This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: vQk2sMsBnqNF9zkTNUfTOoYLy9ZzAN/huam6EBl98XQ= Subject key identifier: D6:5C:10:21:58:F9:96:A5:99:6D:01:D2:6A:44:65:F4:5A:3C:E7:FA Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 394C987C6E7555C7C4040EFC7DF7C230E5D6746A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 025D Signing time: Fri 05 Dec 2025 17:32:00 +0000 Manifest this update: Fri 05 Dec 2025 17:27:00 +0000 Manifest next update: Tue 09 Dec 2025 03:05:00 +0000 Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 3: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: 9amYTVnPMtJiugNtMZ79xKlH43DakgrzA4L9TS8+zAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4c:98:7c:6e:75:55:c7:c4:04:0e:fc:7d:f7:c2:30:e5:d6:74:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Dec 5 17:27:00 2025 GMT Not After : Dec 9 03:05:00 2025 GMT Subject: CN=D65C102158F996A5996D01D26A4465F45A3CE7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:ed:e8:3d:f5:b5:34:00:6d:9d:e4:c7:29: 8c:c3:31:19:77:0c:fe:45:d1:ce:7c:28:ee:42:39: 16:8b:bf:bf:e2:0f:3b:17:41:8f:78:e3:c7:c4:1a: 37:0d:59:cc:e7:76:16:a0:29:a4:14:40:01:c9:a4: 93:08:dc:a2:82:cd:e2:e8:05:e2:f0:a4:7c:69:29: 27:26:d3:6a:92:89:0a:f9:0d:f3:e6:22:ac:fb:06: 98:c3:77:98:ad:39:a4:94:2b:11:53:ba:51:15:4a: 3b:03:73:85:c0:5a:46:b3:42:d5:bd:f6:ae:cb:b7: 83:18:e5:c2:09:3c:d6:a6:4f:ff:3c:f7:96:9a:8b: 99:56:30:0e:14:b1:26:6d:2c:81:3f:fb:7b:12:a0: bd:55:f8:c0:99:3e:dd:8c:c9:12:cf:f7:ba:f8:2e: 4a:90:36:0c:34:87:b4:6e:8f:01:e4:42:84:d6:96: 12:66:c4:3f:a6:62:6f:48:03:bb:7b:2d:27:30:03: 24:1c:8b:a7:fe:27:ca:34:83:55:38:46:ce:bb:32: 9d:06:39:d8:9e:2d:45:73:38:d5:71:66:52:71:99: 25:0f:54:2a:ea:44:74:49:86:32:1c:3f:aa:0e:f5: 34:c5:97:00:0d:2c:50:73:e7:9c:ff:77:80:4e:5b: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5C:10:21:58:F9:96:A5:99:6D:01:D2:6A:44:65:F4:5A:3C:E7:FA X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:26:f2:e0:bc:fc:83:91:e6:0d:39:63:30:1e:fb:83:d1:f7: ba:fa:75:69:8f:90:14:c0:4c:20:34:eb:1d:16:c7:4e:8f:96: 04:30:6f:b2:0c:55:06:8f:e3:5c:98:68:eb:d6:92:fd:56:d9: 3d:23:66:d9:14:eb:66:04:7a:2f:d5:94:08:89:af:26:51:04: 73:06:c1:ba:f0:82:40:31:1b:cd:62:9f:e1:35:79:91:c3:76: f9:30:92:6f:42:44:47:01:98:ed:7f:c1:47:48:ba:da:b0:46: 7b:38:3c:ca:35:14:90:21:38:a8:3e:47:a4:5b:82:0e:b5:31: 81:5d:a8:95:e6:bc:66:76:5f:9c:c3:51:02:ef:94:a6:8c:c4: eb:3f:7c:da:a5:1b:77:bc:3d:91:db:fc:26:ef:ec:67:b5:56: c8:fc:31:93:68:1b:dd:5e:e7:a1:ba:55:a7:55:2f:49:78:13: ff:37:a6:77:64:4f:75:f6:41:12:2c:f6:44:a6:d3:e7:95:f7: 25:7a:6f:c8:c4:ac:0e:b3:19:11:6e:05:34:dd:3b:31:d6:75: dd:8e:02:7d:41:e4:53:6a:af:dc:4f:dc:e4:f9:70:b0:68:4c: 6a:2c:26:41:fe:eb:18:78:e4:d7:9e:64:8c:7a:fe:98:b6:e1: 30:a6:3a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUyYfG51VcfEBA78fffCMOXWdGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTEyMDUxNzI3MDBaFw0yNTEyMDkwMzA1MDBaMDMxMTAvBgNV BAMTKEQ2NUMxMDIxNThGOTk2QTU5OTZEMDFEMjZBNDQ2NUY0NUEzQ0U3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIE+3oPfW1NABtneTHKYzDMRl3 DP5F0c58KO5CORaLv7/iDzsXQY9448fEGjcNWczndhagKaQUQAHJpJMI3KKCzeLo BeLwpHxpKScm02qSiQr5DfPmIqz7BpjDd5itOaSUKxFTulEVSjsDc4XAWkazQtW9 9q7Lt4MY5cIJPNamT/8895aai5lWMA4UsSZtLIE/+3sSoL1V+MCZPt2MyRLP97r4 LkqQNgw0h7RujwHkQoTWlhJmxD+mYm9IA7t7LScwAyQci6f+J8o0g1U4Rs67Mp0G OdieLUVzONVxZlJxmSUPVCrqRHRJhjIcP6oO9TTFlwANLFBz55z/d4BOW/kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lwQIVj5lqWZbQHSakRl9Fo85/owHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwm8uC8/IOR5g05YzAe+4PR97r6dWmPkBTA TCA06x0Wx06PlgQwb7IMVQaP41yYaOvWkv1W2T0jZtkU62YEei/VlAiJryZRBHMG wbrwgkAxG81in+E1eZHDdvkwkm9CREcBmO1/wUdIutqwRns4PMo1FJAhOKg+R6Rb gg61MYFdqJXmvGZ2X5zDUQLvlKaMxOs/fNqlG3e8PZHb/Cbv7Ge1Vsj8MZNoG91e 56G6VadVL0l4E/83pndkT3X2QRIs9kSm0+eV9yV6b8jErA6zGRFuBTTdOzHWdd2O An1B5FNqr9xP3OT5cLBoTGosJkH+6xh45NeeZIx6/pi24TCmOiM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:39 2025 by rpki-client