This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: AqkWn7Rjuu4FRiEYWYeFHJTW35ZXNXTZ1Dfcn6gAB70= Subject key identifier: E2:19:E5:AA:F3:2A:D5:8F:4F:67:93:F2:4D:D3:4F:99:5D:98:86:E5 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 7F40B8B435DB7E9124A9269EB09AAD13207934AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: B3 Signing time: Wed 03 Dec 2025 00:10:57 +0000 Manifest this update: Wed 03 Dec 2025 00:05:57 +0000 Manifest next update: Sat 06 Dec 2025 03:18:57 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: GC+CdWQvmimhsZOtVl6xFU6mwbxedYrGaNqSlasuIdI=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:40:b8:b4:35:db:7e:91:24:a9:26:9e:b0:9a:ad:13:20:79:34:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Dec 3 00:05:57 2025 GMT Not After : Dec 6 03:18:57 2025 GMT Subject: CN=E219E5AAF32AD58F4F6793F24DD34F995D9886E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:7b:6d:68:17:18:c2:cb:eb:2e:f4:c6:86: b9:1f:6b:ab:03:0f:f7:9d:d6:13:09:df:fc:c5:14: 75:58:2c:ee:97:70:24:0d:cf:16:83:fc:43:9a:9e: fb:a6:af:ef:0b:dd:41:ac:49:85:9c:25:6c:6d:4c: f7:01:8e:15:f2:4c:5b:79:9e:f6:19:3f:99:b8:57: a9:f2:e7:8a:ac:7d:83:22:da:0a:87:e8:31:8b:7a: 3f:3c:bb:8c:39:d0:b0:9b:e1:a3:d8:b2:26:f4:ec: 28:02:09:b1:26:de:a0:84:de:ba:a2:15:58:12:9a: d7:a7:a7:68:7c:b2:26:6f:2a:8d:40:31:7b:e6:58: d8:3b:51:33:a5:3d:2a:46:38:ae:b4:e5:4c:ef:68: 59:55:4f:fa:31:7c:04:a5:b3:76:5d:49:d7:51:e1: 4b:44:45:58:86:28:0d:bd:1d:d7:f1:77:d4:44:e3: 6c:c7:99:25:41:b2:c4:20:ed:84:c5:19:49:77:0c: eb:29:0d:f2:f5:3a:0b:2d:d8:af:39:50:cb:3d:7d: 13:65:b7:07:4f:bd:2f:05:bd:7d:37:a1:dd:f0:73: 5e:6c:d2:be:da:53:23:ea:1f:5f:27:8f:05:a0:a7: 52:2a:5f:3a:56:9e:34:3b:9e:d5:8c:f3:f8:ef:6f: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:E5:AA:F3:2A:D5:8F:4F:67:93:F2:4D:D3:4F:99:5D:98:86:E5 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:04:0e:9c:dd:49:28:45:d8:15:36:81:c8:a8:f2:4a:53:0c: cb:8c:df:5c:5a:f8:a9:e1:82:4f:9c:6c:a1:a9:5d:16:9a:0e: cb:5c:47:e2:fe:f8:44:b4:91:f2:d4:2b:f5:2a:a7:c7:78:d2: 74:e9:30:9b:04:7c:54:56:5a:67:83:ef:23:dc:12:2d:69:3e: 01:b9:3e:33:f0:a3:02:39:e0:1d:37:de:d5:5a:c9:65:37:41: 37:d2:9c:a4:b5:94:62:25:c5:e5:39:a0:b4:bd:ea:38:aa:67: 90:4a:ff:40:2d:61:6b:bc:fb:33:a0:d5:f7:b1:31:b5:d1:5d: 50:e7:51:02:10:1d:e2:e3:ad:bf:7f:a2:9b:a2:e7:ca:7f:fa: db:d4:b3:a5:d2:d3:54:0b:4b:6e:27:be:48:eb:a5:ae:ad:db: 7b:9e:d4:65:7c:37:89:11:5b:43:f5:ec:60:ed:12:4c:84:31: e5:e7:a0:a7:0a:1f:34:cb:2d:1a:4c:0d:1b:24:b0:18:7e:a9: 81:9f:04:c5:9c:09:88:27:7e:21:5d:2f:97:78:4b:37:c9:ba: 04:e2:79:e1:b2:74:d9:3e:96:2d:03:81:a6:55:c3:3b:63:51: 52:3a:05:d6:2c:fc:60:97:17:e6:7a:66:7e:85:ee:ad:a8:a5: ad:5d:72:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0C4tDXbfpEkqSaesJqtEyB5NKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTEyMDMwMDA1NTdaFw0yNTEyMDYwMzE4NTdaMDMxMTAvBgNV BAMTKEUyMTlFNUFBRjMyQUQ1OEY0RjY3OTNGMjRERDM0Rjk5NUQ5ODg2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+3ttaBcYwsvrLvTGhrkfa6sD D/ed1hMJ3/zFFHVYLO6XcCQNzxaD/EOanvumr+8L3UGsSYWcJWxtTPcBjhXyTFt5 nvYZP5m4V6ny54qsfYMi2gqH6DGLej88u4w50LCb4aPYsib07CgCCbEm3qCE3rqi FVgSmtenp2h8siZvKo1AMXvmWNg7UTOlPSpGOK605UzvaFlVT/oxfASls3ZdSddR 4UtERViGKA29Hdfxd9RE42zHmSVBssQg7YTFGUl3DOspDfL1Ogst2K85UMs9fRNl twdPvS8FvX03od3wc15s0r7aUyPqH18njwWgp1IqXzpWnjQ7ntWM8/jvb2jBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4hnlqvMq1Y9PZ5PyTdNPmV2YhuUwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOMEDpzdSShF2BU2gcio8kpTDMuM31xa+Knh gk+cbKGpXRaaDstcR+L++ES0kfLUK/Uqp8d40nTpMJsEfFRWWmeD7yPcEi1pPgG5 PjPwowI54B033tVayWU3QTfSnKS1lGIlxeU5oLS96jiqZ5BK/0AtYWu8+zOg1fex MbXRXVDnUQIQHeLjrb9/opui58p/+tvUs6XS01QLS24nvkjrpa6t23ue1GV8N4kR W0P17GDtEkyEMeXnoKcKHzTLLRpMDRsksBh+qYGfBMWcCYgnfiFdL5d4SzfJugTi eeGydNk+li0DgaZVwztjUVI6BdYs/GCXF+Z6Zn6F7q2opa1dctg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:58 2025 by rpki-client