This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: izHeUyeMFX7V0o7cSbCte1uoSaZPk2Dck0SK+RhdJZs= Subject key identifier: 12:6B:97:50:17:D5:90:BE:2D:63:44:43:56:28:EF:83:CA:93:4B:42 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 206949B9718FF4DDE9BF549768BB47AADA2C6EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 022B Signing time: Tue 02 Dec 2025 18:01:40 +0000 Manifest this update: Tue 02 Dec 2025 17:56:40 +0000 Manifest next update: Fri 05 Dec 2025 21:13:40 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: OdIhdKVNEh1RHdZBjwuGvRCEtcPhRGH1SRK2CpuRMWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:69:49:b9:71:8f:f4:dd:e9:bf:54:97:68:bb:47:aa:da:2c:6e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Dec 2 17:56:40 2025 GMT Not After : Dec 5 21:13:40 2025 GMT Subject: CN=126B975017D590BE2D6344435628EF83CA934B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6c:1e:d8:70:d1:4e:37:33:02:8d:49:cd:c7: 0f:97:4a:0e:8f:31:72:db:a9:20:f0:5f:ab:80:a5: b8:3c:7d:83:73:ac:10:6c:a2:da:8b:57:9e:d1:3b: 83:4c:8b:10:5c:45:8e:97:60:53:5f:e2:81:c1:52: df:2d:9f:4e:95:4f:0b:f3:47:23:03:59:09:2b:c0: ef:8d:a2:5b:90:ee:a7:fa:14:65:90:86:ea:6d:b2: d2:94:e2:51:4d:ac:db:3f:15:bc:ca:d8:82:b8:9c: 26:f1:04:11:b7:7a:e0:64:ae:96:a9:15:74:57:7c: 66:09:94:bb:9a:4c:5f:af:99:f8:16:29:67:03:d1: 5a:b0:8b:5e:3e:38:07:2d:07:c1:dc:22:c1:f8:38: cd:66:37:68:fa:fc:de:9f:1d:44:90:27:69:46:9a: 09:d6:ab:a9:a6:78:64:3c:56:74:65:c6:4a:fd:97: 66:d3:5e:e6:b0:d1:2d:cc:90:01:e6:22:8f:6e:2d: 06:a6:6f:5a:e0:f5:cb:37:de:d2:79:a6:3d:d1:04: ab:d4:78:26:9b:be:a6:dd:69:e9:5b:d4:ee:bc:4e: 7a:4d:f5:91:46:64:a4:e2:4e:c3:36:b4:0f:11:f9: 24:5e:85:8b:68:00:62:fe:db:fb:ed:e0:e1:eb:43: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6B:97:50:17:D5:90:BE:2D:63:44:43:56:28:EF:83:CA:93:4B:42 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5f:b8:2a:49:b7:bd:80:ef:04:65:11:2c:89:c3:27:58:4b: bf:84:09:ed:a5:67:35:7c:9a:cc:fe:d4:26:67:fc:65:3f:b8: 0c:52:6e:35:b0:ae:37:4b:29:a8:ec:d2:f5:e3:8d:98:3e:a8: 66:a6:70:5c:e7:0e:b8:6f:d8:48:5f:7b:3c:36:e6:3a:e5:6d: df:1c:f8:ce:66:f8:60:97:9d:31:e8:5f:45:f0:76:b4:63:aa: 20:ae:48:c4:43:d6:b6:19:aa:e2:3a:1d:96:00:49:ba:b7:9a: b9:0a:9c:b6:5f:03:99:45:08:5a:88:eb:a9:4a:6f:fa:33:1c: e6:0d:14:2c:6b:8f:6f:41:01:1e:88:eb:79:77:7b:63:89:b0: cd:80:1d:ba:3b:83:c2:af:49:bc:85:62:c0:e9:35:dd:38:07: eb:28:38:e2:2b:61:b9:11:97:e8:17:0a:5a:11:bf:6e:d2:41: 47:8e:35:e0:21:65:9a:b9:f9:bc:14:58:5c:b0:67:b1:68:e0: e2:8e:4e:2c:cc:e5:3b:2e:3a:bb:14:d6:f4:be:02:88:cc:e8: 37:5c:91:6c:e9:71:68:b3:17:ac:9b:c2:fd:5f:5a:00:80:75: 31:87:3b:18:29:f8:ef:35:6e:41:b8:6c:a1:f0:61:5f:f4:98: 4a:5a:3d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGlJuXGP9N3pv1SXaLtHqtosbr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTEyMDIxNzU2NDBaFw0yNTEyMDUyMTEzNDBaMDMxMTAvBgNV BAMTKDEyNkI5NzUwMTdENTkwQkUyRDYzNDQ0MzU2MjhFRjgzQ0E5MzRCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4bB7YcNFONzMCjUnNxw+XSg6P MXLbqSDwX6uApbg8fYNzrBBsotqLV57RO4NMixBcRY6XYFNf4oHBUt8tn06VTwvz RyMDWQkrwO+NoluQ7qf6FGWQhuptstKU4lFNrNs/FbzK2IK4nCbxBBG3euBkrpap FXRXfGYJlLuaTF+vmfgWKWcD0Vqwi14+OActB8HcIsH4OM1mN2j6/N6fHUSQJ2lG mgnWq6mmeGQ8VnRlxkr9l2bTXuaw0S3MkAHmIo9uLQamb1rg9cs33tJ5pj3RBKvU eCabvqbdaelb1O68TnpN9ZFGZKTiTsM2tA8R+SRehYtoAGL+2/vt4OHrQ9LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmuXUBfVkL4tY0RDVijvg8qTS0IwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZfuCpJt72A7wRlESyJwydYS7+ECe2lZzV8 msz+1CZn/GU/uAxSbjWwrjdLKajs0vXjjZg+qGamcFznDrhv2Ehfezw25jrlbd8c +M5m+GCXnTHoX0XwdrRjqiCuSMRD1rYZquI6HZYASbq3mrkKnLZfA5lFCFqI66lK b/ozHOYNFCxrj29BAR6I63l3e2OJsM2AHbo7g8KvSbyFYsDpNd04B+soOOIrYbkR l+gXCloRv27SQUeONeAhZZq5+bwUWFywZ7Fo4OKOTizM5TsuOrsU1vS+AojM6Ddc kWzpcWizF6ybwv1fWgCAdTGHOxgp+O81bkG4bKHwYV/0mEpaPQk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:56 2025 by rpki-client