This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: +idbiYtZwBbJo4QPiVJyd1fIiOc2eP2XxGiI9Ut2GWw= Subject key identifier: D6:21:4E:9E:47:31:54:0E:C4:38:24:00:9D:82:46:BA:62:F6:67:4E Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 1FCF8AE014AEACB95F440B3F5D9BEDB30E3A9A29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: CE Signing time: Thu 04 Dec 2025 17:40:48 +0000 Manifest this update: Thu 04 Dec 2025 17:35:48 +0000 Manifest next update: Mon 08 Dec 2025 05:06:48 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: QQxIGrLiixo6IJC6JIloF/6e63NIf9ZExD8tuOSJ26Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cf:8a:e0:14:ae:ac:b9:5f:44:0b:3f:5d:9b:ed:b3:0e:3a:9a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Dec 4 17:35:48 2025 GMT Not After : Dec 8 05:06:48 2025 GMT Subject: CN=D6214E9E4731540EC43824009D8246BA62F6674E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:da:23:92:a8:fc:75:04:51:33:f1:94:63: be:28:a1:e8:8f:f1:b7:6d:41:dc:35:0b:c6:cf:90: 1c:bb:91:25:73:0a:c3:f2:ab:ee:5d:43:77:50:92: bc:a8:0e:14:3d:81:45:60:a5:15:5b:6b:fc:1c:b3: 34:8a:cb:1b:3c:22:cf:d2:5f:59:88:ae:16:62:d0: ec:58:bb:d6:0e:ca:90:f1:fb:85:35:3e:4b:d8:23: 91:8e:6a:87:c1:eb:ac:8e:db:ad:69:43:92:c3:21: 76:86:50:cd:b4:e8:f5:e4:40:a2:18:6f:c2:ac:e5: 70:e6:ec:54:2a:e1:13:21:ed:46:a1:f2:a7:07:f6: 41:7b:9f:8a:9b:9e:82:cf:8b:79:7b:86:dc:1c:42: e5:9b:93:85:92:c0:2e:73:78:13:a4:3b:cf:2b:50: 27:51:d1:3f:cc:69:1c:67:ed:df:14:f6:9d:57:28: 1c:c9:14:22:b8:5f:a6:9d:38:b5:44:a2:07:97:6b: fc:ac:ce:33:22:e9:62:38:a1:b3:a1:87:f6:8d:bd: 7b:b3:60:71:ba:3f:65:4f:07:ba:db:95:0c:ec:71: f9:89:fe:7e:59:12:d5:85:dc:77:c8:6b:06:36:65: aa:a0:41:98:ea:fa:53:4d:91:d3:c7:6f:c2:a9:9a: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:4E:9E:47:31:54:0E:C4:38:24:00:9D:82:46:BA:62:F6:67:4E X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e9:44:47:06:1a:26:fa:03:ab:a9:00:95:a6:6c:a9:b4:33: 1b:34:d3:33:48:17:1d:5e:57:cc:a0:b6:fd:a7:fd:3e:b8:5c: 3a:d8:8b:c3:05:36:92:72:a9:4e:b3:f4:29:b2:b9:eb:1d:c2: bd:ad:43:4d:a0:e1:ba:be:80:72:4b:16:9a:25:74:70:ec:bd: 5c:96:93:bc:79:90:4f:91:cb:86:34:c8:33:0e:00:72:2d:1f: 2e:07:3b:61:2d:1c:0b:f6:22:dd:29:16:56:57:5a:c5:8c:b2: 3b:96:5d:6a:57:4b:ba:3d:35:4e:54:b4:3d:ee:60:52:cb:2b: 5e:6f:72:d9:f2:cd:9f:87:ed:28:c6:1e:4d:13:cd:52:fb:23: d0:10:02:35:ab:18:8b:7e:09:30:e4:9a:bd:9d:78:ba:33:1c: d8:bf:28:2d:af:51:cb:d8:05:80:48:9d:da:79:17:4a:b3:36: 9c:f7:22:fe:4e:83:ae:39:f9:03:08:a2:e3:86:7c:81:51:6d: af:9a:30:6d:50:cf:14:87:97:4c:fe:f6:d6:1a:00:ad:b3:38: bc:5e:d4:99:0b:b9:be:ad:09:d9:b1:1c:80:be:f3:dc:b3:7e: e0:f4:5b:68:72:62:6e:bc:67:99:4f:23:d9:e9:58:3a:bb:0f: 95:b7:ef:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8+K4BSurLlfRAs/XZvtsw46mikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTEyMDQxNzM1NDhaFw0yNTEyMDgwNTA2NDhaMDMxMTAvBgNV BAMTKEQ2MjE0RTlFNDczMTU0MEVDNDM4MjQwMDlEODI0NkJBNjJGNjY3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJANojkqj8dQRRM/GUY74ooeiP 8bdtQdw1C8bPkBy7kSVzCsPyq+5dQ3dQkryoDhQ9gUVgpRVba/wcszSKyxs8Is/S X1mIrhZi0OxYu9YOypDx+4U1PkvYI5GOaofB66yO261pQ5LDIXaGUM206PXkQKIY b8Ks5XDm7FQq4RMh7Uah8qcH9kF7n4qbnoLPi3l7htwcQuWbk4WSwC5zeBOkO88r UCdR0T/MaRxn7d8U9p1XKBzJFCK4X6adOLVEogeXa/yszjMi6WI4obOhh/aNvXuz YHG6P2VPB7rblQzscfmJ/n5ZEtWF3HfIawY2ZaqgQZjq+lNNkdPHb8KpmvlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iFOnkcxVA7EOCQAnYJGumL2Z04wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjpREcGGib6A6upAJWmbKm0Mxs00zNIFx1e V8ygtv2n/T64XDrYi8MFNpJyqU6z9Cmyuesdwr2tQ02g4bq+gHJLFpoldHDsvVyW k7x5kE+Ry4Y0yDMOAHItHy4HO2EtHAv2It0pFlZXWsWMsjuWXWpXS7o9NU5UtD3u YFLLK15vctnyzZ+H7SjGHk0TzVL7I9AQAjWrGIt+CTDkmr2deLozHNi/KC2vUcvY BYBIndp5F0qzNpz3Iv5Og645+QMIouOGfIFRba+aMG1QzxSHl0z+9tYaAK2zOLxe 1JkLub6tCdmxHIC+89yzfuD0W2hyYm68Z5lPI9npWDq7D5W370E= -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:25 2025 by rpki-client