This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: 3MNklkYVmUMGLhloxxgFIbZPd5v5IA5zRVOd6ZCkEkA= Subject key identifier: 85:4C:01:4D:A4:49:AA:37:B4:D9:9A:4D:3D:1C:84:87:A3:85:A1:E7 Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 0DB811DFA76A27863FF1FB90630C77C87E1BA64E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0258 Signing time: Sat 06 Dec 2025 18:22:13 +0000 Manifest this update: Sat 06 Dec 2025 18:17:13 +0000 Manifest next update: Wed 10 Dec 2025 04:41:13 +0000 Files and hashes: 1: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 3: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 4: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 5: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: YFQbF7mYjb5eQ48IbV6EBAgGH44/fpbt1mnxLErLnDk=) 6: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 7: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=) 9: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 10: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 11: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 12: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) 13: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b8:11:df:a7:6a:27:86:3f:f1:fb:90:63:0c:77:c8:7e:1b:a6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Dec 6 18:17:13 2025 GMT Not After : Dec 10 04:41:13 2025 GMT Subject: CN=854C014DA449AA37B4D99A4D3D1C8487A385A1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:44:f5:ce:6c:05:17:d8:93:df:b2:76:e6: ab:8f:aa:07:26:40:d9:2e:6e:ec:26:e8:86:d2:ac: 12:63:cc:9e:a6:48:2a:24:08:d4:00:50:79:81:45: 4a:cb:01:93:94:2b:9c:49:91:b3:d5:08:ac:3b:d5: e1:b7:ba:13:22:b7:23:1b:4b:72:76:d7:99:d7:00: b5:16:61:c0:09:12:a5:db:a3:78:52:f8:3b:f4:5c: cb:60:62:3f:32:ec:d8:83:9b:54:eb:a5:46:c2:59: 18:ec:d4:32:a4:15:09:b9:60:ca:4b:fc:65:3f:29: 71:dd:4f:96:6c:41:70:e1:cf:fb:21:1a:9b:b3:e5: e8:dd:de:cd:c4:aa:66:95:40:b1:6f:33:15:e7:cc: da:ee:60:95:e3:77:9e:29:81:60:70:5e:bf:f9:a9: af:82:ca:db:05:e5:ef:c9:e4:f2:a4:30:ff:6b:4a: 82:bb:b4:ad:79:08:0f:95:d4:0d:58:6d:8e:bb:c1: f7:4a:95:14:a4:80:2a:cf:52:7f:cb:ee:fd:3c:00: 29:a6:4a:4a:a8:46:38:08:14:6c:6c:e5:ca:4c:34: 86:41:ab:80:31:0f:17:68:98:ad:18:d6:d7:10:cd: 54:fc:57:09:73:52:9a:5b:33:26:90:cd:e5:35:33: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:01:4D:A4:49:AA:37:B4:D9:9A:4D:3D:1C:84:87:A3:85:A1:E7 X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:44:0a:48:ea:8c:62:5f:9b:03:9d:5a:24:58:df:3f:ea: c1:83:8a:9e:80:fd:42:b0:1d:50:92:d6:50:af:23:24:8b:31: b9:3d:73:2a:67:2c:e4:17:6a:bf:b6:98:9e:49:91:52:ea:a5: f8:b8:fc:28:ea:74:de:18:60:2e:62:e6:04:8d:8a:e2:d2:39: cb:b4:4f:59:ed:75:68:90:bd:d2:e7:51:5b:25:22:cb:7e:0f: e1:f4:6a:52:dc:4c:af:b5:b4:4b:b0:6e:07:e1:64:72:0a:b8: 61:d1:01:6d:e0:e1:3c:39:af:3b:af:d1:62:6d:3f:fb:2a:ec: 55:99:c6:09:33:96:27:28:de:3f:5c:94:a8:58:2e:1d:b5:a8: ff:de:0f:07:40:28:52:5d:b2:60:e1:25:fd:22:d2:7d:f7:07: 32:70:d8:dd:08:98:e4:85:f6:3b:ef:3b:ab:dd:1a:dd:f7:fa: 76:3c:36:d9:28:ad:ac:d4:7e:a8:26:76:e5:cf:ab:c4:18:24: 05:c2:46:9f:ed:85:b6:ea:0c:de:26:91:d0:4a:27:a4:2d:e1: b4:73:2a:f9:4f:93:ea:cb:a9:c9:f7:cc:1a:b7:72:28:22:5f: ba:50:f4:4d:4c:6e:8e:bf:2c:3a:93:e0:b5:56:f1:11:5b:58: a4:6d:6d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbgR36dqJ4Y/8fuQYwx3yH4bpk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTEyMDYxODE3MTNaFw0yNTEyMTAwNDQxMTNaMDMxMTAvBgNV BAMTKDg1NEMwMTREQTQ0OUFBMzdCNEQ5OUE0RDNEMUM4NDg3QTM4NUExRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgkT1zmwFF9iT37J25quPqgcm QNkubuwm6IbSrBJjzJ6mSCokCNQAUHmBRUrLAZOUK5xJkbPVCKw71eG3uhMityMb S3J215nXALUWYcAJEqXbo3hS+Dv0XMtgYj8y7NiDm1TrpUbCWRjs1DKkFQm5YMpL /GU/KXHdT5ZsQXDhz/shGpuz5ejd3s3EqmaVQLFvMxXnzNruYJXjd54pgWBwXr/5 qa+CytsF5e/J5PKkMP9rSoK7tK15CA+V1A1YbY67wfdKlRSkgCrPUn/L7v08ACmm SkqoRjgIFGxs5cpMNIZBq4AxDxdomK0Y1tcQzVT8VwlzUppbMyaQzeU1M38RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUwBTaRJqje02ZpNPRyEh6OFoecwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfiRApI6oxiX5sDnVokWN8/6sGDip6A/UKw HVCS1lCvIySLMbk9cypnLOQXar+2mJ5JkVLqpfi4/CjqdN4YYC5i5gSNiuLSOcu0 T1ntdWiQvdLnUVslIst+D+H0alLcTK+1tEuwbgfhZHIKuGHRAW3g4Tw5rzuv0WJt P/sq7FWZxgkzlico3j9clKhYLh21qP/eDwdAKFJdsmDhJf0i0n33BzJw2N0ImOSF 9jvvO6vdGt33+nY8NtkorazUfqgmduXPq8QYJAXCRp/thbbqDN4mkdBKJ6Qt4bRz KvlPk+rLqcn3zBq3cigiX7pQ9E1Mbo6/LDqT4LVW8RFbWKRtbSw= -----END CERTIFICATE-----Generated at Sun Dec 7 06:04:28 2025 by rpki-client