This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: vTUuqwTon3glHUwSlQ9/BbWNfGlltkxKN8PYSWOPMh4= Subject key identifier: 22:FD:5F:B5:8A:0F:11:E6:A0:25:DA:E7:85:4D:A6:24:0B:26:33:8E Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 6EC5223D620CB6B672509E077949EE2B9ECAC398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01AD Signing time: Wed 03 Dec 2025 12:51:50 +0000 Manifest this update: Wed 03 Dec 2025 12:46:50 +0000 Manifest next update: Sat 06 Dec 2025 19:40:50 +0000 Files and hashes: 1: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: JxfxQ5L/k6PNOue0Xd9Sg0USiC+tkeXthFkvsqLUlyk=) 2: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 3: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 4: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 5: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c5:22:3d:62:0c:b6:b6:72:50:9e:07:79:49:ee:2b:9e:ca:c3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Dec 3 12:46:50 2025 GMT Not After : Dec 6 19:40:50 2025 GMT Subject: CN=22FD5FB58A0F11E6A025DAE7854DA6240B26338E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:48:bd:1e:b5:fb:a8:d8:3a:9b:ec:4b:09:a0: ed:bb:c6:cf:2b:63:95:a8:65:08:6c:87:3d:9a:80: 3c:cd:21:f6:a6:af:62:14:6b:95:ed:f3:a6:41:af: 38:30:a7:0b:59:a1:90:e9:8f:d5:2b:97:d8:a8:4d: 0d:8a:91:78:9c:36:e0:28:88:b4:4b:96:58:6d:8b: 4e:f8:7a:ed:4d:8b:1b:77:f0:2d:53:b8:74:47:18: 0d:6c:8a:86:7b:16:19:89:3b:fc:d1:07:16:27:d2: ca:70:3b:40:26:c4:88:ad:9c:41:23:60:e1:2e:56: 06:d2:d8:f6:47:6d:d5:54:5f:58:fd:27:cc:3f:2a: 47:c8:ed:29:fb:c8:fa:f9:47:4f:df:04:2e:cc:07: f9:e1:b9:91:51:0e:6f:a0:5c:2a:e7:f2:b9:c5:8c: df:e1:91:b7:0d:50:16:b8:dd:71:c9:6f:b7:67:03: 5e:d1:96:66:cb:31:d8:66:7e:90:07:f7:61:d6:f7: 1d:43:d8:a2:7b:f2:2b:d0:c3:5b:11:00:3b:8e:70: 0d:d1:ca:4a:18:28:d9:af:23:4b:b5:0c:2e:34:6c: 34:57:ab:2c:a4:ef:be:c8:fc:a5:ff:4c:74:2e:c4: f7:5c:50:ea:4f:5f:87:7c:94:0c:13:04:ef:67:f1: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:5F:B5:8A:0F:11:E6:A0:25:DA:E7:85:4D:A6:24:0B:26:33:8E X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:dc:40:17:97:81:0b:cc:91:ff:96:94:fe:37:b7:3c:3e:8f: 94:63:86:f9:5f:3a:4c:a4:b1:15:49:26:e0:f9:28:c2:80:cf: ca:41:20:f4:05:1c:ac:7d:20:7a:cc:4c:d2:95:51:76:18:41: de:5c:a2:72:a1:b0:f9:79:90:f7:35:18:8d:4e:5d:d5:cb:4d: 16:8e:ae:7e:9a:b8:c1:31:8a:63:bc:03:ef:0a:a1:b3:93:68: 70:8b:d6:bd:fb:c1:9f:0d:f3:38:f3:6c:4b:4d:bc:a8:69:0b: e6:13:46:72:1d:7c:96:4a:75:38:fa:fa:aa:7b:da:15:e6:de: 29:e2:6d:a5:bf:34:cc:61:00:e0:36:7b:3e:48:af:b9:21:33: 33:36:8a:ec:e5:cf:01:88:b9:db:77:86:67:f6:90:a6:3c:14: 05:76:d6:2d:f6:81:7f:2d:69:28:40:bf:85:be:02:c6:7b:f7: 80:67:0d:aa:c3:73:2a:f4:18:6f:cb:aa:87:85:8f:2c:58:cb: 20:ce:49:2d:0d:3d:28:1a:18:78:67:74:46:9f:cb:72:f8:ff: 28:5f:6d:9b:fd:f5:93:a8:86:ab:88:8f:4b:e1:30:fb:0b:ec: 80:0f:da:61:60:2e:45:dc:94:d9:a2:79:3b:3a:57:f0:e6:0d: 90:b6:58:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsUiPWIMtrZyUJ4HeUnuK57Kw5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTEyMDMxMjQ2NTBaFw0yNTEyMDYxOTQwNTBaMDMxMTAvBgNV BAMTKDIyRkQ1RkI1OEEwRjExRTZBMDI1REFFNzg1NERBNjI0MEIyNjMzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpSL0etfuo2Dqb7EsJoO27xs8r Y5WoZQhshz2agDzNIfamr2IUa5Xt86ZBrzgwpwtZoZDpj9Url9ioTQ2KkXicNuAo iLRLllhti074eu1Nixt38C1TuHRHGA1sioZ7FhmJO/zRBxYn0spwO0AmxIitnEEj YOEuVgbS2PZHbdVUX1j9J8w/KkfI7Sn7yPr5R0/fBC7MB/nhuZFRDm+gXCrn8rnF jN/hkbcNUBa43XHJb7dnA17RlmbLMdhmfpAH92HW9x1D2KJ78ivQw1sRADuOcA3R ykoYKNmvI0u1DC40bDRXqyyk777I/KX/THQuxPdcUOpPX4d8lAwTBO9n8ffvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIv1ftYoPEeagJdrnhU2mJAsmM44wHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbcQBeXgQvMkf+WlP43tzw+j5RjhvlfOkyk sRVJJuD5KMKAz8pBIPQFHKx9IHrMTNKVUXYYQd5conKhsPl5kPc1GI1OXdXLTRaO rn6auMEximO8A+8KobOTaHCL1r37wZ8N8zjzbEtNvKhpC+YTRnIdfJZKdTj6+qp7 2hXm3inibaW/NMxhAOA2ez5Ir7khMzM2iuzlzwGIudt3hmf2kKY8FAV21i32gX8t aShAv4W+AsZ794BnDarDcyr0GG/LqoeFjyxYyyDOSS0NPSgaGHhndEafy3L4/yhf bZv99ZOohquIj0vhMPsL7IAP2mFgLkXclNmieTs6V/DmDZC2WFA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:35 2025 by rpki-client