This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: LDce23KPB5cNmr4LzlTdGMSQ9fXeHecnGAFqgObW6uM= Subject key identifier: C9:A8:D4:E8:1E:E5:85:D3:F2:C5:30:30:6B:90:B5:63:A9:98:C2:28 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 1ED4DC4C20814F005E109B32C985CF4AE54345B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 029F Signing time: Sat 06 Dec 2025 12:11:59 +0000 Manifest this update: Sat 06 Dec 2025 12:06:59 +0000 Manifest next update: Tue 09 Dec 2025 14:29:59 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: 0GTvgrXKGv3X3mFV762GFau1SQ/c/jQ1pAk8CHktfQQ=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d4:dc:4c:20:81:4f:00:5e:10:9b:32:c9:85:cf:4a:e5:43:45:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Dec 6 12:06:59 2025 GMT Not After : Dec 9 14:29:59 2025 GMT Subject: CN=C9A8D4E81EE585D3F2C530306B90B563A998C228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:7b:53:99:a2:1b:0c:12:c3:29:4e:43:a6: 8f:b7:59:09:54:4b:72:1b:2f:fb:69:32:e9:06:15: 3c:4a:3a:26:84:30:99:3d:bd:c9:51:20:11:75:58: e2:46:a5:0a:09:35:98:8d:19:75:4a:e0:d1:7a:26: 60:a9:e3:29:5c:0c:f8:e3:12:fd:0b:b2:65:f2:03: 7c:1b:0d:bb:72:f9:fb:5e:14:04:90:e1:de:71:d7: c9:83:5c:ba:6e:d8:e1:d8:79:31:6b:d3:ba:95:48: d4:d1:fa:d6:4b:0a:b8:c3:3f:a7:07:d1:21:89:2b: ae:d7:1d:bc:20:23:fa:9f:c3:4c:aa:4c:8b:63:9b: 03:c7:c0:89:e8:23:53:dd:82:b2:c3:a4:3c:73:19: 0d:f1:53:bb:27:fa:6e:cc:d6:38:7b:60:76:ec:76: 5b:70:5a:02:1c:20:43:71:8e:4f:5e:50:91:3e:87: 17:b2:12:1b:fc:1a:78:34:0c:2b:bc:5b:aa:c7:f0: 1a:42:94:ad:38:42:0d:6b:28:43:56:69:ad:f5:3e: de:5a:da:8f:23:62:63:62:83:db:c8:2c:50:5d:1f: 07:53:46:22:5b:06:2d:4e:d4:df:95:2a:70:77:1b: bb:6f:8e:9e:ae:2d:5c:68:4a:5b:fa:9c:af:72:d1: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:D4:E8:1E:E5:85:D3:F2:C5:30:30:6B:90:B5:63:A9:98:C2:28 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4f:d3:98:78:1e:9d:4f:a8:ef:9c:46:4a:6e:71:e4:51:e3: e1:6e:d7:56:c7:a9:c5:98:ce:a8:6a:31:f1:51:16:c8:a7:73: e6:c7:1b:c4:f7:d9:d4:bf:24:2a:ed:6c:bf:86:8b:00:11:f1: 3a:3b:94:8b:3a:17:9b:26:fc:c4:8c:63:5c:f9:cd:26:3d:d1: b6:d7:62:be:5e:b0:d2:c1:f2:cb:37:19:16:5d:46:0f:dc:c5: 27:e7:06:57:69:fc:f6:27:05:b7:50:a1:cb:59:bd:97:b3:10: ab:ee:3e:c0:18:14:9f:72:aa:ee:ea:07:bc:96:3d:f2:36:d2: a3:f9:8a:c2:9a:60:7b:e7:56:0f:30:e8:6e:be:1d:a7:5b:90: 5a:2e:8b:4c:76:34:e8:90:a0:df:1a:df:0d:0b:47:61:9c:fd: f9:30:89:13:e0:08:85:d8:91:27:a3:14:12:de:53:9e:dd:8d: 5c:c9:ee:47:bf:cb:72:db:63:8e:ba:2b:0b:9e:4e:0b:69:c6: b8:d1:fc:ce:2a:a9:6e:b7:b1:b9:5e:3d:8f:13:db:c0:d8:74: c3:d5:9b:3d:c7:59:71:7d:66:7c:a0:95:59:b2:90:2e:61:6a: 00:84:00:bd:ff:5c:7b:17:4e:52:03:57:d7:58:8c:00:68:d5: ad:28:63:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtTcTCCBTwBeEJsyyYXPSuVDRbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTEyMDYxMjA2NTlaFw0yNTEyMDkxNDI5NTlaMDMxMTAvBgNV BAMTKEM5QThENEU4MUVFNTg1RDNGMkM1MzAzMDZCOTBCNTYzQTk5OEMyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuXtTmaIbDBLDKU5Dpo+3WQlU S3IbL/tpMukGFTxKOiaEMJk9vclRIBF1WOJGpQoJNZiNGXVK4NF6JmCp4ylcDPjj Ev0LsmXyA3wbDbty+fteFASQ4d5x18mDXLpu2OHYeTFr07qVSNTR+tZLCrjDP6cH 0SGJK67XHbwgI/qfw0yqTItjmwPHwInoI1PdgrLDpDxzGQ3xU7sn+m7M1jh7YHbs dltwWgIcIENxjk9eUJE+hxeyEhv8Gng0DCu8W6rH8BpClK04Qg1rKENWaa31Pt5a 2o8jYmNig9vILFBdHwdTRiJbBi1O1N+VKnB3G7tvjp6uLVxoSlv6nK9y0bmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyajU6B7lhdPyxTAwa5C1Y6mYwigwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhP05h4Hp1PqO+cRkpuceRR4+Fu11bHqcWY zqhqMfFRFsinc+bHG8T32dS/JCrtbL+GiwAR8To7lIs6F5sm/MSMY1z5zSY90bbX Yr5esNLB8ss3GRZdRg/cxSfnBldp/PYnBbdQoctZvZezEKvuPsAYFJ9yqu7qB7yW PfI20qP5isKaYHvnVg8w6G6+HadbkFoui0x2NOiQoN8a3w0LR2Gc/fkwiRPgCIXY kSejFBLeU57djVzJ7ke/y3LbY466KwueTgtpxrjR/M4qqW63sblePY8T28DYdMPV mz3HWXF9ZnyglVmykC5hagCEAL3/XHsXTlIDV9dYjABo1a0oY7E= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:20 2025 by rpki-client