This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: Q//YZCnz/LNCIVGps2YtzrGpYTzRzo0BzHsZ7DqVX6I= Subject key identifier: E6:4C:E2:34:D7:C9:B4:A0:C4:FE:4D:A5:F7:81:EB:B7:E7:C4:00:0E Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 0CB13A1FC0667364EAFA8741FA9A446E6E66B840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 052C Signing time: Mon 01 Dec 2025 23:00:40 +0000 Manifest this update: Mon 01 Dec 2025 22:55:40 +0000 Manifest next update: Thu 04 Dec 2025 23:59:40 +0000 Files and hashes: 1: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 4: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: fa/ndFKZgwUwXNgH7aC9uxlQUyZy3fmWO+tft2N/3cg=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b1:3a:1f:c0:66:73:64:ea:fa:87:41:fa:9a:44:6e:6e:66:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Dec 1 22:55:40 2025 GMT Not After : Dec 4 23:59:40 2025 GMT Subject: CN=E64CE234D7C9B4A0C4FE4DA5F781EBB7E7C4000E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:b8:7e:53:81:c7:7b:d8:7f:c3:dc:32:90: a5:61:ca:42:6c:fb:0e:a5:fd:45:ed:99:f4:06:6a: be:2a:a9:43:01:b1:77:68:79:39:1e:f4:2c:b3:4c: 76:27:ea:72:78:27:22:08:62:5d:de:f7:1a:55:b4: c1:6e:41:60:bf:4c:80:a4:63:58:1a:f6:ee:ba:7c: ed:dd:b6:53:1f:14:6a:10:43:83:f1:8d:0b:08:6f: b3:f9:18:4b:a3:cb:bd:e2:7e:ff:54:d9:7d:38:15: 76:be:e8:30:f4:02:c3:cb:8a:32:11:bb:a5:3f:96: 21:a3:e8:dd:ec:b8:43:ca:08:51:b6:bd:39:45:ef: a3:fb:0e:d8:a4:79:1a:82:f9:d8:1c:67:c8:6f:e2: 78:dc:25:3d:04:92:6b:14:8a:b8:ff:7c:29:08:ce: 65:d6:18:98:d5:13:5e:35:cf:86:8f:12:8b:fd:30: 54:48:a0:e2:18:fa:d8:2c:7d:ab:1f:7a:4f:7d:6d: 50:fe:56:9e:ac:e7:f9:c4:92:3d:94:ac:4c:da:94: c0:3b:c1:d0:12:82:e2:ce:fa:98:20:56:98:2b:67: 71:ce:bc:0c:f5:4a:35:49:2e:cc:fe:51:6f:1c:79: 88:20:b4:3d:35:4b:15:13:fa:88:b6:c3:26:dc:ab: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4C:E2:34:D7:C9:B4:A0:C4:FE:4D:A5:F7:81:EB:B7:E7:C4:00:0E X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:7e:f3:ca:d4:d8:08:ef:73:3e:54:a7:60:7c:53:c5:6e: 88:03:b6:39:a7:3b:aa:f2:73:30:74:03:98:75:38:b5:06:fc: 5e:1c:49:9a:dd:61:60:db:5f:36:c7:30:f6:90:cf:62:cd:56: d1:2e:4b:63:43:9e:db:0e:ec:9c:c0:fa:63:47:61:4a:f9:3c: eb:d3:63:62:29:1b:8c:64:2f:74:8d:cb:00:5b:44:fa:37:1a: 63:fd:d3:f5:86:43:51:7a:78:cf:ca:2d:15:22:fe:00:72:00: 32:29:3d:43:50:18:c5:8e:53:fd:bb:49:d2:b8:09:24:68:46: e8:f5:e2:dd:99:35:35:97:6e:31:bf:cf:b4:a5:10:1f:95:04: c8:8c:de:f6:f5:17:e9:b1:7c:2c:8a:3f:4f:cd:f7:6c:d5:bd: 29:51:34:05:6b:2f:54:88:f8:08:64:3e:ac:15:03:b2:9a:66: 7b:99:98:c9:3d:19:f1:87:30:f6:50:5f:19:c1:9b:78:2f:9d: da:8f:c5:00:20:4a:1a:17:2f:ff:3e:7a:14:cc:d6:e0:81:28: 61:ad:f5:a3:f9:86:b9:cc:ce:07:7c:be:c1:00:3e:c4:d6:f2: f1:a6:5d:9f:91:a6:f4:ee:35:23:e8:78:8b:03:72:57:db:8f: da:16:2c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLE6H8Bmc2Tq+odB+ppEbm5muEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTEyMDEyMjU1NDBaFw0yNTEyMDQyMzU5NDBaMDMxMTAvBgNV BAMTKEU2NENFMjM0RDdDOUI0QTBDNEZFNERBNUY3ODFFQkI3RTdDNDAwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiw7h+U4HHe9h/w9wykKVhykJs +w6l/UXtmfQGar4qqUMBsXdoeTke9CyzTHYn6nJ4JyIIYl3e9xpVtMFuQWC/TICk Y1ga9u66fO3dtlMfFGoQQ4PxjQsIb7P5GEujy73ifv9U2X04FXa+6DD0AsPLijIR u6U/liGj6N3suEPKCFG2vTlF76P7DtikeRqC+dgcZ8hv4njcJT0EkmsUirj/fCkI zmXWGJjVE141z4aPEov9MFRIoOIY+tgsfasfek99bVD+Vp6s5/nEkj2UrEzalMA7 wdASguLO+pggVpgrZ3HOvAz1SjVJLsz+UW8ceYggtD01SxUT+oi2wybcq36lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kziNNfJtKDE/k2l94Hrt+fEAA4wHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+wfvPK1NgI73M+VKdgfFPFbogDtjmnO6ry czB0A5h1OLUG/F4cSZrdYWDbXzbHMPaQz2LNVtEuS2NDntsO7JzA+mNHYUr5POvT Y2IpG4xkL3SNywBbRPo3GmP90/WGQ1F6eM/KLRUi/gByADIpPUNQGMWOU/27SdK4 CSRoRuj14t2ZNTWXbjG/z7SlEB+VBMiM3vb1F+mxfCyKP0/N92zVvSlRNAVrL1SI +AhkPqwVA7KaZnuZmMk9GfGHMPZQXxnBm3gvndqPxQAgShoXL/8+ehTM1uCBKGGt 9aP5hrnMzgd8vsEAPsTW8vGmXZ+RpvTuNSPoeIsDclfbj9oWLCA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:25 2025 by rpki-client