This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: tbJ8+tYEqNko4io7/EsPP7dD+Sm1zGgORfgAu48x4oU= Subject key identifier: 33:6F:2F:C2:88:62:60:87:7A:3E:97:E9:3E:46:EA:42:2E:B2:63:F0 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 4E569D686C7283AAE2CEEBD243FB6E291A196218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 035A Signing time: Sat 06 Dec 2025 01:22:49 +0000 Manifest this update: Sat 06 Dec 2025 01:17:49 +0000 Manifest next update: Tue 09 Dec 2025 03:44:49 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 2: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: 6cl3MvMrJ1MsisbJi8BV7S2FGxR/rNaGxJeS3mfSzzo=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:56:9d:68:6c:72:83:aa:e2:ce:eb:d2:43:fb:6e:29:1a:19:62:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Dec 6 01:17:49 2025 GMT Not After : Dec 9 03:44:49 2025 GMT Subject: CN=336F2FC2886260877A3E97E93E46EA422EB263F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:4a:81:cc:13:d7:0d:5d:d4:52:b1:3a:62: 6f:d5:e4:be:0a:0a:d9:a1:9e:ba:f3:cf:4e:45:a1: a8:02:85:b1:da:0b:17:1b:9f:33:c5:0c:97:78:10: c0:79:fa:91:fb:ac:b1:95:2c:a8:d9:a9:21:dd:86: 4a:94:39:8d:1b:25:7b:06:f2:25:98:fa:65:75:fe: 58:18:5a:03:d6:b7:54:5a:7f:d6:bf:78:7a:46:a6: 5e:c0:54:7c:61:ee:0d:4b:79:e2:95:15:d8:e8:00: 74:00:80:74:c5:b9:8d:16:c3:a3:71:68:bd:bf:b3: bb:30:c1:c1:83:e6:81:6c:4e:90:8f:65:3a:76:63: 8f:06:9b:19:21:e6:ed:c0:cb:fe:bf:60:e4:df:cf: fa:1e:94:64:ce:3a:bc:0d:c5:6d:f8:5d:7e:0f:9e: 73:15:a8:3a:c9:25:45:a2:a3:2d:5d:63:aa:5d:69: b9:83:3d:3e:4b:dc:45:3a:58:a1:ad:8d:ff:ee:98: a8:ea:59:fa:ca:ac:f2:d0:18:b7:f6:cd:1e:0f:3b: 84:09:e0:43:ec:a8:9a:46:4c:f2:cd:47:53:10:bd: 4e:03:04:86:a3:c5:4b:c6:26:87:ed:ee:95:47:96: 8b:53:35:0c:6b:4f:37:a3:69:37:1a:26:ed:eb:f6: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:2F:C2:88:62:60:87:7A:3E:97:E9:3E:46:EA:42:2E:B2:63:F0 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:29:ff:2f:09:c6:70:f1:1b:24:bc:a0:3f:51:85:b6:69:f3: 75:76:c2:6c:5f:33:8d:fc:ac:51:35:87:e8:1e:e7:79:c9:67: 59:fd:33:a4:87:70:c1:7c:62:5f:31:f5:ea:0e:76:2e:05:9b: f1:76:ff:9d:40:7b:8c:e3:47:6a:cc:3e:8e:f2:49:e8:5b:96: 36:95:6f:de:c1:10:95:bc:fc:b1:bf:e5:51:b4:a4:b5:15:de: 42:47:cd:a1:85:74:62:9e:0a:c0:c0:c0:2d:7d:3d:45:59:0f: 2a:4d:9b:9c:b5:d3:b2:22:5e:87:d2:6e:22:f1:61:d3:d4:9d: 23:06:6d:c9:91:7d:40:24:43:22:13:a2:26:c3:4c:10:3a:2c: 4b:f9:90:b7:01:77:95:4e:bf:9d:ae:e9:81:27:14:3b:3b:1d: 42:84:fa:c9:18:c9:22:de:3c:6a:4c:a3:e9:63:27:d9:3c:28: 77:18:b7:e2:28:8d:f7:da:7e:96:f6:bd:d9:27:86:14:4b:eb: 21:68:8c:1c:0d:2b:80:43:81:6c:9d:93:c0:7e:38:be:52:ad: c0:bf:1c:5a:07:c6:9b:73:18:2a:2c:37:d8:e0:58:d0:4e:2d: 4a:8e:8b:ee:c4:8b:c8:c9:d6:7b:7a:6e:6d:9b:a1:ec:f5:db: 11:52:82:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTladaGxyg6rizuvSQ/tuKRoZYhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNTEyMDYwMTE3NDlaFw0yNTEyMDkwMzQ0NDlaMDMxMTAvBgNV BAMTKDMzNkYyRkMyODg2MjYwODc3QTNFOTdFOTNFNDZFQTQyMkVCMjYzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFC0qBzBPXDV3UUrE6Ym/V5L4K Ctmhnrrzz05FoagChbHaCxcbnzPFDJd4EMB5+pH7rLGVLKjZqSHdhkqUOY0bJXsG 8iWY+mV1/lgYWgPWt1Raf9a/eHpGpl7AVHxh7g1LeeKVFdjoAHQAgHTFuY0Ww6Nx aL2/s7swwcGD5oFsTpCPZTp2Y48Gmxkh5u3Ay/6/YOTfz/oelGTOOrwNxW34XX4P nnMVqDrJJUWioy1dY6pdabmDPT5L3EU6WKGtjf/umKjqWfrKrPLQGLf2zR4PO4QJ 4EPsqJpGTPLNR1MQvU4DBIajxUvGJoft7pVHlotTNQxrTzejaTcaJu3r9sORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM28vwohiYId6PpfpPkbqQi6yY/AwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUp/y8JxnDxGyS8oD9RhbZp83V2wmxfM438 rFE1h+ge53nJZ1n9M6SHcMF8Yl8x9eoOdi4Fm/F2/51Ae4zjR2rMPo7ySehbljaV b97BEJW8/LG/5VG0pLUV3kJHzaGFdGKeCsDAwC19PUVZDypNm5y107IiXofSbiLx YdPUnSMGbcmRfUAkQyIToibDTBA6LEv5kLcBd5VOv52u6YEnFDs7HUKE+skYySLe PGpMo+ljJ9k8KHcYt+Iojffafpb2vdknhhRL6yFojBwNK4BDgWydk8B+OL5SrcC/ HFoHxptzGCosN9jgWNBOLUqOi+7Ei8jJ1nt6bm2boez12xFSgjU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:26 2025 by rpki-client