This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: CgE9A7w1oM2D1GOnepoTH2ndyTqhERaWt9VLLCpaEjQ= Subject key identifier: EA:A2:AC:33:DE:DE:6F:9F:80:2E:11:31:BC:36:CC:EA:C0:C7:85:D2 Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 69853900F1549D281336B573AB4F1C80A0EA63F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 0519 Signing time: Mon 01 Dec 2025 11:10:54 +0000 Manifest this update: Mon 01 Dec 2025 11:05:54 +0000 Manifest next update: Thu 04 Dec 2025 17:21:54 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: CkCCBFhUMlS466kdraRbNp0W7IMON55l7H1AE8EUzpg=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:85:39:00:f1:54:9d:28:13:36:b5:73:ab:4f:1c:80:a0:ea:63:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Dec 1 11:05:54 2025 GMT Not After : Dec 4 17:21:54 2025 GMT Subject: CN=EAA2AC33DEDE6F9F802E1131BC36CCEAC0C785D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:63:b3:39:04:57:bb:09:46:ce:f3:38:83: 7c:93:3b:b0:82:31:0c:dc:5c:b3:ff:f5:58:26:92: f3:0d:cd:a3:91:db:f7:df:31:6f:26:8c:be:2f:7f: a5:b5:66:99:97:1d:e1:11:41:9b:e9:b1:98:79:f0: a0:21:ee:6a:14:83:85:3e:39:bf:b5:ec:78:26:ea: 1a:90:34:88:3a:4a:83:f3:d9:dc:57:7f:ef:dc:1d: b4:1b:f8:3f:c8:ea:58:91:a0:2b:81:3d:a1:0b:0e: 70:c3:5a:a0:ab:18:c4:42:cd:95:6c:a3:52:10:6d: 2b:a5:58:2b:7b:85:17:7b:88:fa:1c:df:f5:1d:a1: 61:c7:03:cc:97:f8:32:b5:a0:e5:05:db:a3:80:ff: 0a:75:f4:26:fd:25:c4:7f:6b:9e:3a:aa:32:3d:c4: 3b:9e:db:c7:61:cb:29:6c:3f:9f:88:b1:06:94:af: 8d:26:1f:36:43:47:20:0e:28:93:37:8c:01:a3:ca: c8:11:e1:39:bc:73:ea:65:ad:c8:96:37:04:a9:ff: 93:21:1e:9c:50:d2:43:71:7a:28:35:3c:45:dc:22: 86:6b:5f:c8:bd:cd:6c:1f:32:60:8c:bb:53:37:34: 8a:54:c4:bf:c1:a4:54:6a:df:8d:59:ec:e3:98:b1: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:AC:33:DE:DE:6F:9F:80:2E:11:31:BC:36:CC:EA:C0:C7:85:D2 X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:65:44:0f:07:a3:bc:07:b3:61:d7:ed:7d:9d:8e:18:db: 76:91:68:40:e1:ad:a9:eb:7a:cf:e5:36:f6:1d:b4:c2:e8:83: f8:a6:f2:75:05:0f:b1:18:35:70:8a:04:cf:94:cf:3f:cb:d1: b5:8f:97:03:ae:94:cf:bd:fa:3d:08:e5:4c:d3:f9:9e:a6:be: b4:23:bb:d5:7e:ba:d7:e4:ab:47:ec:58:04:ef:c7:fc:bc:37: a1:ba:5c:1c:8c:99:e6:69:e4:d2:c2:40:56:69:5c:0e:c5:1b: 5e:6c:34:8c:4b:aa:73:e1:7d:c8:15:8e:91:b5:9a:71:3f:fd: b5:4c:b9:63:dd:79:ff:ee:0b:0a:f4:13:a8:71:93:60:fc:31: f5:8c:cc:b5:15:02:04:f8:60:8c:2e:34:f6:12:85:0e:60:a7: f6:74:dd:da:39:1e:61:08:1c:08:1e:8b:14:0a:0e:a5:e0:dc: bd:26:35:60:5a:1f:e3:d4:d1:db:ff:2e:ef:33:21:63:8e:d4: 76:75:84:6a:0f:28:d0:f0:67:cd:a7:d6:da:84:6b:d3:06:e7: c0:5e:79:e0:b6:a9:ca:e9:8a:28:2e:6d:7a:1a:f7:d7:10:ee: 15:16:37:79:bb:ee:5b:65:2f:1a:48:3c:71:42:f5:35:cd:45: 42:ee:74:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYU5APFUnSgTNrVzq08cgKDqY/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTEyMDExMTA1NTRaFw0yNTEyMDQxNzIxNTRaMDMxMTAvBgNV BAMTKEVBQTJBQzMzREVERTZGOUY4MDJFMTEzMUJDMzZDQ0VBQzBDNzg1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkmOzOQRXuwlGzvM4g3yTO7CC MQzcXLP/9VgmkvMNzaOR2/ffMW8mjL4vf6W1ZpmXHeERQZvpsZh58KAh7moUg4U+ Ob+17Hgm6hqQNIg6SoPz2dxXf+/cHbQb+D/I6liRoCuBPaELDnDDWqCrGMRCzZVs o1IQbSulWCt7hRd7iPoc3/UdoWHHA8yX+DK1oOUF26OA/wp19Cb9JcR/a546qjI9 xDue28dhyylsP5+IsQaUr40mHzZDRyAOKJM3jAGjysgR4Tm8c+plrciWNwSp/5Mh HpxQ0kNxeig1PEXcIoZrX8i9zWwfMmCMu1M3NIpUxL/BpFRq341Z7OOYsQTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6qKsM97eb5+ALhExvDbM6sDHhdIwHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg5ZUQPB6O8B7Nh1+19nY4Y23aRaEDhranr es/lNvYdtMLog/im8nUFD7EYNXCKBM+Uzz/L0bWPlwOulM+9+j0I5UzT+Z6mvrQj u9V+utfkq0fsWATvx/y8N6G6XByMmeZp5NLCQFZpXA7FG15sNIxLqnPhfcgVjpG1 mnE//bVMuWPdef/uCwr0E6hxk2D8MfWMzLUVAgT4YIwuNPYShQ5gp/Z03do5HmEI HAgeixQKDqXg3L0mNWBaH+PU0dv/Lu8zIWOO1HZ1hGoPKNDwZ82n1tqEa9MG58Be eeC2qcrpiigubXoa99cQ7hUWN3m77ltlLxpIPHFC9TXNRULudFE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:56 2025 by rpki-client