYz7A An4eZ1vf6wCEYu4HTMt1cdWAVVJAlbXTXReAgXSvD9waQmGI9VD/PfvF23J++Y3T MxOmVH7powG/Jv0iTfK8mqgDDYhmPQDw9zCn6My/6QEUIm7k3LIxalkmSsZ0JyoY riF/oXHlkUbqHMGvW3aG456pY0OfiqEhtruV0CYBv96zbVfxW14= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:58 2025 by rpki-client