This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: QHy+og5FxpoKkH+DNOKYANG44+mH68WYDBb6H92PP3o= Subject key identifier: 1A:9D:46:F2:D8:72:EC:B8:61:20:73:C3:F5:8C:9C:53:EC:42:FF:EA Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 33473F56EB019810071FE84BBD886F01B6AFBC1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 0405 Signing time: Mon 01 Dec 2025 15:30:44 +0000 Manifest this update: Mon 01 Dec 2025 15:25:44 +0000 Manifest next update: Thu 04 Dec 2025 16:13:44 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 3: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 4: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: davzJFJcZOrXMy+uTYurQfrQjknCws3hr0RC2+d0v1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:47:3f:56:eb:01:98:10:07:1f:e8:4b:bd:88:6f:01:b6:af:bc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Dec 1 15:25:44 2025 GMT Not After : Dec 4 16:13:44 2025 GMT Subject: CN=1A9D46F2D872ECB8612073C3F58C9C53EC42FFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:00:e5:e8:d5:e9:ea:1d:b5:39:0b:6e:b5: 1f:e7:eb:f4:19:9f:f4:a1:6a:30:08:6c:0b:df:1e: 0f:eb:ff:3e:51:15:d3:79:c7:c3:1d:be:45:47:62: 0a:32:d8:19:1d:ca:da:cc:79:b7:58:b2:8c:fb:71: 21:80:df:ef:06:5d:2c:1e:3a:69:79:e5:4b:b1:d4: c6:6d:9b:4c:7e:37:82:dc:d6:6c:14:97:24:75:87: 2b:0f:39:96:1e:89:da:43:44:96:7a:b3:50:99:94: 24:de:58:af:7d:92:25:27:97:f4:e2:5e:cd:bf:7a: bc:8b:1c:9a:86:c4:39:ad:36:50:4d:b7:59:39:7f: 35:3f:4a:c7:78:44:e5:3a:59:af:f0:f4:83:a4:e5: ad:65:7c:c5:37:04:5d:be:e8:b4:52:e9:eb:95:b8: a5:09:c6:86:45:ba:37:55:9d:5f:ad:34:f7:af:39: 2d:f1:e1:20:b8:73:e4:29:cc:87:ea:47:08:cf:63: 63:42:49:43:37:38:ae:b2:ca:a7:d6:72:cc:f5:17: 0b:a1:49:e3:f6:24:18:ce:ae:52:ed:51:13:72:6b: 5c:f6:c1:70:6f:72:89:ef:63:ca:76:89:32:e0:76: d9:f1:22:57:be:ff:28:f4:fd:29:13:41:ba:0b:29: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:46:F2:D8:72:EC:B8:61:20:73:C3:F5:8C:9C:53:EC:42:FF:EA X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e9:2e:89:aa:df:94:72:09:5b:78:27:a2:5d:51:fa:dc:a7: 2c:c5:84:5a:d7:f2:fd:37:21:12:ee:be:ce:41:8d:0a:d3:bb: 86:1b:96:72:44:43:84:3c:cd:1a:b3:ab:25:0c:2e:25:a9:a8: cc:b1:ba:c8:7d:25:32:f3:17:c7:e0:14:6c:fe:85:33:c9:c7: ae:d7:9e:ef:f2:3a:5f:09:f8:62:a3:20:1b:14:eb:28:b9:5c: df:1f:d0:24:40:db:08:b7:10:20:70:a6:af:a0:51:6d:94:96: 6c:90:fb:00:94:9a:ee:e3:32:95:73:3e:b2:ee:5f:5f:8a:cb: 91:26:5f:7e:78:ed:05:92:b6:74:af:ef:89:fc:e8:27:56:ae: 70:4a:92:16:2f:f3:14:83:e3:ea:a7:fc:70:97:c1:aa:45:d4: f8:29:1d:ac:a6:1e:00:4c:5d:c5:42:31:8b:88:10:1a:a6:a3: 35:6f:ef:16:7b:98:e0:2a:34:9d:d3:f4:5d:77:fa:7a:08:46: 51:76:f5:53:f0:52:ad:eb:3a:b1:4b:42:aa:01:a5:58:0b:e3: 88:9d:59:bc:6f:b6:9a:5a:5f:84:67:57:a1:76:0f:25:61:c8: 24:94:fc:1e:5b:94:b0:40:9e:21:e4:95:6c:32:ea:91:80:d6: 10:64:72:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0c/VusBmBAHH+hLvYhvAbavvBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTEyMDExNTI1NDRaFw0yNTEyMDQxNjEzNDRaMDMxMTAvBgNV BAMTKDFBOUQ0NkYyRDg3MkVDQjg2MTIwNzNDM0Y1OEM5QzUzRUM0MkZGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7gDl6NXp6h21OQtutR/n6/QZ n/ShajAIbAvfHg/r/z5RFdN5x8MdvkVHYgoy2BkdytrMebdYsoz7cSGA3+8GXSwe Oml55Uux1MZtm0x+N4Lc1mwUlyR1hysPOZYeidpDRJZ6s1CZlCTeWK99kiUnl/Ti Xs2/eryLHJqGxDmtNlBNt1k5fzU/Ssd4ROU6Wa/w9IOk5a1lfMU3BF2+6LRS6euV uKUJxoZFujdVnV+tNPevOS3x4SC4c+QpzIfqRwjPY2NCSUM3OK6yyqfWcsz1Fwuh SeP2JBjOrlLtURNya1z2wXBvconvY8p2iTLgdtnxIle+/yj0/SkTQboLKepRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGp1G8thy7LhhIHPD9YycU+xC/+owHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHpLomq35RyCVt4J6JdUfrcpyzFhFrX8v03 IRLuvs5BjQrTu4YblnJEQ4Q8zRqzqyUMLiWpqMyxush9JTLzF8fgFGz+hTPJx67X nu/yOl8J+GKjIBsU6yi5XN8f0CRA2wi3ECBwpq+gUW2UlmyQ+wCUmu7jMpVzPrLu X1+Ky5EmX3547QWStnSv74n86CdWrnBKkhYv8xSD4+qn/HCXwapF1PgpHaymHgBM XcVCMYuIEBqmozVv7xZ7mOAqNJ3T9F13+noIRlF29VPwUq3rOrFLQqoBpVgL44id WbxvtppaX4RnV6F2DyVhyCSU/B5blLBAniHklWwy6pGA1hBkcso= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client