This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: Pt1DT26GOouWSU7STdHGXNm2Q2tixJxBEIC6evIrVhQ= Subject key identifier: 37:9F:D0:F7:BE:B8:5A:E6:F0:1A:03:5E:78:4C:07:60:68:1D:00:62 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 6901D4B94577C90B4B494A1A63C446676A691903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 0231 Signing time: Tue 02 Dec 2025 02:32:03 +0000 Manifest this update: Tue 02 Dec 2025 02:27:03 +0000 Manifest next update: Fri 05 Dec 2025 11:30:03 +0000 Files and hashes: 1: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: 5BUk2M5uyXxLCEqCmFm+4Wy/JEuP7PyfTqOZQI4v9S8=) 3: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:01:d4:b9:45:77:c9:0b:4b:49:4a:1a:63:c4:46:67:6a:69:19:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Dec 2 02:27:03 2025 GMT Not After : Dec 5 11:30:03 2025 GMT Subject: CN=379FD0F7BEB85AE6F01A035E784C0760681D0062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:25:2f:0a:ee:b7:7e:47:7f:0e:1e:7c:dd: db:3a:5d:80:6e:1b:b4:f3:9a:68:03:05:a8:14:93: 92:0f:91:fe:80:cb:a7:87:7b:16:a8:a6:ef:be:25: 75:c6:68:2f:dd:58:ef:a0:e3:71:1b:cb:81:c7:f5: 7b:f7:48:68:37:dc:82:4f:d1:a7:30:d7:dd:a5:d1: 4a:ed:8f:da:eb:1e:22:76:2c:13:bb:03:b5:b9:40: b3:c9:61:79:7a:7f:fb:f9:b5:2a:bb:b9:39:96:8c: 52:d8:bc:09:2c:fa:f2:26:09:8c:b0:c7:7f:4c:9e: 71:0a:17:ab:a3:85:b6:6e:82:e4:f3:bf:93:97:99: 2a:66:7c:69:06:f8:23:90:cf:69:5e:1f:9f:6c:a4: be:25:28:8a:1e:74:61:15:e2:1a:b0:68:ab:3e:84: e6:40:2c:c9:4d:1f:ee:95:df:3a:c0:32:73:c8:a6: 45:48:b6:e8:f9:d8:c3:da:3e:1a:ae:67:72:aa:ac: 5f:26:ae:2e:04:90:66:ae:ad:65:13:43:5b:1f:71: dd:9b:a2:53:1e:2b:93:b1:68:c3:14:ec:ca:01:4c: 0c:5f:bc:1e:f9:1e:9a:10:b6:88:aa:c6:6f:48:4b: 9f:67:28:1a:f4:ad:33:1e:9b:6d:9e:d6:49:e6:f0: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:D0:F7:BE:B8:5A:E6:F0:1A:03:5E:78:4C:07:60:68:1D:00:62 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:04:43:5e:e9:0d:62:cb:67:af:c2:86:cd:be:8a:6b:d7:2b: 52:1d:ca:53:7d:97:cf:49:52:d6:a5:88:fe:af:3f:65:af:ed: 19:6b:57:18:3c:97:f5:f7:82:08:9b:3c:c2:8d:dd:4f:a9:fc: ec:4a:49:f1:46:d2:78:3d:e1:31:72:de:70:c7:5c:e9:38:31: 9b:f5:63:12:4d:67:64:16:9c:f6:0c:66:2e:d8:34:5f:88:21: 74:6a:0d:d5:73:47:bf:55:71:32:43:28:b3:c1:66:0f:84:be: 74:68:01:1c:e7:d8:65:08:79:a1:92:58:74:79:88:f1:00:09: 5b:81:e6:0f:39:44:f4:1c:e8:e4:66:a1:c0:b5:60:64:89:52: b8:d5:a9:59:24:71:da:2c:56:42:d1:4b:a5:9e:f6:8b:18:d7: 23:39:97:0c:a2:fa:d7:ed:9e:cf:4d:2d:e3:02:1e:4d:3b:18: a5:8f:15:a4:69:0d:de:c1:f8:bd:b8:e7:15:70:2c:b9:61:65: e9:3b:5a:58:70:46:01:f8:c5:55:82:0e:77:74:f5:e4:1a:cc: 39:4b:b6:c5:b4:58:dd:b9:7b:23:36:7d:58:77:84:22:00:6f: 0d:73:8b:86:df:92:79:f6:6a:08:45:55:67:a8:cb:77:08:94: 44:7f:2a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQHUuUV3yQtLSUoaY8RGZ2ppGQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTEyMDIwMjI3MDNaFw0yNTEyMDUxMTMwMDNaMDMxMTAvBgNV BAMTKDM3OUZEMEY3QkVCODVBRTZGMDFBMDM1RTc4NEMwNzYwNjgxRDAwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmSUvCu63fkd/Dh583ds6XYBu G7TzmmgDBagUk5IPkf6Ay6eHexaopu++JXXGaC/dWO+g43Eby4HH9Xv3SGg33IJP 0acw192l0Urtj9rrHiJ2LBO7A7W5QLPJYXl6f/v5tSq7uTmWjFLYvAks+vImCYyw x39MnnEKF6ujhbZuguTzv5OXmSpmfGkG+COQz2leH59spL4lKIoedGEV4hqwaKs+ hOZALMlNH+6V3zrAMnPIpkVItuj52MPaPhquZ3KqrF8mri4EkGaurWUTQ1sfcd2b olMeK5OxaMMU7MoBTAxfvB75HpoQtoiqxm9IS59nKBr0rTMem22e1knm8NyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5/Q9764WubwGgNeeEwHYGgdAGIwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUEQ17pDWLLZ6/Chs2+imvXK1IdylN9l89J UtaliP6vP2Wv7RlrVxg8l/X3ggibPMKN3U+p/OxKSfFG0ng94TFy3nDHXOk4MZv1 YxJNZ2QWnPYMZi7YNF+IIXRqDdVzR79VcTJDKLPBZg+EvnRoARzn2GUIeaGSWHR5 iPEACVuB5g85RPQc6ORmocC1YGSJUrjVqVkkcdosVkLRS6We9osY1yM5lwyi+tft ns9NLeMCHk07GKWPFaRpDd7B+L245xVwLLlhZek7WlhwRgH4xVWCDnd09eQazDlL tsW0WN25eyM2fVh3hCIAbw1zi4bfknn2aghFVWeoy3cIlER/Koo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:57 2025 by rpki-client