This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: IykoQZcFf3GZQiKcgzm11NJBYNMtKd7f9h0lVHh+XVA= Subject key identifier: AD:A1:B7:49:C6:04:8B:37:56:A0:05:C0:71:8C:B5:D1:14:1B:4C:81 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 201AE54E8E9D3B15382C5DA53DFC504BF0E2DBF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01B7 Signing time: Sat 06 Dec 2025 06:12:26 +0000 Manifest this update: Sat 06 Dec 2025 06:07:26 +0000 Manifest next update: Tue 09 Dec 2025 09:29:26 +0000 Files and hashes: 1: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: txWdU68CocYpy1AzGWnDXoWUzi+G1CRAzsy3tKM0nX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1a:e5:4e:8e:9d:3b:15:38:2c:5d:a5:3d:fc:50:4b:f0:e2:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Dec 6 06:07:26 2025 GMT Not After : Dec 9 09:29:26 2025 GMT Subject: CN=ADA1B749C6048B3756A005C0718CB5D1141B4C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:ee:f1:a4:d2:21:57:36:3d:22:b9:5e:42: ce:bf:f0:9b:85:98:bf:c4:81:bf:e8:a0:1f:21:cf: d4:b2:ce:b4:78:7b:56:62:e9:6b:29:8a:48:97:81: 70:b0:fe:21:13:16:ad:8a:13:7d:c2:a5:74:a3:8f: 2e:3d:70:a8:73:19:7a:9c:2d:8d:68:52:5e:39:f1: f5:16:92:3f:ab:b5:e2:b0:d7:4f:a8:c4:f9:40:65: 15:66:85:2d:9b:5f:56:55:9d:a3:8c:f8:93:4e:73: 5b:b4:05:41:c8:08:be:b1:0c:ee:94:95:5c:77:2b: 5c:e8:80:e4:86:f7:10:8c:58:6b:06:c9:23:b3:ad: 62:8a:e0:76:4b:2d:7a:66:6f:f5:71:c3:6e:d2:8e: b6:90:57:43:84:af:29:0a:be:0a:98:d3:c2:4f:68: 84:cf:1e:e7:ae:5a:d7:a9:6f:ad:e5:5c:a7:aa:d3: 96:f2:4d:d3:1a:de:48:8d:1a:fd:a2:c1:da:6e:73: ff:7c:54:8f:54:4f:0a:07:d2:6d:e4:6a:a7:7f:6c: 5c:3f:bd:bc:bf:44:26:42:eb:56:fe:a6:6d:c5:45: 32:51:9c:9a:36:75:13:4a:3e:5f:24:45:5b:c0:d5: 50:2f:b7:01:bb:24:f7:3e:70:ad:4a:89:d1:3c:56: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A1:B7:49:C6:04:8B:37:56:A0:05:C0:71:8C:B5:D1:14:1B:4C:81 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:73:98:7f:99:f7:3c:60:81:78:59:22:91:36:aa:16:2d:ee: a0:60:c8:35:14:6a:71:63:55:4a:b8:3c:f1:3e:a5:ae:05:bc: 82:55:88:2e:15:f7:1d:7f:05:aa:8e:52:eb:8b:7a:ff:fb:25: a1:5f:7b:06:a1:aa:77:bb:c0:47:7d:e9:f0:7f:0a:c4:80:37: c7:30:72:02:43:8c:7b:74:a3:69:0e:7e:37:ac:5b:6d:38:fe: 5f:83:ba:da:c0:16:c4:6e:78:39:92:31:74:c2:81:db:64:74: 19:17:bc:55:3d:f4:8f:9a:fa:e8:2a:27:9c:be:0a:90:39:4a: 56:29:63:d1:c8:f8:00:1f:9b:b0:4b:2e:c8:93:30:00:68:15: 45:3e:46:6a:8e:7f:fa:c8:19:b7:33:d2:3b:67:c8:d6:60:68: ae:7b:5d:4b:91:89:af:10:7c:e7:7d:f1:d8:9c:16:70:13:65: f5:e8:a6:52:20:b4:62:b8:cd:e1:fc:5d:09:ae:e4:f3:5b:0c: db:93:03:d4:61:87:ca:aa:29:f7:e5:c8:8c:05:00:77:cb:e6: fa:9d:6d:d2:a8:fc:02:2d:06:e1:76:91:de:4d:c3:53:b0:60: 32:6b:80:4f:e1:85:b3:d1:5f:bf:81:9e:30:55:b1:5a:1c:a6: a3:ed:e7:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBrlTo6dOxU4LF2lPfxQS/Di2/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTEyMDYwNjA3MjZaFw0yNTEyMDkwOTI5MjZaMDMxMTAvBgNV BAMTKEFEQTFCNzQ5QzYwNDhCMzc1NkEwMDVDMDcxOENCNUQxMTQxQjRDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKue7xpNIhVzY9IrleQs6/8JuF mL/Egb/ooB8hz9SyzrR4e1Zi6WspikiXgXCw/iETFq2KE33CpXSjjy49cKhzGXqc LY1oUl458fUWkj+rteKw10+oxPlAZRVmhS2bX1ZVnaOM+JNOc1u0BUHICL6xDO6U lVx3K1zogOSG9xCMWGsGySOzrWKK4HZLLXpmb/Vxw27SjraQV0OErykKvgqY08JP aITPHueuWtepb63lXKeq05byTdMa3kiNGv2iwdpuc/98VI9UTwoH0m3kaqd/bFw/ vby/RCZC61b+pm3FRTJRnJo2dRNKPl8kRVvA1VAvtwG7JPc+cK1KidE8VlZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraG3ScYEizdWoAXAcYy10RQbTIEwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANdzmH+Z9zxggXhZIpE2qhYt7qBgyDUUanFj VUq4PPE+pa4FvIJViC4V9x1/BaqOUuuLev/7JaFfewahqne7wEd96fB/CsSAN8cw cgJDjHt0o2kOfjesW204/l+DutrAFsRueDmSMXTCgdtkdBkXvFU99I+a+ugqJ5y+ CpA5SlYpY9HI+AAfm7BLLsiTMABoFUU+RmqOf/rIGbcz0jtnyNZgaK57XUuRia8Q fOd98dicFnATZfXoplIgtGK4zeH8XQmu5PNbDNuTA9Rhh8qqKfflyIwFAHfL5vqd bdKo/AItBuF2kd5Nw1OwYDJrgE/hhbPRX7+BnjBVsVocpqPt5xc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:42 2025 by rpki-client