This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: 0vo99guI9yI4rJbXdALOif1TDlAZ0YCbBSK7U9lTh9U= Subject key identifier: D1:C4:32:6C:E1:F7:AA:20:D0:E2:3A:EB:22:A0:E0:24:1F:F6:F2:7A Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 3AB80052C766F243F3E213C1DE754F2E588E8CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 0222 Signing time: Tue 02 Dec 2025 06:10:05 +0000 Manifest this update: Tue 02 Dec 2025 06:05:05 +0000 Manifest next update: Fri 05 Dec 2025 06:32:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: akRP1A4N/e8kH8HeNBETdoPlYdqCwxjoukH0e0lhYZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:00:52:c7:66:f2:43:f3:e2:13:c1:de:75:4f:2e:58:8e:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Dec 2 06:05:05 2025 GMT Not After : Dec 5 06:32:05 2025 GMT Subject: CN=D1C4326CE1F7AA20D0E23AEB22A0E0241FF6F27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:15:e1:58:ba:e4:62:fc:2a:87:27:61:81: 5c:fb:d1:c6:15:13:49:27:47:3a:45:e4:77:6f:5b: cb:a8:50:f5:87:2c:cb:e2:5b:7a:84:fa:ba:3c:23: 28:07:0f:fa:05:3a:d3:83:59:10:53:6f:18:17:44: e4:fe:fe:6f:5f:a4:32:85:1d:6e:11:3f:cf:ac:9d: 23:d3:20:74:32:d1:2d:a1:f0:0c:02:4b:50:26:62: 77:3a:2c:1b:e1:e6:23:e3:93:b8:20:66:9a:51:3a: aa:4f:78:de:98:4e:eb:07:11:e0:6f:76:0e:03:d4: ce:09:bb:dd:67:9d:de:b0:c5:76:41:8c:77:c6:6a: dd:a5:5f:85:dd:ff:9d:86:b6:e2:c6:68:96:42:b5: e9:3b:8f:1c:f6:ee:b0:0b:4e:5c:dc:5a:1a:1f:bb: e8:1e:a3:81:99:20:87:03:cf:3e:3a:ae:3a:9e:35: cb:a4:a5:8a:f0:31:8e:28:2d:ce:f0:99:d3:43:4a: 39:f8:7c:9c:9e:13:af:dd:9e:96:e2:ed:61:32:78: 10:14:ec:6d:91:18:11:9d:3d:6a:21:37:eb:e2:d1: 1a:e3:9d:69:3a:e6:51:2e:e3:6b:41:d4:c1:93:00: 51:f2:81:6a:3b:bb:ea:b1:a5:ae:a6:71:44:f0:1a: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C4:32:6C:E1:F7:AA:20:D0:E2:3A:EB:22:A0:E0:24:1F:F6:F2:7A X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e7:c2:3e:bc:c1:07:8b:00:10:2e:6c:ee:e4:48:3e:af:bf: 90:63:ba:6e:56:3c:43:c9:df:18:44:98:46:24:a6:b4:92:02: e0:06:8b:d4:c4:0b:71:ff:d2:91:da:0b:c2:2d:e5:9e:10:69: 64:01:b3:51:a1:de:74:11:e1:c7:41:c6:e8:45:71:05:cd:25: 06:8a:dd:d9:79:be:d3:87:af:a1:54:9e:c3:b7:ca:54:74:da: 33:c1:6b:9f:2c:37:d6:95:38:46:74:f5:aa:83:4c:d8:ab:d1: 43:29:69:7d:4b:a0:d3:89:b8:e5:bf:08:32:b2:99:59:80:b9: ff:54:03:af:84:38:3c:4e:95:cc:35:20:fc:4c:5c:cb:11:cb: 03:e1:de:01:8e:c5:dc:4b:ac:b6:38:5b:02:35:5f:10:06:10: 0a:89:b5:dc:4f:ab:f6:29:0e:94:69:8e:88:35:cf:b6:c8:8c: 29:49:23:87:5d:0d:a9:b0:92:c5:09:15:d5:58:0d:52:91:40: d8:da:35:3c:6f:39:e1:7f:a8:2c:14:a6:37:fa:e8:84:8d:6e: 2b:f0:56:25:44:d3:47:8a:f1:b2:a0:8c:96:f2:01:69:7a:f2: 9b:a7:0f:05:c7:d4:d9:99:d2:19:81:34:77:5e:59:e4:cb:3f: a5:17:d1:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrgAUsdm8kPz4hPB3nVPLliOjL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTEyMDIwNjA1MDVaFw0yNTEyMDUwNjMyMDVaMDMxMTAvBgNV BAMTKEQxQzQzMjZDRTFGN0FBMjBEMEUyM0FFQjIyQTBFMDI0MUZGNkYyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuxXhWLrkYvwqhydhgVz70cYV E0knRzpF5HdvW8uoUPWHLMviW3qE+ro8IygHD/oFOtODWRBTbxgXROT+/m9fpDKF HW4RP8+snSPTIHQy0S2h8AwCS1AmYnc6LBvh5iPjk7ggZppROqpPeN6YTusHEeBv dg4D1M4Ju91nnd6wxXZBjHfGat2lX4Xd/52GtuLGaJZCtek7jxz27rALTlzcWhof u+geo4GZIIcDzz46rjqeNcukpYrwMY4oLc7wmdNDSjn4fJyeE6/dnpbi7WEyeBAU 7G2RGBGdPWohN+vi0RrjnWk65lEu42tB1MGTAFHygWo7u+qxpa6mcUTwGshvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cQybOH3qiDQ4jrrIqDgJB/28nowHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfnwj68wQeLABAubO7kSD6vv5Bjum5WPEPJ 3xhEmEYkprSSAuAGi9TEC3H/0pHaC8It5Z4QaWQBs1Gh3nQR4cdBxuhFcQXNJQaK 3dl5vtOHr6FUnsO3ylR02jPBa58sN9aVOEZ09aqDTNir0UMpaX1LoNOJuOW/CDKy mVmAuf9UA6+EODxOlcw1IPxMXMsRywPh3gGOxdxLrLY4WwI1XxAGEAqJtdxPq/Yp DpRpjog1z7bIjClJI4ddDamwksUJFdVYDVKRQNjaNTxvOeF/qCwUpjf66ISNbivw ViVE00eK8bKgjJbyAWl68punDwXH1NmZ0hmBNHdeWeTLP6UX0VQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:40 2025 by rpki-client