This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: hv51wqXGgwT2TZmiA0lQMAhs7MwWXSTmYGXRmBowJic= Subject key identifier: 0D:FC:0A:45:99:14:6D:7E:AA:5E:52:75:31:C1:B7:A6:AA:1E:BA:EF Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 690A022B263CCB81BD7E110AD76A26539B6BFEB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 025C Signing time: Wed 03 Dec 2025 06:01:59 +0000 Manifest this update: Wed 03 Dec 2025 05:56:59 +0000 Manifest next update: Sat 06 Dec 2025 17:22:59 +0000 Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 3: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: uojyVP66f4G6BfxYV+GfQX/0u9AHVj2J87SLwKkri3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0a:02:2b:26:3c:cb:81:bd:7e:11:0a:d7:6a:26:53:9b:6b:fe:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Dec 3 05:56:59 2025 GMT Not After : Dec 6 17:22:59 2025 GMT Subject: CN=0DFC0A4599146D7EAA5E527531C1B7A6AA1EBAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:2b:7a:d9:73:e6:3c:29:7f:90:8b:dc:4b: 36:08:70:f7:04:b0:5e:2e:f7:78:d3:db:16:91:7b: e8:0e:3a:eb:e4:6b:0f:16:ca:e1:fc:76:39:3d:bd: f0:86:3d:af:0f:64:ec:a6:12:54:a8:10:8e:0a:1d: 50:db:41:84:f6:28:64:59:60:26:6b:23:e8:2a:95: cb:1d:74:3f:12:78:58:80:cf:8a:ac:e1:12:fe:31: 07:13:d0:8d:52:a9:40:79:62:e6:3c:76:84:69:b6: 6f:53:e0:23:eb:b0:46:8e:40:e6:2f:5a:05:18:12: 95:e8:4d:25:27:5e:8f:9e:44:f0:e4:a4:94:f7:c6: af:9e:eb:59:f3:a9:80:b1:70:cc:a8:68:f6:e2:35: 60:c9:b7:c5:3f:95:69:e2:72:c9:71:6a:d1:a6:61: 42:ce:de:19:cd:e0:e8:8d:0e:5e:64:f6:82:80:4e: eb:04:c9:f3:2e:2f:8a:23:bd:f3:32:07:06:0d:a3: 9e:e9:20:fe:7d:bc:9c:38:c9:ad:49:7a:b2:22:1f: ee:4a:8e:87:18:82:29:c1:cc:32:76:79:ef:69:f6: ef:f8:a2:44:a4:20:ff:f1:f1:f9:f3:1c:84:75:0d: 4a:f3:3c:9a:98:7c:4a:a7:6e:3e:90:63:a0:1f:09: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FC:0A:45:99:14:6D:7E:AA:5E:52:75:31:C1:B7:A6:AA:1E:BA:EF X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:87:4f:b8:3c:c8:95:19:6c:68:d6:07:e0:94:28:06:a3:27: 74:9d:b3:b3:c1:0b:aa:59:c2:a1:9d:b2:35:fb:be:bb:6a:af: d4:f6:63:8a:2b:9e:26:b1:fd:37:21:42:7a:7f:d4:46:07:f4: 8b:ae:cc:55:66:7e:69:61:17:31:24:1b:85:13:bb:bc:b5:66: 2e:8b:12:1c:ef:63:81:df:70:89:2b:de:74:46:52:09:1c:f0: de:88:45:3c:1b:37:6a:a2:54:cf:8d:2d:f3:8e:a9:66:4c:3f: 1d:f3:7c:47:28:29:65:fe:58:de:42:92:43:32:e3:c9:28:2f: 4d:5b:38:91:19:b7:6b:4e:92:ed:85:46:44:a8:c3:41:9a:ed: a7:f3:53:33:88:db:13:67:64:d5:f5:ba:28:cb:8f:2e:3e:84: f5:0a:bb:3a:87:ad:df:60:51:a1:e5:6b:af:4d:78:a6:3a:cb: 3a:8d:76:f6:d2:d2:63:13:a1:bb:7a:5c:4a:d4:b4:b1:ea:68: f0:be:d4:19:20:9f:f8:8e:13:d4:00:9b:4a:35:d2:63:07:d1: 32:08:c3:46:d6:fc:c5:0e:69:01:41:34:aa:d6:99:7d:ca:b6: bb:67:b3:2a:03:9b:aa:18:10:7b:89:8a:d0:e3:86:00:7f:1e: 67:55:af:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQoCKyY8y4G9fhEK12omU5tr/rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTEyMDMwNTU2NTlaFw0yNTEyMDYxNzIyNTlaMDMxMTAvBgNV BAMTKDBERkMwQTQ1OTkxNDZEN0VBQTVFNTI3NTMxQzFCN0E2QUExRUJBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyCt62XPmPCl/kIvcSzYIcPcE sF4u93jT2xaRe+gOOuvkaw8WyuH8djk9vfCGPa8PZOymElSoEI4KHVDbQYT2KGRZ YCZrI+gqlcsddD8SeFiAz4qs4RL+MQcT0I1SqUB5YuY8doRptm9T4CPrsEaOQOYv WgUYEpXoTSUnXo+eRPDkpJT3xq+e61nzqYCxcMyoaPbiNWDJt8U/lWnicslxatGm YULO3hnN4OiNDl5k9oKATusEyfMuL4ojvfMyBwYNo57pIP59vJw4ya1JerIiH+5K jocYginBzDJ2ee9p9u/4okSkIP/x8fnzHIR1DUrzPJqYfEqnbj6QY6AfCZppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfwKRZkUbX6qXlJ1McG3pqoeuu8wHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOHT7g8yJUZbGjWB+CUKAajJ3Sds7PBC6pZ wqGdsjX7vrtqr9T2Y4orniax/TchQnp/1EYH9IuuzFVmfmlhFzEkG4UTu7y1Zi6L EhzvY4HfcIkr3nRGUgkc8N6IRTwbN2qiVM+NLfOOqWZMPx3zfEcoKWX+WN5CkkMy 48koL01bOJEZt2tOku2FRkSow0Ga7afzUzOI2xNnZNX1uijLjy4+hPUKuzqHrd9g UaHla69NeKY6yzqNdvbS0mMTobt6XErUtLHqaPC+1Bkgn/iOE9QAm0o10mMH0TII w0bW/MUOaQFBNKrWmX3KtrtnsyoDm6oYEHuJitDjhgB/HmdVr4s= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:02 2025 by rpki-client