This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: OmEZL5kokifwtiIOeSl3fW4ysrsUoZUQVEEfs7FNTKM= Subject key identifier: 3D:3E:45:04:83:EA:43:CF:90:0B:C3:B2:5C:44:02:F5:98:BD:9A:F1 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 2AD442694741E47AE8A1EC65D275E6841A351A93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 023E Signing time: Sat 06 Dec 2025 10:52:17 +0000 Manifest this update: Sat 06 Dec 2025 10:47:17 +0000 Manifest next update: Tue 09 Dec 2025 17:20:17 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 2: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: gG+NFwY17g3Af+490vnyi4ihjEWPosu3HKPhBCmPqv0=) 3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 4: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:42:69:47:41:e4:7a:e8:a1:ec:65:d2:75:e6:84:1a:35:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Dec 6 10:47:17 2025 GMT Not After : Dec 9 17:20:17 2025 GMT Subject: CN=3D3E450483EA43CF900BC3B25C4402F598BD9AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:1e:bb:7b:cf:05:90:c5:4c:e9:3e:13:91: 4a:58:1f:cd:08:f3:56:5b:c0:fb:b3:af:89:17:15: 7c:77:86:c5:53:bf:05:a4:4f:f6:11:15:9b:7a:33: 97:28:f3:f0:dc:e7:db:a1:9f:37:36:0d:41:ba:d7: b6:69:c2:55:0a:54:0f:45:a5:74:e7:46:1c:d4:d3: 10:f4:3b:bf:0d:de:40:35:35:dd:82:d3:4d:c7:38: 25:86:d4:27:60:55:f5:30:fb:2a:c2:ac:6d:0b:53: b8:82:c5:38:91:1c:6b:3d:76:76:5c:46:70:b7:77: fb:bd:e4:1e:26:39:ef:f7:69:22:45:d6:04:16:12: d4:cf:f7:2e:73:20:12:d3:5c:2c:bc:13:90:94:7c: b6:8a:69:9a:28:45:28:f6:84:28:fc:e2:73:03:39: 44:7e:43:eb:af:1d:23:bf:cf:0f:d8:6e:f4:53:bf: 19:32:2c:40:59:d3:bb:dd:3d:93:c1:a9:a0:8a:4b: 97:67:bd:be:6d:12:49:3e:63:03:e5:b3:1b:83:6c: c5:1f:33:67:9e:73:fc:b6:08:15:4c:8e:a4:de:5a: cb:53:85:ad:ae:b2:0f:6f:c6:af:32:fc:a7:f1:34: a0:c9:40:cc:d9:35:08:5b:0f:2b:14:56:bd:76:8c: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3E:45:04:83:EA:43:CF:90:0B:C3:B2:5C:44:02:F5:98:BD:9A:F1 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f7:85:1a:0f:7c:54:30:ad:c1:5c:d9:7c:97:c7:6c:13:e4: d9:3d:c6:e7:89:db:ae:0c:58:b8:46:de:80:51:9b:45:b1:1b: 73:df:b9:1f:48:19:fc:8e:93:d1:8c:a3:47:37:90:92:7a:9c: 6f:d5:10:6b:a5:34:61:d1:52:07:31:59:36:c1:72:03:41:10: 07:86:57:7c:34:99:2b:f7:b5:1d:c9:2e:37:73:d0:4f:76:29: c1:35:bf:99:96:4a:53:5d:ec:14:5b:be:26:43:f9:df:8f:c6: 42:51:5d:e7:c1:f2:a8:30:a1:6b:e7:30:39:89:6b:2e:25:28: 7c:60:9b:9b:48:4e:4f:df:e9:13:52:19:93:58:06:a1:fc:85: bf:a4:db:93:c7:45:10:4b:2d:f2:94:da:0b:27:41:a8:92:6c: 5c:31:13:65:35:1a:e0:39:8f:00:98:55:55:44:62:f8:f9:aa: b3:20:07:04:ab:a3:27:92:f0:f9:55:54:bf:7a:e6:92:f7:79: 2e:03:be:e7:47:53:cc:77:ff:3d:4a:00:00:6b:4e:f1:95:3c: 08:87:4c:aa:9f:4e:a9:2f:0e:77:49:67:00:35:06:bd:17:4a: 80:40:9b:b0:22:12:d7:4c:9b:08:87:66:8f:41:71:1d:cb:60: 43:e1:0f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtRCaUdB5Hrooexl0nXmhBo1GpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTEyMDYxMDQ3MTdaFw0yNTEyMDkxNzIwMTdaMDMxMTAvBgNV BAMTKDNEM0U0NTA0ODNFQTQzQ0Y5MDBCQzNCMjVDNDQwMkY1OThCRDlBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgx67e88FkMVM6T4TkUpYH80I 81ZbwPuzr4kXFXx3hsVTvwWkT/YRFZt6M5co8/Dc59uhnzc2DUG617ZpwlUKVA9F pXTnRhzU0xD0O78N3kA1Nd2C003HOCWG1CdgVfUw+yrCrG0LU7iCxTiRHGs9dnZc RnC3d/u95B4mOe/3aSJF1gQWEtTP9y5zIBLTXCy8E5CUfLaKaZooRSj2hCj84nMD OUR+Q+uvHSO/zw/YbvRTvxkyLEBZ07vdPZPBqaCKS5dnvb5tEkk+YwPlsxuDbMUf M2eec/y2CBVMjqTeWstTha2usg9vxq8y/KfxNKDJQMzZNQhbDysUVr12jIIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPT5FBIPqQ8+QC8OyXEQC9Zi9mvEwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/3hRoPfFQwrcFc2XyXx2wT5Nk9xueJ264M WLhG3oBRm0WxG3PfuR9IGfyOk9GMo0c3kJJ6nG/VEGulNGHRUgcxWTbBcgNBEAeG V3w0mSv3tR3JLjdz0E92KcE1v5mWSlNd7BRbviZD+d+PxkJRXefB8qgwoWvnMDmJ ay4lKHxgm5tITk/f6RNSGZNYBqH8hb+k25PHRRBLLfKU2gsnQaiSbFwxE2U1GuA5 jwCYVVVEYvj5qrMgBwSroyeS8PlVVL965pL3eS4DvudHU8x3/z1KAABrTvGVPAiH TKqfTqkvDndJZwA1Br0XSoBAm7AiEtdMmwiHZo9BcR3LYEPhD1o= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:24 2025 by rpki-client