This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: Zv0P5g34bVNVz8YebdX+FeokEUoaQ8JlgCTbW2ZZ99M= Subject key identifier: 52:6F:1C:E1:B7:36:A2:96:CD:70:41:CD:4B:09:6D:2C:0A:53:69:9B Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 3F5EECA62273E3DD5C2442806639E4FB2A90DD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 021F Signing time: Sat 06 Dec 2025 11:41:26 +0000 Manifest this update: Sat 06 Dec 2025 11:36:26 +0000 Manifest next update: Tue 09 Dec 2025 21:28:26 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) 2: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: sT69oAU/N23N1U6rnAbZkV61kWTdP1uPgadlMbkVlEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5e:ec:a6:22:73:e3:dd:5c:24:42:80:66:39:e4:fb:2a:90:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Dec 6 11:36:26 2025 GMT Not After : Dec 9 21:28:26 2025 GMT Subject: CN=526F1CE1B736A296CD7041CD4B096D2C0A53699B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:f4:56:8e:a8:f8:d1:a4:0b:35:84:ec:99: a2:cd:d0:04:69:25:94:bb:d4:a2:8c:05:d6:60:57: e3:6b:41:71:2d:4d:ba:ce:19:cb:09:0a:84:55:f3: 38:fa:78:b4:17:a6:80:f4:9f:53:18:71:1d:33:9a: 01:a5:10:93:02:0e:77:f1:90:61:e8:00:69:c6:b4: f2:3c:5f:e7:2d:3a:f4:78:3a:63:c4:57:09:4e:0a: ce:ea:79:4c:26:2e:55:14:a5:76:e0:29:65:0a:c2: 26:23:ad:a7:8c:d4:f3:9f:d5:26:04:3d:2d:3a:5c: 8d:de:4f:c3:43:da:a7:8f:50:5a:b5:20:98:d6:59: b8:9e:76:58:55:48:ef:bb:59:3c:0c:3b:e7:dc:a4: 5f:e5:61:09:59:2f:7f:8f:11:43:ac:94:40:a5:4d: 98:3f:33:ef:9d:d7:56:57:a0:50:a8:c5:05:4d:28: f1:98:cb:1f:d5:a4:e3:90:69:30:b2:90:2b:7d:02: 0a:9f:76:90:b7:be:36:c2:16:3a:52:de:23:50:35: 48:02:d4:d1:02:5d:d2:ed:6e:e8:a4:4a:ed:c0:db: e6:21:b0:8f:9d:98:99:49:56:55:7e:28:e3:30:a6: bd:14:e9:9f:36:d4:f1:d9:88:2b:65:83:fe:5a:7c: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6F:1C:E1:B7:36:A2:96:CD:70:41:CD:4B:09:6D:2C:0A:53:69:9B X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a3:a4:bb:d9:f1:5b:2f:f0:0f:c4:87:f0:e6:d0:fc:1a:af: f9:b9:30:bd:83:3c:ed:2a:e6:8d:fc:01:2a:a4:36:a2:95:e8: 99:ee:7b:69:02:2c:ce:87:31:2c:26:03:86:0d:fe:18:c2:f8: be:f9:a5:47:f7:76:67:bc:96:8f:28:0b:02:ac:6a:82:23:2b: 47:46:85:8d:6f:14:63:b7:50:2b:76:86:c5:8a:59:3a:79:3d: 8e:e7:24:c8:a2:4f:71:30:fd:29:a0:54:b5:32:1d:c0:c7:26: fb:3e:61:77:60:6d:4e:e7:29:3c:21:4a:85:f1:84:80:c9:d8: 9e:33:94:c3:fc:36:c2:76:f8:38:27:24:bf:fe:2c:87:50:b7: d4:98:4b:b1:88:2f:c3:dc:61:2f:f5:87:32:63:9d:23:c9:d7: 42:73:80:3f:ec:ec:a7:37:9d:4e:95:44:1f:4b:c7:83:23:3a: bd:9d:cd:e8:d0:5d:c7:84:34:19:40:0f:7f:21:31:6e:28:cc: 6c:ce:59:0e:5f:88:bd:09:af:4a:85:5a:ef:41:5f:30:64:08: eb:f7:c1:bf:87:5e:f6:03:73:4a:c8:36:02:46:69:50:45:80: 73:6d:8e:e5:c8:a2:e5:c6:37:62:e0:78:02:52:1e:27:55:fd: 8d:f8:cf:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP17spiJz491cJEKAZjnk+yqQ3U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTEyMDYxMTM2MjZaFw0yNTEyMDkyMTI4MjZaMDMxMTAvBgNV BAMTKDUyNkYxQ0UxQjczNkEyOTZDRDcwNDFDRDRCMDk2RDJDMEE1MzY5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXPRWjqj40aQLNYTsmaLN0ARp JZS71KKMBdZgV+NrQXEtTbrOGcsJCoRV8zj6eLQXpoD0n1MYcR0zmgGlEJMCDnfx kGHoAGnGtPI8X+ctOvR4OmPEVwlOCs7qeUwmLlUUpXbgKWUKwiYjraeM1POf1SYE PS06XI3eT8ND2qePUFq1IJjWWbiedlhVSO+7WTwMO+fcpF/lYQlZL3+PEUOslECl TZg/M++d11ZXoFCoxQVNKPGYyx/VpOOQaTCykCt9AgqfdpC3vjbCFjpS3iNQNUgC 1NECXdLtbuikSu3A2+YhsI+dmJlJVlV+KOMwpr0U6Z821PHZiCtlg/5afDGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUm8c4bc2opbNcEHNSwltLApTaZswHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyjpLvZ8Vsv8A/Eh/Dm0Pwar/m5ML2DPO0q 5o38ASqkNqKV6Jnue2kCLM6HMSwmA4YN/hjC+L75pUf3dme8lo8oCwKsaoIjK0dG hY1vFGO3UCt2hsWKWTp5PY7nJMiiT3Ew/SmgVLUyHcDHJvs+YXdgbU7nKTwhSoXx hIDJ2J4zlMP8NsJ2+DgnJL/+LIdQt9SYS7GIL8PcYS/1hzJjnSPJ10JzgD/s7Kc3 nU6VRB9Lx4MjOr2dzejQXceENBlAD38hMW4ozGzOWQ5fiL0Jr0qFWu9BXzBkCOv3 wb+HXvYDc0rINgJGaVBFgHNtjuXIouXGN2LgeAJSHidV/Y34z5E= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:42 2025 by rpki-client