This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: oiWbGkShHVOTO6LFkLGDQRhotXPvNagClhjIx/yqeYs= Subject key identifier: 84:5C:77:BF:E6:E4:8D:D0:CF:57:E7:4B:05:3E:AE:2B:A8:6D:EC:B8 Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 539733C1F027CFB7BE2CAB8FB0A4F6AE660F58E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 0136 Signing time: Tue 02 Dec 2025 04:11:22 +0000 Manifest this update: Tue 02 Dec 2025 04:06:22 +0000 Manifest next update: Fri 05 Dec 2025 14:54:22 +0000 Files and hashes: 1: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=) 2: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: fcE9nxP4F/tonEL2jLycsAVcDyzYWrh05xw29/4haAg=) 3: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: WyVvseBUv5X8ksDjsVqSJfve5PyMPgdJn+/FGNUqcmk=) 4: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: 7v3pbNI4DAkmHKot7mgbUnnkw9s9ia2c5swTux/d7l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:97:33:c1:f0:27:cf:b7:be:2c:ab:8f:b0:a4:f6:ae:66:0f:58:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Dec 2 04:06:22 2025 GMT Not After : Dec 5 14:54:22 2025 GMT Subject: CN=845C77BFE6E48DD0CF57E74B053EAE2BA86DECB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:6c:be:36:0f:86:bf:b1:eb:36:b0:8f:7c: 9e:af:31:19:9a:96:9e:8f:a2:5e:4f:7f:d7:ca:2d: 3b:93:d3:3e:04:9a:8a:7f:3c:04:16:1f:69:20:79: 39:9d:fc:58:2b:cd:b5:18:dc:60:39:1c:ff:3b:d4: d0:dc:60:be:e9:99:f4:68:14:10:2a:ec:9b:0c:b8: 42:54:5d:18:84:58:41:15:84:cb:6f:2c:10:c1:c1: 7c:84:b3:e3:25:fb:d5:38:ef:ca:e8:b4:f2:75:79: cc:08:4c:03:7a:2a:7e:4f:b0:f6:a0:11:77:35:d3: 2d:18:db:e4:b0:a4:a5:03:c4:e8:03:da:78:a6:75: 57:10:22:ae:60:69:30:f3:d5:22:f3:f3:ce:3e:35: 6c:a2:13:bd:af:13:ff:9d:fd:4e:85:2a:55:6d:4d: f5:2f:26:15:11:47:2a:e4:89:2a:f8:0f:55:0c:74: 8b:8f:72:b3:05:79:90:61:43:96:9a:cf:76:f5:af: 22:d1:92:f7:92:f2:db:68:27:3e:0e:f7:34:44:e8: 04:05:61:5f:43:06:d4:13:cf:1e:8a:9d:ce:11:9b: a5:8d:d4:49:3a:fb:8e:0b:f7:cc:b3:2f:65:03:ad: f4:3c:0a:61:9a:36:b3:18:bb:63:73:9f:c2:78:e8: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:77:BF:E6:E4:8D:D0:CF:57:E7:4B:05:3E:AE:2B:A8:6D:EC:B8 X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6a:89:d1:d3:a0:d0:22:81:1b:77:8c:d9:a6:d4:fa:4b:d6: af:28:b1:84:56:7e:70:b1:eb:fa:cc:07:81:ea:0e:33:46:98: 36:e4:9a:59:2a:f7:42:17:27:b3:ef:7b:d2:2f:c2:bf:b1:9a: 3e:4b:99:7f:65:56:99:2e:4f:66:02:94:2f:cc:d6:8e:c2:54: 41:32:d0:dd:fa:d9:cf:b5:48:a1:e7:dd:a7:49:cb:2d:e9:08: 33:b5:ae:e8:49:a8:7a:42:a9:34:db:fd:03:ea:e4:ba:ad:32: 6a:34:0f:cb:b7:2d:c4:dd:49:1f:f9:f3:89:eb:f1:01:5d:12: c4:0c:ba:47:d7:a3:b0:64:80:30:e6:b6:2d:2c:03:6f:f3:c8: b0:09:fc:fd:c6:a8:26:93:2f:3f:ef:06:b8:d8:a5:e5:83:c7: e0:79:07:79:3b:62:21:f6:0b:62:ba:ff:cf:22:8d:e9:26:7d: ff:a1:85:30:19:c2:18:72:aa:1d:8f:84:d3:2e:51:83:94:f0: 0c:a8:71:f3:6a:c6:91:8f:f5:be:5d:5b:52:bd:96:fc:44:48: 1f:dc:46:d5:74:4e:98:80:99:f7:f2:12:ef:43:83:f3:38:9d: 23:c6:5b:55:df:b6:ce:cc:fb:18:78:d7:da:3a:e7:12:4c:86: c5:80:b7:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5czwfAnz7e+LKuPsKT2rmYPWOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNTEyMDIwNDA2MjJaFw0yNTEyMDUxNDU0MjJaMDMxMTAvBgNV BAMTKDg0NUM3N0JGRTZFNDhERDBDRjU3RTc0QjA1M0VBRTJCQTg2REVDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hGy+Ng+Gv7HrNrCPfJ6vMRma lp6Pol5Pf9fKLTuT0z4Emop/PAQWH2kgeTmd/FgrzbUY3GA5HP871NDcYL7pmfRo FBAq7JsMuEJUXRiEWEEVhMtvLBDBwXyEs+Ml+9U478rotPJ1ecwITAN6Kn5PsPag EXc10y0Y2+SwpKUDxOgD2nimdVcQIq5gaTDz1SLz884+NWyiE72vE/+d/U6FKlVt TfUvJhURRyrkiSr4D1UMdIuPcrMFeZBhQ5aaz3b1ryLRkveS8ttoJz4O9zRE6AQF YV9DBtQTzx6Knc4Rm6WN1Ek6+44L98yzL2UDrfQ8CmGaNrMYu2Nzn8J46GwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhFx3v+bkjdDPV+dLBT6uK6ht7LgwHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1qidHToNAigRt3jNmm1PpL1q8osYRWfnCx 6/rMB4HqDjNGmDbkmlkq90IXJ7Pve9Ivwr+xmj5LmX9lVpkuT2YClC/M1o7CVEEy 0N362c+1SKHn3adJyy3pCDO1ruhJqHpCqTTb/QPq5LqtMmo0D8u3LcTdSR/584nr 8QFdEsQMukfXo7BkgDDmti0sA2/zyLAJ/P3GqCaTLz/vBrjYpeWDx+B5B3k7YiH2 C2K6/88ijekmff+hhTAZwhhyqh2PhNMuUYOU8AyocfNqxpGP9b5dW1K9lvxESB/c RtV0TpiAmffyEu9Dg/M4nSPGW1Xfts7M+xh419o65xJMhsWAt2s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:47 2025 by rpki-client