This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: 35gILJTEqwky2fZuff2sLM/Ee9mHM0hsXjwkEEC3ujs= Subject key identifier: 21:E7:C3:AD:86:12:AB:75:C1:51:E6:13:0A:E8:93:96:C0:D6:9D:7E Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 06E2790CE7D81BE393C9BD7EA0DD4FA1EB32F81B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 021D Signing time: Mon 01 Dec 2025 21:11:29 +0000 Manifest this update: Mon 01 Dec 2025 21:06:29 +0000 Manifest next update: Fri 05 Dec 2025 07:06:29 +0000 Files and hashes: 1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: 1EeSMUmcWGrBneLXrqdyChuZAcNpWh644tyOD8IX+yU=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e2:79:0c:e7:d8:1b:e3:93:c9:bd:7e:a0:dd:4f:a1:eb:32:f8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Dec 1 21:06:29 2025 GMT Not After : Dec 5 07:06:29 2025 GMT Subject: CN=21E7C3AD8612AB75C151E6130AE89396C0D69D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:e2:da:91:62:44:da:c9:66:3a:c9:f9:88: 1f:e8:6d:0f:ec:90:98:80:25:67:44:93:92:6a:e9: bc:08:ac:c2:27:78:b8:48:dd:cd:94:bf:5e:f4:7d: a8:8e:2e:ca:f4:ab:42:2f:b5:eb:97:76:d1:83:c8: 03:82:ca:11:79:61:71:8b:51:36:87:6c:ca:f2:1b: a5:ad:56:92:6f:9c:ae:5b:90:77:22:f1:eb:14:45: 07:d0:a1:96:6e:14:44:41:78:41:70:32:7b:e5:9f: ae:a8:74:e3:ca:d2:1b:ee:0d:c7:fd:b8:cb:38:88: d4:b7:f3:2d:09:2d:65:02:dc:28:ab:a6:ca:96:c4: 52:be:f1:c1:9e:d4:4a:22:30:93:e9:52:36:ca:e1: ed:d3:85:fd:57:9b:ad:fb:3b:6c:a0:85:1f:56:ff: d2:42:99:8e:a9:c3:60:93:aa:57:31:40:b6:b6:42: 3b:cc:e9:7c:09:7d:4e:b2:3d:d7:92:fd:39:b0:9c: 4a:c0:b7:1f:84:7b:5f:0a:74:5c:a3:58:b4:11:42: f5:22:98:fc:46:19:51:f5:9e:71:fa:40:12:69:d3: c7:b1:0e:7b:a6:09:90:9d:b1:c8:a0:89:fc:81:73: 3d:24:4e:dc:85:b4:4d:a4:14:ee:17:4e:1f:13:4a: e2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E7:C3:AD:86:12:AB:75:C1:51:E6:13:0A:E8:93:96:C0:D6:9D:7E X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:0d:c1:b7:52:4b:64:a7:10:e5:e3:8c:a8:11:e1:ba:82:e5: b2:ca:a4:77:62:94:68:39:36:52:75:6b:ab:3e:36:73:60:a9: 64:a6:08:a6:36:53:4c:9b:8e:3e:b1:f3:64:85:89:65:95:c2: ab:c0:ce:ff:40:86:91:70:9a:10:2f:ee:fd:a4:3e:f7:33:4a: c4:48:f1:b1:57:76:18:35:52:45:73:d9:80:50:71:da:4d:6e: 91:f7:99:bf:ca:2e:fc:36:6e:80:64:d6:65:68:70:71:74:cd: 50:bd:ed:32:ae:0c:5e:af:d7:15:fc:64:21:ca:21:8b:13:c4: 79:60:e0:c4:27:5b:22:f8:81:7e:ca:f0:1d:02:bf:95:98:20: e3:27:ca:3b:d1:24:42:d5:88:c8:8f:28:b5:56:a0:a3:ff:bc: 1a:e5:36:65:4f:ea:00:70:5f:6c:73:a2:af:34:ed:72:7e:c0: 7a:89:0f:b4:07:6d:f4:be:cc:d5:ce:af:82:0f:ec:f5:fd:bd: 12:35:42:d9:8f:54:4e:3d:d9:93:13:84:45:75:0e:e3:3c:65: 08:26:5b:78:24:a8:d1:04:8c:48:6e:45:69:83:c8:f4:48:27: 8e:fe:b8:d3:f5:3b:05:ae:5c:87:bf:58:90:06:76:3d:b5:73: 04:01:56:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuJ5DOfYG+OTyb1+oN1Poesy+BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTEyMDEyMTA2MjlaFw0yNTEyMDUwNzA2MjlaMDMxMTAvBgNV BAMTKDIxRTdDM0FEODYxMkFCNzVDMTUxRTYxMzBBRTg5Mzk2QzBENjlEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA+LakWJE2slmOsn5iB/obQ/s kJiAJWdEk5Jq6bwIrMIneLhI3c2Uv170faiOLsr0q0IvteuXdtGDyAOCyhF5YXGL UTaHbMryG6WtVpJvnK5bkHci8esURQfQoZZuFERBeEFwMnvln66odOPK0hvuDcf9 uMs4iNS38y0JLWUC3CirpsqWxFK+8cGe1EoiMJPpUjbK4e3Thf1Xm637O2yghR9W /9JCmY6pw2CTqlcxQLa2QjvM6XwJfU6yPdeS/TmwnErAtx+Ee18KdFyjWLQRQvUi mPxGGVH1nnH6QBJp08exDnumCZCdscigifyBcz0kTtyFtE2kFO4XTh8TSuIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIefDrYYSq3XBUeYTCuiTlsDWnX4wHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgNwbdSS2SnEOXjjKgR4bqC5bLKpHdilGg5 NlJ1a6s+NnNgqWSmCKY2U0ybjj6x82SFiWWVwqvAzv9AhpFwmhAv7v2kPvczSsRI 8bFXdhg1UkVz2YBQcdpNbpH3mb/KLvw2boBk1mVocHF0zVC97TKuDF6v1xX8ZCHK IYsTxHlg4MQnWyL4gX7K8B0Cv5WYIOMnyjvRJELViMiPKLVWoKP/vBrlNmVP6gBw X2xzoq807XJ+wHqJD7QHbfS+zNXOr4IP7PX9vRI1QtmPVE492ZMThEV1DuM8ZQgm W3gkqNEEjEhuRWmDyPRIJ47+uNP1OwWuXIe/WJAGdj21cwQBVks= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:49 2025 by rpki-client