This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: QQlOnhH7pXg9moejmDC39SJMsNwhg5ArrOf6HMux3l8= Subject key identifier: 6C:DA:81:07:D7:B5:78:E9:0B:5F:B1:7D:6B:C4:05:68:32:6E:17:6B Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 600461A30B4D3397FF827DCF2AB0B4BC5A66D487 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: EB Signing time: Tue 02 Dec 2025 07:32:31 +0000 Manifest this update: Tue 02 Dec 2025 07:27:31 +0000 Manifest next update: Fri 05 Dec 2025 18:40:31 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: vaXLZ1K5cD+eDUGgZz9h8JhuK1bTBVBBnvaJH0ZXNdY=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:04:61:a3:0b:4d:33:97:ff:82:7d:cf:2a:b0:b4:bc:5a:66:d4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Dec 2 07:27:31 2025 GMT Not After : Dec 5 18:40:31 2025 GMT Subject: CN=6CDA8107D7B578E90B5FB17D6BC40568326E176B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:93:d6:ac:7a:a2:4d:6f:9f:c4:cc:72:f3: c5:8e:42:f7:58:1f:37:1c:73:08:38:20:34:2f:4e: b0:41:5b:64:47:68:85:ab:ad:18:97:e5:23:96:35: 64:37:74:99:8e:9e:70:1b:bc:17:00:eb:b6:50:91: 1a:48:7f:aa:9b:dc:94:eb:cc:39:33:05:7b:4f:c2: 6f:76:b5:a3:a2:6f:4e:8e:e6:29:79:20:ca:a2:6e: 3c:29:e0:af:6b:c3:ca:64:f7:e7:7e:01:b7:57:0c: 42:8a:c4:21:6c:16:eb:65:03:62:10:33:28:76:b4: 3b:db:d1:a7:d1:aa:d0:28:d4:77:f0:36:8a:8b:ae: c3:59:42:54:96:73:dd:fd:ed:6f:ad:d5:e6:34:92: f9:1b:65:6c:67:f2:c9:43:f3:d6:4e:1e:2e:a0:c3: 30:bf:92:48:5e:1a:f9:ea:98:96:5f:d1:1d:43:39: bb:41:97:9b:a4:72:72:d7:f7:33:a0:72:75:80:8f: 53:0b:61:52:8b:63:a4:d5:bf:df:75:ae:60:cb:e5: 38:60:ce:cd:c2:82:c8:bc:f9:f8:11:c0:3b:ff:e0: 45:7d:d2:93:d2:32:16:6c:74:58:5f:5a:5d:b5:2c: 57:b6:3c:e6:7c:f6:27:ef:de:40:2a:a0:ae:e8:77: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DA:81:07:D7:B5:78:E9:0B:5F:B1:7D:6B:C4:05:68:32:6E:17:6B X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e0:24:74:81:1e:4d:dc:4b:c1:03:cf:63:de:e2:f5:29:07: dc:01:f3:2c:72:8a:5f:53:fc:01:bf:a3:62:f2:2a:ad:fe:d1: f5:e7:8b:21:86:30:45:bd:7c:a8:40:71:c3:e5:7e:90:3f:92: 23:e6:d6:43:32:50:1c:99:d7:ad:b1:29:2f:32:79:de:78:84: 50:10:63:8e:d7:cb:bd:e7:bc:ac:0b:21:0d:3a:de:f6:bb:8c: 7e:92:15:5f:08:3e:c2:2d:99:b0:44:e7:e8:73:ff:d3:8e:8e: 39:10:9f:0e:4a:35:af:c8:1a:5c:33:c9:93:b2:0d:90:19:29: fb:2d:1c:6b:28:e4:3a:97:4f:49:a9:18:00:02:df:ae:be:50: 59:ea:8c:4e:48:65:0a:5f:90:04:09:99:c3:86:2a:dd:d9:6a: 24:03:35:d8:c0:71:3d:fb:e4:b3:c6:c5:87:47:5d:dc:bf:57: 9f:25:ea:04:46:53:d3:35:94:1f:27:dd:0d:92:b3:45:55:4e: 8c:d2:47:19:0f:41:a3:c6:23:74:44:2d:c1:ee:99:87:bd:1d: 2f:e7:c5:b6:d5:05:d1:97:52:e1:79:6d:51:0d:dd:97:3c:12: b8:ba:b9:1c:cb:59:9a:e0:9a:d2:f3:7c:d6:20:c3:b1:ee:40: dc:92:c9:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYARhowtNM5f/gn3PKrC0vFpm1IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTEyMDIwNzI3MzFaFw0yNTEyMDUxODQwMzFaMDMxMTAvBgNV BAMTKDZDREE4MTA3RDdCNTc4RTkwQjVGQjE3RDZCQzQwNTY4MzI2RTE3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0JPWrHqiTW+fxMxy88WOQvdY Hzcccwg4IDQvTrBBW2RHaIWrrRiX5SOWNWQ3dJmOnnAbvBcA67ZQkRpIf6qb3JTr zDkzBXtPwm92taOib06O5il5IMqibjwp4K9rw8pk9+d+AbdXDEKKxCFsFutlA2IQ Myh2tDvb0afRqtAo1HfwNoqLrsNZQlSWc9397W+t1eY0kvkbZWxn8slD89ZOHi6g wzC/kkheGvnqmJZf0R1DObtBl5ukcnLX9zOgcnWAj1MLYVKLY6TVv991rmDL5Thg zs3Cgsi8+fgRwDv/4EV90pPSMhZsdFhfWl21LFe2POZ89ifv3kAqoK7od0nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNqBB9e1eOkLX7F9a8QFaDJuF2swHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDgJHSBHk3cS8EDz2Pe4vUpB9wB8yxyil9T /AG/o2LyKq3+0fXniyGGMEW9fKhAccPlfpA/kiPm1kMyUByZ162xKS8yed54hFAQ Y47Xy73nvKwLIQ063va7jH6SFV8IPsItmbBE5+hz/9OOjjkQnw5KNa/IGlwzyZOy DZAZKfstHGso5DqXT0mpGAAC366+UFnqjE5IZQpfkAQJmcOGKt3ZaiQDNdjAcT37 5LPGxYdHXdy/V58l6gRGU9M1lB8n3Q2Ss0VVTozSRxkPQaPGI3RELcHumYe9HS/n xbbVBdGXUuF5bVEN3Zc8Eri6uRzLWZrgmtLzfNYgw7HuQNySyaA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:50 2025 by rpki-client