This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: Efl4KmLbD8QrzQkx/FpSmlxMypPCU27WsClrlvEvqPs= Subject key identifier: 09:89:4B:34:30:C1:A4:B9:36:B1:03:32:FE:53:95:38:C4:99:E8:33 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 5607BA02C8FF8B8BDFF56443D501F80821F57751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01FD Signing time: Wed 03 Dec 2025 01:50:05 +0000 Manifest this update: Wed 03 Dec 2025 01:45:05 +0000 Manifest next update: Sat 06 Dec 2025 02:12:05 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: YN9Uq1ZcHZ4ZrhE5FTH57r+AFi8ic2Z0gzfqlUh0R3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:07:ba:02:c8:ff:8b:8b:df:f5:64:43:d5:01:f8:08:21:f5:77:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Dec 3 01:45:05 2025 GMT Not After : Dec 6 02:12:05 2025 GMT Subject: CN=09894B3430C1A4B936B10332FE539538C499E833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:77:ef:42:6f:62:18:55:f9:17:1b:eb:9a: 8f:44:6c:f7:fb:65:e7:de:12:60:e9:b4:65:7f:34: ab:17:27:1a:10:d3:0a:0b:1a:60:4d:2b:62:a1:c8: 58:a8:41:36:16:c6:0f:31:12:d9:e6:81:99:2e:6d: 9e:7a:9e:07:a6:18:a5:c1:de:3e:75:2d:4d:1d:78: 01:2b:2a:b0:93:4e:ef:fa:76:9e:c4:06:72:fd:95: e0:ae:1e:1d:6d:ac:cd:29:ae:0c:88:72:a6:14:c4: f1:61:4a:c3:9a:ad:2b:19:67:d2:e3:b4:79:16:50: 3b:e1:9a:08:7e:b2:5c:36:7d:85:d4:10:29:3b:81: a3:39:eb:80:da:d1:4a:4f:05:c4:8a:27:0d:42:cb: 34:bd:85:67:8a:36:1b:4c:df:26:2e:b8:ad:5d:e0: 1c:50:89:c4:05:2d:da:96:14:cd:c6:bf:1c:21:20: 39:b5:68:7e:e3:84:11:33:12:c8:ca:d1:b9:80:0c: 3c:c9:1f:7f:2d:c0:a7:47:33:17:67:bf:36:67:98: 50:bc:d9:ae:02:e7:28:f2:60:09:92:5f:42:2a:9b: cf:a6:1a:14:e7:74:69:6f:13:bd:d6:52:05:da:ca: e9:05:c5:36:20:01:6c:9f:6c:13:db:3f:0e:e9:6a: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:4B:34:30:C1:A4:B9:36:B1:03:32:FE:53:95:38:C4:99:E8:33 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:46:18:8a:39:a5:c0:ca:aa:a3:29:fd:50:44:8a:25:5e:e8: 49:16:4c:c6:f5:4b:20:5f:29:90:65:17:6d:25:a3:7a:fe:6f: 4b:b4:fe:84:dd:a3:98:be:0d:7e:96:36:49:59:6a:c0:59:74: 74:40:22:99:31:54:47:aa:90:61:76:8a:c6:8e:0d:f7:b5:8b: ef:63:64:df:dd:37:ee:2a:a7:9c:24:09:63:be:e5:16:b1:89: 52:26:4a:e9:6c:dc:1a:95:40:52:11:7e:b8:20:75:a3:6e:32: bc:d6:45:89:93:a3:8a:0b:1a:84:21:24:78:74:bf:06:5c:7e: 42:1e:6f:49:4b:b5:0b:44:f9:58:9c:99:73:2e:74:a4:3c:b4: ee:b5:a1:02:60:a3:dc:8c:42:d6:84:43:22:8c:f6:4d:e7:8d: 6a:b2:d5:4b:ab:3d:c9:03:6f:83:1b:55:a1:89:09:ae:b1:0a: f0:75:1f:53:ae:e8:5e:78:fc:54:06:77:53:9d:48:bd:92:b2: cc:0d:76:ee:53:66:5d:aa:b0:eb:d7:d3:2d:a9:21:6c:8a:5a: 6e:f4:15:c5:de:44:30:73:71:b2:c9:bb:4b:b0:2b:c9:3c:e8: 9c:b3:ad:95:c9:5c:1f:48:15:39:b3:05:99:9f:88:8a:97:7f: 5a:2c:e0:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVge6Asj/i4vf9WRD1QH4CCH1d1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTEyMDMwMTQ1MDVaFw0yNTEyMDYwMjEyMDVaMDMxMTAvBgNV BAMTKDA5ODk0QjM0MzBDMUE0QjkzNkIxMDMzMkZFNTM5NTM4QzQ5OUU4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKHfvQm9iGFX5Fxvrmo9EbPf7 ZefeEmDptGV/NKsXJxoQ0woLGmBNK2KhyFioQTYWxg8xEtnmgZkubZ56ngemGKXB 3j51LU0deAErKrCTTu/6dp7EBnL9leCuHh1trM0prgyIcqYUxPFhSsOarSsZZ9Lj tHkWUDvhmgh+slw2fYXUECk7gaM564Da0UpPBcSKJw1CyzS9hWeKNhtM3yYuuK1d 4BxQicQFLdqWFM3GvxwhIDm1aH7jhBEzEsjK0bmADDzJH38twKdHMxdnvzZnmFC8 2a4C5yjyYAmSX0Iqm8+mGhTndGlvE73WUgXayukFxTYgAWyfbBPbPw7pao5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYlLNDDBpLk2sQMy/lOVOMSZ6DMwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBGGIo5pcDKqqMp/VBEiiVe6EkWTMb1SyBf KZBlF20lo3r+b0u0/oTdo5i+DX6WNklZasBZdHRAIpkxVEeqkGF2isaODfe1i+9j ZN/dN+4qp5wkCWO+5RaxiVImSuls3BqVQFIRfrggdaNuMrzWRYmTo4oLGoQhJHh0 vwZcfkIeb0lLtQtE+VicmXMudKQ8tO61oQJgo9yMQtaEQyKM9k3njWqy1UurPckD b4MbVaGJCa6xCvB1H1Ou6F54/FQGd1OdSL2SsswNdu5TZl2qsOvX0y2pIWyKWm70 FcXeRDBzcbLJu0uwK8k86JyzrZXJXB9IFTmzBZmfiIqXf1os4HY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:25 2025 by rpki-client