This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: UKNa0xbepli3ocMIO1PmwFZulhjSYVoeLGSGgUl4X+w= Subject key identifier: 6E:95:E0:5A:9B:91:79:85:6E:7C:80:53:1E:CA:9B:59:5B:83:FF:8A Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 70646BD4A1528377B9CCD622FA39FE5FAB20DBFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 024E Signing time: Wed 03 Dec 2025 20:42:11 +0000 Manifest this update: Wed 03 Dec 2025 20:37:11 +0000 Manifest next update: Sun 07 Dec 2025 00:59:11 +0000 Files and hashes: 1: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 2: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 3: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 4: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: hszMVpdF0/zm+pcds7luBhOeRAYpLIGwoaB2D6pW7Y0=) 5: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 6: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) 7: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 8: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 9: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 10: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 11: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 12: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 13: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 00:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:64:6b:d4:a1:52:83:77:b9:cc:d6:22:fa:39:fe:5f:ab:20:db:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Dec 3 20:37:11 2025 GMT Not After : Dec 7 00:59:11 2025 GMT Subject: CN=6E95E05A9B9179856E7C80531ECA9B595B83FF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:62:b7:3d:13:ef:eb:ae:71:bb:9a:b9:83: d2:7c:c3:69:16:50:b0:9a:4d:dc:5e:af:26:49:a9: 7f:9f:ef:92:f6:60:a9:ef:79:7c:88:c2:41:8d:c6: 9a:3e:50:c7:94:4e:cf:f4:f8:15:63:65:af:56:2b: 6f:f2:ed:c0:15:bb:e5:2c:94:d2:84:71:e4:9d:53: 51:ef:cc:aa:b4:0c:9f:17:f0:66:cf:60:60:34:45: 75:ee:fe:59:34:d8:cf:18:cb:c5:6f:9b:39:84:a1: 8f:82:43:fe:f0:77:32:60:ab:61:cc:9e:fe:c5:db: 40:b4:e8:03:b5:de:97:db:8b:b4:35:ab:42:49:33: f8:ac:bf:f9:99:82:f4:62:15:fd:ac:4b:76:5b:50: 06:28:c9:0f:13:31:4a:c6:86:48:6b:fa:75:ed:7a: fd:3f:ca:28:fe:3b:fa:95:b0:30:a3:7e:44:7c:b9: 33:17:6d:95:bb:0a:72:9e:34:90:ac:78:a8:bf:7e: 6c:e0:56:06:18:54:0e:21:be:22:59:98:e5:c6:d0: 49:f3:a2:f8:cd:98:58:47:73:a6:90:fe:24:d1:8d: 1b:42:55:22:86:2f:f2:db:c5:90:a4:e1:a4:e1:34: af:07:fb:ee:57:0b:f7:86:6e:41:33:ad:f5:6b:e1: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:95:E0:5A:9B:91:79:85:6E:7C:80:53:1E:CA:9B:59:5B:83:FF:8A X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3a:b9:2d:1c:40:89:ec:71:f1:8f:6d:d3:ca:59:d1:9b:5a: 2b:57:22:d4:c1:7a:c9:76:16:ab:83:b3:cb:1b:cc:59:cb:92: 80:19:e1:e5:3c:58:80:1e:67:3d:e1:9d:33:db:00:b6:0c:b2: 7a:fa:3b:bb:53:26:a8:33:4d:34:65:e5:6e:23:46:7d:49:d1: 80:c9:48:2e:69:fd:a2:bc:7e:87:99:26:6d:48:d2:be:ab:06: bf:24:a5:d6:85:04:b6:cd:75:49:68:b4:7c:33:06:93:c5:ef: fb:a4:c8:27:a6:57:15:07:98:36:33:a8:33:6f:fb:a6:d3:4e: 64:3d:73:83:49:37:12:08:a0:72:4c:73:ce:12:33:ca:a1:18: 52:25:de:b4:95:d3:22:5d:91:94:fa:53:39:e5:e0:7e:32:e3: 83:8e:3f:42:07:3f:82:c0:99:da:25:8d:eb:38:5b:f9:47:4b: 1e:8f:a7:94:06:4a:2d:bc:79:df:5c:46:4c:81:35:a1:3f:c6: 23:cd:b1:16:1b:04:39:2e:76:90:8b:c8:92:78:1e:67:04:1b: 46:03:94:a6:d5:ab:44:16:05:69:6a:45:a8:00:46:64:1e:8b: 72:d9:94:65:49:8a:b7:8c:c0:33:0a:bd:56:49:c7:c5:ed:bd: 98:b7:ca:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGRr1KFSg3e5zNYi+jn+X6sg2/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTEyMDMyMDM3MTFaFw0yNTEyMDcwMDU5MTFaMDMxMTAvBgNV BAMTKDZFOTVFMDVBOUI5MTc5ODU2RTdDODA1MzFFQ0E5QjU5NUI4M0ZGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfmK3PRPv665xu5q5g9J8w2kW ULCaTdxeryZJqX+f75L2YKnveXyIwkGNxpo+UMeUTs/0+BVjZa9WK2/y7cAVu+Us lNKEceSdU1HvzKq0DJ8X8GbPYGA0RXXu/lk02M8Yy8VvmzmEoY+CQ/7wdzJgq2HM nv7F20C06AO13pfbi7Q1q0JJM/isv/mZgvRiFf2sS3ZbUAYoyQ8TMUrGhkhr+nXt ev0/yij+O/qVsDCjfkR8uTMXbZW7CnKeNJCseKi/fmzgVgYYVA4hviJZmOXG0Enz ovjNmFhHc6aQ/iTRjRtCVSKGL/LbxZCk4aThNK8H++5XC/eGbkEzrfVr4X0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpXgWpuReYVufIBTHsqbWVuD/4owHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs6uS0cQInscfGPbdPKWdGbWitXItTBesl2 FquDs8sbzFnLkoAZ4eU8WIAeZz3hnTPbALYMsnr6O7tTJqgzTTRl5W4jRn1J0YDJ SC5p/aK8foeZJm1I0r6rBr8kpdaFBLbNdUlotHwzBpPF7/ukyCemVxUHmDYzqDNv +6bTTmQ9c4NJNxIIoHJMc84SM8qhGFIl3rSV0yJdkZT6Uznl4H4y44OOP0IHP4LA mdoljes4W/lHSx6Pp5QGSi28ed9cRkyBNaE/xiPNsRYbBDkudpCLyJJ4HmcEG0YD lKbVq0QWBWlqRagARmQei3LZlGVJireMwDMKvVZJx8XtvZi3yto= -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:58 2025 by rpki-client