This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json) Hash identifier: FsaqMmuaq4sj2Tb0H36QP5RYTQKOtkY1vJpDxuHWTyA= Subject key identifier: C4:A2:A3:56:8E:F1:64:D7:40:71:F2:C4:84:D1:52:92:6A:02:F7:15 Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E Certificate serial: 103D4AB9138A09A63E3B114251361C7C43ED358F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft Manifest number: AC Signing time: Tue 16 Dec 2025 17:41:39 +0000 Manifest this update: Tue 16 Dec 2025 17:36:39 +0000 Manifest next update: Sat 20 Dec 2025 03:27:39 +0000 Files and hashes: 1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: R1XiEMEnMSl0j30tTWuCG9TZcvJ6/XPHabZN1GOOSDY=) 2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3d:4a:b9:13:8a:09:a6:3e:3b:11:42:51:36:1c:7c:43:ed:35:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E Validity Not Before: Dec 16 17:36:39 2025 GMT Not After : Dec 20 03:27:39 2025 GMT Subject: CN=C4A2A3568EF164D74071F2C484D152926A02F715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:4b:ee:ef:ea:30:e4:3a:67:2d:97:a0:59: 73:9a:50:c0:2a:0b:00:55:a2:b5:db:33:1f:81:97: c1:8b:f8:e2:22:50:d8:e0:91:4c:6d:c4:bb:2b:ab: e7:2f:b7:9b:6f:b6:67:44:ae:60:20:08:f6:a3:35: 7a:25:c3:88:b0:e6:83:c7:fb:81:67:88:e7:a8:ca: 2e:07:d3:a3:84:cd:81:60:9e:bd:cd:1b:8b:b8:7a: 27:fb:e9:d1:67:28:89:a6:58:8d:67:53:ac:50:b1: 15:8a:64:b3:02:8a:56:fe:51:ac:02:11:48:88:a3: cf:8a:f3:a6:52:2f:97:9e:56:b3:ef:76:d8:0c:46: e3:7c:f4:20:5c:40:24:ec:34:35:99:17:bc:e1:2d: 79:57:0c:f6:33:8e:15:74:82:82:d6:32:3a:6b:3e: 1c:8a:81:5d:84:49:64:38:f6:cd:4b:4a:65:8c:20: 16:1a:fa:05:cb:8d:ce:40:63:4f:1c:1a:29:43:b7: d0:00:10:dc:b3:f2:40:2b:22:ab:41:ce:0d:da:32: 1f:59:c9:d0:96:6c:59:a7:37:c2:31:1a:f5:da:86: 2b:86:bb:e9:b2:bc:46:8e:be:0a:5d:bb:aa:0c:76: 77:92:f0:3b:ac:20:3d:c0:00:13:7e:49:52:d5:c3: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:A3:56:8E:F1:64:D7:40:71:F2:C4:84:D1:52:92:6A:02:F7:15 X509v3 Authority Key Identifier: keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:46:a7:9e:09:46:b5:8c:7e:38:da:ff:d3:dd:98:73:04:74: c7:60:cc:13:57:31:e0:99:6a:d9:64:79:83:2d:2d:a6:9b:ae: d4:95:7f:d5:4f:cb:3b:6b:f0:c8:4d:da:10:1e:15:e9:10:7f: cd:34:88:9e:f1:0a:a6:f1:d5:2d:11:1a:91:ed:df:18:7f:85: 5f:9d:d3:e8:1d:cc:34:67:3e:66:be:eb:cc:20:e7:3c:40:f5: 59:5e:6d:8b:2e:d9:71:ed:23:74:d1:87:f9:d0:6e:30:47:7b: 06:43:c7:5e:fa:7b:7d:78:37:56:88:c8:cb:31:4a:0a:d2:77: ea:00:61:60:1c:b8:b1:00:e5:15:dc:9f:38:e3:9a:41:00:73: 5f:de:a8:d5:9d:c2:bf:65:c8:93:f6:c2:a2:4f:ac:09:d9:51: c7:e2:30:a2:e8:bf:dd:13:1f:b5:eb:ef:a8:ea:55:5b:35:f0: 72:d4:15:38:b3:c6:66:a3:40:50:aa:64:cf:e5:e3:47:1b:a1: a7:2b:9b:8b:66:11:de:dd:c9:13:d9:fd:ec:67:12:03:35:42: 70:4a:e5:37:51:89:31:51:4a:c1:ac:c6:63:1b:e7:11:bc:6c: ac:9b:db:55:3f:83:e4:24:f5:37:3a:b5:d9:01:e5:f3:97:35: 84:51:01:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUED1KuROKCaY+OxFCUTYcfEPtNY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx NzY5QTQzRTAeFw0yNTEyMTYxNzM2MzlaFw0yNTEyMjAwMzI3MzlaMDMxMTAvBgNV BAMTKEM0QTJBMzU2OEVGMTY0RDc0MDcxRjJDNDg0RDE1MjkyNkEwMkY3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgkvu7+ow5DpnLZegWXOaUMAq CwBVorXbMx+Bl8GL+OIiUNjgkUxtxLsrq+cvt5tvtmdErmAgCPajNXolw4iw5oPH +4FniOeoyi4H06OEzYFgnr3NG4u4eif76dFnKImmWI1nU6xQsRWKZLMCilb+UawC EUiIo8+K86ZSL5eeVrPvdtgMRuN89CBcQCTsNDWZF7zhLXlXDPYzjhV0goLWMjpr PhyKgV2ESWQ49s1LSmWMIBYa+gXLjc5AY08cGilDt9AAENyz8kArIqtBzg3aMh9Z ydCWbFmnN8IxGvXahiuGu+myvEaOvgpdu6oMdneS8DusID3AABN+SVLVwzWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxKKjVo7xZNdAcfLEhNFSkmoC9xUwHwYDVR0j BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5 QTQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2Njcx MzMxNzY5QTQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBGp54JRrWMfjja/9PdmHMEdMdgzBNXMeCZ atlkeYMtLaabrtSVf9VPyztr8MhN2hAeFekQf800iJ7xCqbx1S0RGpHt3xh/hV+d 0+gdzDRnPma+68wg5zxA9VlebYsu2XHtI3TRh/nQbjBHewZDx176e314N1aIyMsx SgrSd+oAYWAcuLEA5RXcnzjjmkEAc1/eqNWdwr9lyJP2wqJPrAnZUcfiMKLov90T H7Xr76jqVVs18HLUFTizxmajQFCqZM/l40cboacrm4tmEd7dyRPZ/exnEgM1QnBK 5TdRiTFRSsGsxmMb5xG8bKyb21U/g+Qk9Tc6tdkB5fOXNYRRAY4= -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:13 2025 by rpki-client