This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: nWoVrGIAjOdEGwrXrzu7XCXr1fKesmx9nizDeDLaPjQ= Subject key identifier: D5:FB:FF:2B:FA:60:C6:A7:74:16:BC:C4:4C:DA:81:0D:70:17:73:C1 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 229FB551E5C507132F10F7E9A80B44A56F47B067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 024F Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 00:57:07 +0000 Manifest next update: Tue 09 Dec 2025 12:58:07 +0000 Files and hashes: 1: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: FrF87DCtf9gS82qlPB/6B/WvvdorFIFZX59vTqWCNWk=) 2: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 3: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 4: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 5: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) 6: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 7: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 8: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 9: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 10: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 11: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 12: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 13: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9f:b5:51:e5:c5:07:13:2f:10:f7:e9:a8:0b:44:a5:6f:47:b0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Dec 6 00:57:07 2025 GMT Not After : Dec 9 12:58:07 2025 GMT Subject: CN=D5FBFF2BFA60C6A77416BCC44CDA810D701773C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:3f:41:b6:7c:fe:4e:91:2d:96:04:2e:44: cd:06:bf:5b:fc:c3:34:7a:f7:ab:59:54:b7:e0:18: 69:36:bc:c0:37:2e:9a:6f:da:de:fa:09:cd:0c:c5: af:25:34:80:76:41:d5:34:67:c2:f8:0a:d7:ad:46: 43:12:16:7a:d3:6b:b1:e2:cc:16:cf:cf:e8:09:45: 6f:ad:bf:2b:f3:58:f7:71:23:3d:c9:36:f0:21:59: c5:cb:ba:12:7e:35:da:bc:c2:d7:8b:45:6f:86:5b: 93:3d:17:6d:1f:94:49:73:e0:9e:08:53:9d:81:fc: 4a:52:f2:b5:11:d3:72:5c:f5:95:b6:e4:2e:be:42: 10:e7:87:08:13:61:7a:1b:2e:c8:9d:af:fb:5b:28: ea:9d:48:2c:b5:76:cf:80:b8:d5:ee:eb:6e:10:70: 8e:af:c5:f2:24:ba:3b:4c:b5:23:b4:02:3f:a0:88: 45:8b:ec:82:43:cd:85:96:61:6f:d3:4f:ee:19:e0: 49:0d:61:07:5f:73:27:e7:99:50:36:35:cb:1c:87: 8d:7d:c0:7d:44:35:29:c8:fa:04:e7:62:3d:4e:11: 14:94:55:b7:01:33:63:cd:b9:81:7f:5e:47:83:42: d8:12:9b:c5:9a:c7:ba:06:d0:66:18:67:27:f1:ed: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:FF:2B:FA:60:C6:A7:74:16:BC:C4:4C:DA:81:0D:70:17:73:C1 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:07:4d:07:65:95:a1:0c:03:db:16:dd:6f:8c:cd:5a:17:7e: 9f:7d:3b:6a:4b:9e:53:c2:b4:45:34:4d:1d:97:3c:74:5f:24: 41:6e:b4:71:cf:19:56:9a:ef:53:8c:b3:85:18:f8:19:ae:0a: 70:1f:90:4a:b8:06:60:e2:c1:07:b1:05:0b:e5:d9:24:2c:05: 06:18:e8:ed:82:4c:49:73:e6:89:f0:a0:86:50:30:d1:42:82: 7f:31:46:88:a5:86:de:95:b0:12:fb:af:1c:9e:c7:45:c2:16: 26:b7:68:c3:f2:44:ac:73:d4:cf:49:43:92:87:99:be:08:26: f2:2c:27:5d:35:ba:53:69:5d:7b:cf:38:c1:a9:97:43:49:40: 12:cc:5c:01:cd:f5:ef:13:75:13:35:be:4d:29:39:db:ed:7b: ae:e2:4d:1f:d7:d6:06:5c:5c:71:c0:41:eb:ae:e7:72:d1:fa: 65:26:ab:3e:84:78:cb:11:92:98:0a:cb:0a:ef:f8:08:32:40: ec:a5:71:cd:c5:b7:3f:87:88:94:24:a4:b1:0d:21:b3:33:69: 3f:27:9f:32:53:3b:9a:a2:2f:e4:5d:dd:6a:ee:bd:46:a5:99: 97:ab:56:30:70:fb:ba:a1:08:fd:a7:ec:3e:52:5f:27:ae:f1: 4a:f0:8a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIp+1UeXFBxMvEPfpqAtEpW9HsGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTEyMDYwMDU3MDdaFw0yNTEyMDkxMjU4MDdaMDMxMTAvBgNV BAMTKEQ1RkJGRjJCRkE2MEM2QTc3NDE2QkNDNDRDREE4MTBENzAxNzczQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAST9Btnz+TpEtlgQuRM0Gv1v8 wzR696tZVLfgGGk2vMA3Lppv2t76Cc0Mxa8lNIB2QdU0Z8L4CtetRkMSFnrTa7Hi zBbPz+gJRW+tvyvzWPdxIz3JNvAhWcXLuhJ+Ndq8wteLRW+GW5M9F20flElz4J4I U52B/EpS8rUR03Jc9ZW25C6+QhDnhwgTYXobLsidr/tbKOqdSCy1ds+AuNXu624Q cI6vxfIkujtMtSO0Aj+giEWL7IJDzYWWYW/TT+4Z4EkNYQdfcyfnmVA2Ncsch419 wH1ENSnI+gTnYj1OERSUVbcBM2PNuYF/XkeDQtgSm8Wax7oG0GYYZyfx7ZOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fv/K/pgxqd0FrzETNqBDXAXc8EwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgHTQdllaEMA9sW3W+MzVoXfp99O2pLnlPC tEU0TR2XPHRfJEFutHHPGVaa71OMs4UY+BmuCnAfkEq4BmDiwQexBQvl2SQsBQYY 6O2CTElz5onwoIZQMNFCgn8xRoilht6VsBL7rxyex0XCFia3aMPyRKxz1M9JQ5KH mb4IJvIsJ101ulNpXXvPOMGpl0NJQBLMXAHN9e8TdRM1vk0pOdvte67iTR/X1gZc XHHAQeuu53LR+mUmqz6EeMsRkpgKywrv+AgyQOylcc3Ftz+HiJQkpLENIbMzaT8n nzJTO5qiL+Rd3WruvUalmZerVjBw+7qhCP2n7D5SXyeu8UrwivQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:02 2025 by rpki-client