This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: 2nYITp1t9ZgpiVf54MYLGX1eXoSrRtzPk3dMXBC4M5I= Subject key identifier: 6B:2C:9E:42:8E:31:B4:9A:0F:66:11:FE:B8:0B:36:EE:01:9C:3D:28 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 2399936D24F121658D91E403CD7DFC4F5F44A12E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01C8 Signing time: Tue 02 Dec 2025 11:22:02 +0000 Manifest this update: Tue 02 Dec 2025 11:17:02 +0000 Manifest next update: Fri 05 Dec 2025 20:21:02 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 2: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) 3: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: 10SlDOG4gAPFIWIn/Hsn6HYfUsXVYJFawgsFE0wsCuk=) 4: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:99:93:6d:24:f1:21:65:8d:91:e4:03:cd:7d:fc:4f:5f:44:a1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Dec 2 11:17:02 2025 GMT Not After : Dec 5 20:21:02 2025 GMT Subject: CN=6B2C9E428E31B49A0F6611FEB80B36EE019C3D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:39:28:85:70:f2:35:8d:0b:09:6f:01:32: 83:0d:04:6b:8e:09:4d:e1:97:81:ee:c1:4f:49:33: 1a:e0:23:e4:0d:aa:b3:df:08:a1:1b:84:cb:c6:0d: 69:82:07:9b:7d:e4:61:e8:8e:cb:ab:97:c0:8b:2c: c8:aa:6e:1c:62:84:04:0c:31:84:bf:2d:de:ea:da: f2:6f:6b:0f:38:2d:ea:c2:09:3f:a4:e1:7c:a7:25: 12:ad:a4:f6:fe:a2:0d:3f:8b:19:82:50:46:d4:31: 20:74:17:d3:d5:30:c9:b6:48:bb:39:ca:da:cf:24: a8:2e:d4:1d:e5:93:20:00:ea:02:ab:0d:01:54:1f: 80:bb:64:34:1b:98:9c:a4:0d:81:03:79:3a:a8:0b: 22:6b:69:5c:27:a7:b8:43:cc:65:26:3e:8d:19:6c: 6f:42:02:38:cf:03:a2:90:50:54:4e:1c:37:75:17: 25:63:41:8a:64:17:4c:03:67:1a:11:6b:e2:ee:9d: ad:32:e8:5a:36:8b:4f:9a:5a:d7:8b:23:62:20:f0: a8:cf:1e:aa:fd:39:cd:8b:3f:47:e1:3e:6b:bd:96: 86:da:8e:3b:e1:04:4e:5b:ad:3a:72:f1:cd:de:73: bc:77:dc:35:ab:15:4a:82:60:a8:e1:9e:fe:73:84: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:9E:42:8E:31:B4:9A:0F:66:11:FE:B8:0B:36:EE:01:9C:3D:28 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:9e:a8:4c:8e:37:66:96:45:b8:80:c3:60:4a:6c:07:03: ed:b8:22:f7:c9:e2:c5:bc:64:b8:6c:20:ec:e8:0e:ef:21:81: 2a:2c:81:43:03:3f:35:07:04:04:d0:43:0d:84:24:ad:50:06: 4c:55:d2:4a:89:e7:15:1b:a6:25:f0:73:f4:24:13:73:bc:29: bf:f7:b6:c0:8c:79:f8:fa:7b:ee:1d:f4:a4:b6:00:2d:17:3e: a5:fd:db:7f:35:0c:54:d8:89:1a:82:fd:6a:4a:a0:42:95:18: 61:92:db:c3:34:0d:e1:8c:f2:25:50:52:15:9b:92:78:ea:ee: 40:6f:77:db:7c:de:f8:83:a6:f4:3b:b5:6c:30:19:6c:e5:f1: 98:5f:7f:f5:53:67:6e:fd:ca:b2:9d:ed:c9:7a:a4:3f:fd:26: 27:3a:2f:7f:4f:cd:77:62:7a:30:6e:fc:42:e5:0b:31:ee:ca: 68:51:80:24:3e:b1:e7:c8:06:a3:b0:da:25:78:3b:8c:37:79: b4:ad:dc:8d:af:46:22:96:31:81:37:5b:9c:cd:db:0c:34:cb: 01:99:6e:1c:4c:db:10:f1:4f:20:64:0b:e4:2b:50:41:cc:32: d2:a8:80:a1:c6:93:69:97:60:da:0d:0d:c7:d9:63:0b:d9:f1: fd:2d:97:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5mTbSTxIWWNkeQDzX38T19EoS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTEyMDIxMTE3MDJaFw0yNTEyMDUyMDIxMDJaMDMxMTAvBgNV BAMTKDZCMkM5RTQyOEUzMUI0OUEwRjY2MTFGRUI4MEIzNkVFMDE5QzNEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbTkohXDyNY0LCW8BMoMNBGuO CU3hl4HuwU9JMxrgI+QNqrPfCKEbhMvGDWmCB5t95GHojsurl8CLLMiqbhxihAQM MYS/Ld7q2vJvaw84LerCCT+k4XynJRKtpPb+og0/ixmCUEbUMSB0F9PVMMm2SLs5 ytrPJKgu1B3lkyAA6gKrDQFUH4C7ZDQbmJykDYEDeTqoCyJraVwnp7hDzGUmPo0Z bG9CAjjPA6KQUFROHDd1FyVjQYpkF0wDZxoRa+Luna0y6Fo2i0+aWteLI2Ig8KjP Hqr9Oc2LP0fhPmu9lobajjvhBE5brTpy8c3ec7x33DWrFUqCYKjhnv5zhBltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayyeQo4xtJoPZhH+uAs27gGcPSgwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/unqhMjjdmlkW4gMNgSmwHA+24IvfJ4sW8 ZLhsIOzoDu8hgSosgUMDPzUHBATQQw2EJK1QBkxV0kqJ5xUbpiXwc/QkE3O8Kb/3 tsCMefj6e+4d9KS2AC0XPqX92381DFTYiRqC/WpKoEKVGGGS28M0DeGM8iVQUhWb knjq7kBvd9t83viDpvQ7tWwwGWzl8Zhff/VTZ279yrKd7cl6pD/9Jic6L39PzXdi ejBu/ELlCzHuymhRgCQ+sefIBqOw2iV4O4w3ebSt3I2vRiKWMYE3W5zN2ww0ywGZ bhxM2xDxTyBkC+QrUEHMMtKogKHGk2mXYNoNDcfZYwvZ8f0tlzs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:20 2025 by rpki-client