This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: lJmDrBqq8QweZvsOfsVpWq8GIyvJ4jl+AsJDwExhoLg= Subject key identifier: 37:FE:60:8F:7E:81:25:9B:85:5D:6C:59:79:2D:22:CE:82:18:25:79 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 09E5C3032D85A81788A939F3AB3D887AD75030B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01C9 Signing time: Thu 04 Dec 2025 20:30:46 +0000 Manifest this update: Thu 04 Dec 2025 20:25:46 +0000 Manifest next update: Mon 08 Dec 2025 07:25:46 +0000 Files and hashes: 1: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) 2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 3: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) 4: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: 3dAyXfKp+epmUf7yxgilTLSdP5O7O5ML7bWUnoxGhNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e5:c3:03:2d:85:a8:17:88:a9:39:f3:ab:3d:88:7a:d7:50:30:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Dec 4 20:25:46 2025 GMT Not After : Dec 8 07:25:46 2025 GMT Subject: CN=37FE608F7E81259B855D6C59792D22CE82182579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:60:44:a9:15:f1:02:8f:61:5a:43:eb:23: a5:34:9c:f2:95:4f:6b:e1:b6:e9:10:6a:37:34:26: c4:14:dd:45:80:c9:45:bb:a8:33:54:ef:da:78:54: b5:5b:3a:71:33:db:d3:26:df:37:e8:b2:b7:f5:c8: 77:2a:20:ed:f4:a6:6f:a8:8a:28:a5:83:4e:bc:f7: 76:d8:83:04:29:04:8d:b1:ef:f3:e0:2d:ee:01:f0: 2f:96:ee:9d:bc:a2:25:0c:75:2a:c7:a5:d1:59:50: 3d:bd:5e:cf:f4:ac:fd:6b:6d:29:50:ce:92:b8:bc: 26:0d:a5:44:ff:b1:8d:9b:34:52:a7:a8:6c:a7:33: 84:56:1a:5e:13:63:ea:03:0b:ce:bc:51:c5:33:b8: 7d:6e:78:91:ab:29:49:1e:3e:f7:15:f4:b1:af:24: 55:ba:ea:15:a4:d6:85:b2:e7:ee:40:29:fa:a4:26: 41:a2:a8:28:44:0b:1c:05:fa:2c:96:5e:cf:5f:61: 43:0d:98:52:52:74:0d:30:40:96:06:39:d5:99:26: d4:00:f3:d1:e4:77:50:08:35:bf:46:f3:46:cf:6b: 7c:d0:d0:0c:ba:6b:6f:15:ed:64:f4:24:7e:e0:52: 53:12:65:7e:06:59:e4:b8:58:1b:38:a1:ea:c4:5b: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:60:8F:7E:81:25:9B:85:5D:6C:59:79:2D:22:CE:82:18:25:79 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:28:f3:27:cd:8d:de:0c:09:5d:75:4c:df:39:0a:b9:65: eb:a3:c2:11:09:d7:7d:62:f2:4b:89:48:00:cf:94:45:2d:59: 4d:f5:ad:4e:80:52:55:f2:4b:91:69:49:8d:7c:34:4b:c9:d2: 21:7a:f6:10:9c:b5:18:30:4a:4c:69:45:49:20:2f:39:4d:21: 0e:e5:b8:a6:2f:81:75:e9:72:8b:85:7a:af:b5:b6:a3:b7:cd: 2c:19:d8:23:71:b2:43:91:17:77:e7:fe:1f:58:30:0f:7f:56: d6:7f:c2:4b:a8:f1:03:1a:c7:f0:de:a0:e2:92:0d:62:89:2c: ba:e1:47:87:95:6d:71:88:7e:8e:e5:7b:9c:60:b9:48:ab:60: 1f:ef:0d:c3:2a:4f:4b:3b:b8:c0:8f:76:ad:a2:f2:2c:51:6c: 51:64:6d:ec:04:a7:b2:e4:4f:fb:ad:08:08:8a:f2:57:86:35: f7:9a:ab:99:3a:28:e4:82:a8:78:62:b8:79:e8:a2:ba:f4:16: 2a:b4:32:ab:a1:f6:0b:9f:64:a4:46:92:b2:cc:26:08:30:23: 37:37:59:06:62:a1:d9:27:a0:23:90:44:de:4e:cf:aa:83:3f: c8:1d:64:01:ab:63:c8:42:78:6e:73:22:bc:fc:10:35:52:9d: 08:b4:5f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeXDAy2FqBeIqTnzqz2IetdQMLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTEyMDQyMDI1NDZaFw0yNTEyMDgwNzI1NDZaMDMxMTAvBgNV BAMTKDM3RkU2MDhGN0U4MTI1OUI4NTVENkM1OTc5MkQyMkNFODIxODI1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYWBEqRXxAo9hWkPrI6U0nPKV T2vhtukQajc0JsQU3UWAyUW7qDNU79p4VLVbOnEz29Mm3zfosrf1yHcqIO30pm+o iiilg06893bYgwQpBI2x7/PgLe4B8C+W7p28oiUMdSrHpdFZUD29Xs/0rP1rbSlQ zpK4vCYNpUT/sY2bNFKnqGynM4RWGl4TY+oDC868UcUzuH1ueJGrKUkePvcV9LGv JFW66hWk1oWy5+5AKfqkJkGiqChECxwF+iyWXs9fYUMNmFJSdA0wQJYGOdWZJtQA 89Hkd1AINb9G80bPa3zQ0Ay6a28V7WT0JH7gUlMSZX4GWeS4WBs4oerEW6HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/5gj36BJZuFXWxZeS0izoIYJXkwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrWKPMnzY3eDAlddUzfOQq5ZeujwhEJ131i 8kuJSADPlEUtWU31rU6AUlXyS5FpSY18NEvJ0iF69hCctRgwSkxpRUkgLzlNIQ7l uKYvgXXpcouFeq+1tqO3zSwZ2CNxskORF3fn/h9YMA9/VtZ/wkuo8QMax/DeoOKS DWKJLLrhR4eVbXGIfo7le5xguUirYB/vDcMqT0s7uMCPdq2i8ixRbFFkbewEp7Lk T/utCAiK8leGNfeaq5k6KOSCqHhiuHnoorr0Fiq0Mquh9gufZKRGkrLMJggwIzc3 WQZiodknoCOQRN5Oz6qDP8gdZAGrY8hCeG5zIrz8EDVSnQi0X8w= -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:19 2025 by rpki-client