This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: CpMAPDgA9FuLmrjFaV3F7OVaK3npqpdSkP3jbvD7ya0= Subject key identifier: AA:61:F0:DB:0B:3F:17:C5:25:EF:BF:4C:E2:CF:50:6A:E4:9C:6A:B3 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 63A9FE10B67BB4E56433DE4CF4B1573C3CD5FEBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 021C Signing time: Sat 06 Dec 2025 13:52:04 +0000 Manifest this update: Sat 06 Dec 2025 13:47:04 +0000 Manifest next update: Tue 09 Dec 2025 23:11:04 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: 1OgQ05TO/RGKKDvABwzhXZGlDcq/FvRsjEG4n2rp5uI=) 3: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a9:fe:10:b6:7b:b4:e5:64:33:de:4c:f4:b1:57:3c:3c:d5:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Dec 6 13:47:04 2025 GMT Not After : Dec 9 23:11:04 2025 GMT Subject: CN=AA61F0DB0B3F17C525EFBF4CE2CF506AE49C6AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:0e:d6:08:61:d1:97:7e:a0:19:8a:45:6c: 4b:c5:be:36:ee:d7:eb:8a:0f:f7:38:d5:99:f5:39: 08:2f:98:08:d6:b0:1b:b3:2c:42:09:36:42:1a:fe: 9b:37:75:92:b0:c0:0f:aa:1a:80:8c:f9:86:31:59: 74:d7:ef:98:6b:22:69:ca:23:9f:e9:47:aa:ae:24: 6d:84:77:bd:9e:55:20:8c:6c:27:25:3d:9b:e6:7e: bd:d4:2d:3e:e6:e9:b0:2a:df:83:66:aa:d2:80:31: 4e:f5:02:cb:bc:4d:ba:58:2f:1a:40:eb:b7:79:7a: af:b7:d0:a8:ee:06:34:18:0e:38:4e:01:6e:3a:dc: 4c:fb:1c:ae:f3:a1:c5:27:66:ef:5d:01:33:bf:ad: 4b:f2:c2:80:53:1f:93:f8:ba:cb:78:cc:0d:6c:46: fd:d1:8d:51:96:a5:d4:d3:0f:6b:5a:97:10:b0:27: 86:26:fe:f2:a1:cc:6e:ff:fa:fc:79:8f:4c:d1:8a: 11:d9:c5:ab:83:d5:3c:24:ca:3a:f9:36:85:77:b7: 70:b8:af:77:c2:ee:90:a4:fc:ce:2e:b7:4e:91:33: c2:dd:65:0a:06:6c:1e:29:84:17:64:50:3c:95:18: ff:70:45:0e:3f:a2:20:07:ba:79:4a:66:ce:de:d4: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:F0:DB:0B:3F:17:C5:25:EF:BF:4C:E2:CF:50:6A:E4:9C:6A:B3 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:38:87:d0:31:96:e1:8e:74:bc:07:c5:25:f8:e4:bf:63: e0:69:82:bb:22:9a:15:bf:85:fd:31:6f:8a:e4:48:db:7b:bb: 9c:46:59:e1:d9:a8:de:ee:86:c1:9c:2c:b6:92:7d:e2:75:7f: 30:6a:15:61:4b:68:fa:1a:b5:c9:f8:38:01:92:db:4e:35:5f: c5:22:6d:d8:5d:26:80:8b:d5:38:67:63:f3:32:cd:66:d9:7f: c1:50:81:c5:74:81:2c:32:e4:e7:f9:4c:52:58:53:3b:71:9e: ae:a6:21:ec:4f:85:cc:4a:59:8e:d2:ea:14:86:7c:52:32:ae: 1a:28:f4:15:cd:5e:93:66:2c:95:e9:42:d2:96:a0:e3:d8:53: d8:4d:a2:ba:ec:6f:c7:5f:cc:cb:5f:6f:05:c6:ed:ff:41:f8: 5e:19:3a:35:4a:f6:da:02:70:11:1d:e3:fd:ba:c5:64:c5:37: 25:f5:5f:67:b4:fd:e6:a5:df:85:94:7a:59:c5:cf:9f:95:67: 69:7e:36:b3:64:f8:0c:9f:8d:3e:a1:c9:52:02:00:f7:66:43: 05:fb:e0:2e:df:64:a8:a2:49:d3:96:60:b9:db:fe:10:e2:7a: d4:f4:b2:c2:8a:ea:7c:bf:2f:31:c0:ec:9b:07:d0:cc:6d:3d: fe:61:7c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6n+ELZ7tOVkM95M9LFXPDzV/r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTEyMDYxMzQ3MDRaFw0yNTEyMDkyMzExMDRaMDMxMTAvBgNV BAMTKEFBNjFGMERCMEIzRjE3QzUyNUVGQkY0Q0UyQ0Y1MDZBRTQ5QzZBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXg7WCGHRl36gGYpFbEvFvjbu 1+uKD/c41Zn1OQgvmAjWsBuzLEIJNkIa/ps3dZKwwA+qGoCM+YYxWXTX75hrImnK I5/pR6quJG2Ed72eVSCMbCclPZvmfr3ULT7m6bAq34NmqtKAMU71Asu8TbpYLxpA 67d5eq+30KjuBjQYDjhOAW463Ez7HK7zocUnZu9dATO/rUvywoBTH5P4ust4zA1s Rv3RjVGWpdTTD2talxCwJ4Ym/vKhzG7/+vx5j0zRihHZxauD1Twkyjr5NoV3t3C4 r3fC7pCk/M4ut06RM8LdZQoGbB4phBdkUDyVGP9wRQ4/oiAHunlKZs7e1IIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmHw2ws/F8Ul779M4s9QauScarMwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdxOIfQMZbhjnS8B8Ul+OS/Y+BpgrsimhW/ hf0xb4rkSNt7u5xGWeHZqN7uhsGcLLaSfeJ1fzBqFWFLaPoatcn4OAGS2041X8Ui bdhdJoCL1ThnY/MyzWbZf8FQgcV0gSwy5Of5TFJYUztxnq6mIexPhcxKWY7S6hSG fFIyrhoo9BXNXpNmLJXpQtKWoOPYU9hNorrsb8dfzMtfbwXG7f9B+F4ZOjVK9toC cBEd4/26xWTFNyX1X2e0/eal34WUelnFz5+VZ2l+NrNk+AyfjT6hyVICAPdmQwX7 4C7fZKiiSdOWYLnb/hDietT0ssKK6ny/LzHA7JsH0MxtPf5hfGA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:47 2025 by rpki-client