This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: 7P1PP/crG/S2GdrjxMAGLjTHVV7KpUL6pW+DqBonS2o= Subject key identifier: 81:FB:09:85:3D:0C:9D:EB:3E:34:FE:AC:76:02:74:C7:70:B3:83:67 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 7F04A20821EFD82F99F2034C3DA846C22BCD45C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01FB Signing time: Tue 02 Dec 2025 19:51:43 +0000 Manifest this update: Tue 02 Dec 2025 19:46:43 +0000 Manifest next update: Sat 06 Dec 2025 03:51:43 +0000 Files and hashes: 1: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 2: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: SYf8sFWLu3B/nfkEmeO4qYBQc9mqn91E81jpGCgrlV4=) 3: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 4: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 5: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 6: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=) 7: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 8: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=) 9: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:04:a2:08:21:ef:d8:2f:99:f2:03:4c:3d:a8:46:c2:2b:cd:45:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 2 19:46:43 2025 GMT Not After : Dec 6 03:51:43 2025 GMT Subject: CN=81FB09853D0C9DEB3E34FEAC760274C770B38367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:67:36:60:ca:fd:c4:2b:f3:6d:c4:50:a7: 1f:bf:63:1e:95:57:09:7a:e8:df:c3:2e:d0:d5:81: fa:3b:73:32:26:79:c4:fb:b3:c7:64:7e:2a:48:5e: c0:6b:08:3d:98:ad:75:5e:1b:f5:0e:aa:27:54:df: f1:44:ff:b6:e1:12:17:44:82:06:71:fe:60:64:f7: af:bb:8b:ac:1d:12:75:17:70:8f:f6:80:2c:d2:57: 5f:a1:e9:99:b4:24:50:67:29:17:dc:be:dc:d4:86: d6:00:32:2e:d7:f7:c9:dc:ba:d6:d7:13:a2:33:39: 38:48:96:7a:9c:3e:0f:e5:00:4f:d5:a3:66:f0:8f: 4b:b2:f1:e1:29:f6:71:6c:ef:9f:0e:79:f9:9c:b1: 8f:a9:ca:23:e9:ed:ba:83:51:dc:bc:ce:6c:ea:76: 94:f2:9c:3b:32:42:86:ad:e0:4d:7c:2e:86:e3:61: 87:e7:32:2c:48:9f:f3:69:41:a7:fd:42:2e:e8:db: 74:aa:7e:65:79:f8:ea:15:16:82:0b:15:3a:ab:1d: cd:03:91:63:85:cb:ea:a1:71:fc:36:69:cb:e7:14: 31:50:a8:31:c6:a5:58:45:b7:a3:48:a9:04:a8:92: 4f:1b:6e:dc:72:65:22:e7:42:ce:1e:a5:83:a7:4b: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FB:09:85:3D:0C:9D:EB:3E:34:FE:AC:76:02:74:C7:70:B3:83:67 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d0:d0:cd:0f:85:9d:f7:9f:55:bb:7f:b3:16:e3:64:42:46: 9a:32:d4:0d:43:7b:a9:1e:0b:29:20:f5:85:30:20:7d:ba:e7: 7c:2d:85:7a:23:51:3f:50:14:4f:9d:92:d0:fd:13:89:a9:04: 64:5f:29:cb:a6:50:ce:a2:e6:83:9e:e5:16:a5:be:31:65:d9: 36:b8:19:18:c5:5d:c3:25:8e:9b:5a:5e:e4:9e:42:51:fe:09: 17:e2:02:64:24:d7:62:c3:06:d8:3c:b6:ac:ac:76:24:d4:62: 52:43:7e:7b:d3:1e:41:16:d3:ed:1e:31:7d:2c:05:03:52:2d: f7:4c:07:53:d5:84:fc:bc:19:30:5b:be:8c:61:b1:50:9d:ba: 4e:7f:06:96:d3:2b:54:8d:57:3e:d4:61:40:96:94:9c:64:59: 41:1c:ab:4d:c5:de:00:8a:58:47:cb:12:39:4f:a1:9f:c1:77: 9d:5b:09:8d:df:22:7c:ea:9c:b6:8e:95:03:27:76:52:15:2f: 26:28:5f:55:af:f7:33:81:d4:3d:b7:56:ae:0a:de:15:17:18: 13:ff:f8:32:34:0f:f6:7a:5e:42:06:87:ab:a9:b5:9a:e6:3b: 64:06:12:fe:c0:61:07:06:67:75:6c:03:99:42:5f:0f:df:2e: 73:bb:36:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwSiCCHv2C+Z8gNMPahGwivNRckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMDIxOTQ2NDNaFw0yNTEyMDYwMzUxNDNaMDMxMTAvBgNV BAMTKDgxRkIwOTg1M0QwQzlERUIzRTM0RkVBQzc2MDI3NEM3NzBCMzgzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bmc2YMr9xCvzbcRQpx+/Yx6V Vwl66N/DLtDVgfo7czImecT7s8dkfipIXsBrCD2YrXVeG/UOqidU3/FE/7bhEhdE ggZx/mBk96+7i6wdEnUXcI/2gCzSV1+h6Zm0JFBnKRfcvtzUhtYAMi7X98ncutbX E6IzOThIlnqcPg/lAE/Vo2bwj0uy8eEp9nFs758OefmcsY+pyiPp7bqDUdy8zmzq dpTynDsyQoat4E18LobjYYfnMixIn/NpQaf9Qi7o23SqfmV5+OoVFoILFTqrHc0D kWOFy+qhcfw2acvnFDFQqDHGpVhFt6NIqQSokk8bbtxyZSLnQs4epYOnS73RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfsJhT0Mnes+NP6sdgJ0x3Czg2cwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTQ0M0PhZ33n1W7f7MW42RCRpoy1A1De6ke Cykg9YUwIH2653wthXojUT9QFE+dktD9E4mpBGRfKcumUM6i5oOe5RalvjFl2Ta4 GRjFXcMljptaXuSeQlH+CRfiAmQk12LDBtg8tqysdiTUYlJDfnvTHkEW0+0eMX0s BQNSLfdMB1PVhPy8GTBbvoxhsVCduk5/BpbTK1SNVz7UYUCWlJxkWUEcq03F3gCK WEfLEjlPoZ/Bd51bCY3fInzqnLaOlQMndlIVLyYoX1Wv9zOB1D23Vq4K3hUXGBP/ +DI0D/Z6XkIGh6uptZrmO2QGEv7AYQcGZ3VsA5lCXw/fLnO7Nps= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:34 2025 by rpki-client