This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: /K07VJhoxVcWNUooJqGve+F1hjaD0+SnGTMAWWJxKb0= Subject key identifier: 5E:EF:05:7D:D3:0F:7A:BB:0E:BC:19:CD:DB:2C:AE:F2:37:51:6F:08 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 0493EB8A77BD75EC44753214EE91D15200015957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01A9 Signing time: Sat 06 Dec 2025 15:22:25 +0000 Manifest this update: Sat 06 Dec 2025 15:17:25 +0000 Manifest next update: Tue 09 Dec 2025 17:03:25 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: Nusf5fmMFrmlgmO/67rAgxHqW5woYqLhjc6Uv1r1PSs=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:93:eb:8a:77:bd:75:ec:44:75:32:14:ee:91:d1:52:00:01:59:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Dec 6 15:17:25 2025 GMT Not After : Dec 9 17:03:25 2025 GMT Subject: CN=5EEF057DD30F7ABB0EBC19CDDB2CAEF237516F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:fb:65:09:d9:98:63:eb:61:a3:fe:b7:94: b1:57:76:b0:33:c2:64:69:94:5b:14:c0:bd:42:dc: 95:58:c3:0d:0c:b5:1d:b7:62:3a:48:dd:32:0f:81: f0:14:0c:2a:67:54:51:3c:78:8b:9c:3c:b3:38:b1: b9:3c:7a:42:74:9c:d6:ef:b8:8b:74:1e:09:cd:b1: 1b:74:ae:9d:cd:4a:51:97:58:ad:43:76:13:3f:07: 46:3a:8b:2d:8d:57:e4:dd:18:67:bb:c1:3e:34:b0: da:da:62:c6:2e:7d:7b:76:b8:a6:82:d6:ed:69:b8: 5b:e1:74:da:04:e4:85:cf:14:e7:46:6f:43:f4:cf: e1:d4:23:d7:dd:09:42:7e:bc:a7:5d:ca:e4:03:b3: 90:63:6d:74:ec:c9:53:b0:a6:31:e5:fb:80:7b:b7: 5d:77:ab:88:c3:46:a8:cf:cc:66:aa:3b:3f:57:34: 33:9d:25:93:01:88:12:b9:71:8f:57:b5:c1:bb:89: 3d:2c:45:43:89:35:5d:0d:0d:3d:55:ea:0e:78:39: 7f:92:cb:5c:1d:13:87:ff:02:14:48:25:fa:3a:0f: 41:11:3a:2a:82:da:c3:48:70:c7:03:40:8a:46:d6: 57:90:4c:4a:5c:f8:3e:5d:31:0f:af:d5:5e:cd:24: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:05:7D:D3:0F:7A:BB:0E:BC:19:CD:DB:2C:AE:F2:37:51:6F:08 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d5:c0:6a:1b:99:d4:2e:f0:b6:ab:0e:43:b0:cc:83:ed:d6: 33:ae:87:c3:1c:55:4c:66:e6:35:c1:97:9c:15:fb:60:96:41: f3:e1:07:f9:7b:ff:15:6b:67:81:f9:e4:ef:55:a3:2b:98:13: 56:e0:ff:bc:1f:3a:be:07:61:29:1b:65:50:39:04:64:f9:f0: cf:21:06:5f:2c:88:a7:94:83:95:78:a1:63:1d:f4:fb:16:cb: 11:f3:a7:d5:90:91:64:4c:df:72:a9:96:55:c5:f8:7b:3c:28: 0f:fa:9d:bc:24:ef:e5:5a:e1:2f:d8:da:f4:28:8b:4e:31:03: a0:b4:83:ba:f2:c4:0d:25:ee:a8:2d:61:f9:11:fd:4c:4e:84: 19:0a:98:18:f8:ae:aa:ef:4a:17:94:a5:be:06:60:e0:0a:e4: 76:b1:e7:0f:f5:15:14:25:ff:16:fd:3e:d7:b3:e4:91:01:af: 01:76:92:11:e8:3e:90:8b:aa:51:14:eb:2f:e5:69:90:11:a3: 14:1d:c5:48:3c:50:26:bd:83:98:e6:9f:ce:6a:30:35:6d:bb: 0d:b3:66:77:62:38:0e:42:9e:87:13:78:ba:b5:4b:b1:82:fc: c6:1a:d0:d1:8a:7f:07:1b:6c:c5:29:47:25:3b:3f:44:e5:90: c8:38:7c:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJPrine9dexEdTIU7pHRUgABWVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTEyMDYxNTE3MjVaFw0yNTEyMDkxNzAzMjVaMDMxMTAvBgNV BAMTKDVFRUYwNTdERDMwRjdBQkIwRUJDMTlDRERCMkNBRUYyMzc1MTZGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdftlCdmYY+tho/63lLFXdrAz wmRplFsUwL1C3JVYww0MtR23YjpI3TIPgfAUDCpnVFE8eIucPLM4sbk8ekJ0nNbv uIt0HgnNsRt0rp3NSlGXWK1DdhM/B0Y6iy2NV+TdGGe7wT40sNraYsYufXt2uKaC 1u1puFvhdNoE5IXPFOdGb0P0z+HUI9fdCUJ+vKddyuQDs5BjbXTsyVOwpjHl+4B7 t113q4jDRqjPzGaqOz9XNDOdJZMBiBK5cY9XtcG7iT0sRUOJNV0NDT1V6g54OX+S y1wdE4f/AhRIJfo6D0EROiqC2sNIcMcDQIpG1leQTEpc+D5dMQ+v1V7NJISdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXu8FfdMPersOvBnN2yyu8jdRbwgwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3VwGobmdQu8LarDkOwzIPt1jOuh8McVUxm 5jXBl5wV+2CWQfPhB/l7/xVrZ4H55O9VoyuYE1bg/7wfOr4HYSkbZVA5BGT58M8h Bl8siKeUg5V4oWMd9PsWyxHzp9WQkWRM33KpllXF+Hs8KA/6nbwk7+Va4S/Y2vQo i04xA6C0g7ryxA0l7qgtYfkR/UxOhBkKmBj4rqrvSheUpb4GYOAK5Hax5w/1FRQl /xb9Ptez5JEBrwF2khHoPpCLqlEU6y/laZARoxQdxUg8UCa9g5jmn85qMDVtuw2z ZndiOA5CnocTeLq1S7GC/MYa0NGKfwcbbMUpRyU7P0TlkMg4fAU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:25 2025 by rpki-client