This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: TG+yiC93sNRH0L+L/XApoFSI3Cn0IkPCctAft671xuA= Subject key identifier: 9D:5E:79:F6:FE:13:46:53:16:31:F6:96:03:51:70:55:41:0B:85:5A Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 0422A2128934D6D95DF3FF664FB45B437EFE7537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01AE Signing time: Fri 05 Dec 2025 19:42:57 +0000 Manifest this update: Fri 05 Dec 2025 19:37:57 +0000 Manifest next update: Mon 08 Dec 2025 23:40:57 +0000 Files and hashes: 1: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 2: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: WL3kVaXvARYUPg5gwhqCmLeAnLcJaoPv2UFfWZTTGc8=) 3: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 4: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 5: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:22:a2:12:89:34:d6:d9:5d:f3:ff:66:4f:b4:5b:43:7e:fe:75:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Dec 5 19:37:57 2025 GMT Not After : Dec 8 23:40:57 2025 GMT Subject: CN=9D5E79F6FE1346531631F69603517055410B855A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:fe:b9:51:79:7a:0e:e8:98:24:2d:d8:3d: 4c:bc:93:70:14:b1:86:9e:17:6d:38:3c:a1:93:b6: 37:8d:c9:d8:ae:fb:10:b9:d8:1a:9d:4b:87:20:65: ea:fe:4a:a5:a8:ef:d5:a2:55:33:eb:8f:b3:7e:be: 15:8f:ae:9d:9a:22:44:36:e4:4c:65:1e:0f:52:0f: 97:2a:88:51:45:82:da:30:1b:58:07:0e:6f:60:af: 8e:71:25:55:b8:ff:74:30:e1:0a:7a:69:78:10:03: 18:91:4f:cd:91:93:ed:d8:81:91:c5:c8:f2:76:3e: 21:03:9b:ba:cf:b5:ea:2f:a5:19:17:f2:53:04:de: 4c:33:ed:3c:3d:ea:18:2c:5c:56:fe:99:c4:c5:88: bf:fe:2c:4b:bd:db:78:cf:3a:1d:58:e9:f5:22:32: aa:b0:ec:51:8c:23:4b:62:31:79:57:35:ff:78:0b: 4a:48:d9:e7:d0:41:bf:63:cd:bd:68:77:c3:63:59: fa:40:aa:58:35:7f:70:86:6f:32:c7:92:00:a3:92: 24:11:fb:3f:18:33:d0:d1:f0:10:2c:f8:8e:3c:41: ee:13:95:e0:34:33:75:8b:58:7d:48:81:1e:6c:96: 19:bb:b0:d9:6d:d2:0d:f1:9a:99:a6:10:e1:dd:ac: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:79:F6:FE:13:46:53:16:31:F6:96:03:51:70:55:41:0B:85:5A X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:ee:40:df:63:4b:70:4f:c2:f5:fc:ab:bd:9e:10:7c:14: c8:4d:c3:26:72:f3:b0:0b:af:4b:18:a5:c8:7f:73:3a:aa:5e: b8:15:25:e0:37:54:1d:9f:45:61:df:f5:25:fe:08:c6:03:07: d3:52:e3:e9:ea:43:f0:45:f4:27:30:2e:35:29:c7:40:8a:d8: 3b:f4:14:51:97:33:d8:81:3c:e4:83:b2:83:de:01:cc:bb:35: 60:a3:96:b0:1d:a1:46:9c:f4:2c:d9:10:f8:56:f6:a9:20:a3: 2f:24:ec:57:f4:79:bd:3d:8d:9b:65:7e:97:4d:1a:86:05:b9: cd:52:6e:5a:b1:d1:4f:55:f3:a8:d5:32:94:5b:83:47:24:0a: 09:53:17:ac:72:f4:95:c2:a1:93:57:9c:a9:87:89:9c:19:d9: 5e:c8:e3:09:14:e2:b5:fb:6c:48:8d:54:a6:d5:b7:1f:ae:82: 0d:0b:b3:8e:ea:7b:09:78:40:1a:9b:dd:f5:b4:08:8f:75:3b: 2a:aa:03:9f:1c:ab:3d:9d:05:fe:4f:39:dc:82:39:19:e6:49: 0e:43:94:e3:b7:48:b0:5f:d8:a9:8f:c7:a3:1f:06:12:76:97: e1:5f:44:58:f1:b7:fa:bb:a8:e9:62:3f:0f:94:91:ee:83:0d: b5:74:d1:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCKiEok01tld8/9mT7RbQ37+dTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTEyMDUxOTM3NTdaFw0yNTEyMDgyMzQwNTdaMDMxMTAvBgNV BAMTKDlENUU3OUY2RkUxMzQ2NTMxNjMxRjY5NjAzNTE3MDU1NDEwQjg1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFv65UXl6DuiYJC3YPUy8k3AU sYaeF204PKGTtjeNydiu+xC52BqdS4cgZer+SqWo79WiVTPrj7N+vhWPrp2aIkQ2 5ExlHg9SD5cqiFFFgtowG1gHDm9gr45xJVW4/3Qw4Qp6aXgQAxiRT82Rk+3YgZHF yPJ2PiEDm7rPteovpRkX8lME3kwz7Tw96hgsXFb+mcTFiL/+LEu923jPOh1Y6fUi Mqqw7FGMI0tiMXlXNf94C0pI2efQQb9jzb1od8NjWfpAqlg1f3CGbzLHkgCjkiQR +z8YM9DR8BAs+I48Qe4TleA0M3WLWH1IgR5slhm7sNlt0g3xmpmmEOHdrG53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnV559v4TRlMWMfaWA1FwVUELhVowHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClO7kDfY0twT8L1/Ku9nhB8FMhNwyZy87AL r0sYpch/czqqXrgVJeA3VB2fRWHf9SX+CMYDB9NS4+nqQ/BF9CcwLjUpx0CK2Dv0 FFGXM9iBPOSDsoPeAcy7NWCjlrAdoUac9CzZEPhW9qkgoy8k7Ff0eb09jZtlfpdN GoYFuc1Sblqx0U9V86jVMpRbg0ckCglTF6xy9JXCoZNXnKmHiZwZ2V7I4wkU4rX7 bEiNVKbVtx+ugg0Ls47qewl4QBqb3fW0CI91OyqqA58cqz2dBf5POdyCORnmSQ5D lOO3SLBf2KmPx6MfBhJ2l+FfRFjxt/q7qOliPw+Uke6DDbV00dw= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:20 2025 by rpki-client