This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: 1DuOLzUH1c3jVVkaeghFaK8Ne91RZKnFN2GaeU0qNhY= Subject key identifier: 96:05:CB:DD:3C:8C:8C:67:4B:BC:61:B8:0C:D8:78:5B:81:69:4A:CB Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 117FE890E1C9EE6A90BDBF1AF556C44D8059A680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01F4 Signing time: Mon 01 Dec 2025 17:41:50 +0000 Manifest this update: Mon 01 Dec 2025 17:36:50 +0000 Manifest next update: Fri 05 Dec 2025 04:41:50 +0000 Files and hashes: 1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: NPw35O5XjVTjlbIgoPMfvEDO6FCvK9B5w9wZ6wU90JM=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZSgY5OMesKAVjFXk2K7xGan10euYjEFEbhi4eeTqUI4=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) 4: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: GQbGwj8/3pFXSYNr52t6SKb3/O8bij4qIjKoYgJR2e8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7f:e8:90:e1:c9:ee:6a:90:bd:bf:1a:f5:56:c4:4d:80:59:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Dec 1 17:36:50 2025 GMT Not After : Dec 5 04:41:50 2025 GMT Subject: CN=9605CBDD3C8C8C674BBC61B80CD8785B81694ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:98:e0:fb:ea:3e:af:c8:28:55:8a:d2:d5: bf:88:78:c6:e0:60:47:f3:99:25:d9:f3:35:87:7e: 4c:35:9b:17:55:41:e5:9e:22:16:6e:99:9f:28:f2: ec:0e:cf:c7:56:bf:25:4a:53:3b:b7:12:13:dc:ee: 8e:0a:0a:ca:e6:05:81:9f:df:ea:df:b5:20:fd:10: 35:ab:14:95:4c:e6:92:58:df:46:67:2c:4f:a0:c5: 07:7f:a7:1f:03:0c:30:35:32:d4:46:c6:b8:e7:71: b2:c1:65:8c:76:eb:cc:5a:9d:7d:c6:56:db:45:f0: 69:3d:48:10:48:5b:ff:49:fa:28:da:c4:07:13:d9: 97:ad:4c:5b:f7:6c:70:3a:34:74:e3:ec:c3:d0:7c: 82:8d:06:1f:e1:5c:d8:fc:57:be:2f:f0:c7:1a:b1: f1:2f:e7:73:04:da:a3:a4:06:6d:3d:d9:ab:d3:06: 2c:51:33:b5:4f:7b:9e:79:d2:98:f1:70:70:24:25: be:73:5a:f2:77:60:50:df:32:ea:18:fe:04:aa:2d: cc:ed:09:7e:b7:13:ef:5e:d4:6b:a0:84:f2:42:de: 93:31:93:2d:db:61:90:5f:07:a7:bd:dd:11:7c:a0: 41:ba:5e:b0:05:11:1a:12:05:d7:1a:ff:48:4f:81: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:CB:DD:3C:8C:8C:67:4B:BC:61:B8:0C:D8:78:5B:81:69:4A:CB X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:de:66:c2:82:3a:66:a2:b6:90:9c:81:24:67:dc:e6:aa:86: bc:8e:06:f2:36:4a:04:5d:8b:64:eb:1c:7a:1a:69:5d:94:88: 1b:b2:e2:fd:47:a6:6a:a4:20:5d:1e:5c:2d:37:1c:28:fc:ce: c3:5c:9b:04:36:cb:ec:89:32:bc:bb:ae:b3:88:1e:e7:d7:ff: 9d:be:f2:94:f9:42:19:76:76:09:07:f4:ca:55:e4:2e:01:1b: 88:e8:58:6a:d1:55:18:fd:1e:f6:e3:21:b5:2d:5e:69:c0:e0: d4:66:21:03:9f:f4:6a:7b:48:87:55:1d:13:12:3b:09:f0:05: 83:5a:1c:02:82:44:e3:ab:a4:6c:07:4a:3c:be:66:01:48:16: 64:67:19:ec:53:46:6d:8c:d1:68:2b:a5:74:54:37:4d:86:14: fa:ca:46:ac:55:31:a8:58:f0:48:3e:27:f8:fd:87:f6:2f:91: 1f:d0:ef:c8:d9:31:e0:cb:5e:c5:d2:e9:65:18:56:b3:6a:52: 1e:bf:2d:94:39:f0:84:0f:90:fb:a2:70:db:57:6d:5a:ae:53: 54:06:d4:bc:08:28:db:dc:ee:5c:23:0b:70:1e:8f:27:3a:00: 4b:4e:d3:02:9d:09:eb:f5:82:24:da:73:7c:e9:e6:ec:28:2f: 71:ac:6f:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEX/okOHJ7mqQvb8a9VbETYBZpoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTEyMDExNzM2NTBaFw0yNTEyMDUwNDQxNTBaMDMxMTAvBgNV BAMTKDk2MDVDQkREM0M4QzhDNjc0QkJDNjFCODBDRDg3ODVCODE2OTRBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOpjg++o+r8goVYrS1b+IeMbg YEfzmSXZ8zWHfkw1mxdVQeWeIhZumZ8o8uwOz8dWvyVKUzu3EhPc7o4KCsrmBYGf 3+rftSD9EDWrFJVM5pJY30ZnLE+gxQd/px8DDDA1MtRGxrjncbLBZYx268xanX3G VttF8Gk9SBBIW/9J+ijaxAcT2ZetTFv3bHA6NHTj7MPQfIKNBh/hXNj8V74v8Mca sfEv53ME2qOkBm092avTBixRM7VPe5550pjxcHAkJb5zWvJ3YFDfMuoY/gSqLczt CX63E+9e1GughPJC3pMxky3bYZBfB6e93RF8oEG6XrAFERoSBdca/0hPgV47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgXL3TyMjGdLvGG4DNh4W4FpSsswHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjeZsKCOmaitpCcgSRn3OaqhryOBvI2SgRd i2TrHHoaaV2UiBuy4v1HpmqkIF0eXC03HCj8zsNcmwQ2y+yJMry7rrOIHufX/52+ 8pT5Qhl2dgkH9MpV5C4BG4joWGrRVRj9HvbjIbUtXmnA4NRmIQOf9Gp7SIdVHRMS OwnwBYNaHAKCROOrpGwHSjy+ZgFIFmRnGexTRm2M0WgrpXRUN02GFPrKRqxVMahY 8Eg+J/j9h/YvkR/Q78jZMeDLXsXS6WUYVrNqUh6/LZQ58IQPkPuicNtXbVquU1QG 1LwIKNvc7lwjC3Aejyc6AEtO0wKdCev1giTac3zp5uwoL3Gsb5o= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:54 2025 by rpki-client