This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: uHy3r/GN96yR/us+1IbddYtDg3H6hQTvKHPV7Kn4uRk= Subject key identifier: 65:43:64:88:FD:E4:1B:99:A6:5F:2C:E3:9B:1C:11:4E:2F:A9:C1:DF Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 37344DE264B46BB4E802D58DC72E6EFE2BEBD31F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01E8 Signing time: Sat 06 Dec 2025 06:21:26 +0000 Manifest this update: Sat 06 Dec 2025 06:16:26 +0000 Manifest next update: Tue 09 Dec 2025 16:30:26 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: nIrt/P/GJqnQx7q77L/HShYO43mnnLnzFJp2foKHgL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:34:4d:e2:64:b4:6b:b4:e8:02:d5:8d:c7:2e:6e:fe:2b:eb:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Dec 6 06:16:26 2025 GMT Not After : Dec 9 16:30:26 2025 GMT Subject: CN=65436488FDE41B99A65F2CE39B1C114E2FA9C1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:94:be:1c:b0:d6:9f:c3:e6:5e:ed:c7:bf: 8c:02:17:69:60:db:e4:a3:0d:d9:7e:26:71:19:54: 15:d5:e1:c4:62:5c:db:71:7c:16:3e:f2:66:68:ba: f1:c4:4a:7a:cc:5d:80:f8:ae:f1:ba:91:0c:db:1f: 74:9f:9f:b8:2a:c2:99:29:73:a7:b2:c5:b0:f6:2c: 11:a0:ec:f7:e5:1c:fc:3f:a0:ea:af:cc:5b:49:32: 4f:79:e9:ae:16:15:60:cc:25:69:06:c9:b9:cc:74: bf:fc:bf:d7:71:27:9f:30:36:2d:70:f7:df:00:28: 75:1d:57:ed:00:e5:fb:1a:9e:5f:5e:e1:46:b3:23: d4:37:12:53:b8:dc:90:9f:59:1c:11:54:69:e1:31: 18:e5:d4:28:0d:6f:2d:b0:13:80:54:47:64:3c:e7: 2f:c7:95:69:45:cb:d8:52:ec:69:80:15:56:cb:d4: 6b:64:23:42:c8:27:5a:44:a7:0b:b0:8c:7a:cb:5e: d8:fd:3b:b0:23:5a:5c:67:a0:02:f5:03:db:ca:47: a1:f9:11:91:9a:1d:42:95:f4:fe:da:20:3f:ce:7a: c5:e7:7b:90:38:94:0d:6c:80:43:4c:87:dd:43:1e: de:b1:9d:32:c2:32:ca:fd:ba:f6:d7:f1:22:ff:eb: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:64:88:FD:E4:1B:99:A6:5F:2C:E3:9B:1C:11:4E:2F:A9:C1:DF X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:87:39:01:8c:bd:d3:4e:a0:29:53:c5:7c:bb:0a:8d:2d: e4:c2:06:d9:89:c0:65:6d:bf:1c:b6:f8:06:ed:d0:80:aa:58: d2:2e:d9:c5:13:47:46:5a:38:f9:4c:81:9f:b7:d6:f8:bb:97: 78:d6:57:b6:e9:35:7e:d8:cf:f2:21:79:52:7d:90:37:f3:8e: 37:b7:f5:2c:c2:9b:b8:b8:78:27:3a:3e:f5:ca:38:ca:8b:9d: 43:f2:71:bf:34:a7:2c:0a:1e:e9:90:6e:ac:60:8e:23:1f:81: 75:d4:f1:51:35:06:86:cb:2e:2a:c5:fe:e1:29:35:f9:f8:e3: d1:1a:4e:d5:61:fc:e9:5c:ba:dd:77:e3:34:ad:d3:30:6b:00: 20:a0:fb:fb:bc:96:f9:7e:74:fe:dd:21:5e:f0:f4:ab:ad:fe: 80:09:1a:7a:b3:85:36:7e:8a:c9:60:0a:2d:16:5f:ce:3b:10: 18:81:17:47:6d:9e:06:82:42:5d:8d:57:4c:c9:eb:26:c7:eb: 01:4d:f5:3d:b1:e2:b3:56:f3:23:c4:3a:6b:8b:d7:d8:7c:22: 2b:a3:72:7d:c0:0a:a5:fe:b0:f2:f3:63:f8:6c:3d:22:e3:01: 15:69:19:41:27:d1:43:30:a9:be:17:6c:85:5d:2e:6a:8f:11: f3:a3:54:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzRN4mS0a7ToAtWNxy5u/ivr0x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTEyMDYwNjE2MjZaFw0yNTEyMDkxNjMwMjZaMDMxMTAvBgNV BAMTKDY1NDM2NDg4RkRFNDFCOTlBNjVGMkNFMzlCMUMxMTRFMkZBOUMxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfYJS+HLDWn8PmXu3Hv4wCF2lg 2+SjDdl+JnEZVBXV4cRiXNtxfBY+8mZouvHESnrMXYD4rvG6kQzbH3Sfn7gqwpkp c6eyxbD2LBGg7PflHPw/oOqvzFtJMk956a4WFWDMJWkGybnMdL/8v9dxJ58wNi1w 998AKHUdV+0A5fsanl9e4UazI9Q3ElO43JCfWRwRVGnhMRjl1CgNby2wE4BUR2Q8 5y/HlWlFy9hS7GmAFVbL1GtkI0LIJ1pEpwuwjHrLXtj9O7AjWlxnoAL1A9vKR6H5 EZGaHUKV9P7aID/OesXne5A4lA1sgENMh91DHt6xnTLCMsr9uvbX8SL/60YBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZUNkiP3kG5mmXyzjmxwRTi+pwd8wHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtdhzkBjL3TTqApU8V8uwqNLeTCBtmJwGVt vxy2+Abt0ICqWNIu2cUTR0ZaOPlMgZ+31vi7l3jWV7bpNX7Yz/IheVJ9kDfzjje3 9SzCm7i4eCc6PvXKOMqLnUPycb80pywKHumQbqxgjiMfgXXU8VE1BobLLirF/uEp Nfn449EaTtVh/Olcut134zSt0zBrACCg+/u8lvl+dP7dIV7w9Kut/oAJGnqzhTZ+ islgCi0WX847EBiBF0dtngaCQl2NV0zJ6ybH6wFN9T2x4rNW8yPEOmuL19h8Iiuj cn3ACqX+sPLzY/hsPSLjARVpGUEn0UMwqb4XbIVdLmqPEfOjVB8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:54 2025 by rpki-client