This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: 9fzCRHUwcghGpdv0Q4YC8MpFy4MCf7W0vzQlLRnys9k= Subject key identifier: 52:EE:FC:62:B5:DF:CA:D1:DE:85:52:FE:27:E8:1B:48:23:CD:1D:03 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 7909CFC060C1D59C9C234465DC43D5811E4FE0A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01BD Signing time: Fri 05 Dec 2025 14:51:40 +0000 Manifest this update: Fri 05 Dec 2025 14:46:40 +0000 Manifest next update: Mon 08 Dec 2025 19:29:40 +0000 Files and hashes: 1: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: //ocGzOsuUQZkf1tjhjozhoPzyIth4tpq1QEwO9G2cU=) 2: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 3: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=) 4: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) 5: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=) 7: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:09:cf:c0:60:c1:d5:9c:9c:23:44:65:dc:43:d5:81:1e:4f:e0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Dec 5 14:46:40 2025 GMT Not After : Dec 8 19:29:40 2025 GMT Subject: CN=52EEFC62B5DFCAD1DE8552FE27E81B4823CD1D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:86:65:c6:5d:a3:0e:0d:1e:29:67:7f:41: eb:be:da:48:df:65:4f:b6:8b:16:fd:f4:83:ec:7c: c0:e8:e8:45:91:66:da:df:70:35:38:17:96:39:fc: e6:81:4a:01:4c:6d:e1:0f:8f:31:02:af:ba:b4:a6: e8:bc:57:ef:65:88:d3:a2:02:b0:c5:be:c7:af:18: 6f:7b:f2:c5:2d:da:84:73:c6:a3:b0:07:8e:b4:2e: f5:40:32:06:35:c2:a3:10:53:41:82:33:66:bb:27: 3a:d8:96:84:5a:f1:49:d7:88:96:61:aa:92:75:d3: 24:1a:40:d4:1d:3f:fe:87:0d:a3:48:6f:29:f1:19: 8e:47:1d:06:e3:fd:56:01:b3:32:73:6e:94:9e:e9: ab:e2:37:29:2f:37:d5:20:b2:4e:50:5b:29:5d:3c: a1:df:3d:64:ec:6b:98:cd:87:4b:f6:8b:93:71:05: 89:15:cd:a1:23:9c:71:4c:77:00:0b:bb:9d:0b:b4: 10:bb:f7:63:f6:69:4c:cf:05:d2:89:0c:e9:4c:8d: 79:4a:6f:f0:ed:1a:eb:82:e7:c1:b0:8b:c9:93:ab: cd:42:54:c3:0d:75:85:5a:6f:d6:81:f2:04:24:97: 73:c7:2d:b7:b1:81:35:c8:67:85:4a:c8:51:03:4c: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:FC:62:B5:DF:CA:D1:DE:85:52:FE:27:E8:1B:48:23:CD:1D:03 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e8:b2:5b:aa:ee:27:a8:6a:0f:68:94:f4:55:24:fb:19:22: ac:0e:c0:b3:5f:ea:6a:62:86:e4:33:ce:fd:45:c5:58:8d:ac: 17:ea:b7:d2:3a:4e:51:53:8b:78:cb:c6:91:3a:15:a0:78:97: e3:28:b5:89:c1:9f:c7:4f:4c:8d:55:00:a2:0b:f6:36:dd:00: 1e:18:e2:d3:5e:de:d3:0d:28:e6:8f:e7:9f:79:2b:d8:22:da: 22:6e:bf:9a:5f:40:41:e2:43:f2:14:76:a6:8a:62:95:e1:75: cf:49:e1:5b:4d:07:a4:3a:45:02:e6:4b:9f:75:27:fe:89:d5: ed:d3:6d:5f:81:27:c6:3a:f0:cb:d5:b1:71:e4:08:7f:f1:52: 9d:e2:27:74:7b:a9:48:6d:82:e6:a6:d2:f7:f4:25:15:af:af: de:77:ba:bc:e2:9e:8f:33:f9:01:14:7e:bd:03:99:45:32:dc: d7:f5:d1:48:5e:72:20:fc:ba:3c:f4:8c:93:c9:58:43:a8:46: c4:f5:ad:76:db:06:db:18:86:69:30:0f:21:29:9c:e3:59:51: db:cc:93:02:e3:94:d9:db:b1:a3:f9:98:24:7f:1a:50:6c:2d: 2f:20:1e:90:9f:6e:c4:2e:53:e8:89:18:4b:c3:98:71:bb:c7: 46:d0:96:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQnPwGDB1ZycI0Rl3EPVgR5P4KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTEyMDUxNDQ2NDBaFw0yNTEyMDgxOTI5NDBaMDMxMTAvBgNV BAMTKDUyRUVGQzYyQjVERkNBRDFERTg1NTJGRTI3RTgxQjQ4MjNDRDFEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jYZlxl2jDg0eKWd/Qeu+2kjf ZU+2ixb99IPsfMDo6EWRZtrfcDU4F5Y5/OaBSgFMbeEPjzECr7q0pui8V+9liNOi ArDFvsevGG978sUt2oRzxqOwB460LvVAMgY1wqMQU0GCM2a7JzrYloRa8UnXiJZh qpJ10yQaQNQdP/6HDaNIbynxGY5HHQbj/VYBszJzbpSe6aviNykvN9Ugsk5QWyld PKHfPWTsa5jNh0v2i5NxBYkVzaEjnHFMdwALu50LtBC792P2aUzPBdKJDOlMjXlK b/DtGuuC58Gwi8mTq81CVMMNdYVab9aB8gQkl3PHLbexgTXIZ4VKyFEDTPlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUu78YrXfytHehVL+J+gbSCPNHQMwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXosluq7ieoag9olPRVJPsZIqwOwLNf6mpi huQzzv1FxViNrBfqt9I6TlFTi3jLxpE6FaB4l+MotYnBn8dPTI1VAKIL9jbdAB4Y 4tNe3tMNKOaP5595K9gi2iJuv5pfQEHiQ/IUdqaKYpXhdc9J4VtNB6Q6RQLmS591 J/6J1e3TbV+BJ8Y68MvVsXHkCH/xUp3iJ3R7qUhtguam0vf0JRWvr953urzino8z +QEUfr0DmUUy3Nf10UheciD8ujz0jJPJWEOoRsT1rXbbBtsYhmkwDyEpnONZUdvM kwLjlNnbsaP5mCR/GlBsLS8gHpCfbsQuU+iJGEvDmHG7x0bQllk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:59 2025 by rpki-client