This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: ANZScJTb2mTlj6qzXVZeHs8e29bDXsnHKd4oijklfNI= Subject key identifier: 2F:3B:79:22:42:04:92:79:36:AA:14:E6:40:20:6F:A7:1B:F1:C6:8C Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 687E285B1702AE122A1383008F42F137E864B40D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01B5 Signing time: Mon 01 Dec 2025 17:42:23 +0000 Manifest this update: Mon 01 Dec 2025 17:37:23 +0000 Manifest next update: Thu 04 Dec 2025 23:05:23 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: qygq3Fpfws8BAyB/mdsPXjpHqwdIul5gkJav+osQhgQ=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7e:28:5b:17:02:ae:12:2a:13:83:00:8f:42:f1:37:e8:64:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Dec 1 17:37:23 2025 GMT Not After : Dec 4 23:05:23 2025 GMT Subject: CN=2F3B79224204927936AA14E640206FA71BF1C68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:42:46:32:88:29:37:85:c6:4d:37:98:e2: 47:d6:6b:e5:21:56:3d:a3:0b:a0:4a:7e:34:01:92: aa:e6:a7:f9:17:51:11:0c:9d:fe:de:0d:0c:c1:45: 7f:9a:f8:9e:9c:68:f3:e9:ca:fc:54:ed:9b:df:60: 09:72:e7:94:87:23:8e:1b:3c:6f:4d:ec:c7:ec:fc: 60:69:79:99:2b:30:30:34:b5:86:33:71:6d:35:93: 0e:c7:cf:9a:46:62:2f:67:c4:2d:3f:3a:cf:61:14: 47:a3:b4:e9:b5:19:df:f0:68:1d:44:d4:a3:db:e2: a2:39:a5:bc:69:ec:17:96:6f:99:f1:46:c1:39:41: ac:9a:de:11:5e:ac:98:dd:aa:9f:82:0d:c1:f8:e6: f6:63:68:b4:23:1d:d9:90:d9:f6:cc:b0:b1:54:dc: ce:1c:3f:89:2c:bb:0e:c3:fc:fd:ce:e8:a8:b8:af: 7e:23:8a:4d:4d:92:3b:cc:22:67:4a:68:2b:24:d8: 6e:3d:53:fe:50:ec:0a:0d:bf:4d:32:75:c8:45:6b: e9:ae:e4:1b:72:3e:0c:46:89:4c:51:ab:ec:81:27: 61:d1:fe:d7:ae:9d:69:87:30:f2:22:af:59:68:b1: ea:3d:fe:09:ed:aa:59:c9:90:c6:97:aa:10:8b:9a: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3B:79:22:42:04:92:79:36:AA:14:E6:40:20:6F:A7:1B:F1:C6:8C X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:21:fd:d8:bb:86:fd:9b:ad:ef:a7:80:17:06:2b:71:0b: 23:46:4b:58:ec:ce:29:8f:7a:ae:1c:65:3c:a7:a1:e5:09:ad: b9:12:90:f7:12:56:eb:03:c2:56:ef:aa:ae:c0:dc:10:e2:7b: 44:d6:d1:f8:cf:13:0b:fa:93:a7:c5:cc:5f:1c:0f:8c:98:c2: c1:4b:51:55:65:dd:4e:7c:68:fe:a4:db:22:06:6f:cf:1e:55: f1:39:76:8b:9f:82:05:c6:6e:b3:83:6f:48:75:3c:3c:3b:32: 1f:40:9a:44:e7:a1:96:0a:e5:d9:a6:32:ea:12:dc:f1:1e:76: ed:bc:26:af:db:9e:5c:98:81:c4:e4:36:9d:ff:77:fa:9e:18: 4b:db:be:96:41:5d:bb:ce:98:31:56:1d:83:31:37:83:73:1b: 6b:62:c0:7e:d6:90:96:ed:c2:dc:2e:3b:85:08:d6:b2:78:ea: b9:23:e2:f5:37:e1:c4:09:13:0a:19:93:dc:6b:c4:29:44:e7: 0d:eb:06:f1:f1:27:9d:21:bd:35:5b:9f:24:92:6b:18:d9:68: 35:68:86:95:05:53:28:77:74:fc:48:4b:8f:e1:5c:9f:0c:f4: db:96:b7:14:f8:8f:5d:b7:1a:38:dc:45:2c:37:e3:29:0b:46: ac:e9:4b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaH4oWxcCrhIqE4MAj0LxN+hktA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTEyMDExNzM3MjNaFw0yNTEyMDQyMzA1MjNaMDMxMTAvBgNV BAMTKDJGM0I3OTIyNDIwNDkyNzkzNkFBMTRFNjQwMjA2RkE3MUJGMUM2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK0JGMogpN4XGTTeY4kfWa+Uh Vj2jC6BKfjQBkqrmp/kXUREMnf7eDQzBRX+a+J6caPPpyvxU7ZvfYAly55SHI44b PG9N7Mfs/GBpeZkrMDA0tYYzcW01kw7Hz5pGYi9nxC0/Os9hFEejtOm1Gd/waB1E 1KPb4qI5pbxp7BeWb5nxRsE5Qaya3hFerJjdqp+CDcH45vZjaLQjHdmQ2fbMsLFU 3M4cP4ksuw7D/P3O6Ki4r34jik1NkjvMImdKaCsk2G49U/5Q7AoNv00ydchFa+mu 5BtyPgxGiUxRq+yBJ2HR/teunWmHMPIir1loseo9/gntqlnJkMaXqhCLmg9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzt5IkIEknk2qhTmQCBvpxvxxowwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVOIf3Yu4b9m63vp4AXBitxCyNGS1jszimP eq4cZTynoeUJrbkSkPcSVusDwlbvqq7A3BDie0TW0fjPEwv6k6fFzF8cD4yYwsFL UVVl3U58aP6k2yIGb88eVfE5doufggXGbrODb0h1PDw7Mh9AmkTnoZYK5dmmMuoS 3PEedu28Jq/bnlyYgcTkNp3/d/qeGEvbvpZBXbvOmDFWHYMxN4NzG2tiwH7WkJbt wtwuO4UI1rJ46rkj4vU34cQJEwoZk9xrxClE5w3rBvHxJ50hvTVbnySSaxjZaDVo hpUFUyh3dPxIS4/hXJ8M9NuWtxT4j123GjjcRSw34ykLRqzpS4A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:34 2025 by rpki-client