This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 8IcyTMLVSaZFsdO1Emvtb1bS4ftvoQPrYlXTawvjKO4= Subject key identifier: 83:C1:AC:82:58:F6:A1:4A:E3:61:3A:C1:D2:B9:6B:B4:91:42:A7:BD Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 19E450CBE2D9F1BD9A5477CEF645DA8E83927559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 019F Signing time: Tue 02 Dec 2025 13:12:01 +0000 Manifest this update: Tue 02 Dec 2025 13:07:01 +0000 Manifest next update: Fri 05 Dec 2025 20:46:01 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 2: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: f8EhhVynFIU/QCPXfrt+tCEJlvpCjkg3O1AYKSwLVy0=) 3: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e4:50:cb:e2:d9:f1:bd:9a:54:77:ce:f6:45:da:8e:83:92:75:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Dec 2 13:07:01 2025 GMT Not After : Dec 5 20:46:01 2025 GMT Subject: CN=83C1AC8258F6A14AE3613AC1D2B96BB49142A7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:99:d9:5d:80:e8:a6:37:4a:58:ff:6c:e9: 84:51:5a:be:cf:78:57:98:b5:5e:be:ee:42:98:9b: 72:4d:89:86:3f:ae:5b:25:34:7f:49:bd:ca:2b:ed: a7:58:67:06:63:53:d9:f9:f9:84:2e:39:6e:ac:45: f5:20:58:51:bd:a6:38:6d:31:74:fd:f6:5f:3c:53: 66:4f:ab:ea:37:e6:82:39:ab:4e:06:88:b8:d2:88: 48:4e:36:55:cf:6e:eb:e2:a4:4a:ee:03:a5:a8:26: 09:d7:2e:35:72:cb:fd:fc:99:81:69:27:d9:ca:07: 36:e7:6d:4c:56:58:bd:07:ab:0b:ea:87:c2:78:8b: f2:f3:05:0e:a2:6f:d4:3c:b3:3b:55:63:c9:f8:00: 4d:5e:45:76:ff:57:17:46:0c:f2:1d:24:1f:53:58: 3e:5e:93:6f:8d:e1:7b:25:2f:f1:23:80:f6:9b:d5: 45:77:5e:32:fd:8d:9c:82:0d:c4:79:25:d9:be:e2: f7:25:37:2c:52:0d:13:e6:60:51:b7:8f:57:99:a9: 3d:f7:72:8b:4c:eb:ba:f7:2c:e0:66:7f:94:9d:63: 5f:13:f1:e6:f3:a1:5d:42:cf:e9:d8:af:78:f3:b6: 8c:95:f5:ff:7c:15:88:05:33:6d:ce:b9:bd:df:0e: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C1:AC:82:58:F6:A1:4A:E3:61:3A:C1:D2:B9:6B:B4:91:42:A7:BD X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9a:76:97:87:55:d6:4d:d6:78:b0:b1:24:fd:12:b3:ea:9f: bf:ec:98:a5:d5:81:53:60:c9:7a:dc:a1:4f:5e:e6:eb:1d:2d: 7a:37:64:13:e6:e5:b7:7b:4c:e5:fe:95:3b:e9:c1:b7:a5:a7: 6f:58:32:ac:72:bd:7f:d1:9f:ef:01:57:d3:24:c7:d0:98:96: 53:d8:2a:1a:0a:7e:57:fe:49:cc:20:c6:96:0f:e9:33:ed:c7: 0a:8d:1c:e0:82:50:08:92:38:ec:8c:4d:4f:eb:3c:71:92:1c: e0:89:bc:b8:d1:d4:d2:2b:24:ae:4b:2d:89:a8:5c:81:c1:29: 93:da:20:6a:1f:9d:02:8b:0a:6a:08:e6:b9:90:90:81:85:df: 93:2a:32:c7:3d:0f:fe:eb:25:50:9b:bd:9d:08:b9:15:42:0c: 27:d6:d5:99:24:de:4f:79:54:5d:70:40:69:09:25:6f:58:9b: a4:55:c8:24:ac:a4:f3:ea:87:e7:31:3b:15:fe:fd:bb:e1:d1: 20:f5:b2:25:08:46:50:0c:77:e8:17:24:87:e8:0a:00:4b:3d: 62:b9:96:b8:44:81:47:52:da:8d:8c:01:49:1e:6b:d5:3b:d5: 2c:0a:8a:1a:2a:24:ed:af:25:c5:22:07:96:a8:71:70:ab:6a: 6c:ad:f0:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeRQy+LZ8b2aVHfO9kXajoOSdVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTEyMDIxMzA3MDFaFw0yNTEyMDUyMDQ2MDFaMDMxMTAvBgNV BAMTKDgzQzFBQzgyNThGNkExNEFFMzYxM0FDMUQyQjk2QkI0OTE0MkE3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6JnZXYDopjdKWP9s6YRRWr7P eFeYtV6+7kKYm3JNiYY/rlslNH9Jvcor7adYZwZjU9n5+YQuOW6sRfUgWFG9pjht MXT99l88U2ZPq+o35oI5q04GiLjSiEhONlXPbuvipEruA6WoJgnXLjVyy/38mYFp J9nKBzbnbUxWWL0Hqwvqh8J4i/LzBQ6ib9Q8sztVY8n4AE1eRXb/VxdGDPIdJB9T WD5ek2+N4XslL/EjgPab1UV3XjL9jZyCDcR5Jdm+4vclNyxSDRPmYFG3j1eZqT33 cotM67r3LOBmf5SdY18T8ebzoV1Cz+nYr3jztoyV9f98FYgFM23Oub3fDj55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8Gsglj2oUrjYTrB0rlrtJFCp70wHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyadpeHVdZN1niwsST9ErPqn7/smKXVgVNg yXrcoU9e5usdLXo3ZBPm5bd7TOX+lTvpwbelp29YMqxyvX/Rn+8BV9Mkx9CYllPY KhoKflf+ScwgxpYP6TPtxwqNHOCCUAiSOOyMTU/rPHGSHOCJvLjR1NIrJK5LLYmo XIHBKZPaIGofnQKLCmoI5rmQkIGF35MqMsc9D/7rJVCbvZ0IuRVCDCfW1Zkk3k95 VF1wQGkJJW9Ym6RVyCSspPPqh+cxOxX+/bvh0SD1siUIRlAMd+gXJIfoCgBLPWK5 lrhEgUdS2o2MAUkea9U71SwKihoqJO2vJcUiB5aocXCramyt8Fw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:26 2025 by rpki-client