This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: v+Te2TVR2jeWtuWsemcXTGp8q5bbsh0qXuz01fAFyqc= Subject key identifier: 81:D5:45:03:44:8B:C9:51:C0:E8:33:A9:6C:FD:44:70:73:59:CB:55 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 44A86E8944AF8A859582616D7FCBBBFDB14CF730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04FF Signing time: Fri 05 Dec 2025 19:40:51 +0000 Manifest this update: Fri 05 Dec 2025 19:35:51 +0000 Manifest next update: Mon 08 Dec 2025 20:44:51 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: aNZVy7mdZOoljDMz7WcKk+fJOycTsQ634boZh+D/n2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a8:6e:89:44:af:8a:85:95:82:61:6d:7f:cb:bb:fd:b1:4c:f7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Dec 5 19:35:51 2025 GMT Not After : Dec 8 20:44:51 2025 GMT Subject: CN=81D54503448BC951C0E833A96CFD44707359CB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:42:d7:2e:63:c4:06:ef:18:48:8a:68:aa: 70:24:2b:f8:38:d0:31:e2:1d:0c:df:8b:05:99:16: 17:69:95:91:f4:2b:d2:39:26:6c:52:16:31:7a:7e: 05:41:0b:ab:71:02:a5:cc:7d:60:e1:0d:62:ae:e1: 09:46:33:50:84:4b:9a:d7:1d:b6:8f:ed:52:be:88: f3:fa:9c:4a:60:34:55:5a:77:c7:9d:03:ce:71:93: 52:e7:34:31:65:ea:0e:20:0b:fd:42:2f:7a:86:a1: 3e:b5:63:81:ba:e2:6a:c6:d0:06:fe:88:31:1b:d9: 0b:21:93:0e:6d:f2:47:b2:5d:f7:d0:13:95:38:b9: 7c:2b:7e:5a:4a:cf:aa:4a:5c:d4:b5:af:91:6b:80: 2d:a6:46:f1:1a:93:38:22:60:06:a5:f1:4a:45:b1: 7a:39:4e:93:51:ce:24:56:e2:67:ce:8c:dc:ef:df: 7e:ff:30:e5:d4:01:cc:3d:80:13:48:a6:b2:88:97: 0a:73:50:3b:1d:48:67:f0:f6:5d:a0:9d:33:47:28: 8a:38:7f:5c:1f:e6:2c:26:c9:62:38:6f:3c:38:38: 9d:0c:fd:25:1e:8e:a4:5f:62:39:d8:13:0e:ce:73: b6:74:01:69:49:13:1b:a0:d2:bf:fa:70:78:21:2c: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:45:03:44:8B:C9:51:C0:E8:33:A9:6C:FD:44:70:73:59:CB:55 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:df:9c:fe:e4:11:a6:9f:23:e5:98:7a:de:6a:e3:e0:e6: 70:52:4d:04:69:2d:fd:17:3e:21:a4:71:06:69:a5:c4:df:db: 65:27:31:cd:63:89:f7:dc:e7:e6:cc:29:77:7c:5a:e5:ac:4e: 26:76:86:50:50:b6:bb:08:28:e5:10:01:69:64:e2:6f:d4:ee: 86:3f:c2:b1:a7:d2:2c:54:6b:8a:9b:36:2f:b4:8d:0e:59:ef: 34:97:32:f2:ad:60:3f:40:a7:c9:02:d1:0f:f8:d8:46:3b:4c: 5e:09:61:d4:4a:e4:84:5e:62:f1:30:3f:fb:65:1d:36:18:bb: 70:29:d6:a1:c9:82:79:d4:78:9d:d9:6d:aa:ed:d1:fd:01:d2: 73:0c:77:71:d5:d3:59:b7:30:ec:12:e4:8e:2c:81:a6:48:ec: 4f:52:b5:fa:b3:e8:68:bf:f9:53:f3:49:76:08:ae:ef:28:11: 5a:89:f0:71:d1:b5:e7:0d:3d:e0:ce:ba:e3:ef:a1:f9:36:c8: e2:7f:fb:2e:5f:bf:0e:49:b2:9d:e9:f9:46:3a:08:4e:15:10: 58:5e:6c:3e:ab:38:60:9d:c6:78:62:18:6c:e1:46:38:90:66: fe:73:f5:b3:96:2e:11:a9:a6:f8:60:52:b7:79:e8:0c:e1:cf: 75:87:23:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKhuiUSvioWVgmFtf8u7/bFM9zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTEyMDUxOTM1NTFaFw0yNTEyMDgyMDQ0NTFaMDMxMTAvBgNV BAMTKDgxRDU0NTAzNDQ4QkM5NTFDMEU4MzNBOTZDRkQ0NDcwNzM1OUNCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0kLXLmPEBu8YSIpoqnAkK/g4 0DHiHQzfiwWZFhdplZH0K9I5JmxSFjF6fgVBC6txAqXMfWDhDWKu4QlGM1CES5rX HbaP7VK+iPP6nEpgNFVad8edA85xk1LnNDFl6g4gC/1CL3qGoT61Y4G64mrG0Ab+ iDEb2Qshkw5t8keyXffQE5U4uXwrflpKz6pKXNS1r5FrgC2mRvEakzgiYAal8UpF sXo5TpNRziRW4mfOjNzv337/MOXUAcw9gBNIprKIlwpzUDsdSGfw9l2gnTNHKIo4 f1wf5iwmyWI4bzw4OJ0M/SUejqRfYjnYEw7Oc7Z0AWlJExug0r/6cHghLH2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdVFA0SLyVHA6DOpbP1EcHNZy1UwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd+35z+5BGmnyPlmHreauPg5nBSTQRpLf0X PiGkcQZppcTf22UnMc1jiffc5+bMKXd8WuWsTiZ2hlBQtrsIKOUQAWlk4m/U7oY/ wrGn0ixUa4qbNi+0jQ5Z7zSXMvKtYD9Ap8kC0Q/42EY7TF4JYdRK5IReYvEwP/tl HTYYu3Ap1qHJgnnUeJ3Zbart0f0B0nMMd3HV01m3MOwS5I4sgaZI7E9Stfqz6Gi/ +VPzSXYIru8oEVqJ8HHRtecNPeDOuuPvofk2yOJ/+y5fvw5Jsp3p+UY6CE4VEFhe bD6rOGCdxnhiGGzhRjiQZv5z9bOWLhGppvhgUrd56Azhz3WHI74= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:29 2025 by rpki-client