This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 7bccgyxWyK6NbZSelk4rPOsrr2SFNs/GHdjL04f3GSs= Subject key identifier: C3:BD:41:A4:5C:AE:7E:CA:20:56:E5:A3:AF:E8:7F:CD:99:D8:4B:9F Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 2ECF0D159C92ECB2BD885234265D44BED42619D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 01A0 Signing time: Thu 04 Dec 2025 20:52:00 +0000 Manifest this update: Thu 04 Dec 2025 20:47:00 +0000 Manifest next update: Mon 08 Dec 2025 01:15:00 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: 4w4u+MmC0TXTyY7/C+aDkqA68lNQq6ZE/Iz4whFIiUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cf:0d:15:9c:92:ec:b2:bd:88:52:34:26:5d:44:be:d4:26:19:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Dec 4 20:47:00 2025 GMT Not After : Dec 8 01:15:00 2025 GMT Subject: CN=C3BD41A45CAE7ECA2056E5A3AFE87FCD99D84B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:da:54:e5:fd:67:87:0b:90:e7:68:c4:6a: 82:c5:55:e4:34:b4:41:84:cc:80:78:1b:be:c7:29: c5:14:98:6e:cc:22:de:5f:b9:1b:96:9a:42:3c:7b: 81:68:60:32:13:50:08:be:82:5e:f4:c2:0f:e7:36: 6b:3b:dc:53:6d:56:a8:a4:71:b3:6c:af:ce:11:fb: d4:8c:e8:44:19:5c:87:b0:7e:01:40:22:81:cc:54: 4d:06:b7:9a:87:46:75:53:0e:a9:75:67:bd:11:21: 4b:ca:c5:52:30:c9:11:66:83:1b:8f:37:fa:b8:1e: 21:47:a1:88:12:c7:82:33:f2:5b:2c:8d:19:70:63: 0e:3d:3e:17:d7:b7:f5:e5:d4:4c:67:78:ee:ac:02: a1:3e:af:0d:c3:03:2a:8f:e4:9c:9b:1e:78:72:4e: 28:b5:a6:1e:cf:19:fc:00:3b:67:cf:98:05:08:a6: fe:42:fa:2c:0a:7c:85:a0:13:7e:10:d2:b8:7d:bc: 40:d2:6c:aa:3a:4d:88:56:90:85:3d:ca:4b:1f:fc: 7a:36:bd:99:98:3e:42:59:41:8c:1b:49:92:ee:30: c3:49:36:d6:86:c0:ab:a5:38:37:2d:40:3c:5e:c1: b2:48:93:be:72:68:e1:a8:32:12:d6:30:3e:79:41: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:41:A4:5C:AE:7E:CA:20:56:E5:A3:AF:E8:7F:CD:99:D8:4B:9F X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9b:9c:9c:40:fd:b4:ae:a3:75:f7:9a:86:16:1a:7f:cd:b3: c4:0f:5c:ef:9f:7c:fa:ed:6a:d6:da:f5:b5:7a:ec:18:8f:0a: d9:fe:b3:93:ad:da:0d:fc:b4:c5:29:c3:ff:05:96:09:5b:4e: b9:e6:43:d0:4a:c6:56:5f:e4:50:d9:5d:ce:a5:2b:b8:32:61: 85:b9:cc:ff:4d:cd:90:6d:4b:b5:05:57:8c:6a:61:ea:af:fb: 47:37:30:6c:91:f0:56:24:c2:b0:cd:2e:45:02:a4:a8:0d:ec: a1:42:e8:da:0e:19:c5:3d:6a:09:b8:16:86:9d:fc:ed:21:a2: 94:9c:eb:ac:f7:3d:1e:86:02:12:1e:e0:5d:27:63:ac:06:d3: 3a:39:86:1c:69:95:d3:a7:f4:7c:b8:84:5c:9d:4f:2c:06:72: bd:00:29:31:b1:f0:98:d4:f1:5a:e4:95:66:3b:ac:9a:a5:37: 6a:c0:d8:d2:d8:77:58:d2:5a:f7:cd:d7:9d:20:f2:27:a8:59: 50:c7:4d:ca:0b:6e:da:6b:22:6a:f2:75:0d:6c:54:00:ca:80: b1:09:6f:49:a2:7f:fd:ba:68:3e:c3:e8:28:68:62:b8:cb:95: c6:26:c5:03:2e:1d:06:8f:52:64:1f:10:db:4b:58:b7:8d:d7: 28:35:6b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULs8NFZyS7LK9iFI0Jl1EvtQmGdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTEyMDQyMDQ3MDBaFw0yNTEyMDgwMTE1MDBaMDMxMTAvBgNV BAMTKEMzQkQ0MUE0NUNBRTdFQ0EyMDU2RTVBM0FGRTg3RkNEOTlEODRCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB9pU5f1nhwuQ52jEaoLFVeQ0 tEGEzIB4G77HKcUUmG7MIt5fuRuWmkI8e4FoYDITUAi+gl70wg/nNms73FNtVqik cbNsr84R+9SM6EQZXIewfgFAIoHMVE0Gt5qHRnVTDql1Z70RIUvKxVIwyRFmgxuP N/q4HiFHoYgSx4Iz8lssjRlwYw49PhfXt/Xl1ExneO6sAqE+rw3DAyqP5JybHnhy Tii1ph7PGfwAO2fPmAUIpv5C+iwKfIWgE34Q0rh9vEDSbKo6TYhWkIU9yksf/Ho2 vZmYPkJZQYwbSZLuMMNJNtaGwKulODctQDxewbJIk75yaOGoMhLWMD55QXfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw71BpFyufsogVuWjr+h/zZnYS58wHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIybnJxA/bSuo3X3moYWGn/Ns8QPXO+ffPrt atba9bV67BiPCtn+s5Ot2g38tMUpw/8FlglbTrnmQ9BKxlZf5FDZXc6lK7gyYYW5 zP9NzZBtS7UFV4xqYeqv+0c3MGyR8FYkwrDNLkUCpKgN7KFC6NoOGcU9agm4Foad /O0hopSc66z3PR6GAhIe4F0nY6wG0zo5hhxpldOn9Hy4hFydTywGcr0AKTGx8JjU 8VrklWY7rJqlN2rA2NLYd1jSWvfN150g8ieoWVDHTcoLbtprImrydQ1sVADKgLEJ b0mif/26aD7D6ChoYrjLlcYmxQMuHQaPUmQfENtLWLeN1yg1a+0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:14 2025 by rpki-client