This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: Y16rqwTNxMP6VSJgIEStc3RziHAw9czpwwBB4gPIY/4= Subject key identifier: 16:AA:30:20:36:C4:9B:CC:44:34:3A:EA:C3:F3:B1:FA:A3:43:1F:E7 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 732966D2786234921B515A13B295BA1D2C79F4DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 025A Signing time: Mon 01 Dec 2025 09:42:28 +0000 Manifest this update: Mon 01 Dec 2025 09:37:28 +0000 Manifest next update: Thu 04 Dec 2025 14:07:28 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 2: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) 3: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: CKnzPPXBq0RlSIJYjlZ6+l8Nws06g1ExXZxdEzZyU3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:29:66:d2:78:62:34:92:1b:51:5a:13:b2:95:ba:1d:2c:79:f4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Dec 1 09:37:28 2025 GMT Not After : Dec 4 14:07:28 2025 GMT Subject: CN=16AA302036C49BCC44343AEAC3F3B1FAA3431FE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:ec:2c:11:98:63:06:d7:d8:8d:91:a8:31: b4:b0:62:87:1f:67:fa:e6:8c:66:ab:1f:39:be:83: 32:4e:76:0c:1f:16:46:3b:c5:ea:7f:a7:75:87:17: 22:6e:57:db:8e:38:d8:72:74:a5:04:0f:01:bc:3b: 5f:42:ea:42:cf:17:6d:8e:26:49:73:e0:f1:9b:d5: 1d:9f:ad:6f:9e:0a:e7:b0:ef:fe:cd:33:b1:5a:53: 13:ba:a9:7a:e0:ac:d5:44:36:f0:ff:5c:00:29:4e: 28:63:f4:2a:69:f7:f3:ae:e1:42:33:d9:a4:5e:64: f3:bb:d3:c3:6e:70:9f:53:4a:52:cd:0a:29:69:4b: 1b:83:0f:dd:e5:2f:bf:f5:3d:cf:01:b4:d0:f1:87: b2:83:36:97:de:2f:dc:be:94:e7:7d:90:bc:b6:68: 6b:f1:72:f0:0e:29:d5:16:cf:9f:fb:2a:d5:a6:09: 91:fe:ce:3c:55:bc:78:3e:8d:96:d1:24:aa:70:a6: 59:8d:cb:88:40:1f:1e:e5:55:6b:9b:41:80:b4:7c: 09:b5:77:5d:4a:01:62:1c:c5:8e:59:f6:10:8b:64: e8:19:15:6f:bb:36:13:75:13:a1:8e:0a:1b:ab:b9: 1d:0d:88:87:f8:10:b5:ac:bf:d4:ef:c1:fc:41:d8: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AA:30:20:36:C4:9B:CC:44:34:3A:EA:C3:F3:B1:FA:A3:43:1F:E7 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:be:51:63:96:4f:96:6e:1f:05:68:69:a0:5e:85:a8:b1: dc:d4:f9:ad:a1:97:cb:94:e4:6f:93:cd:2a:bc:44:93:5b:7c: 1a:ab:92:dd:dc:97:52:fe:55:b0:f8:ec:a2:e9:a8:90:86:c9: 66:b8:79:2c:78:7f:28:ff:64:92:8d:f0:3b:91:83:49:dd:8b: 38:83:cd:f6:c4:9c:b6:c5:85:d9:0c:2c:27:a4:73:37:ac:d2: 79:90:ea:3e:18:5b:7a:5b:e1:ca:18:a6:66:08:b9:a7:9d:65: ab:36:18:a5:7c:3f:77:32:cd:b6:71:31:4c:1c:82:7d:b5:d5: 52:11:80:fa:b1:52:40:23:d4:00:bb:0f:53:68:b5:ea:c2:7c: 3d:81:7c:0a:bb:bf:0d:7d:cc:e4:00:64:cf:c4:e1:cf:29:63: 9f:7c:eb:6d:00:ab:53:f2:f4:f8:8d:35:fe:b4:c7:ba:5d:e5: 77:49:ac:22:5e:aa:60:d9:c7:ca:da:b0:e6:23:29:4b:5b:7c: 7d:14:35:94:be:41:d9:84:a5:2b:c7:5d:9e:c4:dd:dc:d8:17: d2:8e:30:db:42:9d:69:60:b3:ff:ff:46:76:b7:17:0a:79:40: 51:99:eb:bc:ab:7b:1d:e2:9c:3c:a6:4a:ec:f0:85:78:b8:cb: 0a:d5:07:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcylm0nhiNJIbUVoTspW6HSx59N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTEyMDEwOTM3MjhaFw0yNTEyMDQxNDA3MjhaMDMxMTAvBgNV BAMTKDE2QUEzMDIwMzZDNDlCQ0M0NDM0M0FFQUMzRjNCMUZBQTM0MzFGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYuwsEZhjBtfYjZGoMbSwYocf Z/rmjGarHzm+gzJOdgwfFkY7xep/p3WHFyJuV9uOONhydKUEDwG8O19C6kLPF22O Jklz4PGb1R2frW+eCuew7/7NM7FaUxO6qXrgrNVENvD/XAApTihj9Cpp9/Ou4UIz 2aReZPO708NucJ9TSlLNCilpSxuDD93lL7/1Pc8BtNDxh7KDNpfeL9y+lOd9kLy2 aGvxcvAOKdUWz5/7KtWmCZH+zjxVvHg+jZbRJKpwplmNy4hAHx7lVWubQYC0fAm1 d11KAWIcxY5Z9hCLZOgZFW+7NhN1E6GOChuruR0NiIf4ELWsv9TvwfxB2KP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFqowIDbEm8xENDrqw/Ox+qNDH+cwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFkvlFjlk+Wbh8FaGmgXoWosdzU+a2hl8uU 5G+TzSq8RJNbfBqrkt3cl1L+VbD47KLpqJCGyWa4eSx4fyj/ZJKN8DuRg0ndiziD zfbEnLbFhdkMLCekczes0nmQ6j4YW3pb4coYpmYIuaedZas2GKV8P3cyzbZxMUwc gn211VIRgPqxUkAj1AC7D1NoterCfD2BfAq7vw19zOQAZM/E4c8pY598620Aq1Py 9PiNNf60x7pd5XdJrCJeqmDZx8rasOYjKUtbfH0UNZS+QdmEpSvHXZ7E3dzYF9KO MNtCnWlgs///Rna3Fwp5QFGZ67yrex3inDymSuzwhXi4ywrVB9I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client