This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: 8XwbWH/x/6C6zYqIav7H/lLBwo1c+s+lmdOv9oghCJ8= Subject key identifier: 34:F2:E3:C2:38:43:8F:26:7B:66:31:92:DB:3E:61:65:4D:31:EF:CA Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 1B25E8A641C963D2F99D0A9B0F7DA7BB7005644F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0355 Signing time: Thu 04 Dec 2025 14:31:54 +0000 Manifest this update: Thu 04 Dec 2025 14:26:54 +0000 Manifest next update: Mon 08 Dec 2025 00:19:54 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) 2: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 38jrSCIdEUWdnoCJs5oZmMuxU22wdBIehEOsN0ATofc=) 3: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) 4: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:25:e8:a6:41:c9:63:d2:f9:9d:0a:9b:0f:7d:a7:bb:70:05:64:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Dec 4 14:26:54 2025 GMT Not After : Dec 8 00:19:54 2025 GMT Subject: CN=34F2E3C238438F267B663192DB3E61654D31EFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:bb:54:c2:90:05:85:50:a1:f9:9c:bc:bf: 66:a2:69:bd:b1:25:c0:74:61:f7:28:80:53:d8:08: fc:7a:32:0b:a8:da:d0:10:49:5c:8b:b8:ce:f3:e3: ee:2b:6c:79:31:57:d5:0a:f2:29:b0:b2:67:dd:61: 7f:63:d0:ce:45:1b:1b:58:75:34:d9:be:9f:72:50: 7f:30:2d:5d:fe:98:ce:32:42:c8:be:97:d3:ed:79: be:ae:a6:bc:03:3a:4e:85:61:09:e4:29:3c:05:1d: 44:98:ba:8c:d2:84:31:10:50:fc:3d:17:59:83:6f: 59:57:18:5e:4a:46:31:a4:a4:4f:a3:d7:dd:3f:72: b8:43:2d:22:79:35:f2:7e:ab:e6:d4:0e:3b:8a:bb: aa:6c:e9:7c:5f:36:61:1c:ca:69:1c:e8:69:02:4e: 3c:66:a3:44:31:78:40:57:e3:ee:2f:c1:bc:77:f0: 23:62:3f:0f:8a:3b:2e:fa:c0:83:a0:d3:70:ec:8b: 17:c1:4d:1b:b5:af:4c:d5:cc:98:f5:10:7a:3e:c3: 24:eb:37:9f:b9:8c:d9:11:37:d6:19:01:90:a7:c3: 23:90:da:b5:5e:50:5e:73:15:06:44:31:a5:10:ba: c2:a1:da:09:47:b3:ee:d3:4d:74:3c:db:c8:dc:15: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:E3:C2:38:43:8F:26:7B:66:31:92:DB:3E:61:65:4D:31:EF:CA X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:fb:88:9a:b2:ed:34:c7:6e:45:3f:ee:1e:46:d6:6f:3d:cf: 3e:a8:3e:09:d8:ee:f5:80:a4:75:9d:21:b2:c8:82:e1:dc:5b: 1d:75:5a:94:ee:d4:ab:c7:85:9c:73:e2:5a:93:a5:1e:e2:62: fb:9a:d2:6e:d6:ca:dd:48:db:57:2c:8e:1e:65:11:ff:bf:be: b6:4f:21:6a:4f:c5:bb:c6:41:e7:75:c4:8d:25:82:29:61:44: 04:d2:2e:d7:b2:8e:5a:b2:41:a4:00:bf:75:0b:92:08:85:89: b2:c1:4a:02:00:f5:df:97:cd:63:f2:bf:35:38:30:54:8d:7d: 9c:b6:33:d7:36:5d:b6:9f:63:0b:6d:34:1c:7f:fe:44:d9:e9: 81:d6:d6:90:4a:bf:fe:ea:85:c7:c8:8f:ee:03:4e:a3:17:de: b2:8a:e4:4f:3d:df:a9:56:b9:20:32:78:fd:e3:78:60:2e:e7: f6:3c:3a:7d:a5:21:64:49:3d:81:7c:31:3f:91:8e:20:65:ba: 83:65:c5:cf:a0:81:a6:fe:06:bd:cd:06:72:df:53:05:a4:31: 8e:86:c8:49:1b:ce:7f:f5:fd:40:c5:de:7f:6b:71:79:22:93: 3e:f7:38:cd:dd:8c:20:42:ed:58:c4:dc:6f:25:0c:41:67:2b: 0d:b2:a1:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyXopkHJY9L5nQqbD32nu3AFZE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTEyMDQxNDI2NTRaFw0yNTEyMDgwMDE5NTRaMDMxMTAvBgNV BAMTKDM0RjJFM0MyMzg0MzhGMjY3QjY2MzE5MkRCM0U2MTY1NEQzMUVGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvLtUwpAFhVCh+Zy8v2aiab2x JcB0YfcogFPYCPx6Mguo2tAQSVyLuM7z4+4rbHkxV9UK8imwsmfdYX9j0M5FGxtY dTTZvp9yUH8wLV3+mM4yQsi+l9Pteb6uprwDOk6FYQnkKTwFHUSYuozShDEQUPw9 F1mDb1lXGF5KRjGkpE+j190/crhDLSJ5NfJ+q+bUDjuKu6ps6XxfNmEcymkc6GkC Tjxmo0QxeEBX4+4vwbx38CNiPw+KOy76wIOg03DsixfBTRu1r0zVzJj1EHo+wyTr N5+5jNkRN9YZAZCnwyOQ2rVeUF5zFQZEMaUQusKh2glHs+7TTXQ828jcFbzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPLjwjhDjyZ7ZjGS2z5hZU0x78owHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMn7iJqy7TTHbkU/7h5G1m89zz6oPgnY7vWA pHWdIbLIguHcWx11WpTu1KvHhZxz4lqTpR7iYvua0m7Wyt1I21csjh5lEf+/vrZP IWpPxbvGQed1xI0lgilhRATSLteyjlqyQaQAv3ULkgiFibLBSgIA9d+XzWPyvzU4 MFSNfZy2M9c2XbafYwttNBx//kTZ6YHW1pBKv/7qhcfIj+4DTqMX3rKK5E8936lW uSAyeP3jeGAu5/Y8On2lIWRJPYF8MT+RjiBluoNlxc+ggab+Br3NBnLfUwWkMY6G yEkbzn/1/UDF3n9rcXkikz73OM3djCBC7VjE3G8lDEFnKw2yoUw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:13 2025 by rpki-client