This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: v6KvubCV26MkH4yFAxgCYCOXWs+G4GCJCQSqVhJnxEA= Subject key identifier: 1F:EC:BB:31:E5:0D:6F:98:62:02:F9:B4:A1:57:B9:2B:E5:2B:DD:D3 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 042D345590CEA2D4102383227CFCDD51D26881DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 0216 Signing time: Tue 02 Dec 2025 11:02:26 +0000 Manifest this update: Tue 02 Dec 2025 10:57:26 +0000 Manifest next update: Fri 05 Dec 2025 17:09:26 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 3: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) 4: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 5: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: etjZ+QK1Gg/UKSLsU5J7FnFecQHJ6psAW79w3wk+LsM=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2d:34:55:90:ce:a2:d4:10:23:83:22:7c:fc:dd:51:d2:68:81:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Dec 2 10:57:26 2025 GMT Not After : Dec 5 17:09:26 2025 GMT Subject: CN=1FECBB31E50D6F986202F9B4A157B92BE52BDDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:72:ae:3c:e2:76:4c:e2:a8:31:11:75:a6: 31:3f:de:d4:66:15:38:cc:50:b3:d1:8a:ac:2d:83: 28:0d:5a:6e:c0:f4:c0:2e:8c:76:38:2b:f8:63:78: 4e:0f:d7:2a:fd:49:e7:64:e3:5b:91:fa:ed:33:7c: 13:2b:74:e9:cc:0e:5f:e5:4c:c5:0c:0c:93:d5:e7: b3:7e:54:bb:dc:4e:36:d6:af:db:4b:52:f2:92:b3: 04:a1:85:af:8b:3c:67:92:03:41:1c:27:ae:35:40: c6:f7:59:7e:5b:dd:53:09:18:d6:89:5f:97:19:7d: 00:a2:23:2a:e6:d3:66:f2:7b:b3:83:21:80:df:77: d1:2f:cf:5f:9b:f4:40:01:ae:21:a5:66:dd:fc:80: 76:41:aa:12:62:05:8e:02:41:cf:60:14:b1:2b:89: be:8c:af:85:ff:19:6c:2d:7a:7e:24:8f:f7:45:2a: 3a:50:79:7c:de:4a:98:86:1f:9a:79:ce:b1:3f:b9: b6:d6:c1:76:27:bd:e1:31:2c:2b:68:03:e7:c8:61: 0f:49:5e:8a:50:4a:86:30:0e:24:4a:a8:f6:77:74: 8a:12:19:ee:bb:01:f6:ca:0e:78:cd:09:e7:00:ed: bf:84:ad:16:e8:ca:2b:a4:f0:3f:df:ab:21:8b:3f: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:BB:31:E5:0D:6F:98:62:02:F9:B4:A1:57:B9:2B:E5:2B:DD:D3 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:22:95:7f:31:3f:82:98:eb:e7:97:d6:7b:e3:f2:34:37:5a: 72:39:ed:03:89:86:98:06:58:84:9a:cf:67:e5:12:1c:28:44: 43:f7:62:79:ea:24:f2:43:eb:28:ad:47:6f:1b:be:e7:37:90: d6:17:9f:02:6f:a1:28:32:54:51:7b:32:67:37:01:3b:ed:36: e7:59:9b:9c:54:74:02:85:d9:4a:78:53:82:a9:fc:fc:7d:b6: 89:4d:f0:fb:00:18:6f:79:c0:c3:2d:a4:90:84:10:a6:98:bf: f9:53:32:49:65:ca:d5:c1:23:d5:1d:04:2f:17:a3:19:36:aa: ba:05:02:93:04:c2:94:7f:c1:44:10:ab:5e:c3:59:63:e8:2c: c8:bf:f2:5d:87:09:02:d5:f4:d6:7d:d2:0d:05:94:12:39:ab: ae:40:67:17:a0:54:e4:db:9c:66:76:8a:29:01:d0:90:6f:3a: ad:41:e4:12:09:33:8b:6d:1f:0f:86:79:17:bc:4a:f0:cd:27: 69:92:f5:3b:e0:4a:b0:f3:cf:ef:56:f4:61:da:e0:dd:c9:8e: 04:21:c4:53:dd:ac:02:88:d4:f8:f4:4a:bf:bf:8c:59:59:32: d2:35:17:14:da:ed:83:27:a1:36:93:c8:fe:0d:9f:de:b5:d2: 0d:da:b1:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBC00VZDOotQQI4MifPzdUdJogdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTEyMDIxMDU3MjZaFw0yNTEyMDUxNzA5MjZaMDMxMTAvBgNV BAMTKDFGRUNCQjMxRTUwRDZGOTg2MjAyRjlCNEExNTdCOTJCRTUyQkRERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lnKuPOJ2TOKoMRF1pjE/3tRm FTjMULPRiqwtgygNWm7A9MAujHY4K/hjeE4P1yr9Sedk41uR+u0zfBMrdOnMDl/l TMUMDJPV57N+VLvcTjbWr9tLUvKSswShha+LPGeSA0EcJ641QMb3WX5b3VMJGNaJ X5cZfQCiIyrm02bye7ODIYDfd9Evz1+b9EABriGlZt38gHZBqhJiBY4CQc9gFLEr ib6Mr4X/GWwten4kj/dFKjpQeXzeSpiGH5p5zrE/ubbWwXYnveExLCtoA+fIYQ9J XopQSoYwDiRKqPZ3dIoSGe67AfbKDnjNCecA7b+ErRboyiuk8D/fqyGLP3zlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+y7MeUNb5hiAvm0oVe5K+Ur3dMwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAilX8xP4KY6+eX1nvj8jQ3WnI57QOJhpgG WISaz2flEhwoREP3YnnqJPJD6yitR28bvuc3kNYXnwJvoSgyVFF7Mmc3ATvtNudZ m5xUdAKF2Up4U4Kp/Px9tolN8PsAGG95wMMtpJCEEKaYv/lTMkllytXBI9UdBC8X oxk2qroFApMEwpR/wUQQq17DWWPoLMi/8l2HCQLV9NZ90g0FlBI5q65AZxegVOTb nGZ2iikB0JBvOq1B5BIJM4ttHw+GeRe8SvDNJ2mS9TvgSrDzz+9W9GHa4N3JjgQh xFPdrAKI1Pj0Sr+/jFlZMtI1FxTa7YMnoTaTyP4Nn9610g3asac= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:24 2025 by rpki-client