This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: H+YMeEwYdg4pxLFopxNISbHACsxPeBSkq/KEIX7NSQ4= Subject key identifier: B9:03:F8:86:F2:BA:93:A0:5E:C1:A2:63:8B:0B:2F:3A:21:B5:24:A2 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 71084EBB56A10756910BAD8BFD0A721790AEF3D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 0217 Signing time: Thu 04 Dec 2025 17:12:24 +0000 Manifest this update: Thu 04 Dec 2025 17:07:24 +0000 Manifest next update: Mon 08 Dec 2025 01:28:24 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) 2: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: zQNRbHlbDCHNRTBKprurNe3WzGkRg5eTCns6ELDBOEs=) 5: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:08:4e:bb:56:a1:07:56:91:0b:ad:8b:fd:0a:72:17:90:ae:f3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Dec 4 17:07:24 2025 GMT Not After : Dec 8 01:28:24 2025 GMT Subject: CN=B903F886F2BA93A05EC1A2638B0B2F3A21B524A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:43:43:bf:a9:84:3e:91:99:19:f5:c1:68: 13:a3:f3:39:5d:03:d5:3b:29:2f:0a:d2:1d:bc:7f: 9a:e9:f6:f3:36:28:81:57:99:95:f4:82:e9:1b:99: 6e:e4:13:55:01:75:4c:22:3e:d0:2a:cd:ef:c6:3b: ad:86:d7:0c:95:b2:79:17:fe:55:c0:7e:2b:29:aa: db:b7:84:85:97:2f:69:05:05:86:bc:1b:80:bf:88: b6:ed:5d:84:0c:73:2e:20:f4:21:a4:d4:c4:ee:3b: fa:f6:60:cd:cc:5a:40:de:8f:43:a3:24:d5:c5:14: 96:60:42:ba:f7:ec:53:5b:a1:a0:6e:0e:30:98:de: 56:02:e9:fd:07:64:12:f3:21:96:2e:92:94:96:ec: 31:03:2d:3c:b9:2f:44:3d:57:42:af:9d:a5:c3:0a: 0f:e9:3b:8e:0d:bf:f7:0a:14:54:05:55:9c:de:45: aa:bb:f1:c7:69:b5:e3:5a:90:07:14:2e:1b:60:c6: da:8b:cc:8a:e4:c8:9c:d5:69:64:cc:98:72:47:11: 93:79:95:39:d5:e8:9f:91:1a:5a:56:17:05:8c:85: d9:45:9e:64:f6:bd:fe:35:e3:82:8d:51:49:70:c3: 09:7f:84:6b:88:12:b5:53:98:84:80:c6:c2:0a:ed: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:F8:86:F2:BA:93:A0:5E:C1:A2:63:8B:0B:2F:3A:21:B5:24:A2 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b9:bf:36:50:05:20:a0:c3:77:5c:ef:6e:50:28:2d:5f:7e: fe:9b:68:9a:04:e9:b6:3d:43:a1:2a:7b:e7:ab:d6:c0:69:fb: d5:a1:b4:40:e2:74:dc:6f:1f:86:5b:9d:fb:d8:09:c0:59:be: 6a:54:ec:eb:2b:d6:51:03:23:c1:93:50:e0:4c:dd:b6:bd:f3: a4:2a:cb:8a:aa:e0:ec:a2:34:73:4f:ad:2b:d5:89:4a:0e:f2: 6f:f8:8f:62:90:4d:fa:a0:62:9c:62:c5:d0:6d:05:0d:10:ba: 39:a0:dc:65:d7:ea:a3:2d:27:c9:5f:39:43:ec:f8:72:a4:19: 9e:7b:c1:3e:b5:08:01:49:58:06:51:7a:8b:3c:43:0d:d9:b7: 01:e2:23:f6:fd:cc:d2:cf:14:8c:f8:6e:cf:ef:b2:41:ca:64: 8b:b8:2f:0c:81:5c:de:f9:64:d6:9d:1c:da:84:58:9d:cb:a4: 3f:fc:48:bd:29:a5:67:86:51:db:63:06:3e:1d:13:cd:d6:ec: 43:6d:93:ff:54:d4:41:32:a9:50:9f:97:b7:94:7e:b6:d0:a1: 5d:39:67:0f:8c:05:b6:68:c0:d9:2f:89:82:8f:1d:7a:52:85: 12:2b:ba:35:ac:77:0e:0c:c9:54:9d:ea:89:47:1b:04:39:28: 7f:ae:92:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQhOu1ahB1aRC62L/QpyF5Cu89cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTEyMDQxNzA3MjRaFw0yNTEyMDgwMTI4MjRaMDMxMTAvBgNV BAMTKEI5MDNGODg2RjJCQTkzQTA1RUMxQTI2MzhCMEIyRjNBMjFCNTI0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQckNDv6mEPpGZGfXBaBOj8zld A9U7KS8K0h28f5rp9vM2KIFXmZX0gukbmW7kE1UBdUwiPtAqze/GO62G1wyVsnkX /lXAfispqtu3hIWXL2kFBYa8G4C/iLbtXYQMcy4g9CGk1MTuO/r2YM3MWkDej0Oj JNXFFJZgQrr37FNboaBuDjCY3lYC6f0HZBLzIZYukpSW7DEDLTy5L0Q9V0KvnaXD Cg/pO44Nv/cKFFQFVZzeRaq78cdpteNakAcULhtgxtqLzIrkyJzVaWTMmHJHEZN5 lTnV6J+RGlpWFwWMhdlFnmT2vf4144KNUUlwwwl/hGuIErVTmISAxsIK7ZrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQP4hvK6k6BewaJjiwsvOiG1JKIwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW5vzZQBSCgw3dc725QKC1ffv6baJoE6bY9 Q6Eqe+er1sBp+9WhtEDidNxvH4ZbnfvYCcBZvmpU7Osr1lEDI8GTUOBM3ba986Qq y4qq4OyiNHNPrSvViUoO8m/4j2KQTfqgYpxixdBtBQ0Qujmg3GXX6qMtJ8lfOUPs +HKkGZ57wT61CAFJWAZReos8Qw3ZtwHiI/b9zNLPFIz4bs/vskHKZIu4LwyBXN75 ZNadHNqEWJ3LpD/8SL0ppWeGUdtjBj4dE83W7ENtk/9U1EEyqVCfl7eUfrbQoV05 Zw+MBbZowNkviYKPHXpShRIrujWsdw4MyVSd6olHGwQ5KH+uku8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:56 2025 by rpki-client