This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: MRO6I2I5abFEiPgwGlvDe1ufUJYOuhqBdC9uISEewww= Subject key identifier: AF:7D:12:B2:F3:11:EF:3D:CC:BB:FD:82:B0:F8:9F:9B:E3:AE:E8:F4 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 03BE47431C9E42DB5EE117D555D23DCD28C2021F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 09:50:38 +0000 Manifest this update: Sat 06 Dec 2025 09:45:38 +0000 Manifest next update: Tue 09 Dec 2025 17:50:38 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 3: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: YWQEwoI4U+dGUFoff3LUZNqLUqhVVK/3fyQm4DPek5w=) 4: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:be:47:43:1c:9e:42:db:5e:e1:17:d5:55:d2:3d:cd:28:c2:02:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Dec 6 09:45:38 2025 GMT Not After : Dec 9 17:50:38 2025 GMT Subject: CN=AF7D12B2F311EF3DCCBBFD82B0F89F9BE3AEE8F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:7c:b4:6f:26:13:fc:54:9e:50:98:c1:2f: ca:cc:3c:03:3f:0e:5f:d7:74:95:bb:a6:be:47:99: 40:3a:d2:e3:d2:db:1c:25:87:b4:8b:67:32:20:09: 34:c7:65:7d:93:27:0c:ae:82:43:df:81:57:0a:33: fe:d9:c2:25:4c:80:7a:25:e9:83:cb:99:88:63:b9: c2:1b:eb:ea:a9:64:cf:20:2d:b4:85:87:3c:98:b5: 89:7d:91:94:9d:c8:df:d9:75:e2:b0:47:52:60:9e: 50:e4:af:54:b5:ab:c9:1b:54:50:91:33:47:a2:18: 9b:2c:92:c1:9d:ff:d1:0a:b4:20:81:85:5e:b6:fc: e3:2f:8a:79:fd:ab:26:2c:a7:91:f0:ef:1c:42:c8: 34:3f:f4:b4:01:1d:f7:d2:d2:09:d3:5e:9a:04:71: df:2d:8e:e0:a7:7d:ae:db:9e:9c:bf:f3:a2:cc:2b: f5:78:6e:1c:1b:57:24:d7:59:f7:cc:8e:db:96:a1: 28:5e:42:ea:68:da:2e:d4:9b:9b:4a:8a:37:ff:3e: c8:60:b9:d9:26:0a:a4:5f:8a:fd:5e:3a:47:be:43: 07:ed:3c:85:ed:25:c4:01:8c:0f:fd:80:b8:22:48: db:51:e8:2d:8c:98:7d:b2:a2:6f:62:4d:f0:fa:77: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7D:12:B2:F3:11:EF:3D:CC:BB:FD:82:B0:F8:9F:9B:E3:AE:E8:F4 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:31:e2:d9:ae:a7:6f:2c:24:f3:c9:91:1a:ad:8f:74:e5:d2: e4:05:eb:16:f5:6e:14:49:f9:fd:db:54:e5:84:ab:64:8c:b8: ed:ed:f0:1b:bb:81:bf:09:27:58:89:ea:60:bc:75:26:a4:1e: 51:44:54:d6:a9:67:11:c6:13:5d:20:23:6b:f0:4d:26:05:87: e1:7c:32:b8:9b:0d:f2:ca:27:d3:ca:34:90:70:35:92:b8:72: 5a:ed:0b:9e:29:04:8c:d8:b1:73:75:11:a4:ba:b5:f2:13:57: d4:24:ad:50:1c:a0:df:73:04:b9:ac:2c:a6:f9:bb:0c:d8:3d: a8:b3:c9:9c:65:c6:2d:1e:34:e6:77:2f:4f:69:6a:ac:0d:d9: 1b:56:b8:27:a9:e6:a3:8d:ba:67:f0:87:0f:88:ea:91:23:a8: f1:56:8b:1a:65:b9:cf:53:d8:33:1a:7e:74:8f:f7:c5:76:1d: ba:16:05:6d:5f:e3:1c:ee:22:f8:c4:ba:a3:3d:8f:f3:de:05: 64:5e:bf:b7:9c:92:8d:78:d8:e1:c6:f1:d0:b9:6c:02:7b:9a: 2b:9d:e4:bf:1c:22:81:92:e8:fc:39:48:80:92:e5:5f:75:63: 1f:b4:45:21:6c:d5:a6:60:de:1f:18:f8:58:94:b7:5e:21:25: 97:47:34:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA75HQxyeQtte4RfVVdI9zSjCAh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTEyMDYwOTQ1MzhaFw0yNTEyMDkxNzUwMzhaMDMxMTAvBgNV BAMTKEFGN0QxMkIyRjMxMUVGM0RDQ0JCRkQ4MkIwRjg5RjlCRTNBRUU4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFt3y0byYT/FSeUJjBL8rMPAM/ Dl/XdJW7pr5HmUA60uPS2xwlh7SLZzIgCTTHZX2TJwyugkPfgVcKM/7ZwiVMgHol 6YPLmYhjucIb6+qpZM8gLbSFhzyYtYl9kZSdyN/ZdeKwR1JgnlDkr1S1q8kbVFCR M0eiGJssksGd/9EKtCCBhV62/OMvinn9qyYsp5Hw7xxCyDQ/9LQBHffS0gnTXpoE cd8tjuCnfa7bnpy/86LMK/V4bhwbVyTXWffMjtuWoSheQupo2i7Um5tKijf/Pshg udkmCqRfiv1eOke+QwftPIXtJcQBjA/9gLgiSNtR6C2MmH2yom9iTfD6d5H1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr30SsvMR7z3Mu/2CsPifm+Ou6PQwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIx4tmup28sJPPJkRqtj3Tl0uQF6xb1bhRJ +f3bVOWEq2SMuO3t8Bu7gb8JJ1iJ6mC8dSakHlFEVNapZxHGE10gI2vwTSYFh+F8 MribDfLKJ9PKNJBwNZK4clrtC54pBIzYsXN1EaS6tfITV9QkrVAcoN9zBLmsLKb5 uwzYPaizyZxlxi0eNOZ3L09paqwN2RtWuCep5qONumfwhw+I6pEjqPFWixpluc9T 2DMafnSP98V2HboWBW1f4xzuIvjEuqM9j/PeBWRev7ecko142OHG8dC5bAJ7miud 5L8cIoGS6Pw5SICS5V91Yx+0RSFs1aZg3h8Y+FiUt14hJZdHNK4= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:59 2025 by rpki-client