This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: D4wWjCm4HAgKRNYiIv2U8/I1GsE8uKLLyVMO6xBM1pI= Subject key identifier: 4E:D5:5A:1F:1A:55:49:8E:E7:59:68:58:63:94:E9:C9:8D:50:29:F7 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 5D0CBEFC5E0D4896EDAC6DC3BAB7D4016A81DF15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 0224 Signing time: Sat 06 Dec 2025 09:30:05 +0000 Manifest this update: Sat 06 Dec 2025 09:25:05 +0000 Manifest next update: Tue 09 Dec 2025 14:47:05 +0000 Files and hashes: 1: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: PkFpRGQ/JQU97J357WEk0gQrDjlCBuzKqz9McgGhi+M=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0c:be:fc:5e:0d:48:96:ed:ac:6d:c3:ba:b7:d4:01:6a:81:df:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Dec 6 09:25:05 2025 GMT Not After : Dec 9 14:47:05 2025 GMT Subject: CN=4ED55A1F1A55498EE75968586394E9C98D5029F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:11:12:19:f3:a4:3a:4c:2c:8a:87:88:63: 4a:d0:f7:a1:e4:de:92:4b:97:a2:a1:69:28:ba:ad: c4:05:70:26:0e:0a:a8:e8:0f:df:c7:99:d5:a7:5e: 57:07:a8:2d:b8:1f:17:87:8b:2d:3c:0f:26:c9:30: 3d:c2:d2:52:c3:5e:48:12:e7:e2:fb:26:32:b3:00: a0:dd:95:d2:2e:1a:0e:1e:ed:b6:6b:fe:f9:e5:53: 2e:a5:69:84:77:8d:29:8d:ec:a7:78:9e:60:e1:53: 41:6c:14:ea:db:0e:9f:f2:2d:9b:d6:e2:60:8a:0e: 53:83:07:18:9f:cc:4c:05:28:36:9c:8c:93:be:6b: b9:ed:a0:63:40:91:db:57:44:b4:29:f9:ff:9e:61: 75:8c:6e:9c:b2:c4:63:5a:4d:5d:57:fd:b6:97:da: c5:2a:39:8f:00:aa:69:45:15:b9:8d:c2:aa:99:6e: 50:d1:8d:e2:1e:b1:6d:aa:1e:2f:98:b4:16:56:7a: 3d:8f:68:de:9a:d7:b1:6a:08:2c:40:e2:9b:bf:fd: 7b:2f:0d:e6:74:64:c5:f2:66:56:9d:8c:9f:7e:74: 46:9a:80:8b:12:d0:25:17:2a:4c:a4:27:f5:df:4a: e2:47:7e:2e:89:b8:ac:25:05:a5:83:48:8a:2e:30: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:5A:1F:1A:55:49:8E:E7:59:68:58:63:94:E9:C9:8D:50:29:F7 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:91:94:74:fb:6d:e1:be:53:fa:d7:0f:4e:3e:42:be:4a:d4: 57:5e:70:24:de:84:37:ea:66:5e:de:ae:41:65:f0:a9:bf:7c: 19:1e:9e:25:75:29:79:08:9c:23:90:56:3c:c1:62:ea:28:ee: e8:e3:d0:03:eb:ab:11:2b:7c:15:1f:98:73:18:51:63:c7:28: a7:21:a3:35:b2:6c:ac:3c:e6:cf:43:eb:a6:19:9e:8c:cc:9b: 9c:f9:4e:f3:72:21:c2:f8:34:fb:17:85:c5:ec:0f:2b:6b:6c: 79:c3:52:2c:17:37:2b:a3:54:e4:53:9b:c0:78:1e:91:de:4c: 74:d7:69:f4:a4:b7:7f:61:e1:77:b8:63:42:c5:5b:fa:0d:05: 99:7e:d6:83:01:a0:c2:c2:4c:0c:99:0a:35:05:51:f2:2c:15: f8:6b:fc:87:24:34:8d:6c:e2:9c:d0:a1:0e:a1:41:4a:99:4e: 02:47:3c:45:c7:b4:e8:87:85:cb:16:38:9b:d3:51:c0:5f:3e: a3:e8:10:e1:31:c4:72:ca:f8:57:37:be:e2:06:bf:cd:07:f8: bf:90:a1:e1:d4:a7:87:6e:3e:82:11:ef:9f:2f:5f:95:e0:59: bf:06:de:70:77:19:82:b9:75:0f:6d:9e:7e:a5:07:e0:ac:e8: 86:80:b5:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQy+/F4NSJbtrG3DurfUAWqB3xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTEyMDYwOTI1MDVaFw0yNTEyMDkxNDQ3MDVaMDMxMTAvBgNV BAMTKDRFRDU1QTFGMUE1NTQ5OEVFNzU5Njg1ODYzOTRFOUM5OEQ1MDI5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGThESGfOkOkwsioeIY0rQ96Hk 3pJLl6KhaSi6rcQFcCYOCqjoD9/HmdWnXlcHqC24HxeHiy08DybJMD3C0lLDXkgS 5+L7JjKzAKDdldIuGg4e7bZr/vnlUy6laYR3jSmN7Kd4nmDhU0FsFOrbDp/yLZvW 4mCKDlODBxifzEwFKDacjJO+a7ntoGNAkdtXRLQp+f+eYXWMbpyyxGNaTV1X/baX 2sUqOY8AqmlFFbmNwqqZblDRjeIesW2qHi+YtBZWej2PaN6a17FqCCxA4pu//Xsv DeZ0ZMXyZladjJ9+dEaagIsS0CUXKkykJ/XfSuJHfi6JuKwlBaWDSIouMNLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtVaHxpVSY7nWWhYY5TpyY1QKfcwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKRlHT7beG+U/rXD04+Qr5K1FdecCTehDfq Zl7erkFl8Km/fBkeniV1KXkInCOQVjzBYuoo7ujj0APrqxErfBUfmHMYUWPHKKch ozWybKw85s9D66YZnozMm5z5TvNyIcL4NPsXhcXsDytrbHnDUiwXNyujVORTm8B4 HpHeTHTXafSkt39h4Xe4Y0LFW/oNBZl+1oMBoMLCTAyZCjUFUfIsFfhr/IckNI1s 4pzQoQ6hQUqZTgJHPEXHtOiHhcsWOJvTUcBfPqPoEOExxHLK+Fc3vuIGv80H+L+Q oeHUp4duPoIR758vX5XgWb8G3nB3GYK5dQ9tnn6lB+Cs6IaAtbY= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:44 2025 by rpki-client