This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: QA0cUPf078FaOyPwbul+4qQj7omHWPNeOKUAWAgssn0= Subject key identifier: B8:8B:C8:23:87:BF:18:4E:DC:A4:73:C1:E8:E1:5D:73:3B:EF:68:89 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 7AE942461D65E0E0616F6541E9604136773AE555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 022C Signing time: Thu 04 Dec 2025 21:21:40 +0000 Manifest this update: Thu 04 Dec 2025 21:16:40 +0000 Manifest next update: Mon 08 Dec 2025 07:54:40 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: HUxLDuRtISotLuxFkpEPO/cRLAhqfUo70cvxzhdo/I0=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e9:42:46:1d:65:e0:e0:61:6f:65:41:e9:60:41:36:77:3a:e5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Dec 4 21:16:40 2025 GMT Not After : Dec 8 07:54:40 2025 GMT Subject: CN=B88BC82387BF184EDCA473C1E8E15D733BEF6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b0:83:35:d5:e1:d2:d6:96:fb:aa:4f:91:4b: 1f:46:cc:10:05:4a:3c:8d:1f:32:2b:6f:5c:0d:ed: ef:57:1d:09:29:7f:a4:f7:8b:88:da:d0:67:64:f4: 65:97:4d:71:78:70:08:dc:21:4e:3c:c6:9b:86:8e: 10:58:e5:82:39:a6:79:6b:9e:22:19:ef:19:bb:37: d1:9e:5c:93:d8:0c:cf:07:f0:75:ee:09:c3:94:c1: 0b:5a:7b:ff:d1:d4:71:c0:ea:d2:c4:b2:c7:bb:16: 94:ec:c9:38:61:c2:1b:c0:fc:44:a6:53:ca:54:ee: 34:e2:d3:94:a9:95:95:a4:00:01:c3:79:63:4e:3a: 70:29:bf:ba:9d:00:71:7e:b7:73:10:f1:f3:13:a6: f8:41:57:ba:d6:ea:98:fd:22:5e:ed:49:49:08:cc: a3:80:c0:f0:d1:d1:e2:e0:0d:75:d2:ad:99:0b:f7: 10:47:d4:57:d5:bf:cd:38:95:d3:cc:d1:a6:0d:9c: 8d:90:69:62:96:b5:0d:00:49:d9:98:f9:e8:20:99: 22:06:61:71:0e:cc:ff:5b:60:f4:34:70:08:4d:60: c2:63:ec:52:d7:36:19:14:b0:36:1b:b0:41:99:bb: c1:f3:96:b6:86:22:77:4e:25:14:04:1f:88:b4:f2: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:C8:23:87:BF:18:4E:DC:A4:73:C1:E8:E1:5D:73:3B:EF:68:89 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ad:09:6c:fb:c8:f4:c7:b5:d1:7b:76:09:67:ea:0f:d4:86: ec:bd:00:d3:36:c5:70:cb:5c:12:be:c0:53:2b:0a:bc:54:97: bd:6a:6a:64:cd:a9:a4:62:e5:15:45:cb:53:af:d4:a9:e9:36: 97:f4:51:cc:91:70:8b:d3:ad:27:3a:95:e1:31:2f:98:f1:6f: 55:19:72:e2:ba:1e:80:3e:67:93:f0:fb:95:2f:38:3a:fe:9e: ca:e3:37:32:9d:50:ec:b7:4f:cb:ab:e6:f7:96:bb:8c:5e:c2: 96:6d:2c:cb:6f:0e:ed:ba:c6:a1:df:af:13:21:1c:fa:b4:18: 52:26:01:8b:38:dc:bb:4e:19:1b:da:89:76:55:61:14:d9:3a: 88:05:09:31:24:f2:1e:2a:9e:68:8c:39:f5:13:a9:cf:09:da: ad:36:db:67:76:33:ab:2a:4b:2d:0a:63:9f:48:68:f1:43:23: e7:3b:b2:37:cc:5d:a4:e6:99:82:8f:67:cc:0e:b0:68:c7:5a: 02:8c:22:99:23:50:6c:ee:3f:4f:81:53:f3:d2:49:9f:4b:28: 3c:6d:fe:e7:3e:9b:6f:51:10:fc:6f:08:96:e2:6c:45:90:6f: 9a:49:de:09:9b:15:c6:b9:79:d1:63:af:b7:9c:0b:72:7d:de: bc:87:7c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeulCRh1l4OBhb2VB6WBBNnc65VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTEyMDQyMTE2NDBaFw0yNTEyMDgwNzU0NDBaMDMxMTAvBgNV BAMTKEI4OEJDODIzODdCRjE4NEVEQ0E0NzNDMUU4RTE1RDczM0JFRjY4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqsIM11eHS1pb7qk+RSx9GzBAF SjyNHzIrb1wN7e9XHQkpf6T3i4ja0Gdk9GWXTXF4cAjcIU48xpuGjhBY5YI5pnlr niIZ7xm7N9GeXJPYDM8H8HXuCcOUwQtae//R1HHA6tLEsse7FpTsyThhwhvA/ESm U8pU7jTi05SplZWkAAHDeWNOOnApv7qdAHF+t3MQ8fMTpvhBV7rW6pj9Il7tSUkI zKOAwPDR0eLgDXXSrZkL9xBH1FfVv804ldPM0aYNnI2QaWKWtQ0ASdmY+eggmSIG YXEOzP9bYPQ0cAhNYMJj7FLXNhkUsDYbsEGZu8HzlraGIndOJRQEH4i08jv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIvII4e/GE7cpHPB6OFdczvvaIkwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGtCWz7yPTHtdF7dgln6g/Uhuy9ANM2xXDL XBK+wFMrCrxUl71qamTNqaRi5RVFy1Ov1KnpNpf0UcyRcIvTrSc6leExL5jxb1UZ cuK6HoA+Z5Pw+5UvODr+nsrjNzKdUOy3T8ur5veWu4xewpZtLMtvDu26xqHfrxMh HPq0GFImAYs43LtOGRvaiXZVYRTZOogFCTEk8h4qnmiMOfUTqc8J2q0222d2M6sq Sy0KY59IaPFDI+c7sjfMXaTmmYKPZ8wOsGjHWgKMIpkjUGzuP0+BU/PSSZ9LKDxt /uc+m29REPxvCJbibEWQb5pJ3gmbFca5edFjr7ecC3J93ryHfCU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:31 2025 by rpki-client