This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: HmSDVLtwZ3ZEBbw1Xz2mMA75kFY0o7DNb6/czLyi5jA= Subject key identifier: 65:86:44:00:06:2C:C3:7B:1D:27:80:4F:91:26:21:99:55:2E:FF:5A Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 3EE9235813403F9059337A9952985C0726FB480C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0138 Signing time: Mon 01 Dec 2025 23:31:15 +0000 Manifest this update: Mon 01 Dec 2025 23:26:15 +0000 Manifest next update: Thu 04 Dec 2025 23:53:15 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: VCmeJv7JIyKnPhiULxxJ4b2VsqSHEt4dOqA2cdGc3UU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e9:23:58:13:40:3f:90:59:33:7a:99:52:98:5c:07:26:fb:48:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Dec 1 23:26:15 2025 GMT Not After : Dec 4 23:53:15 2025 GMT Subject: CN=65864400062CC37B1D27804F91262199552EFF5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:06:b6:a0:92:04:4d:3e:69:28:3d:ed:05: 97:48:3c:12:50:dc:f1:e3:fd:89:77:79:6e:ab:11: 72:22:b9:13:4a:10:95:07:f9:3c:91:e5:63:82:22: ce:a4:88:be:3f:2e:35:96:48:0e:3b:90:a4:05:9a: 60:42:fe:d0:e8:fd:a1:4c:42:ea:15:f5:f2:69:1f: 3c:67:17:37:d8:38:76:2b:92:23:54:69:0c:5a:b6: e0:d8:9f:d3:b7:48:40:7c:4a:fc:06:a2:b6:fb:b4: c1:0a:09:24:28:26:a5:fc:5b:ff:a7:16:29:bd:be: 32:97:43:c9:9a:6e:63:18:01:fb:ab:cb:d0:04:1c: 69:d7:79:23:cb:fc:e2:21:d6:f3:22:e9:83:17:99: ad:dc:40:94:95:8a:7c:51:9e:ab:11:cd:f8:9d:3d: 79:6d:e0:32:10:22:04:ec:ab:cf:94:42:3c:7a:c4: 81:c8:42:27:da:81:c6:a4:d3:e1:46:38:94:49:64: 63:22:34:84:ac:04:20:2b:59:ed:8b:40:3c:d8:f0: 76:57:dc:66:cb:1a:76:06:91:b8:d2:d3:6f:cd:06: 89:c8:95:63:9a:7d:a2:3b:c3:26:14:90:34:c3:84: 85:b6:e6:19:f4:c2:e4:75:70:33:5f:19:e6:19:23: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:44:00:06:2C:C3:7B:1D:27:80:4F:91:26:21:99:55:2E:FF:5A X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b3:d5:5c:1d:bc:04:2d:c3:3b:0d:33:8f:06:80:92:ad:60: f2:7a:79:64:ab:c5:10:4d:17:32:d6:92:a9:69:4c:1d:4a:bc: 2a:71:30:15:06:fe:e6:32:6d:ba:0a:e6:2f:9c:b6:ac:d7:8a: 2f:a3:13:30:6a:23:71:32:9b:23:3f:69:e8:bc:ff:77:8b:02: 4b:24:a0:90:30:a7:2e:30:34:ef:69:2b:be:64:f1:ee:41:4b: f8:0e:a2:1d:47:b3:59:5a:cd:bf:f6:98:e5:46:c4:f4:56:12: 21:eb:8d:8c:0a:95:0e:f0:7e:ab:ec:47:e0:3e:7b:1e:f9:3f: 21:bc:04:05:f8:d5:df:23:3a:3d:2d:b1:a6:93:ed:44:1b:08: b7:a9:26:a3:f8:ab:82:03:b8:d0:b3:b6:e6:d4:77:55:92:3b: c1:78:1e:94:63:37:51:55:61:53:eb:64:6e:f6:f5:c8:b8:89: e8:a3:70:72:2b:dc:11:63:2d:9f:a6:01:80:dc:d4:6a:5a:ac: 03:b5:91:ce:29:4b:af:7d:a0:f7:cf:fd:92:22:23:46:9a:99: fa:ca:59:26:d1:ce:b3:0a:2f:0f:6c:1c:5a:10:8d:51:d6:e7: 4f:c1:7d:e6:6b:fc:85:60:58:20:ae:32:75:31:7d:67:c8:34: b9:88:52:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPukjWBNAP5BZM3qZUphcByb7SAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTEyMDEyMzI2MTVaFw0yNTEyMDQyMzUzMTVaMDMxMTAvBgNV BAMTKDY1ODY0NDAwMDYyQ0MzN0IxRDI3ODA0RjkxMjYyMTk5NTUyRUZGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+Qa2oJIETT5pKD3tBZdIPBJQ 3PHj/Yl3eW6rEXIiuRNKEJUH+TyR5WOCIs6kiL4/LjWWSA47kKQFmmBC/tDo/aFM QuoV9fJpHzxnFzfYOHYrkiNUaQxatuDYn9O3SEB8SvwGorb7tMEKCSQoJqX8W/+n Fim9vjKXQ8mabmMYAfury9AEHGnXeSPL/OIh1vMi6YMXma3cQJSVinxRnqsRzfid PXlt4DIQIgTsq8+UQjx6xIHIQifagcak0+FGOJRJZGMiNISsBCArWe2LQDzY8HZX 3GbLGnYGkbjS02/NBonIlWOafaI7wyYUkDTDhIW25hn0wuR1cDNfGeYZI1ZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYZEAAYsw3sdJ4BPkSYhmVUu/1owHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqz1VwdvAQtwzsNM48GgJKtYPJ6eWSrxRBN FzLWkqlpTB1KvCpxMBUG/uYybboK5i+ctqzXii+jEzBqI3EymyM/aei8/3eLAksk oJAwpy4wNO9pK75k8e5BS/gOoh1Hs1lazb/2mOVGxPRWEiHrjYwKlQ7wfqvsR+A+ ex75PyG8BAX41d8jOj0tsaaT7UQbCLepJqP4q4IDuNCztubUd1WSO8F4HpRjN1FV YVPrZG729ci4ieijcHIr3BFjLZ+mAYDc1GparAO1kc4pS699oPfP/ZIiI0aamfrK WSbRzrMKLw9sHFoQjVHW50/BfeZr/IVgWCCuMnUxfWfINLmIUo0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:12:12 2025 by rpki-client