This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: oTqjI1J7UJFgHq5nzVGp7klJRRvY6x8sVZsqCw1zZZY= Subject key identifier: 36:33:B3:BD:5B:C9:D8:0D:8D:AF:77:AB:DC:FF:15:82:20:34:A6:57 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 01C83667B738382320B2B8D94B8ACBBCB4914442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: D3 Signing time: Tue 02 Dec 2025 02:11:02 +0000 Manifest this update: Tue 02 Dec 2025 02:06:02 +0000 Manifest next update: Fri 05 Dec 2025 10:48:02 +0000 Files and hashes: 1: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: lZkLFBUvHpIZP2328c37bWR5W/A62YRSg9U2UpLTr9c=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c8:36:67:b7:38:38:23:20:b2:b8:d9:4b:8a:cb:bc:b4:91:44:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Dec 2 02:06:02 2025 GMT Not After : Dec 5 10:48:02 2025 GMT Subject: CN=3633B3BD5BC9D80D8DAF77ABDCFF15822034A657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:be:93:84:2d:a5:4a:e6:03:ee:69:8e:b5: 3e:63:0a:3b:5d:e2:9f:13:f9:ca:c7:5d:e6:62:1c: 9b:54:4a:ef:1f:18:2a:81:eb:c0:e0:92:b0:49:3b: 80:de:6e:d2:39:cc:b0:5a:f5:bf:69:d5:ad:d8:d9: 73:88:f7:d9:a0:8d:a9:53:2f:30:dc:ac:6b:0c:a7: 37:d1:bc:a0:f7:df:c9:1e:00:58:e6:07:cb:60:e9: 8c:c4:c7:46:05:7e:21:af:02:cb:d5:fe:a7:37:d6: 59:17:07:cd:af:30:75:fa:7c:ea:9c:b6:db:97:3f: f7:43:c1:7a:ed:03:b0:80:2a:0d:e8:65:4e:fd:8a: ea:e4:a3:0c:aa:2f:1d:87:02:1b:5d:aa:68:54:f4: 64:76:c0:4b:2b:3e:b8:3a:8d:56:13:6c:5f:7d:b5: 5d:19:ab:31:e1:65:a6:51:47:3f:24:80:72:9b:a0: c3:c6:f9:48:9c:dc:8d:86:27:cf:77:82:18:c3:72: cf:85:29:d8:01:fa:b4:a5:de:cc:ed:a5:3b:97:54: 79:61:4f:9a:ec:bb:21:57:02:c3:e6:be:f1:80:03: 9b:bb:7a:07:16:dd:68:22:d6:29:16:82:ba:28:7e: 7e:c5:44:46:a6:ee:c8:11:39:ac:40:55:f2:a7:25: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:33:B3:BD:5B:C9:D8:0D:8D:AF:77:AB:DC:FF:15:82:20:34:A6:57 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:92:5e:01:fe:7e:df:ae:b4:3a:8d:0c:fd:11:98:6e:46:3c: 4c:73:a9:14:e0:75:06:d7:0b:af:d8:51:f8:2e:63:1e:e0:f8: 7c:59:92:62:ac:c6:85:be:1e:d9:d4:32:d9:bb:16:c9:11:cc: 2a:85:da:ac:71:5f:b0:59:0b:23:a0:bb:6e:8c:d8:b0:be:f6: c1:be:bd:17:56:78:41:e2:c5:c6:72:42:4e:9c:d1:3f:64:6b: 75:8d:9a:49:71:cb:f0:ae:d0:dd:1f:49:b1:7b:f6:81:66:60: 8e:74:97:ee:b0:66:22:29:19:29:c3:ad:0e:53:72:d5:16:10: d7:40:2f:65:d5:f0:d9:a4:5f:3d:e7:e5:5b:aa:f7:07:15:33: 92:6a:ff:40:9e:3d:1f:29:06:35:36:99:de:28:9d:d0:ce:45: be:66:30:78:59:4a:44:81:db:9d:15:97:41:a5:62:71:2b:62: 0b:1c:48:2f:e2:0a:5b:ea:4a:ef:fe:63:7d:d2:a2:82:3b:b7: 65:22:5e:ca:cc:81:23:3b:86:b6:2a:ed:d7:b1:03:4e:e9:7f: 5c:a0:97:8e:b7:08:18:05:bc:6c:01:20:c3:fd:a6:c5:eb:17: eb:42:bb:e1:92:3a:0b:3d:48:5a:dc:ff:8e:89:da:a8:b6:2a: 32:ad:13:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcg2Z7c4OCMgsrjZS4rLvLSRREIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTEyMDIwMjA2MDJaFw0yNTEyMDUxMDQ4MDJaMDMxMTAvBgNV BAMTKDM2MzNCM0JENUJDOUQ4MEQ4REFGNzdBQkRDRkYxNTgyMjAzNEE2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wb6ThC2lSuYD7mmOtT5jCjtd 4p8T+crHXeZiHJtUSu8fGCqB68DgkrBJO4DebtI5zLBa9b9p1a3Y2XOI99mgjalT LzDcrGsMpzfRvKD338keAFjmB8tg6YzEx0YFfiGvAsvV/qc31lkXB82vMHX6fOqc ttuXP/dDwXrtA7CAKg3oZU79iurkowyqLx2HAhtdqmhU9GR2wEsrPrg6jVYTbF99 tV0ZqzHhZaZRRz8kgHKboMPG+Uic3I2GJ893ghjDcs+FKdgB+rSl3sztpTuXVHlh T5rsuyFXAsPmvvGAA5u7egcW3Wgi1ikWgroofn7FREam7sgROaxAVfKnJb71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjOzvVvJ2A2Nr3er3P8VgiA0plcwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWSXgH+ft+utDqNDP0RmG5GPExzqRTgdQbX C6/YUfguYx7g+HxZkmKsxoW+HtnUMtm7FskRzCqF2qxxX7BZCyOgu26M2LC+9sG+ vRdWeEHixcZyQk6c0T9ka3WNmklxy/Cu0N0fSbF79oFmYI50l+6wZiIpGSnDrQ5T ctUWENdAL2XV8NmkXz3n5Vuq9wcVM5Jq/0CePR8pBjU2md4ondDORb5mMHhZSkSB 250Vl0GlYnErYgscSC/iClvqSu/+Y33SooI7t2UiXsrMgSM7hrYq7dexA07pf1yg l463CBgFvGwBIMP9psXrF+tCu+GSOgs9SFrc/46J2qi2KjKtE/M= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:29 2025 by rpki-client