This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: llupVD6Nx31Rcii+BjhIG0ZHdUV37efvNxip7/7SISA= Subject key identifier: 99:E6:B4:D0:80:4B:1A:9F:E9:F2:78:8E:D6:FE:6C:92:3C:27:E3:93 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 04C80C2B7A3948C2AFF5CB72A0C1A925C0AB0409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01A7 Signing time: Tue 02 Dec 2025 07:12:27 +0000 Manifest this update: Tue 02 Dec 2025 07:07:27 +0000 Manifest next update: Fri 05 Dec 2025 13:41:27 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: m0O4o43jE3oEbOmIAnQ7/oeLJx/xcqZnuXY7PzNcjJE=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c8:0c:2b:7a:39:48:c2:af:f5:cb:72:a0:c1:a9:25:c0:ab:04:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Dec 2 07:07:27 2025 GMT Not After : Dec 5 13:41:27 2025 GMT Subject: CN=99E6B4D0804B1A9FE9F2788ED6FE6C923C27E393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:7a:65:4b:38:59:79:f6:57:0f:a3:9c:aa: c0:70:fb:e8:f6:9b:cf:0c:84:81:c0:8d:fa:b5:e9: 00:ac:38:ac:37:82:0a:7d:13:03:5b:0e:0b:7f:a3: fb:cf:6d:43:2a:0f:5f:28:51:10:ed:e6:e2:1a:7d: 3c:21:de:cd:ff:30:03:0f:cd:a4:08:34:cd:2e:56: 34:88:75:f5:ba:6a:22:af:f1:7f:df:d1:b4:e6:12: cd:b5:92:b3:74:4d:ed:cb:40:dd:34:f3:56:43:4f: 01:cf:a6:47:cf:69:0b:db:01:53:35:c8:c8:90:f5: 4a:fa:94:55:47:11:56:92:37:7c:dc:75:da:6f:5c: 65:d0:5e:73:38:45:12:6f:4e:c8:cf:60:9c:ae:f1: c0:87:91:44:c4:ee:fa:e0:99:27:01:f1:b9:5c:15: 65:f1:b0:26:f9:ef:b4:7a:9e:63:34:8f:9d:07:e3: ef:6f:9b:7a:d6:11:cf:0f:2d:99:46:ea:c8:a1:4a: ac:1e:d6:d7:82:e4:e1:4f:41:7a:b5:e7:d8:41:28: f6:2c:8d:9b:2c:91:c4:66:df:ee:d4:39:77:66:8c: b4:70:5c:2e:a8:82:5c:71:f1:26:13:b6:31:83:08: ca:9e:06:78:8c:5c:8f:82:38:3e:3c:fd:44:29:f4: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E6:B4:D0:80:4B:1A:9F:E9:F2:78:8E:D6:FE:6C:92:3C:27:E3:93 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:af:08:a8:d1:fd:f3:78:4b:09:e2:aa:33:8f:15:78:39: 51:41:f2:f2:5e:6e:cb:95:08:8b:e3:e6:d0:84:2c:74:f6:7a: 0d:2e:ac:fd:e7:1e:22:22:71:2c:3d:ad:7f:83:35:5a:7f:20: f6:df:ca:8b:77:d3:f7:51:21:8a:ca:20:08:c4:ed:c3:96:55: 42:80:a3:23:6e:1b:f1:ad:00:ee:70:95:27:55:e5:a3:f2:0a: a3:ac:6f:d9:21:d4:da:2a:5f:c8:d4:ee:ed:13:d9:e9:ee:87: 4e:03:fe:15:a3:a5:10:7c:9c:16:9f:65:12:01:61:9a:87:3c: fa:71:cd:15:2e:6e:00:19:09:33:51:1e:5d:da:ad:98:7f:40: ef:08:d8:af:12:7c:81:fa:95:e3:66:59:db:58:1f:dd:c0:53: f4:e4:f6:8b:c6:83:2b:01:50:c7:13:ce:c8:b3:1f:8a:6b:47: c4:1f:31:f5:47:7f:5a:99:4d:f2:50:3c:ab:85:d8:ca:9a:26: 90:04:c1:42:d4:ae:58:07:26:c7:a6:58:25:e4:69:7a:26:ef: 97:73:f7:ec:71:59:75:32:2b:21:7f:c1:c4:b2:73:49:87:69: f1:8b:fb:6c:a5:3f:30:2f:5d:e2:cc:c4:62:03:5f:6b:db:06: c4:c1:7b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMgMK3o5SMKv9ctyoMGpJcCrBAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTEyMDIwNzA3MjdaFw0yNTEyMDUxMzQxMjdaMDMxMTAvBgNV BAMTKDk5RTZCNEQwODA0QjFBOUZFOUYyNzg4RUQ2RkU2QzkyM0MyN0UzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKXplSzhZefZXD6OcqsBw++j2 m88MhIHAjfq16QCsOKw3ggp9EwNbDgt/o/vPbUMqD18oURDt5uIafTwh3s3/MAMP zaQINM0uVjSIdfW6aiKv8X/f0bTmEs21krN0Te3LQN0081ZDTwHPpkfPaQvbAVM1 yMiQ9Ur6lFVHEVaSN3zcddpvXGXQXnM4RRJvTsjPYJyu8cCHkUTE7vrgmScB8blc FWXxsCb577R6nmM0j50H4+9vm3rWEc8PLZlG6sihSqwe1teC5OFPQXq159hBKPYs jZsskcRm3+7UOXdmjLRwXC6oglxx8SYTtjGDCMqeBniMXI+COD48/UQp9OYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmea00IBLGp/p8niO1v5skjwn45MwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBYrwio0f3zeEsJ4qozjxV4OVFB8vJebsuV CIvj5tCELHT2eg0urP3nHiIicSw9rX+DNVp/IPbfyot30/dRIYrKIAjE7cOWVUKA oyNuG/GtAO5wlSdV5aPyCqOsb9kh1NoqX8jU7u0T2enuh04D/hWjpRB8nBafZRIB YZqHPPpxzRUubgAZCTNRHl3arZh/QO8I2K8SfIH6leNmWdtYH93AU/Tk9ovGgysB UMcTzsizH4prR8QfMfVHf1qZTfJQPKuF2MqaJpAEwULUrlgHJsemWCXkaXom75dz 9+xxWXUyKyF/wcSyc0mHafGL+2ylPzAvXeLMxGIDX2vbBsTBe6E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:45 2025 by rpki-client