This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: gjR8v1+eSdk22TamEMMLfFQLU376gZVuzIkz4IZjnGA= Subject key identifier: AA:74:A0:8B:53:38:ED:4F:99:72:12:69:94:72:02:54:F3:02:84:85 Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 0ECAEC2C08DE7C7A1EED98768ACE5B5EA10137CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 020C Signing time: Wed 03 Dec 2025 09:40:57 +0000 Manifest this update: Wed 03 Dec 2025 09:35:57 +0000 Manifest next update: Sat 06 Dec 2025 15:54:57 +0000 Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: HvzvMBj5qU+NExWSjTWqrdpmvH/WBtBrlcSKkhbhERc=) 2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: GJQ3NUFsB2nVnSk1uRZagjtzrc7ng31cjwY1HHOp2FQ=) 3: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: 3H1O/qahzeFE+XwnWfIlL/TBSGBNyUlRHwjSJmT/ykU=) 4: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: NAFqFIaSAImXyE9eWh33YjJ4/n4BJqvDNhOBlZ2+l28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ca:ec:2c:08:de:7c:7a:1e:ed:98:76:8a:ce:5b:5e:a1:01:37:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Dec 3 09:35:57 2025 GMT Not After : Dec 6 15:54:57 2025 GMT Subject: CN=AA74A08B5338ED4F9972126994720254F3028485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:46:34:20:b7:ba:44:e3:bb:fc:7b:90:5b: ed:1a:94:dd:26:c9:b9:0c:b1:b5:bd:c5:45:da:cb: b0:ee:3a:f6:06:8e:2a:79:db:6b:66:7f:cb:29:f7: 88:26:d0:40:5d:0f:81:c5:1f:41:29:33:4b:5d:f7: da:00:f7:1e:23:99:c2:4b:ff:d1:d9:d8:39:2e:73: 5a:e7:60:85:66:6d:a5:5f:0e:94:6e:82:a1:92:bc: 63:0b:2c:b7:07:a0:de:07:ae:63:cf:e6:db:d2:30: ff:52:94:a3:78:9f:5d:bf:ca:2c:e0:bc:7b:d5:f6: 11:7a:11:27:b7:36:fd:35:50:49:d0:ad:83:6d:78: a8:15:c2:c9:50:8d:b4:53:bc:1b:ad:d2:8f:df:ac: fc:7a:8a:ba:2a:26:f3:38:f0:d0:92:14:d7:a9:31: 80:5e:4b:a8:1d:de:e0:03:4b:01:40:b3:bd:00:91: c1:22:52:c2:c2:f6:73:ae:43:e4:45:6b:38:25:59: b3:37:d8:d9:c6:75:a5:8a:b5:b8:4e:4f:34:e8:2e: bc:f7:af:60:99:ef:51:d5:8b:e6:86:b3:66:3e:77: 17:e5:87:e1:43:b1:c6:d7:d9:62:5b:5d:52:ec:ab: f9:68:ae:ce:33:dd:a9:2c:77:25:a7:07:57:1f:90: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:A0:8B:53:38:ED:4F:99:72:12:69:94:72:02:54:F3:02:84:85 X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:62:2a:8a:6b:2a:4c:a4:40:17:dd:64:d7:78:55:26:9d:25: 1a:1e:9a:0b:22:bb:6e:37:51:f3:14:58:29:7a:a7:c8:c2:7a: c9:98:ee:0d:7c:dc:b2:05:85:b7:3c:0d:52:89:d4:1b:73:2f: 25:96:98:76:f0:13:82:3a:15:bf:e9:4e:8b:6e:4e:b0:7f:9d: fd:fb:cc:b2:06:af:c9:53:73:ef:02:55:d0:b3:10:ef:db:d9: 42:34:f7:42:eb:d8:e9:ad:e3:8b:71:75:13:fe:3d:c5:f1:b1: 70:b9:12:11:8d:3a:ba:ed:ce:80:cb:3b:d7:72:ff:99:68:7f: 92:83:46:b8:65:6f:9a:78:1b:c1:99:48:88:d6:aa:50:63:e0: 06:94:a0:6e:bf:ef:82:92:e6:83:62:8d:91:1e:6c:43:4f:87: 69:95:d1:83:63:d9:4c:7d:48:9d:ad:47:d1:c4:06:97:ff:bd: 00:a5:18:e5:84:0b:3c:37:85:15:20:80:bf:3e:a6:85:63:da: 98:5f:a4:e4:36:75:1f:d5:da:76:14:4c:10:92:10:94:d4:93: 48:fb:3f:4b:0d:79:ff:ca:c9:79:3d:71:9d:7b:b7:e8:85:bb: a1:89:63:f1:48:46:cc:f0:ed:6b:d4:37:4f:d0:22:ab:ab:a7: d0:48:f0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsrsLAjefHoe7Zh2is5bXqEBN84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNTEyMDMwOTM1NTdaFw0yNTEyMDYxNTU0NTdaMDMxMTAvBgNV BAMTKEFBNzRBMDhCNTMzOEVENEY5OTcyMTI2OTk0NzIwMjU0RjMwMjg0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VEY0ILe6ROO7/HuQW+0alN0m ybkMsbW9xUXay7DuOvYGjip522tmf8sp94gm0EBdD4HFH0EpM0td99oA9x4jmcJL /9HZ2Dkuc1rnYIVmbaVfDpRugqGSvGMLLLcHoN4HrmPP5tvSMP9SlKN4n12/yizg vHvV9hF6ESe3Nv01UEnQrYNteKgVwslQjbRTvBut0o/frPx6iroqJvM48NCSFNep MYBeS6gd3uADSwFAs70AkcEiUsLC9nOuQ+RFazglWbM32NnGdaWKtbhOTzToLrz3 r2CZ71HVi+aGs2Y+dxflh+FDscbX2WJbXVLsq/lors4z3aksdyWnB1cfkEBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnSgi1M47U+ZchJplHICVPMChIUwHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1iKoprKkykQBfdZNd4VSadJRoemgsiu243 UfMUWCl6p8jCesmY7g183LIFhbc8DVKJ1BtzLyWWmHbwE4I6Fb/pTotuTrB/nf37 zLIGr8lTc+8CVdCzEO/b2UI090Lr2Omt44txdRP+PcXxsXC5EhGNOrrtzoDLO9dy /5lof5KDRrhlb5p4G8GZSIjWqlBj4AaUoG6/74KS5oNijZEebENPh2mV0YNj2Ux9 SJ2tR9HEBpf/vQClGOWECzw3hRUggL8+poVj2phfpOQ2dR/V2nYUTBCSEJTUk0j7 P0sNef/KyXk9cZ17t+iFu6GJY/FIRszw7WvUN0/QIqurp9BI8Dc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:22 2025 by rpki-client