This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: gob6Iwy9mcgSrzrFGlWs2P6WN9gZH/Z5+XIGMDGYvWI= Subject key identifier: 7A:4F:16:14:D1:A1:AC:B5:ED:05:B5:92:BB:C5:3B:61:B6:77:36:27 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 0D394FE0EF5BF49F76B745CAAB610517100DD784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 0220 Signing time: Mon 15 Dec 2025 14:32:06 +0000 Manifest this update: Mon 15 Dec 2025 14:27:06 +0000 Manifest next update: Fri 19 Dec 2025 01:50:06 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: sG0F3Yd7X5Hs9vEGvMdqmizChx2sMzPClbfEkLJchSc=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:4f:e0:ef:5b:f4:9f:76:b7:45:ca:ab:61:05:17:10:0d:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Dec 15 14:27:06 2025 GMT Not After : Dec 19 01:50:06 2025 GMT Subject: CN=7A4F1614D1A1ACB5ED05B592BBC53B61B6773627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:86:3e:49:21:88:0e:11:94:4a:22:95:76:3a: c2:05:e7:a7:02:a8:e0:50:af:85:49:be:3b:95:93: d3:b9:30:30:ae:12:2e:51:b9:6b:37:ac:c8:58:ff: 5a:67:97:8d:62:b3:81:34:df:88:66:a6:b1:eb:60: 1d:87:d9:ba:4f:d7:f4:26:58:4b:12:68:13:a3:ff: 4f:8f:47:e0:0c:0d:26:23:2b:91:32:57:31:a3:f0: 02:6d:4e:6a:f6:ad:de:0e:71:3a:13:d9:42:9d:ec: 30:aa:b5:a6:83:86:af:bb:af:53:08:c1:b9:24:e8: ef:3d:6a:66:35:67:79:9d:7a:1a:a8:a5:ba:65:c7: 3a:27:6c:5d:29:7a:46:2d:98:02:30:8d:5f:3d:6c: 23:41:a3:5c:a3:a5:dc:e2:64:1d:9f:f1:11:09:2c: 63:fc:f4:b4:3c:85:ed:64:e1:81:e8:89:a9:fa:aa: 82:58:aa:9d:c5:8b:f8:e0:1c:e1:46:23:1b:14:b3: 56:a6:eb:49:6f:91:ea:67:79:90:8f:63:85:24:52: 54:3d:90:04:7f:43:42:e7:da:f4:3f:a4:36:08:fc: 7a:76:27:4f:e1:5f:87:74:16:7a:44:65:96:2e:80: 91:0c:d8:49:01:c4:e1:3b:52:f8:3a:7d:d0:25:32: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4F:16:14:D1:A1:AC:B5:ED:05:B5:92:BB:C5:3B:61:B6:77:36:27 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:29:1e:54:ea:86:29:db:0b:36:39:60:4b:a4:e4:37:a4:de: 53:01:55:48:a8:12:ca:0f:14:4f:ab:be:3c:21:c9:1e:fc:aa: 59:6e:57:50:26:31:37:fa:0e:96:e9:44:f8:a0:be:61:35:fa: e6:26:2a:5e:2a:29:75:74:bb:9d:e6:97:56:f0:07:59:f0:7c: 47:e6:83:92:13:ad:d6:cf:f6:de:48:6b:31:59:8f:37:4c:32: 83:e0:91:86:83:12:e4:28:af:4a:1d:e2:1e:39:b5:bb:f3:78: c6:37:02:48:83:60:e8:62:a2:b7:1b:8c:51:cf:1c:a2:81:7a: 11:87:14:5e:45:4b:11:3a:0a:87:a5:cc:4c:11:11:21:7b:8a: 70:70:6e:55:bd:43:b9:42:83:97:3e:2f:23:77:2a:3c:b2:68: b5:1f:d3:f5:55:99:98:11:23:2d:a7:a4:9b:60:4f:cc:ff:a6: 29:f5:0d:85:3b:45:51:11:0e:a1:b9:e1:bf:fa:e9:4c:73:1a: 11:01:0c:25:30:e5:7d:3e:50:9a:fa:7f:4e:d6:96:2d:99:38: 01:37:ff:97:ac:4c:81:e4:0f:d2:a3:6b:94:7f:b6:0c:8b:a6: b4:c2:f2:68:b6:ae:09:4d:03:b6:eb:02:b6:6f:cb:1b:81:ff: b6:c2:a5:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTlP4O9b9J92t0XKq2EFFxAN14QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTEyMTUxNDI3MDZaFw0yNTEyMTkwMTUwMDZaMDMxMTAvBgNV BAMTKDdBNEYxNjE0RDFBMUFDQjVFRDA1QjU5MkJCQzUzQjYxQjY3NzM2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2hj5JIYgOEZRKIpV2OsIF56cC qOBQr4VJvjuVk9O5MDCuEi5RuWs3rMhY/1pnl41is4E034hmprHrYB2H2bpP1/Qm WEsSaBOj/0+PR+AMDSYjK5EyVzGj8AJtTmr2rd4OcToT2UKd7DCqtaaDhq+7r1MI wbkk6O89amY1Z3mdehqopbplxzonbF0pekYtmAIwjV89bCNBo1yjpdziZB2f8REJ LGP89LQ8he1k4YHoian6qoJYqp3Fi/jgHOFGIxsUs1am60lvkepneZCPY4UkUlQ9 kAR/Q0Ln2vQ/pDYI/Hp2J0/hX4d0FnpEZZYugJEM2EkBxOE7Uvg6fdAlMhjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUek8WFNGhrLXtBbWSu8U7YbZ3NicwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4pHlTqhinbCzY5YEuk5Dek3lMBVUioEsoP FE+rvjwhyR78qlluV1AmMTf6DpbpRPigvmE1+uYmKl4qKXV0u53ml1bwB1nwfEfm g5ITrdbP9t5IazFZjzdMMoPgkYaDEuQor0od4h45tbvzeMY3AkiDYOhiorcbjFHP HKKBehGHFF5FSxE6CoelzEwRESF7inBwblW9Q7lCg5c+LyN3KjyyaLUf0/VVmZgR Iy2npJtgT8z/pin1DYU7RVERDqG54b/66UxzGhEBDCUw5X0+UJr6f07Wli2ZOAE3 /5esTIHkD9Kja5R/tgyLprTC8mi2rglNA7brArZvyxuB/7bCpUs= -----END CERTIFICATE-----Generated at Mon Dec 15 21:53:50 2025 by rpki-client