This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: WHMC1c1ycG6u338Z3TDen05l9JAZl1nBXdKkHD3sbyg= Subject key identifier: 8F:F0:02:87:18:80:43:4D:B0:0A:F1:74:53:A9:2B:79:50:D6:CC:08 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 3626B265277FFD08CE0216FDBAD4DCAFA1527D9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: E1 Signing time: Sat 06 Dec 2025 09:12:28 +0000 Manifest this update: Sat 06 Dec 2025 09:07:28 +0000 Manifest next update: Tue 09 Dec 2025 10:07:28 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: FBWOM5nLOUIsebKxCuorCx3bXqXHxwx0deyftU6iEDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:26:b2:65:27:7f:fd:08:ce:02:16:fd:ba:d4:dc:af:a1:52:7d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Dec 6 09:07:28 2025 GMT Not After : Dec 9 10:07:28 2025 GMT Subject: CN=8FF002871880434DB00AF17453A92B7950D6CC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:20:de:ff:92:67:78:5d:c4:28:be:3e:b8: a1:17:b4:de:12:01:0b:5e:ab:75:f6:6b:f8:72:48: 2c:95:3e:15:3b:ec:3c:c6:27:05:ff:50:6f:8d:ae: 36:72:15:4d:33:30:18:a1:95:15:34:1f:1c:88:29: a3:0a:c5:47:04:23:af:0d:c3:a6:98:20:15:2a:4b: 05:c9:79:98:b8:5a:7e:28:a1:8d:78:15:b6:ff:88: 94:ff:46:ef:b1:82:ea:0d:6f:36:a5:14:58:a3:cd: 91:6a:9b:85:26:b0:a1:73:f6:3c:a0:77:a2:4e:c7: 5f:e7:17:34:bf:16:47:bc:a0:f1:da:99:3d:dd:54: a7:30:ad:ec:b0:51:ed:38:bd:2f:19:51:9e:a3:49: e7:43:df:fd:cb:b5:cf:fe:b9:64:ee:e8:9f:87:ae: 9e:77:56:06:5d:bc:d6:71:68:8d:7c:b7:f5:bb:27: cd:41:ac:8e:f6:62:6c:38:0d:6e:06:e8:a6:53:ac: 4c:46:86:73:4b:66:8c:de:e5:db:f7:cb:06:54:4d: 15:79:8f:6a:eb:6f:28:22:71:a4:0f:29:e2:28:fd: a3:f8:e4:08:ad:bd:0d:cf:4f:d6:50:87:3b:fd:28: 57:9c:2a:66:41:37:58:b5:95:b6:67:b9:55:c5:96: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F0:02:87:18:80:43:4D:B0:0A:F1:74:53:A9:2B:79:50:D6:CC:08 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:30:79:86:2f:d2:f6:2c:b0:df:f6:e6:d9:27:c9:eb:8d:c0: 87:64:da:35:62:67:37:fb:6e:b1:58:0a:5e:27:77:87:81:3c: ac:09:a2:4f:15:d7:8e:e8:62:a6:08:fb:e9:0a:1d:e4:34:58: e1:c5:28:6f:c4:08:dc:e2:cd:59:f2:ad:91:ba:ec:65:20:81: bf:80:d7:ba:a5:23:ae:b9:ca:23:ed:5c:fa:fc:07:37:a0:46: 57:f2:b1:c5:33:e1:69:d8:3c:76:ca:0e:54:cd:b0:89:5d:20: 29:69:c3:34:43:57:ca:19:0f:95:70:bd:fb:de:8c:b2:5f:d4: 13:70:2a:b5:1d:6b:04:73:9b:7e:30:dc:40:c8:2c:55:83:d8: 68:8a:15:c8:66:08:56:66:00:af:4c:3e:ba:4b:e8:5d:ca:47: 96:dd:e8:e5:52:95:aa:c0:a8:80:5f:ca:40:38:6f:76:0d:bc: e9:e6:dc:79:9a:ad:25:27:79:bd:bc:b8:95:76:0b:05:57:4d: b2:98:df:ee:8f:49:d4:1b:dc:70:1a:cf:aa:37:13:a2:40:16: 7d:6b:6d:bb:72:39:3b:e3:8a:e4:5e:72:94:93:0a:05:dd:d4: b4:63:ea:d8:2d:ea:41:42:f5:e9:bc:09:f0:b6:a8:84:2e:41: 8c:a7:83:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNiayZSd//QjOAhb9utTcr6FSfZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTEyMDYwOTA3MjhaFw0yNTEyMDkxMDA3MjhaMDMxMTAvBgNV BAMTKDhGRjAwMjg3MTg4MDQzNERCMDBBRjE3NDUzQTkyQjc5NTBENkNDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sCDe/5JneF3EKL4+uKEXtN4S AQteq3X2a/hySCyVPhU77DzGJwX/UG+NrjZyFU0zMBihlRU0HxyIKaMKxUcEI68N w6aYIBUqSwXJeZi4Wn4ooY14Fbb/iJT/Ru+xguoNbzalFFijzZFqm4UmsKFz9jyg d6JOx1/nFzS/Fke8oPHamT3dVKcwreywUe04vS8ZUZ6jSedD3/3Ltc/+uWTu6J+H rp53VgZdvNZxaI18t/W7J81BrI72Ymw4DW4G6KZTrExGhnNLZoze5dv3ywZUTRV5 j2rrbygicaQPKeIo/aP45AitvQ3PT9ZQhzv9KFecKmZBN1i1lbZnuVXFliwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj/AChxiAQ02wCvF0U6kreVDWzAgwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4weYYv0vYssN/25tknyeuNwIdk2jViZzf7 brFYCl4nd4eBPKwJok8V147oYqYI++kKHeQ0WOHFKG/ECNzizVnyrZG67GUggb+A 17qlI665yiPtXPr8BzegRlfyscUz4WnYPHbKDlTNsIldIClpwzRDV8oZD5Vwvfve jLJf1BNwKrUdawRzm34w3EDILFWD2GiKFchmCFZmAK9MPrpL6F3KR5bd6OVSlarA qIBfykA4b3YNvOnm3HmarSUneb28uJV2CwVXTbKY3+6PSdQb3HAaz6o3E6JAFn1r bbtyOTvjiuRecpSTCgXd1LRj6tgt6kFC9em8CfC2qIQuQYyng2M= -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:31 2025 by rpki-client