This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: 2KV2eSky0RYsi/1eHf1/r2cZyeDOi5pJMFrJVE6CKs4= Subject key identifier: 5D:97:97:DD:08:5B:97:2D:F4:20:18:F5:5D:EA:56:36:FB:6B:BA:01 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 1A00886A011481AA07FFCACED790334E2AA238D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0130 Signing time: Mon 01 Dec 2025 09:10:47 +0000 Manifest this update: Mon 01 Dec 2025 09:05:47 +0000 Manifest next update: Thu 04 Dec 2025 20:42:47 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: utLityHr0cnKXRglKv5oR1F6BWcYD2BsvD1YvckHZTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:00:88:6a:01:14:81:aa:07:ff:ca:ce:d7:90:33:4e:2a:a2:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Dec 1 09:05:47 2025 GMT Not After : Dec 4 20:42:47 2025 GMT Subject: CN=5D9797DD085B972DF42018F55DEA5636FB6BBA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:50:c2:a2:12:73:1a:0c:67:5b:7d:f0:49: d2:f4:62:ff:8a:65:f8:cd:19:ec:b8:3c:b9:07:3e: 2b:ea:42:23:21:60:b2:2c:fb:5f:3a:4c:51:65:c1: a5:86:64:b6:48:aa:59:6a:40:92:61:e3:47:70:76: cc:32:9b:6f:95:8b:dd:27:57:c1:7b:ee:44:c8:7f: 69:8d:69:8c:57:10:1b:0a:ab:d6:e9:7a:a2:ec:fa: 69:95:a7:7d:e5:c3:8c:eb:2a:44:29:fe:96:9c:1e: ce:44:f8:89:66:a3:f3:15:a4:d7:32:67:1a:16:b9: 4f:e0:24:3a:62:b8:ce:44:40:0a:24:e1:fd:52:3a: e9:cd:fe:65:b0:a9:5d:5a:6f:a0:7d:e1:99:02:ce: 72:bb:23:cf:f3:ed:4f:93:27:9e:70:f6:30:60:44: 0e:25:c2:98:3a:6c:a3:43:6e:fb:f1:f9:29:72:17: 3d:f9:97:d3:c6:1f:0c:d5:5a:9b:39:15:f7:28:e8: 02:f3:5a:05:20:d1:3c:a0:af:69:25:8b:6a:40:d5: f2:4c:9f:a4:8d:2d:e3:85:89:4a:2d:ea:73:88:50: 9b:1b:01:3d:cb:5b:76:0d:31:e9:fa:c2:a9:fb:3e: 4b:d2:53:16:a2:0b:f9:f1:9c:c5:5b:c0:b1:91:cf: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:97:DD:08:5B:97:2D:F4:20:18:F5:5D:EA:56:36:FB:6B:BA:01 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:89:d8:a6:df:8d:4c:ad:d5:38:1f:35:1c:42:e1:ca:3a: ad:6b:a8:da:be:d7:cc:c0:7d:aa:86:57:2f:21:5f:9b:5f:a3: aa:3f:0c:f7:38:c1:2f:f9:9e:f8:c8:f3:1c:93:8f:4a:17:c1: 70:0e:96:16:83:8f:9f:95:00:d2:5f:f5:ef:bc:75:f6:e0:8e: 9c:99:41:04:4e:f6:28:83:27:76:46:55:a1:f2:85:14:0e:f4: 76:e2:32:c9:f7:26:58:c9:49:19:00:51:fa:5b:63:ff:bb:25: 9e:20:b5:25:51:9d:38:65:a9:43:49:f2:8e:fd:4a:0f:92:37: b2:dc:6a:36:42:85:31:09:83:f7:40:20:36:46:8e:68:69:b4: 18:7d:c6:d4:d8:64:23:af:1d:5b:5f:4d:b2:0a:78:ba:0e:4c: fb:b2:7d:9f:be:b8:85:fe:94:22:c2:e8:bf:cd:82:cd:19:e9: 56:19:1d:65:65:4c:ab:5e:bb:2b:c9:d4:31:7d:59:25:43:e2: 51:75:3f:90:04:19:36:1f:53:88:ec:84:d0:5d:0b:d6:f6:c7: 1a:0e:67:26:42:4b:11:99:80:9b:c3:ad:b0:38:b3:0d:94:b8: 99:39:4b:4c:02:63:a0:1c:ef:22:51:30:85:4f:a1:2a:f5:8d: cc:31:13:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgCIagEUgaoH/8rO15AzTiqiONQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTEyMDEwOTA1NDdaFw0yNTEyMDQyMDQyNDdaMDMxMTAvBgNV BAMTKDVEOTc5N0REMDg1Qjk3MkRGNDIwMThGNTVERUE1NjM2RkI2QkJBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvt1DCohJzGgxnW33wSdL0Yv+K ZfjNGey4PLkHPivqQiMhYLIs+186TFFlwaWGZLZIqllqQJJh40dwdswym2+Vi90n V8F77kTIf2mNaYxXEBsKq9bpeqLs+mmVp33lw4zrKkQp/pacHs5E+Ilmo/MVpNcy ZxoWuU/gJDpiuM5EQAok4f1SOunN/mWwqV1ab6B94ZkCznK7I8/z7U+TJ55w9jBg RA4lwpg6bKNDbvvx+SlyFz35l9PGHwzVWps5Ffco6ALzWgUg0Tygr2kli2pA1fJM n6SNLeOFiUot6nOIUJsbAT3LW3YNMen6wqn7PkvSUxaiC/nxnMVbwLGRz+C3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZeX3Qhbly30IBj1XepWNvtrugEwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfKidim341MrdU4HzUcQuHKOq1rqNq+18zA faqGVy8hX5tfo6o/DPc4wS/5nvjI8xyTj0oXwXAOlhaDj5+VANJf9e+8dfbgjpyZ QQRO9iiDJ3ZGVaHyhRQO9HbiMsn3JljJSRkAUfpbY/+7JZ4gtSVRnThlqUNJ8o79 Sg+SN7LcajZChTEJg/dAIDZGjmhptBh9xtTYZCOvHVtfTbIKeLoOTPuyfZ++uIX+ lCLC6L/Ngs0Z6VYZHWVlTKteuyvJ1DF9WSVD4lF1P5AEGTYfU4jshNBdC9b2xxoO ZyZCSxGZgJvDrbA4sw2UuJk5S0wCY6Ac7yJRMIVPoSr1jcwxEy8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:51:36 2025 by rpki-client