This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: zoi64C9FU3g7a5xWNPR+llJdd9WqzzhHe0qy5dc2bBE= Subject key identifier: FD:82:9E:FF:9D:FD:51:5F:9A:28:25:A1:AC:A5:4B:74:0A:0F:13:50 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 44034E99BFA35E4F90CCBD4DC71953FC03EFAD63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: EC Signing time: Thu 04 Dec 2025 18:42:56 +0000 Manifest this update: Thu 04 Dec 2025 18:37:56 +0000 Manifest next update: Mon 08 Dec 2025 03:27:56 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: WUXlnKAVI8B3PXv30USllcnQmKZ7225rLtqj6L+5sP0=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:03:4e:99:bf:a3:5e:4f:90:cc:bd:4d:c7:19:53:fc:03:ef:ad:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Dec 4 18:37:56 2025 GMT Not After : Dec 8 03:27:56 2025 GMT Subject: CN=FD829EFF9DFD515F9A2825A1ACA54B740A0F1350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:02:fe:bb:bc:ea:b0:3c:f0:c7:c2:04:68: 10:9f:ad:86:95:80:d3:71:92:5e:73:8b:b8:f0:8b: af:59:10:cf:98:36:51:a7:ad:e3:71:47:82:52:57: 12:56:ed:f5:41:d0:64:4b:5d:fd:98:a0:22:f8:95: cb:8c:d2:df:01:ec:86:1d:df:b4:3a:19:52:2c:b3: 51:d2:3b:74:86:07:92:05:ad:25:d4:8f:65:66:b5: 34:7f:be:42:91:f5:13:8a:36:0e:fd:41:1c:4d:8b: a8:97:ab:52:22:33:00:cf:eb:73:4b:ba:94:ea:1e: f9:43:32:37:53:1e:98:05:6f:3d:7b:40:4b:fd:17: 7b:95:e2:d6:19:2a:73:b1:a1:13:d2:fc:54:87:03: 36:dd:aa:cf:91:58:ad:5e:3c:60:6c:26:54:be:50: d5:8c:f6:75:a9:09:d1:95:c0:21:55:17:af:d0:0f: eb:4b:8c:3a:88:93:5e:3a:34:b4:c7:05:f1:be:c5: ed:99:a0:a2:f2:09:4d:21:55:e1:2d:14:da:86:16: 6a:a4:e6:a5:b7:8f:a1:ad:e7:74:b3:44:de:59:f0: f7:39:2c:0a:2f:27:46:ac:76:2b:b1:6d:47:17:bf: a2:be:bc:fd:47:22:86:fe:90:4d:63:29:31:6a:02: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:82:9E:FF:9D:FD:51:5F:9A:28:25:A1:AC:A5:4B:74:0A:0F:13:50 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f2:8a:3a:2e:ea:ba:e9:b5:f1:7f:5b:8f:38:d5:40:ee:c9: 05:0f:b4:3b:43:11:cb:c5:2a:74:e4:f6:a8:e9:ee:eb:96:48: 49:f1:34:c4:70:65:38:fd:e2:21:bc:d0:73:d4:4f:3b:f3:8c: 61:45:97:8d:f3:00:86:92:1c:67:a2:f8:7f:d4:80:33:45:16: 9a:a7:56:43:97:61:24:41:b9:11:c2:16:9a:1a:7a:7b:32:96: ed:ea:bf:50:25:66:90:7d:71:fc:2c:b8:26:15:e5:bc:ec:8f: e0:33:b0:70:b2:0b:91:26:63:d6:e5:36:9c:19:7d:16:98:cf: a4:e1:73:50:2a:b9:1c:03:a5:ac:07:63:e0:64:25:56:d3:59: ee:64:bd:6f:3c:6e:f4:77:ec:ee:8f:d9:a7:63:45:f0:95:3f: e0:dc:b0:b1:63:3c:ea:fd:8c:c6:2e:b6:e2:52:00:fc:76:18: be:70:5b:4f:87:75:3f:c2:36:c9:d7:cf:e4:a7:06:c9:62:6f: c2:3d:93:0f:ae:5d:7c:0d:a2:21:63:76:c5:ec:2e:35:2e:1e: 7e:58:ef:32:05:1b:69:71:ef:61:80:31:fb:9c:09:fe:71:6f: 74:27:0e:c1:58:2f:de:d4:b9:ee:93:db:20:cf:04:15:13:83: 0a:29:4b:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURANOmb+jXk+QzL1NxxlT/APvrWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTEyMDQxODM3NTZaFw0yNTEyMDgwMzI3NTZaMDMxMTAvBgNV BAMTKEZEODI5RUZGOURGRDUxNUY5QTI4MjVBMUFDQTU0Qjc0MEEwRjEzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWQL+u7zqsDzwx8IEaBCfrYaV gNNxkl5zi7jwi69ZEM+YNlGnreNxR4JSVxJW7fVB0GRLXf2YoCL4lcuM0t8B7IYd 37Q6GVIss1HSO3SGB5IFrSXUj2VmtTR/vkKR9ROKNg79QRxNi6iXq1IiMwDP63NL upTqHvlDMjdTHpgFbz17QEv9F3uV4tYZKnOxoRPS/FSHAzbdqs+RWK1ePGBsJlS+ UNWM9nWpCdGVwCFVF6/QD+tLjDqIk146NLTHBfG+xe2ZoKLyCU0hVeEtFNqGFmqk 5qW3j6Gt53SzRN5Z8Pc5LAovJ0asdiuxbUcXv6K+vP1HIob+kE1jKTFqAguDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YKe/539UV+aKCWhrKVLdAoPE1AwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXyijou6rrptfF/W4841UDuyQUPtDtDEcvF KnTk9qjp7uuWSEnxNMRwZTj94iG80HPUTzvzjGFFl43zAIaSHGei+H/UgDNFFpqn VkOXYSRBuRHCFpoaensylu3qv1AlZpB9cfwsuCYV5bzsj+AzsHCyC5EmY9blNpwZ fRaYz6Thc1AquRwDpawHY+BkJVbTWe5kvW88bvR37O6P2adjRfCVP+DcsLFjPOr9 jMYutuJSAPx2GL5wW0+HdT/CNsnXz+SnBslib8I9kw+uXXwNoiFjdsXsLjUuHn5Y 7zIFG2lx72GAMfucCf5xb3QnDsFYL97Uue6T2yDPBBUTgwopS90= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:51 2025 by rpki-client