This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: iHEnOFS7EowkLQ2jiDluRz6TTrCGuSy9/qRfXfoAUaU= Subject key identifier: 91:E4:2D:BB:18:F8:41:DB:AC:F0:79:21:90:5E:10:01:36:30:30:1F Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 03FF2F12CFE4CBC91AAD15B6886C5FC79C057EE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04FD Signing time: Mon 01 Dec 2025 06:40:53 +0000 Manifest this update: Mon 01 Dec 2025 06:35:53 +0000 Manifest next update: Thu 04 Dec 2025 13:39:53 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: bzSsz2Yb+5dNlvtvkioSOv3+BE1e0JvapRWmKnxuVu4=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ff:2f:12:cf:e4:cb:c9:1a:ad:15:b6:88:6c:5f:c7:9c:05:7e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Dec 1 06:35:53 2025 GMT Not After : Dec 4 13:39:53 2025 GMT Subject: CN=91E42DBB18F841DBACF07921905E10013630301F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:89:7e:39:93:5f:4c:b2:ba:70:93:4e:6a: 03:9d:fa:e5:86:bd:1c:db:c5:36:4d:af:be:60:78: ec:c0:e7:df:a8:c4:68:04:d6:b2:a4:e7:5d:e7:a6: ca:c8:1d:56:8c:1b:94:2f:db:05:f0:be:71:2d:6e: 02:6f:76:b4:56:3d:16:5e:11:f6:e0:bd:3d:53:d6: 0b:66:04:c5:c5:31:36:f0:78:00:f7:3c:ef:44:12: 1b:fd:20:3d:5b:a4:3b:97:a7:a9:ee:06:75:01:0e: 56:2d:47:25:2d:b0:0c:d2:e1:da:57:da:4e:63:37: eb:d1:a3:bf:88:fb:b1:c5:85:ba:fc:b6:ad:ea:14: 6f:22:fd:22:16:11:0f:8d:d1:6f:48:3b:3e:be:ba: ff:5a:aa:34:94:d9:38:e6:b8:2d:45:87:6e:51:31: d5:fc:43:cf:40:f6:60:e4:02:6b:8f:bf:2f:1e:0e: 3e:da:6e:a0:41:31:3a:28:3e:4c:2b:a3:03:34:ce: 01:ec:b7:b4:c2:3a:c2:ae:c7:df:f4:2a:52:9f:a9: 19:f3:ee:e2:be:5c:a7:3b:e1:e0:9b:69:79:66:69: 41:f9:ed:b4:46:63:0d:ff:70:5b:7f:28:a6:53:8f: b2:bf:0e:ae:36:b5:58:42:48:d2:f0:a2:af:b3:30: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:2D:BB:18:F8:41:DB:AC:F0:79:21:90:5E:10:01:36:30:30:1F X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:3c:b3:a0:2a:07:17:08:52:e8:4d:59:0e:e2:73:a2:71:cc: 20:02:31:c3:e3:34:5e:a0:5f:83:03:26:94:40:7c:f7:81:78: ef:e5:b7:1b:63:e2:ec:0d:31:fc:19:3c:93:12:50:f5:e7:f6: 0c:db:01:f3:a2:11:d1:2c:54:12:22:d1:ad:eb:f3:fe:14:15: 46:ef:73:6f:b9:b7:3f:4b:e1:bc:77:95:de:5b:60:ea:13:a7: e0:33:78:b4:01:1b:c5:2c:2e:cb:d8:7c:68:49:e6:d7:13:f9: 26:6f:16:69:82:e8:dc:18:52:e3:7f:29:38:f4:cd:9f:ec:9e: ce:4f:88:d8:a3:89:cb:3c:9a:cc:7f:f0:c9:d9:9d:af:49:73: c0:41:e1:0e:fc:3f:1b:c6:33:a5:2d:06:85:7f:1e:a3:a3:63: 28:23:92:e8:40:f4:a1:67:c4:37:9b:56:57:e1:22:4b:3c:06: 8b:97:33:a0:1c:23:c3:71:84:03:a2:7f:33:cb:d6:08:eb:08: 9f:5f:17:04:6d:d3:57:8f:ce:c2:60:db:03:ae:20:3f:f9:a3: 37:e9:d2:82:29:ce:fd:61:05:e4:07:ec:aa:44:60:50:83:0b: 93:56:0a:2d:97:de:ed:24:54:a5:70:e2:ea:fe:3c:8c:f7:d2: 7e:b2:97:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/8vEs/ky8karRW2iGxfx5wFfuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTEyMDEwNjM1NTNaFw0yNTEyMDQxMzM5NTNaMDMxMTAvBgNV BAMTKDkxRTQyREJCMThGODQxREJBQ0YwNzkyMTkwNUUxMDAxMzYzMDMwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGol+OZNfTLK6cJNOagOd+uWG vRzbxTZNr75geOzA59+oxGgE1rKk513npsrIHVaMG5Qv2wXwvnEtbgJvdrRWPRZe EfbgvT1T1gtmBMXFMTbweAD3PO9EEhv9ID1bpDuXp6nuBnUBDlYtRyUtsAzS4dpX 2k5jN+vRo7+I+7HFhbr8tq3qFG8i/SIWEQ+N0W9IOz6+uv9aqjSU2TjmuC1Fh25R MdX8Q89A9mDkAmuPvy8eDj7abqBBMTooPkwrowM0zgHst7TCOsKux9/0KlKfqRnz 7uK+XKc74eCbaXlmaUH57bRGYw3/cFt/KKZTj7K/Dq42tVhCSNLwoq+zMJhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeQtuxj4Qdus8HkhkF4QATYwMB8wHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANg8s6AqBxcIUuhNWQ7ic6JxzCACMcPjNF6g X4MDJpRAfPeBeO/ltxtj4uwNMfwZPJMSUPXn9gzbAfOiEdEsVBIi0a3r8/4UFUbv c2+5tz9L4bx3ld5bYOoTp+AzeLQBG8UsLsvYfGhJ5tcT+SZvFmmC6NwYUuN/KTj0 zZ/sns5PiNijics8msx/8MnZna9Jc8BB4Q78PxvGM6UtBoV/HqOjYygjkuhA9KFn xDebVlfhIks8BouXM6AcI8NxhAOifzPL1gjrCJ9fFwRt01ePzsJg2wOuID/5ozfp 0oIpzv1hBeQH7KpEYFCDC5NWCi2X3u0kVKVw4ur+PIz30n6yl+w= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:24 2025 by rpki-client