This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: HJ4FjSePg+HW4PVcMZEbm25Ag8Ok3Gre6n4ean3Vq3k= Subject key identifier: A1:C9:C7:A5:10:2C:D0:57:C2:89:B5:08:13:40:DE:10:BB:A4:63:BA Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 04C3EFF56ADAE21899AB07BD7A5B486ED3231BAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 021F Signing time: Wed 03 Dec 2025 12:30:02 +0000 Manifest this update: Wed 03 Dec 2025 12:25:02 +0000 Manifest next update: Sat 06 Dec 2025 12:37:02 +0000 Files and hashes: 1: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: nZQsrSezYdHEKrI+MeGcKSYPmtsVlfd9K2axF6n21AY=) 2: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=) 3: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=) 4: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=) 5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=) 6: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=) 7: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: 5WMxfKjZT65hcUd7WB/JBj/IGlOrVSKyagiTEPB+Bbc=) 8: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c3:ef:f5:6a:da:e2:18:99:ab:07:bd:7a:5b:48:6e:d3:23:1b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Dec 3 12:25:02 2025 GMT Not After : Dec 6 12:37:02 2025 GMT Subject: CN=A1C9C7A5102CD057C289B5081340DE10BBA463BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e0:e2:a4:71:61:08:b0:69:15:ef:f1:6a:07: f7:f3:4c:c9:df:ec:3f:74:ce:fd:37:d8:e6:bd:e1: 0c:12:a2:80:8b:a3:9e:f9:9f:b0:b7:e5:54:82:06: 44:86:3f:92:47:fc:24:71:9d:39:1b:36:d5:fd:6a: 2d:ea:3a:c4:87:87:f2:41:6f:65:df:e2:ed:56:53: 1c:41:8e:cc:01:42:d3:d9:16:41:a2:a3:63:d7:95: 24:e1:0f:27:32:28:c7:1d:86:84:f8:dd:d8:61:51: 66:ff:aa:c0:93:4a:c7:33:c2:23:8a:3c:db:25:b5: 24:7b:bd:4a:78:d2:cc:29:93:f4:31:bb:48:f0:a2: 77:6c:98:81:76:6e:db:80:6a:96:a1:cd:02:b7:cb: 28:6d:01:87:68:32:3a:2e:95:4e:16:03:5c:3f:50: 72:74:d8:d1:41:12:c8:7a:d6:a6:91:bd:f2:b3:31: f1:05:46:b5:bc:eb:04:6a:22:38:1a:49:63:17:d7: e1:b9:c4:a7:9f:1a:af:c6:f0:3f:14:df:0c:a4:f4: f5:68:c4:2c:61:89:8f:99:8d:4b:38:6d:17:6f:59: e5:2b:21:2d:1f:31:d1:12:e6:52:98:be:78:c9:39: 19:57:5e:d8:f4:f5:ba:ff:0d:e3:6f:5a:31:cc:1c: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:C7:A5:10:2C:D0:57:C2:89:B5:08:13:40:DE:10:BB:A4:63:BA X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cc:74:c5:ad:df:5c:d4:34:f0:23:ef:5d:56:a0:c1:0d:51: a2:bf:47:4c:ea:e8:07:10:4a:a0:91:f6:82:ce:c9:86:6b:20: 73:cd:c1:d1:d5:69:00:f4:8f:97:1f:bd:de:e2:13:5f:06:7a: 13:b6:fe:89:d9:3c:20:f4:a4:b9:ed:98:8d:38:4a:4d:3e:0e: 55:a4:02:93:4a:57:9a:ed:16:70:44:01:65:55:4e:7f:53:59: 8f:0f:56:06:75:ef:4c:01:7d:1c:b9:1b:c0:33:ae:c9:ab:2c: ee:7e:26:7c:13:74:64:2b:30:bd:b7:31:67:72:36:32:6f:3d: 37:94:9d:02:44:b4:c7:00:d7:cd:3a:f7:3b:04:04:8d:f9:92: 8b:2c:05:46:47:01:3a:7c:08:6a:70:fd:76:b9:01:d0:32:dc: 1a:fb:d3:0a:e7:97:b2:f7:2b:46:66:2e:ed:b1:0f:3c:88:21: 7a:8b:3b:b1:68:db:fd:33:71:c5:75:38:88:d7:85:d9:3d:41: 28:c0:f6:2d:c6:5c:49:28:8b:cd:7f:9b:1d:53:0e:0e:c8:cb: 23:33:a3:c3:cf:0c:86:ae:ca:dd:ba:11:72:45:45:bd:a3:57: 2a:2d:4c:00:2b:cd:dd:45:fd:b0:83:3a:31:5d:69:3a:e7:10: 70:0b:93:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMPv9Wra4hiZqwe9eltIbtMjG60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTEyMDMxMjI1MDJaFw0yNTEyMDYxMjM3MDJaMDMxMTAvBgNV BAMTKEExQzlDN0E1MTAyQ0QwNTdDMjg5QjUwODEzNDBERTEwQkJBNDYzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4OKkcWEIsGkV7/FqB/fzTMnf 7D90zv032Oa94QwSooCLo575n7C35VSCBkSGP5JH/CRxnTkbNtX9ai3qOsSHh/JB b2Xf4u1WUxxBjswBQtPZFkGio2PXlSThDycyKMcdhoT43dhhUWb/qsCTSsczwiOK PNsltSR7vUp40swpk/Qxu0jwondsmIF2btuAapahzQK3yyhtAYdoMjoulU4WA1w/ UHJ02NFBEsh61qaRvfKzMfEFRrW86wRqIjgaSWMX1+G5xKefGq/G8D8U3wyk9PVo xCxhiY+ZjUs4bRdvWeUrIS0fMdES5lKYvnjJORlXXtj09br/DeNvWjHMHJR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocnHpRAs0FfCibUIE0DeELukY7owHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHMdMWt31zUNPAj711WoMENUaK/R0zq6AcQ SqCR9oLOyYZrIHPNwdHVaQD0j5cfvd7iE18GehO2/onZPCD0pLntmI04Sk0+DlWk ApNKV5rtFnBEAWVVTn9TWY8PVgZ170wBfRy5G8AzrsmrLO5+JnwTdGQrML23MWdy NjJvPTeUnQJEtMcA18069zsEBI35kossBUZHATp8CGpw/Xa5AdAy3Br70wrnl7L3 K0ZmLu2xDzyIIXqLO7Fo2/0zccV1OIjXhdk9QSjA9i3GXEkoi81/mx1TDg7IyyMz o8PPDIauyt26EXJFRb2jVyotTAArzd1F/bCDOjFdaTrnEHALk5Q= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:31 2025 by rpki-client