This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: trvcW/trIHy+fyPxViQkZOpS4M76Llpezzb+DuegawU= Subject key identifier: 21:51:0D:BD:E2:CE:BB:B3:1B:75:68:3B:E8:C4:77:5F:BD:E0:90:42 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 29D55AB5E5C06C68F3482DE698F06621F1B54C8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 013D Signing time: Fri 12 Dec 2025 15:41:15 +0000 Manifest this update: Fri 12 Dec 2025 15:36:15 +0000 Manifest next update: Mon 15 Dec 2025 16:42:15 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: INUvyYN2lYWeBQd6yPKIpNhKue+OKBM7aOADmiUzXag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d5:5a:b5:e5:c0:6c:68:f3:48:2d:e6:98:f0:66:21:f1:b5:4c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Dec 12 15:36:15 2025 GMT Not After : Dec 15 16:42:15 2025 GMT Subject: CN=21510DBDE2CEBBB31B75683BE8C4775FBDE09042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:82:d9:fc:70:05:e6:6f:ff:e5:30:41:7e: f2:8f:26:b9:88:5b:31:58:34:e8:aa:b5:f6:dc:b6: 31:f2:bf:61:ff:cc:f9:9d:6d:e4:89:37:b9:3a:8d: 82:6e:52:73:de:d7:9f:c4:0a:97:1d:1d:5d:27:55: be:ee:51:2c:27:a7:3a:37:45:75:d8:b1:08:2e:3a: e6:20:00:98:a6:09:b9:ff:7d:92:71:51:39:45:87: 57:a5:ea:9b:ad:20:fe:b1:7f:69:9a:cb:90:1c:19: 69:29:27:42:db:98:14:9c:cb:5e:48:5a:df:87:4a: fd:a6:ce:97:94:cd:ac:2a:06:28:ff:f4:43:94:86: 01:f4:51:17:c6:23:37:09:b6:d4:1c:fd:d9:68:68: 6d:5d:9b:5a:01:68:4c:fd:f8:90:94:61:05:46:56: ca:ea:de:c2:f8:7e:50:ce:4d:ed:15:a3:1c:8a:c8: aa:3f:b7:e5:42:74:56:ab:80:5f:a0:a4:e6:b2:7b: 7c:22:b9:ee:9a:a4:30:67:e1:52:17:8f:5c:2f:bd: 92:53:bd:3a:90:df:74:96:16:96:66:7c:eb:7d:44: bf:e1:21:73:9f:17:d8:a7:04:c2:99:24:49:e0:a0: 18:0b:2f:b2:70:f8:1f:fd:40:06:90:41:73:92:1c: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:0D:BD:E2:CE:BB:B3:1B:75:68:3B:E8:C4:77:5F:BD:E0:90:42 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1a:e9:f9:2b:43:9b:47:d5:60:db:46:9d:80:a9:f5:27:c7: 48:c5:00:6c:1e:fe:96:1d:da:88:4a:19:c7:90:64:0b:3f:81: e1:f8:30:04:40:ce:79:b9:67:0d:d1:cc:03:da:24:b4:31:a2: 55:e4:05:10:56:00:40:ca:34:32:e7:24:2a:a9:06:78:e6:5f: c8:61:b9:f4:4e:83:f3:fa:d2:88:c3:78:18:7d:7c:e3:e3:de: 2e:d1:6c:0e:24:f0:5d:ec:e6:01:aa:93:65:e7:e0:b2:38:3f: e4:47:38:6f:ce:1f:af:30:37:c5:fc:ec:ae:b0:aa:65:24:28: 68:d5:aa:06:b1:9b:38:22:2a:a3:1a:dd:94:49:8c:e8:ec:3a: 36:b5:58:e1:b2:28:65:5d:94:99:d5:7f:81:1e:2a:56:a0:8b: cb:b1:c2:1e:ae:e9:1c:76:43:82:99:ca:4f:5c:2f:0b:63:2f: f4:26:76:7f:94:0a:e5:12:ce:09:90:41:2e:9c:5e:93:74:4b: 20:cd:01:ed:61:b6:8b:8c:64:56:2e:82:49:a3:e7:00:1c:62: ca:71:f9:e0:3f:9c:3c:de:29:8e:7f:82:4c:f1:1d:4b:2f:d2: f4:b0:dc:24:a7:f9:3b:68:9c:f5:8e:45:91:b7:15:b7:ee:be: ac:5c:8b:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdVateXAbGjzSC3mmPBmIfG1TIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTEyMTIxNTM2MTVaFw0yNTEyMTUxNjQyMTVaMDMxMTAvBgNV BAMTKDIxNTEwREJERTJDRUJCQjMxQjc1NjgzQkU4QzQ3NzVGQkRFMDkwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ64LZ/HAF5m//5TBBfvKPJrmI WzFYNOiqtfbctjHyv2H/zPmdbeSJN7k6jYJuUnPe15/ECpcdHV0nVb7uUSwnpzo3 RXXYsQguOuYgAJimCbn/fZJxUTlFh1el6putIP6xf2may5AcGWkpJ0LbmBScy15I Wt+HSv2mzpeUzawqBij/9EOUhgH0URfGIzcJttQc/dloaG1dm1oBaEz9+JCUYQVG Vsrq3sL4flDOTe0VoxyKyKo/t+VCdFargF+gpOaye3wiue6apDBn4VIXj1wvvZJT vTqQ33SWFpZmfOt9RL/hIXOfF9inBMKZJEngoBgLL7Jw+B/9QAaQQXOSHEZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVENveLOu7MbdWg76MR3X73gkEIwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0a6fkrQ5tH1WDbRp2AqfUnx0jFAGwe/pYd 2ohKGceQZAs/geH4MARAznm5Zw3RzAPaJLQxolXkBRBWAEDKNDLnJCqpBnjmX8hh ufROg/P60ojDeBh9fOPj3i7RbA4k8F3s5gGqk2Xn4LI4P+RHOG/OH68wN8X87K6w qmUkKGjVqgaxmzgiKqMa3ZRJjOjsOja1WOGyKGVdlJnVf4EeKlagi8uxwh6u6Rx2 Q4KZyk9cLwtjL/Qmdn+UCuUSzgmQQS6cXpN0SyDNAe1htouMZFYugkmj5wAcYspx +eA/nDzeKY5/gkzxHUsv0vSw3CSn+TtonPWORZG3Fbfuvqxci7o= -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:57 2025 by rpki-client