This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: FJZqb2Y9/g0lzLuJOHzUH0Mzh8FvS0oRD7KkhC4gq+8= Subject key identifier: 96:BD:A8:B6:F3:7E:1F:7E:92:7B:2F:01:5B:11:FF:12:EE:3D:5B:DC Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 27421EFA66ACF89A4E97D3A2341842DBE5C65441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 025B Signing time: Sat 13 Dec 2025 15:02:14 +0000 Manifest this update: Sat 13 Dec 2025 14:57:14 +0000 Manifest next update: Tue 16 Dec 2025 19:13:14 +0000 Files and hashes: 1: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 2: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 3: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=) 5: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 6: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 7: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 9: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 10: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: zpUTM9uDyFu0KfUSHY+VvyJRd/siBMzgxbOIaybr4sw=) 11: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 12: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 13: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 19:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:42:1e:fa:66:ac:f8:9a:4e:97:d3:a2:34:18:42:db:e5:c6:54:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Dec 13 14:57:14 2025 GMT Not After : Dec 16 19:13:14 2025 GMT Subject: CN=96BDA8B6F37E1F7E927B2F015B11FF12EE3D5BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:a4:9a:85:d3:32:9b:59:88:2e:08:9f:80: 84:ed:0e:28:b9:bd:e7:08:27:60:cc:e2:1e:42:91: 6d:f1:cd:d4:3f:b1:fa:ed:cd:bc:cc:75:a9:cc:21: 2d:82:41:e2:61:ea:68:52:45:5c:94:da:1d:39:48: fd:74:b8:2f:26:99:20:69:8f:cb:7f:80:04:b1:33: a6:f8:09:9a:79:02:79:e7:12:9d:c2:5e:25:80:30: df:6f:dd:24:a5:a7:68:19:2e:09:a7:24:1b:51:29: 39:bc:08:87:4a:28:d5:b5:59:13:2a:0b:ca:4f:8e: cb:e5:9b:bb:9f:1b:71:71:e6:24:62:8a:d2:47:3f: 9f:a2:cf:eb:21:67:41:8f:4c:6d:2e:67:1f:5d:2f: b9:6e:95:93:96:7f:5e:57:cc:6c:c1:ff:6e:5c:a9: 23:1b:dc:94:7d:92:cc:5a:f6:1e:c6:ff:eb:2a:1f: b5:91:dc:3b:2e:bc:af:9a:85:a7:7a:3e:1c:c7:81: 9b:1d:bd:a9:7e:36:d7:35:58:00:cf:90:76:e1:1f: bb:38:a8:58:2e:39:2d:01:26:fe:7d:94:13:28:aa: 59:5b:20:49:33:ee:e6:e9:1a:52:49:2d:33:ec:6a: ea:50:c3:39:de:ce:86:6c:be:44:ae:5d:d8:1c:3c: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BD:A8:B6:F3:7E:1F:7E:92:7B:2F:01:5B:11:FF:12:EE:3D:5B:DC X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:5b:95:b2:12:eb:52:a8:4b:b4:05:4d:77:34:ce:59:98: 0e:76:21:4c:0d:45:e5:90:dd:5e:a1:e3:61:b7:25:38:a8:86: d2:59:88:ae:cb:b5:2c:37:3c:32:bb:eb:3f:17:5d:24:14:6b: df:01:fd:89:ed:72:32:7f:f4:ef:b6:59:10:3a:3d:38:32:93: ef:f2:39:a9:16:cb:e2:c3:e5:4c:4d:cd:ef:a9:cc:57:45:58: 72:b6:e5:34:82:71:a7:61:c9:57:15:7b:9d:de:c9:a7:0d:1f: d5:2b:4b:e1:49:1d:22:b5:24:cf:2b:e2:9b:20:da:4f:6c:5e: 5f:1a:81:30:f4:97:84:42:88:07:29:e2:b5:f7:8a:d8:fc:e1: 7f:9a:87:22:25:47:fc:84:3d:f7:5e:5a:f1:8a:4d:80:45:b4: 3f:d4:1e:13:85:37:b6:a3:97:2c:d8:3a:07:35:11:4a:8d:c7: 51:0f:02:ba:56:ea:b6:a2:ff:41:4a:ae:ca:14:ca:28:44:44: ed:a8:09:ee:97:3d:d7:63:7b:bc:b1:1a:7b:6b:22:fa:74:c7: 4c:50:b6:b9:d9:36:2e:44:5a:6b:ec:6e:96:9d:f3:fa:f4:03: c1:03:42:e8:e9:a0:eb:fa:5a:da:24:bf:c4:2d:a4:2a:69:67: 66:5c:6f:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0Ie+mas+JpOl9OiNBhC2+XGVEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTEyMTMxNDU3MTRaFw0yNTEyMTYxOTEzMTRaMDMxMTAvBgNV BAMTKDk2QkRBOEI2RjM3RTFGN0U5MjdCMkYwMTVCMTFGRjEyRUUzRDVCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlKSahdMym1mILgifgITtDii5 vecIJ2DM4h5CkW3xzdQ/sfrtzbzMdanMIS2CQeJh6mhSRVyU2h05SP10uC8mmSBp j8t/gASxM6b4CZp5AnnnEp3CXiWAMN9v3SSlp2gZLgmnJBtRKTm8CIdKKNW1WRMq C8pPjsvlm7ufG3Fx5iRiitJHP5+iz+shZ0GPTG0uZx9dL7lulZOWf15XzGzB/25c qSMb3JR9ksxa9h7G/+sqH7WR3DsuvK+ahad6PhzHgZsdval+Ntc1WADPkHbhH7s4 qFguOS0BJv59lBMoqllbIEkz7ubpGlJJLTPsaupQwznezoZsvkSuXdgcPIjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlr2otvN+H36Sey8BWxH/Eu49W9wwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR9W5WyEutSqEu0BU13NM5ZmA52IUwNReWQ 3V6h42G3JTiohtJZiK7LtSw3PDK76z8XXSQUa98B/YntcjJ/9O+2WRA6PTgyk+/y OakWy+LD5UxNze+pzFdFWHK25TSCcadhyVcVe53eyacNH9UrS+FJHSK1JM8r4psg 2k9sXl8agTD0l4RCiAcp4rX3itj84X+ahyIlR/yEPfdeWvGKTYBFtD/UHhOFN7aj lyzYOgc1EUqNx1EPArpW6rai/0FKrsoUyihERO2oCe6XPddje7yxGntrIvp0x0xQ trnZNi5EWmvsbpad8/r0A8EDQujpoOv6Wtokv8QtpCppZ2Zcb98= -----END CERTIFICATE-----Generated at Sun Dec 14 16:59:13 2025 by rpki-client