This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: EIlYxey2dh5988LD4G806T0zKb0BKeffztepKkq9I0w= Subject key identifier: 94:67:94:43:92:A6:84:1C:56:6C:3F:44:BA:7A:D9:DE:0A:55:72:9A Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 3676DE20582351253B6E0F2CA89A53033B11DAC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 031D Signing time: Sun 14 Dec 2025 20:32:18 +0000 Manifest this update: Sun 14 Dec 2025 20:27:18 +0000 Manifest next update: Thu 18 Dec 2025 03:34:18 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: O8sSjc2vY9K9DINh6MSzVhWP143hlhRJ1Tuzq//731c=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 03:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:76:de:20:58:23:51:25:3b:6e:0f:2c:a8:9a:53:03:3b:11:da:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Dec 14 20:27:18 2025 GMT Not After : Dec 18 03:34:18 2025 GMT Subject: CN=9467944392A6841C566C3F44BA7AD9DE0A55729A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:36:b1:c9:70:b5:81:a8:35:36:41:10:3b: a9:3e:78:83:c6:1d:1f:7c:b6:d2:5f:49:46:64:13: b3:93:9b:bd:a8:4c:77:1d:ff:9f:80:ff:ec:b1:4a: 21:ee:72:dc:55:67:39:ab:74:76:48:57:24:d7:65: 74:3f:fa:dc:1f:11:67:de:f2:c7:4e:2a:16:00:a7: 0b:c9:1a:91:92:89:45:f9:17:42:53:87:36:19:5d: 52:77:e0:ef:cd:03:32:84:4e:db:fa:e0:79:27:0a: 38:d5:f7:09:6b:1e:ea:1f:be:2a:4c:c8:b0:b7:01: 76:6c:69:c1:74:7b:c3:ca:f1:98:34:7b:a8:6d:59: 73:a4:21:f9:b1:c8:be:50:c6:9c:d1:39:74:2d:44: 3c:39:6f:3e:2d:76:01:72:60:ef:f5:73:57:d6:2d: 81:25:97:aa:e2:6f:9d:55:31:2a:2e:82:9e:4b:73: 04:00:2e:29:25:03:7d:c1:04:67:26:76:05:95:9c: bc:e8:01:fa:06:7c:c8:2a:4e:3f:20:74:f3:d0:ff: 42:80:5c:a5:25:a2:1a:9b:41:8d:58:2b:84:88:46: 44:f3:7f:82:8a:be:9e:e8:28:47:51:be:43:ae:de: 84:f0:01:d9:c4:38:ff:ba:44:ca:1a:04:1b:f4:fe: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:94:43:92:A6:84:1C:56:6C:3F:44:BA:7A:D9:DE:0A:55:72:9A X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:7a:5f:8d:97:1f:5f:9f:66:7a:99:d7:66:5f:c0:a2:52: ad:6c:e7:d9:c6:5b:0b:29:2a:cd:0c:d3:17:40:62:f7:3e:07: b5:a9:4c:29:ba:7e:58:bc:93:e8:67:ef:6a:4a:55:54:40:b2: 2b:bd:c1:f3:ee:c8:90:1c:b7:15:14:38:b6:34:23:82:2b:ee: 60:4d:2a:56:b5:55:7d:d9:98:26:7d:73:cb:ac:00:2e:75:09: ca:e0:0b:67:67:7f:bb:cc:8c:83:12:fb:1a:05:43:e7:4c:61: 05:35:cf:3d:5e:06:c3:81:d0:9d:57:0d:f2:39:dc:e6:45:02: 79:a8:fa:a9:28:3b:80:1e:18:00:45:6f:f2:8b:d0:99:5a:35: 53:cb:ba:83:6a:33:3b:d2:7e:c2:c0:a3:74:12:92:ca:91:8a: 99:5d:8f:6a:e0:14:2b:f9:f6:a0:b0:bd:11:08:4e:a6:a7:ef: 65:bc:19:41:6f:e8:94:cb:78:af:04:ed:db:2e:e8:a3:62:ab: d3:3e:1e:d2:c7:1c:15:cc:c3:e5:5a:a8:13:f4:b6:3b:33:aa: f8:2b:fe:ff:6b:53:40:de:40:1a:97:db:1b:6f:73:8c:b7:67: e3:07:67:25:ef:b6:36:09:ec:57:5d:84:a0:35:cc:b4:81:08: 49:5d:37:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnbeIFgjUSU7bg8sqJpTAzsR2sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTEyMTQyMDI3MThaFw0yNTEyMTgwMzM0MThaMDMxMTAvBgNV BAMTKDk0Njc5NDQzOTJBNjg0MUM1NjZDM0Y0NEJBN0FEOURFMEE1NTcyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEDaxyXC1gag1NkEQO6k+eIPG HR98ttJfSUZkE7OTm72oTHcd/5+A/+yxSiHuctxVZzmrdHZIVyTXZXQ/+twfEWfe 8sdOKhYApwvJGpGSiUX5F0JThzYZXVJ34O/NAzKETtv64HknCjjV9wlrHuofvipM yLC3AXZsacF0e8PK8Zg0e6htWXOkIfmxyL5QxpzROXQtRDw5bz4tdgFyYO/1c1fW LYEll6rib51VMSougp5LcwQALiklA33BBGcmdgWVnLzoAfoGfMgqTj8gdPPQ/0KA XKUlohqbQY1YK4SIRkTzf4KKvp7oKEdRvkOu3oTwAdnEOP+6RMoaBBv0/lR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGeUQ5KmhBxWbD9EunrZ3gpVcpowHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvael+Nlx9fn2Z6mddmX8CiUq1s59nGWwsp Ks0M0xdAYvc+B7WpTCm6fli8k+hn72pKVVRAsiu9wfPuyJActxUUOLY0I4Ir7mBN Kla1VX3ZmCZ9c8usAC51CcrgC2dnf7vMjIMS+xoFQ+dMYQU1zz1eBsOB0J1XDfI5 3OZFAnmo+qkoO4AeGABFb/KL0JlaNVPLuoNqMzvSfsLAo3QSksqRipldj2rgFCv5 9qCwvREITqan72W8GUFv6JTLeK8E7dsu6KNiq9M+HtLHHBXMw+VaqBP0tjszqvgr /v9rU0DeQBqX2xtvc4y3Z+MHZyXvtjYJ7FddhKA1zLSBCEldNxY= -----END CERTIFICATE-----Generated at Tue Dec 16 07:26:34 2025 by rpki-client