This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: s3r9VBM5LUmmcsKNebpjiQpYTLU+1+uZqdXvrPkS1P8= Subject key identifier: BB:70:FE:43:56:9D:C6:FD:C4:1D:F9:54:F7:8A:D0:7D:EC:04:04:56 Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 67E2ABEDFAFAF046988F9EED0FD08ECE6F6FFD41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 051B Signing time: Fri 05 Dec 2025 22:30:53 +0000 Manifest this update: Fri 05 Dec 2025 22:25:53 +0000 Manifest next update: Tue 09 Dec 2025 07:17:53 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: uPZlOADTVBH56kSe3b/I2ZsgqvGTrLC+8H2Uu2P+my8=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e2:ab:ed:fa:fa:f0:46:98:8f:9e:ed:0f:d0:8e:ce:6f:6f:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Dec 5 22:25:53 2025 GMT Not After : Dec 9 07:17:53 2025 GMT Subject: CN=BB70FE43569DC6FDC41DF954F78AD07DEC040456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:42:a3:0f:2f:96:d2:ef:18:43:4a:69:70: 3f:4a:a1:76:fe:ac:dc:6b:40:69:cf:d8:d6:71:2b: ea:95:3e:dc:99:e5:c8:9e:50:1c:36:af:3e:b5:d9: 32:02:6f:44:89:97:8b:02:b0:e3:66:c6:eb:35:d8: a8:4f:49:54:f8:b1:b8:c9:f7:fe:78:02:2d:58:14: 08:1d:f9:11:c3:af:07:d4:65:d6:c4:05:d2:47:83: cc:1b:b8:9d:3c:b3:3d:c1:55:3b:e4:78:d8:1b:12: d1:ca:42:89:0f:d2:00:02:67:79:2e:fd:54:d0:1d: 3b:77:56:d9:b6:2f:f6:d1:bc:e0:43:02:0f:2e:70: 5e:c4:7b:3b:f2:36:bd:7d:d7:f9:0b:ee:e0:ae:6d: 82:53:b6:ce:d8:0b:ba:7d:c4:42:ab:db:68:49:4e: 35:0e:05:5b:cb:9b:d4:04:04:23:30:16:51:10:a7: 45:09:41:9d:83:ac:95:74:3a:64:c8:55:55:c0:34: b5:15:a3:20:54:9d:5f:19:7e:be:55:20:9d:0d:32: e1:34:c6:cb:e9:d4:d0:e7:09:d8:ca:0f:bd:84:43: 50:95:31:99:b4:56:33:a3:a4:4c:a7:ba:f5:49:a0: b5:cb:22:dd:aa:fe:2c:de:71:58:c5:8a:f3:68:b4: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:FE:43:56:9D:C6:FD:C4:1D:F9:54:F7:8A:D0:7D:EC:04:04:56 X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:29:47:6e:63:e0:61:2a:4f:eb:e1:f3:f9:4c:cd:36:40:16: 60:5c:49:3a:88:ba:77:12:07:cf:cf:87:c8:69:8f:e6:86:76: 70:4c:6d:11:43:6e:99:60:77:a7:bb:73:a8:2a:b2:94:f6:22: 68:a6:6d:ee:30:a9:a1:b4:bf:85:fb:0e:e7:49:7a:a4:d9:47: 58:57:9f:10:a1:a4:94:a1:e0:4c:81:76:15:13:74:cf:11:b9: 45:30:e3:1f:40:48:ce:ba:45:8a:cd:97:84:a5:5d:59:40:60: e9:30:57:31:a6:41:ec:1d:9e:42:35:2c:bb:bb:a4:ed:12:7c: 89:7f:f9:19:64:c9:11:e6:a7:91:f8:3e:b2:1e:28:44:f5:d5: 4f:20:7d:05:b6:1e:33:86:ae:7f:83:c8:40:d2:64:79:50:e6: 10:3e:2f:19:d7:bd:77:05:2e:b3:da:85:ea:a0:7f:56:4b:ba: d1:9a:a6:3b:4e:06:88:69:d2:cc:c2:9c:c3:9e:24:b5:18:45: 0f:c1:e8:c1:91:72:eb:09:e4:ab:1c:18:a8:a0:22:cf:6e:9d: 93:14:dc:ee:c0:db:03:6d:d9:b4:74:ef:07:d0:f6:4a:f7:ab: 79:72:0e:ca:41:07:f6:09:31:a9:3b:a2:0a:a1:24:7c:e9:62: e0:39:ed:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+Kr7fr68EaYj57tD9COzm9v/UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTEyMDUyMjI1NTNaFw0yNTEyMDkwNzE3NTNaMDMxMTAvBgNV BAMTKEJCNzBGRTQzNTY5REM2RkRDNDFERjk1NEY3OEFEMDdERUMwNDA0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoEKjDy+W0u8YQ0ppcD9KoXb+ rNxrQGnP2NZxK+qVPtyZ5cieUBw2rz612TICb0SJl4sCsONmxus12KhPSVT4sbjJ 9/54Ai1YFAgd+RHDrwfUZdbEBdJHg8wbuJ08sz3BVTvkeNgbEtHKQokP0gACZ3ku /VTQHTt3Vtm2L/bRvOBDAg8ucF7EezvyNr191/kL7uCubYJTts7YC7p9xEKr22hJ TjUOBVvLm9QEBCMwFlEQp0UJQZ2DrJV0OmTIVVXANLUVoyBUnV8Zfr5VIJ0NMuE0 xsvp1NDnCdjKD72EQ1CVMZm0VjOjpEynuvVJoLXLIt2q/izecVjFivNotNHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3D+Q1adxv3EHflU94rQfewEBFYwHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8pR25j4GEqT+vh8/lMzTZAFmBcSTqIuncS B8/Ph8hpj+aGdnBMbRFDbplgd6e7c6gqspT2Imimbe4wqaG0v4X7DudJeqTZR1hX nxChpJSh4EyBdhUTdM8RuUUw4x9ASM66RYrNl4SlXVlAYOkwVzGmQewdnkI1LLu7 pO0SfIl/+RlkyRHmp5H4PrIeKET11U8gfQW2HjOGrn+DyEDSZHlQ5hA+LxnXvXcF LrPaheqgf1ZLutGapjtOBohp0szCnMOeJLUYRQ/B6MGRcusJ5KscGKigIs9unZMU 3O7A2wNt2bR07wfQ9kr3q3lyDspBB/YJMak7ogqhJHzpYuA57W8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:34 2025 by rpki-client