This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: CiC0H4OxLTpWtFJC+Pabef6l/ZuS5q5tFZZl+iNt4dI= Subject key identifier: DA:CB:6D:61:7E:FD:E1:AA:A9:73:9C:B9:8F:2C:CD:E3:A3:02:0A:32 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 54659CEB2FC1AF76CA08E46ED53CAF3FC85F6036 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 0253 Signing time: Mon 15 Dec 2025 19:02:11 +0000 Manifest this update: Mon 15 Dec 2025 18:57:11 +0000 Manifest next update: Thu 18 Dec 2025 23:13:11 +0000 Files and hashes: 1: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: bDRrDqIXbwGWTa637TY7mbnAd11opYnhzn/wo7zNeLY=) 2: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 3: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=) 4: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 5: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 6: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=) 7: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 8: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 9: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 10: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 11: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 12: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 13: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:65:9c:eb:2f:c1:af:76:ca:08:e4:6e:d5:3c:af:3f:c8:5f:60:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Dec 15 18:57:11 2025 GMT Not After : Dec 18 23:13:11 2025 GMT Subject: CN=DACB6D617EFDE1AAA9739CB98F2CCDE3A3020A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:05:74:4e:6c:bd:d4:8f:f4:cf:d5:bb:91: 76:ce:af:ef:95:6c:bc:9c:cd:9a:d6:52:cf:89:bf: 74:2d:84:63:a7:09:00:5c:63:e1:d6:4b:a4:44:9f: 56:ad:2e:c3:28:9f:d8:cf:99:6f:94:b1:2f:b4:a3: 11:c8:a0:0a:2b:21:14:ab:98:1c:89:ef:b0:3b:9f: 57:3c:03:ac:ed:4a:85:78:32:f0:6c:cd:1b:dc:fc: 1a:da:4b:aa:1a:1f:89:a6:98:3c:a8:27:62:03:93: 79:a4:3a:3f:ba:06:30:4a:f4:f6:b8:2b:d0:f2:43: 7f:ea:4a:21:fa:d9:3b:bb:1d:4b:66:e7:86:de:bd: 1e:66:a9:5e:31:05:e6:c9:f9:d9:85:45:01:a1:6d: 81:33:4f:d1:4a:88:60:99:df:f2:75:86:24:17:3e: c2:81:ec:13:c8:45:71:28:bb:b5:3f:aa:47:aa:94: b1:31:a5:a7:f0:6a:b6:76:ee:42:6e:1d:63:27:0c: b4:09:44:d7:ca:91:aa:95:4a:e3:52:44:27:27:43: 45:11:c9:fd:33:ab:02:db:66:d9:48:59:2d:99:17: 19:62:94:3d:e3:2f:ad:4d:4b:ce:93:d1:1b:7c:e5: a0:6c:72:ab:ef:71:f0:4a:17:ac:c8:b5:2a:cd:47: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:6D:61:7E:FD:E1:AA:A9:73:9C:B9:8F:2C:CD:E3:A3:02:0A:32 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e7:b8:11:85:99:5b:01:a2:c7:66:d7:d8:e6:89:87:1c:12: 5a:e5:18:7d:0b:13:4d:88:2b:b1:6d:a3:24:e6:a9:4f:09:8e: ae:cf:bc:24:56:51:1f:b7:1f:ee:09:20:03:15:8a:d8:ae:24: 4c:31:3a:33:05:c6:9d:05:f1:32:49:5f:14:d3:f9:d9:4e:7c: a0:ea:b9:e9:47:d5:1f:73:87:13:d4:26:92:f6:cd:d7:e2:3e: b1:83:c5:53:d4:44:92:9a:1c:d9:fa:cd:27:a3:4a:3a:5f:bf: 8d:a5:28:9e:e5:15:6c:5e:db:8e:8d:14:6b:c1:cb:d3:86:b9: 18:46:70:ca:af:6a:cc:11:eb:41:1b:51:2d:e1:e1:c6:a4:39: 45:cb:26:da:74:a0:d6:a1:a5:78:81:aa:3b:60:73:ad:e2:da: a1:36:d6:4f:aa:ac:a4:1d:5b:2a:7f:3f:0c:81:d7:40:9b:5a: 3d:84:8e:cd:c5:f9:37:72:c9:26:2c:4f:e1:84:7d:1a:8c:69: a6:ba:50:fb:64:a5:d8:d3:94:cc:ed:00:b4:99:9b:cb:f3:dd: b6:0e:32:ac:40:72:8d:af:d1:53:c7:2c:d9:07:c0:e7:e1:bc: 2c:15:47:cc:f2:b6:59:d9:7c:08:65:46:fb:8f:d5:18:74:83: cb:c4:f7:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGWc6y/Br3bKCORu1TyvP8hfYDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTEyMTUxODU3MTFaFw0yNTEyMTgyMzEzMTFaMDMxMTAvBgNV BAMTKERBQ0I2RDYxN0VGREUxQUFBOTczOUNCOThGMkNDREUzQTMwMjBBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6wV0Tmy91I/0z9W7kXbOr++V bLyczZrWUs+Jv3QthGOnCQBcY+HWS6REn1atLsMon9jPmW+UsS+0oxHIoAorIRSr mByJ77A7n1c8A6ztSoV4MvBszRvc/BraS6oaH4mmmDyoJ2IDk3mkOj+6BjBK9Pa4 K9DyQ3/qSiH62Tu7HUtm54bevR5mqV4xBebJ+dmFRQGhbYEzT9FKiGCZ3/J1hiQX PsKB7BPIRXEou7U/qkeqlLExpafwarZ27kJuHWMnDLQJRNfKkaqVSuNSRCcnQ0UR yf0zqwLbZtlIWS2ZFxlilD3jL61NS86T0Rt85aBscqvvcfBKF6zItSrNR9vLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sttYX794aqpc5y5jyzN46MCCjIwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALznuBGFmVsBosdm19jmiYccElrlGH0LE02I K7FtoyTmqU8Jjq7PvCRWUR+3H+4JIAMVitiuJEwxOjMFxp0F8TJJXxTT+dlOfKDq uelH1R9zhxPUJpL2zdfiPrGDxVPURJKaHNn6zSejSjpfv42lKJ7lFWxe246NFGvB y9OGuRhGcMqvaswR60EbUS3h4cakOUXLJtp0oNahpXiBqjtgc63i2qE21k+qrKQd Wyp/PwyB10CbWj2Ejs3F+TdyySYsT+GEfRqMaaa6UPtkpdjTlMztALSZm8vz3bYO MqxAco2v0VPHLNkHwOfhvCwVR8zytlnZfAhlRvuP1Rh0g8vE924= -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:53 2025 by rpki-client