This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: dwGf7b7a233rNLsqkHhe6Xgn/7RAHyAU01cx2avp+Ss= Subject key identifier: 2E:C1:A4:35:C6:8E:0D:A1:58:E5:67:F7:F9:DD:CB:32:F5:D0:3A:E0 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 71E1ECCC85E6B427AB5C6B397C535A05A0E9698D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0132 Signing time: Sat 06 Dec 2025 02:40:47 +0000 Manifest this update: Sat 06 Dec 2025 02:35:47 +0000 Manifest next update: Tue 09 Dec 2025 10:59:47 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: fwIwIbkxqWKv9EOtTJ6NMg8EggTVzEhc7d4AbpBZX5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e1:ec:cc:85:e6:b4:27:ab:5c:6b:39:7c:53:5a:05:a0:e9:69:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Dec 6 02:35:47 2025 GMT Not After : Dec 9 10:59:47 2025 GMT Subject: CN=2EC1A435C68E0DA158E567F7F9DDCB32F5D03AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:16:b2:64:22:8f:b3:e3:94:f8:91:90:92: 58:55:d5:8b:43:a5:75:1b:d7:1b:c2:a4:e6:77:21: 33:2d:ee:b7:95:18:e7:ce:f7:89:b7:1a:ca:43:a6: ba:ad:5f:cb:cd:9b:bd:08:80:52:db:4b:1e:3d:e0: 4c:90:d3:aa:fe:68:3c:cd:2f:bd:2e:d7:a8:8c:71: cf:f8:5e:8c:d9:41:cc:2a:55:ad:b3:81:1f:75:e9: fb:4a:2d:37:c4:23:ff:0b:bb:c4:15:77:de:8b:11: 5b:e9:12:02:26:80:c4:90:16:e8:86:4c:7e:e5:fd: f7:6f:df:c3:2a:ed:ed:c4:9c:a4:d9:e0:47:9f:61: b5:24:b8:f7:d8:7e:5f:4a:7d:f9:b4:3f:16:fb:f3: ab:80:95:36:d7:52:f0:a9:65:1c:e4:3a:61:16:4f: 78:f3:71:c7:3f:3b:ca:d2:88:79:67:d0:14:a6:ae: bf:6e:7a:35:6e:b1:86:a0:88:16:81:00:b2:c7:3f: 85:d6:e2:8d:aa:d2:5d:95:a4:2a:1e:1c:3f:4f:5b: 90:a2:ec:0b:e5:0c:56:cf:73:f3:ce:67:97:cd:df: f3:c7:09:20:1a:78:fd:0c:72:c5:7b:62:96:9c:35: 43:12:c9:c5:94:57:2d:7d:42:ae:a8:fd:cf:50:19: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:A4:35:C6:8E:0D:A1:58:E5:67:F7:F9:DD:CB:32:F5:D0:3A:E0 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:88:b7:01:b4:7a:8a:f4:fb:c1:5e:15:c8:6e:24:1f:2b: d6:c3:f4:c0:f0:41:05:f2:37:41:55:ea:70:25:c4:0e:b6:31: 0f:4a:ed:20:02:ae:92:1b:f1:4b:da:91:ba:d5:1e:19:2f:74: 3a:42:38:1d:13:ac:02:cd:ea:b7:db:1b:e2:0e:26:d1:67:a8: fc:44:09:dc:13:69:bf:54:5c:5d:d4:32:0a:f6:45:da:de:74: 54:58:0a:79:80:9d:d5:99:bc:17:8c:2a:2f:69:31:ab:65:e0: ab:dd:3c:62:d8:3d:c9:2c:1f:02:31:57:d7:ab:f5:9d:e3:b7: f7:0b:09:03:9d:2e:68:51:2c:3b:3f:0b:04:c5:26:8c:79:c7: 5b:27:55:39:89:ad:38:26:e7:c0:d9:8d:63:40:f3:4e:0b:21: b1:08:95:51:31:e3:03:73:ec:a2:aa:23:f4:c2:84:2c:91:92: 8c:a4:be:ee:8a:dd:5c:e2:4e:46:fc:7c:34:75:81:8e:42:b8: eb:b0:94:f1:83:4d:b7:72:b3:ab:db:c9:4d:fa:0e:65:2e:3c: 07:44:fd:82:d3:78:ea:60:3d:a8:66:f6:20:5f:d9:ed:3f:81: 05:c8:c0:41:d8:6e:c4:7c:40:db:74:db:79:f9:dc:4a:ed:ff: da:5f:30:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceHszIXmtCerXGs5fFNaBaDpaY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTEyMDYwMjM1NDdaFw0yNTEyMDkxMDU5NDdaMDMxMTAvBgNV BAMTKDJFQzFBNDM1QzY4RTBEQTE1OEU1NjdGN0Y5RERDQjMyRjVEMDNBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgxayZCKPs+OU+JGQklhV1YtD pXUb1xvCpOZ3ITMt7reVGOfO94m3GspDprqtX8vNm70IgFLbSx494EyQ06r+aDzN L70u16iMcc/4XozZQcwqVa2zgR916ftKLTfEI/8Lu8QVd96LEVvpEgImgMSQFuiG TH7l/fdv38Mq7e3EnKTZ4EefYbUkuPfYfl9Kffm0Pxb786uAlTbXUvCpZRzkOmEW T3jzccc/O8rSiHln0BSmrr9uejVusYagiBaBALLHP4XW4o2q0l2VpCoeHD9PW5Ci 7AvlDFbPc/POZ5fN3/PHCSAaeP0McsV7YpacNUMSycWUVy19Qq6o/c9QGV99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsGkNcaODaFY5Wf3+d3LMvXQOuAwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8liLcBtHqK9PvBXhXIbiQfK9bD9MDwQQXy N0FV6nAlxA62MQ9K7SACrpIb8UvakbrVHhkvdDpCOB0TrALN6rfbG+IOJtFnqPxE CdwTab9UXF3UMgr2RdredFRYCnmAndWZvBeMKi9pMatl4KvdPGLYPcksHwIxV9er 9Z3jt/cLCQOdLmhRLDs/CwTFJox5x1snVTmJrTgm58DZjWNA804LIbEIlVEx4wNz 7KKqI/TChCyRkoykvu6K3VziTkb8fDR1gY5CuOuwlPGDTbdys6vbyU36DmUuPAdE /YLTeOpgPahm9iBf2e0/gQXIwEHYbsR8QNt023n53Ert/9pfMFs= -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:40 2025 by rpki-client