This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: c5twaZ82+T/01W+wTCOp+1hrrYJrO+AAPdzpmZmV8xo= Subject key identifier: DC:A0:5D:82:E6:12:36:15:FB:E3:C3:D7:3C:14:57:05:18:AD:81:A0 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 4F47DC739606AF593866268ECC53EEE136FC7C4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0239 Signing time: Wed 03 Dec 2025 00:12:15 +0000 Manifest this update: Wed 03 Dec 2025 00:07:15 +0000 Manifest next update: Sat 06 Dec 2025 03:34:15 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 3: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 6y0qQtaM97pnXH0opvckpP2xWKHKL+NEj8SWtIkcneo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:47:dc:73:96:06:af:59:38:66:26:8e:cc:53:ee:e1:36:fc:7c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Dec 3 00:07:15 2025 GMT Not After : Dec 6 03:34:15 2025 GMT Subject: CN=DCA05D82E6123615FBE3C3D73C14570518AD81A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:5d:54:4d:ec:3d:94:3b:e6:cb:c2:f6:c2: 7f:06:08:7b:77:a7:cf:54:f5:28:34:a4:88:a5:41: d7:ed:96:88:33:0d:a6:ad:a9:3e:54:35:5c:d6:ba: f0:c0:50:03:ad:ce:87:2c:e6:28:a1:cc:f4:c3:2b: 75:96:73:75:20:38:72:39:b1:4d:4f:7c:74:7a:75: 4b:c0:7b:c1:96:92:db:ab:56:1d:cd:c2:db:19:b1: 59:8c:46:e7:8c:25:0c:59:ef:9e:12:f8:ab:73:b1: a2:a8:db:74:92:f2:01:f3:39:23:d6:b7:71:d5:4f: 43:ad:f7:ab:08:75:5e:74:da:45:50:72:66:98:c6: 71:1d:13:17:43:63:44:1e:46:f4:e9:c1:9c:6b:e1: e6:35:dd:1a:89:a9:54:74:35:8f:8e:4c:53:6c:64: 75:ad:ef:2a:e3:97:54:7b:1b:cf:f4:92:d1:a9:25: f6:d9:6f:d1:d1:10:9a:53:7e:42:85:64:60:c7:d7: 67:d7:49:71:3a:00:d3:0f:19:6e:68:a0:8c:5b:74: f4:b2:55:cc:85:f8:16:6d:31:db:90:08:63:ed:40: 05:e9:b8:76:43:65:1c:5d:be:a5:13:aa:a6:6d:31: 4b:82:d1:d2:5b:71:cd:01:d5:97:4a:b4:3e:6a:65: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:5D:82:E6:12:36:15:FB:E3:C3:D7:3C:14:57:05:18:AD:81:A0 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ce:56:84:30:f7:2c:68:79:9e:ed:9a:4a:6c:dc:03:27:8c: d7:1b:06:43:e0:df:8f:5e:d1:46:85:85:f2:76:08:b6:96:8a: e6:77:60:2b:2b:f4:44:a9:2e:7a:f3:32:68:c1:3e:52:cc:4f: 38:18:87:0d:ed:22:a3:1c:38:51:1b:d3:99:dd:c9:0a:b2:2f: 84:04:8c:db:3e:8b:13:45:26:3e:d4:6b:1f:ed:e3:6a:81:1b: 9a:7e:75:a0:63:5f:f0:9e:13:5f:e3:3a:ec:d0:ad:b7:30:fb: 36:50:ac:39:6a:2a:48:69:be:09:a4:7d:1c:1c:de:7a:23:d9: 52:08:b3:80:e4:5a:f2:3a:47:e7:8f:eb:19:e1:a0:57:de:d4: 19:3f:b9:d5:6c:da:32:3a:02:00:cf:46:5a:dd:69:8b:33:70: 82:12:76:e2:8d:7f:af:31:78:d0:c6:f2:c6:cf:7b:14:46:83: 77:d1:ad:f7:47:38:3d:3a:79:76:db:ee:b4:17:80:b9:d1:8f: 67:68:e4:8b:db:ca:db:29:0c:0d:b8:2e:b5:b0:7f:69:02:55: 07:d6:7e:90:08:55:fb:e7:ed:b4:dc:67:9d:1c:c8:7c:3f:a3: e1:96:d2:19:e1:9b:f7:2e:21:9b:89:d1:c5:ad:b0:ff:69:2a: 39:69:a6:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0fcc5YGr1k4ZiaOzFPu4Tb8fEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTEyMDMwMDA3MTVaFw0yNTEyMDYwMzM0MTVaMDMxMTAvBgNV BAMTKERDQTA1RDgyRTYxMjM2MTVGQkUzQzNENzNDMTQ1NzA1MThBRDgxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTyF1UTew9lDvmy8L2wn8GCHt3 p89U9Sg0pIilQdftlogzDaatqT5UNVzWuvDAUAOtzocs5iihzPTDK3WWc3UgOHI5 sU1PfHR6dUvAe8GWkturVh3NwtsZsVmMRueMJQxZ754S+KtzsaKo23SS8gHzOSPW t3HVT0Ot96sIdV502kVQcmaYxnEdExdDY0QeRvTpwZxr4eY13RqJqVR0NY+OTFNs ZHWt7yrjl1R7G8/0ktGpJfbZb9HREJpTfkKFZGDH12fXSXE6ANMPGW5ooIxbdPSy VcyF+BZtMduQCGPtQAXpuHZDZRxdvqUTqqZtMUuC0dJbcc0B1ZdKtD5qZfUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3KBdguYSNhX748PXPBRXBRitgaAwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfOVoQw9yxoeZ7tmkps3AMnjNcbBkPg349e 0UaFhfJ2CLaWiuZ3YCsr9ESpLnrzMmjBPlLMTzgYhw3tIqMcOFEb05ndyQqyL4QE jNs+ixNFJj7Uax/t42qBG5p+daBjX/CeE1/jOuzQrbcw+zZQrDlqKkhpvgmkfRwc 3noj2VIIs4DkWvI6R+eP6xnhoFfe1Bk/udVs2jI6AgDPRlrdaYszcIISduKNf68x eNDG8sbPexRGg3fRrfdHOD06eXbb7rQXgLnRj2do5IvbytspDA24LrWwf2kCVQfW fpAIVfvn7bTcZ50cyHw/o+GW0hnhm/cuIZuJ0cWtsP9pKjlppmI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:38 2025 by rpki-client