This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: KEfYEAz127FRfdZtSWd9WtbZoqM8P3q8glNsw9faufg= Subject key identifier: 76:C4:96:24:4A:66:CE:54:B9:01:CD:78:1C:6B:D6:CF:5A:FC:F1:85 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 72E6F4E3B26EFFC111613E68EB8DC2B2981F2BDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 052F Signing time: Wed 17 Dec 2025 06:11:21 +0000 Manifest this update: Wed 17 Dec 2025 06:06:21 +0000 Manifest next update: Sat 20 Dec 2025 06:16:21 +0000 Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: ahs+JyiSACSCXy+aCSAWh2iOXl0kxbtMu+WAb8TF5Cc=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e6:f4:e3:b2:6e:ff:c1:11:61:3e:68:eb:8d:c2:b2:98:1f:2b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Dec 17 06:06:21 2025 GMT Not After : Dec 20 06:16:21 2025 GMT Subject: CN=76C496244A66CE54B901CD781C6BD6CF5AFCF185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:4b:d3:fe:f2:7c:f0:25:b7:e8:43:f3:13: ba:65:2a:25:7f:5c:5f:3a:88:c3:7a:ce:fc:89:db: f0:5b:9f:6e:b4:86:cf:6f:f8:a4:b8:fe:c0:54:b8: 31:3e:de:11:53:c3:b0:84:30:69:9e:e4:b1:5a:74: 76:9b:15:4d:d1:a0:4b:72:5a:21:94:f3:57:7c:b5: ad:74:e0:6f:c2:bb:1a:7e:5d:58:5a:b1:fa:e5:3e: 58:9a:d8:00:1f:0e:48:c8:f5:d2:3a:7a:01:91:4f: 3f:9d:41:98:a0:f0:94:b1:5c:cd:6a:ba:2a:39:c6: 2e:72:c6:72:ec:9d:d3:23:12:d0:04:c1:0e:ed:0f: 17:39:79:a7:18:49:e0:a2:aa:47:73:a1:8a:d3:f7: 5b:60:4b:c2:89:29:f7:40:4e:bc:bc:ff:8f:c4:30: 0e:9a:76:16:ec:5d:54:0b:e0:4f:1f:9f:e5:9b:d9: 9c:aa:ab:6f:50:24:8c:70:85:db:36:0a:f3:bf:e4: 3d:4e:e4:4e:49:60:de:fa:a6:d6:85:17:b4:73:f8: 56:93:b6:66:a7:80:9e:f1:84:da:90:de:dc:11:d3: 35:00:18:d5:65:9c:d9:c1:c5:3b:f1:f4:59:12:ad: c8:b3:24:77:44:1a:80:e4:8a:77:43:55:33:2a:2f: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:96:24:4A:66:CE:54:B9:01:CD:78:1C:6B:D6:CF:5A:FC:F1:85 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9f:e8:c8:9c:64:bb:1f:0e:58:fc:6b:df:1e:7b:09:91:d7: 1b:2d:88:9f:8e:2a:05:cf:af:5c:ec:d3:7e:f6:6a:10:87:2e: 6b:b2:44:f7:20:4c:45:12:ce:b2:52:ce:63:6d:4e:f2:b8:b6: 96:f5:1d:48:f9:bd:ed:fe:5d:03:3b:e5:ce:f2:ed:d8:52:da: 07:cb:70:29:08:cb:7a:d7:b3:23:34:b4:3e:43:30:8f:88:e9: 34:f5:71:31:5a:99:2c:1f:eb:e1:30:86:af:05:e1:9d:c3:0f: 6a:74:0d:ff:c1:64:e2:f0:f1:10:fb:42:21:de:8e:89:d1:84: 10:ba:95:ed:1c:81:24:e8:69:64:dd:46:84:d5:35:d1:08:ba: 4c:2e:dd:73:b2:b8:2e:49:2d:4d:c8:05:0a:98:be:30:8b:a6: 1e:bf:5a:70:2b:d9:a6:b9:35:78:a0:80:58:88:07:45:8a:2f: df:26:83:41:35:10:65:14:40:3e:49:6c:ee:cd:79:a0:61:5f: 7f:23:72:f7:0a:04:3f:70:0f:a0:f0:a2:cf:b0:f8:0e:af:f3: 4a:47:f4:08:1e:f7:d9:ff:03:e0:6d:4e:58:df:42:08:1f:8f: f2:80:a3:8b:94:a5:96:a4:2e:32:43:ea:60:1c:92:19:ad:e4: 66:66:34:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcub047Ju/8ERYT5o643CspgfK94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTEyMTcwNjA2MjFaFw0yNTEyMjAwNjE2MjFaMDMxMTAvBgNV BAMTKDc2QzQ5NjI0NEE2NkNFNTRCOTAxQ0Q3ODFDNkJENkNGNUFGQ0YxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+skvT/vJ88CW36EPzE7plKiV/ XF86iMN6zvyJ2/Bbn260hs9v+KS4/sBUuDE+3hFTw7CEMGme5LFadHabFU3RoEty WiGU81d8ta104G/Cuxp+XVhasfrlPlia2AAfDkjI9dI6egGRTz+dQZig8JSxXM1q uio5xi5yxnLsndMjEtAEwQ7tDxc5eacYSeCiqkdzoYrT91tgS8KJKfdATry8/4/E MA6adhbsXVQL4E8fn+Wb2Zyqq29QJIxwhds2CvO/5D1O5E5JYN76ptaFF7Rz+FaT tmangJ7xhNqQ3twR0zUAGNVlnNnBxTvx9FkSrcizJHdEGoDkindDVTMqL36bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsSWJEpmzlS5Ac14HGvWz1r88YUwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+f6MicZLsfDlj8a98eewmR1xstiJ+OKgXP r1zs0372ahCHLmuyRPcgTEUSzrJSzmNtTvK4tpb1HUj5ve3+XQM75c7y7dhS2gfL cCkIy3rXsyM0tD5DMI+I6TT1cTFamSwf6+Ewhq8F4Z3DD2p0Df/BZOLw8RD7QiHe jonRhBC6le0cgSToaWTdRoTVNdEIukwu3XOyuC5JLU3IBQqYvjCLph6/WnAr2aa5 NXiggFiIB0WKL98mg0E1EGUUQD5JbO7NeaBhX38jcvcKBD9wD6Dwos+w+A6v80pH 9Age99n/A+BtTljfQggfj/KAo4uUpZakLjJD6mAckhmt5GZmNAM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:15 2025 by rpki-client