This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: zw5FSINhTTAOHQlU2Qkh4ZS21yip9B9bMEfA5GEhY7g= Subject key identifier: 27:92:81:63:0A:04:8F:7F:95:BC:55:CC:D1:AE:54:CE:1D:B7:FF:97 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 71DA24BD1495D89655318DE28B74D8960C6BD11F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 013A Signing time: Sat 06 Dec 2025 04:11:15 +0000 Manifest this update: Sat 06 Dec 2025 04:06:15 +0000 Manifest next update: Tue 09 Dec 2025 08:06:15 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: JiIRGNUcDAj880AJvRXh3Xb7UWis3ccoCX0o5z+bN3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:da:24:bd:14:95:d8:96:55:31:8d:e2:8b:74:d8:96:0c:6b:d1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Dec 6 04:06:15 2025 GMT Not After : Dec 9 08:06:15 2025 GMT Subject: CN=279281630A048F7F95BC55CCD1AE54CE1DB7FF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:13:9f:0a:0d:64:19:42:87:55:8b:4c:50: 1c:29:2c:97:8e:c1:70:9b:54:2f:0f:02:1b:65:45: f4:73:4f:0b:bc:3d:36:b2:d2:ee:1e:e8:9c:5f:1e: 42:a6:dd:35:eb:b3:85:8a:a0:7f:dd:43:2d:c2:89: ce:89:82:10:cd:39:79:f9:c6:a3:ed:6c:81:b9:ce: 2b:8d:2a:6d:d3:26:95:9d:d9:ad:41:f2:d5:ee:6c: 38:cb:b7:3d:f2:11:a2:9f:54:06:47:70:14:ae:46: 6e:83:cf:c9:74:1d:d0:2d:a2:71:f8:10:43:d8:f6: 48:4f:fa:1e:aa:63:3f:b8:13:b6:34:1f:4b:0a:8c: 7d:5c:42:77:a4:21:dd:d5:27:7d:5c:33:08:48:04: b2:01:85:c1:ee:b5:41:3d:88:a7:dd:be:07:5c:02: 17:76:67:18:7a:a2:e8:43:08:3d:94:85:cb:9c:26: ea:f6:25:88:0a:9f:2d:df:b2:62:08:96:60:d0:bc: 97:4d:d8:43:d8:4a:03:5f:39:35:c0:54:0b:eb:44: 9c:4b:da:5d:49:e2:26:af:e5:33:69:df:73:0b:65: 33:d2:3b:09:bd:73:c9:17:d9:55:d5:01:b5:c0:9f: 1d:49:46:d2:f6:c3:48:58:d4:02:85:70:9e:5f:f5: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:81:63:0A:04:8F:7F:95:BC:55:CC:D1:AE:54:CE:1D:B7:FF:97 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:97:91:6e:68:bb:0b:65:ba:3c:48:cb:cb:c1:c5:ce:e2: 39:3c:5a:0c:1f:a8:8a:fc:4b:87:3b:a6:77:36:63:df:b4:df: 1b:74:de:eb:e1:4f:04:cc:25:38:50:50:b8:1f:b4:82:81:8d: 0a:8b:97:c6:68:93:09:dc:53:b8:72:d6:21:67:58:52:4d:1e: 88:16:d5:de:c4:bb:34:4d:b4:70:06:0f:9f:b9:4b:a9:46:fc: ae:32:a6:0f:ce:9f:f8:9c:0a:76:3a:57:a3:9b:d2:93:86:bd: 86:e0:7a:c3:47:7f:98:1d:c2:20:cd:f1:00:95:19:0e:0a:d7: 8a:68:7b:6a:65:81:2e:a3:e9:75:4e:d9:10:77:3b:f0:be:68: c5:af:0b:fb:88:9c:e9:4c:92:49:63:e1:63:fb:cd:50:3f:b3: 25:84:00:6f:dc:c4:c0:11:c7:53:74:15:f9:89:b6:49:4d:50: 43:f6:85:6f:62:2a:c3:ef:24:db:c7:26:16:c4:21:95:04:a9: 70:14:95:7d:90:9f:3a:7f:b9:49:a0:d5:10:ad:2a:46:de:88: 3a:97:fe:ed:7a:48:53:f5:a7:48:0e:a1:ec:11:5e:6c:99:a5: e9:fc:47:9a:cc:e5:ff:b6:07:4f:a0:a4:c0:2b:03:d2:25:f8: 1e:7a:2e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdokvRSV2JZVMY3ii3TYlgxr0R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTEyMDYwNDA2MTVaFw0yNTEyMDkwODA2MTVaMDMxMTAvBgNV BAMTKDI3OTI4MTYzMEEwNDhGN0Y5NUJDNTVDQ0QxQUU1NENFMURCN0ZGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCROfCg1kGUKHVYtMUBwpLJeO wXCbVC8PAhtlRfRzTwu8PTay0u4e6JxfHkKm3TXrs4WKoH/dQy3Cic6JghDNOXn5 xqPtbIG5ziuNKm3TJpWd2a1B8tXubDjLtz3yEaKfVAZHcBSuRm6Dz8l0HdAtonH4 EEPY9khP+h6qYz+4E7Y0H0sKjH1cQnekId3VJ31cMwhIBLIBhcHutUE9iKfdvgdc Ahd2Zxh6ouhDCD2UhcucJur2JYgKny3fsmIIlmDQvJdN2EPYSgNfOTXAVAvrRJxL 2l1J4iav5TNp33MLZTPSOwm9c8kX2VXVAbXAnx1JRtL2w0hY1AKFcJ5f9UczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5KBYwoEj3+VvFXM0a5Uzh23/5cwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4tl5FuaLsLZbo8SMvLwcXO4jk8WgwfqIr8 S4c7pnc2Y9+03xt03uvhTwTMJThQULgftIKBjQqLl8ZokwncU7hy1iFnWFJNHogW 1d7EuzRNtHAGD5+5S6lG/K4ypg/On/icCnY6V6Ob0pOGvYbgesNHf5gdwiDN8QCV GQ4K14poe2plgS6j6XVO2RB3O/C+aMWvC/uInOlMkklj4WP7zVA/syWEAG/cxMAR x1N0FfmJtklNUEP2hW9iKsPvJNvHJhbEIZUEqXAUlX2Qnzp/uUmg1RCtKkbeiDqX /u16SFP1p0gOoewRXmyZpen8R5rM5f+2B0+gpMArA9Il+B56Llw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:28 2025 by rpki-client