This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: NFsvfxfInGN0EqhrU/ElxbV1wEjcciqB2ZSI3yMZGpA= Subject key identifier: 35:E7:05:DF:2A:BE:63:47:34:D0:7E:8A:BF:E1:57:5C:87:D1:85:25 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 157279A85AD2376178533BE5CEAD6DFEE8270FAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 023D Signing time: Sat 06 Dec 2025 08:30:03 +0000 Manifest this update: Sat 06 Dec 2025 08:25:03 +0000 Manifest next update: Tue 09 Dec 2025 09:18:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 3: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: vmbSfuclkF1bmZYLY+BcFFjoPDJKWTcoLepkShnepQ0=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:72:79:a8:5a:d2:37:61:78:53:3b:e5:ce:ad:6d:fe:e8:27:0f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Dec 6 08:25:03 2025 GMT Not After : Dec 9 09:18:03 2025 GMT Subject: CN=35E705DF2ABE634734D07E8ABFE1575C87D18525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:a4:15:b1:57:46:5a:38:3e:c7:8f:ab:64: 4c:95:4e:db:f8:a1:75:be:67:4e:c0:e7:7c:64:2b: d9:95:f8:e5:cb:c4:c4:dc:41:ff:60:1c:63:09:d6: 84:d2:6f:3e:b2:72:d7:8a:df:c7:0b:7d:4d:09:80: 29:90:1d:d5:17:21:f9:d0:0f:ca:4d:70:ac:d8:01: d2:c6:4a:cf:51:bd:a6:a2:50:29:ae:ec:80:35:b4: 0f:42:d2:2d:99:3c:97:4d:6b:1a:12:f2:df:d0:ad: 01:c7:a9:5b:40:91:f7:1d:9d:0b:86:72:44:8f:44: 3b:8a:69:49:9e:b4:54:88:d2:bd:ed:b3:ee:36:fd: fc:5c:15:2a:fe:3c:72:92:55:27:fc:46:57:55:62: 3f:e9:b0:83:70:ec:ad:64:41:eb:3f:63:b3:b2:6c: ab:90:1b:60:66:2d:4f:61:c9:af:69:c3:f2:eb:71: 7d:64:57:b6:a5:3f:cb:60:19:62:8e:19:20:50:86: be:c3:6c:b0:6b:dd:e8:5e:90:45:8e:6f:b7:16:f9: 93:d9:c2:db:22:52:4a:68:dd:88:0b:74:1f:f3:ec: d8:88:c7:d3:5e:c2:ed:8c:22:04:a9:6e:a0:87:75: 04:f5:34:02:3b:e1:59:f6:4d:39:1d:4f:b1:ee:75: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:05:DF:2A:BE:63:47:34:D0:7E:8A:BF:E1:57:5C:87:D1:85:25 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:67:ee:b0:67:2a:0f:71:3c:68:05:86:86:e5:06:69:61:dc: b5:a5:91:44:17:b5:55:ee:05:84:fa:a2:df:19:8a:25:00:45: c3:ef:19:ce:06:8b:48:3d:f8:fd:cb:6a:aa:f5:10:a1:44:e6: a8:1b:79:27:73:d1:0c:be:18:ad:6b:07:af:ca:a9:82:07:15: 3a:99:e2:f0:43:c2:c6:10:31:81:7f:35:a9:43:e2:8b:51:9d: de:ed:fd:43:d4:f7:3c:c5:6b:32:1a:8a:27:25:63:35:fd:80: 25:12:34:08:70:cb:f3:23:b0:28:28:c4:14:c1:c2:be:67:69: 8f:80:65:47:83:9a:b7:17:e7:6f:b8:c7:b9:46:98:99:25:ef: 45:ae:c8:29:83:5f:66:ef:79:41:75:ee:3a:b2:39:79:28:6c: 4e:01:06:78:cd:82:89:8c:2a:29:72:d9:47:32:15:d7:ff:04: 0a:81:07:f4:29:a8:e2:48:e9:43:2e:d3:89:d8:fd:20:6f:d3: 3e:20:2a:fa:4e:42:e8:5e:13:c5:6e:90:55:7b:ea:58:bd:97: ea:c9:e3:be:3f:55:3b:42:55:c8:71:32:05:ea:36:7d:7c:d8: ca:80:cc:05:e7:d2:b1:0c:99:46:21:18:e5:7a:34:dc:d4:da: bc:b9:65:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXJ5qFrSN2F4Uzvlzq1t/ugnD6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTEyMDYwODI1MDNaFw0yNTEyMDkwOTE4MDNaMDMxMTAvBgNV BAMTKDM1RTcwNURGMkFCRTYzNDczNEQwN0U4QUJGRTE1NzVDODdEMTg1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VKQVsVdGWjg+x4+rZEyVTtv4 oXW+Z07A53xkK9mV+OXLxMTcQf9gHGMJ1oTSbz6ycteK38cLfU0JgCmQHdUXIfnQ D8pNcKzYAdLGSs9RvaaiUCmu7IA1tA9C0i2ZPJdNaxoS8t/QrQHHqVtAkfcdnQuG ckSPRDuKaUmetFSI0r3ts+42/fxcFSr+PHKSVSf8RldVYj/psINw7K1kQes/Y7Oy bKuQG2BmLU9hya9pw/LrcX1kV7alP8tgGWKOGSBQhr7DbLBr3ehekEWOb7cW+ZPZ wtsiUkpo3YgLdB/z7NiIx9Newu2MIgSpbqCHdQT1NAI74Vn2TTkdT7HudSP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNecF3yq+Y0c00H6Kv+FXXIfRhSUwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVn7rBnKg9xPGgFhoblBmlh3LWlkUQXtVXu BYT6ot8ZiiUARcPvGc4Gi0g9+P3Laqr1EKFE5qgbeSdz0Qy+GK1rB6/KqYIHFTqZ 4vBDwsYQMYF/NalD4otRnd7t/UPU9zzFazIaiiclYzX9gCUSNAhwy/MjsCgoxBTB wr5naY+AZUeDmrcX52+4x7lGmJkl70WuyCmDX2bveUF17jqyOXkobE4BBnjNgomM Kily2UcyFdf/BAqBB/QpqOJI6UMu04nY/SBv0z4gKvpOQuheE8VukFV76li9l+rJ 474/VTtCVchxMgXqNn182MqAzAXn0rEMmUYhGOV6NNzU2ry5Zbc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:47 2025 by rpki-client