This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: WyPCUZwMB6Cp8nF61mFQ3OZ+OgKAMsTT4fUdHEfpqHA= Subject key identifier: 8E:63:C6:EB:F7:D5:BD:FA:E7:AF:04:8B:3D:61:EC:A6:14:87:9A:38 Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 19A50CF69FA80226AB7993C3458F862979150008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 0379 Signing time: Sat 06 Dec 2025 00:02:03 +0000 Manifest this update: Fri 05 Dec 2025 23:57:03 +0000 Manifest next update: Tue 09 Dec 2025 07:58:03 +0000 Files and hashes: 1: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: DCgYEPaVukPuYmvO5a2cczC4OgprkfQ5HG76ulQS39Q=) 2: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: ZekPVbkZv4xzJt/yLeKvpGj167I44IK/Nn+MbKBEWIw=) 3: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: DqJqHa/6ptR95ztIah8WJlKccxdZKgdGVlGhT8Ndc90=) 4: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: YYGVRYPBp9IPNMR5VwzW826x/acetE+4Oj6LGMt7tPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:0c:f6:9f:a8:02:26:ab:79:93:c3:45:8f:86:29:79:15:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Dec 5 23:57:03 2025 GMT Not After : Dec 9 07:58:03 2025 GMT Subject: CN=8E63C6EBF7D5BDFAE7AF048B3D61ECA614879A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:f6:bf:75:99:fd:c4:fb:b4:52:33:3a:6e: ad:a8:e1:98:7c:81:06:39:0f:69:19:ed:20:f7:78: 69:30:84:d1:57:53:20:88:73:14:15:e3:22:6c:7c: 43:db:03:35:6d:c8:96:6e:2a:d6:23:f4:af:83:8d: ad:8c:b0:e0:ee:0a:bf:f6:9b:71:27:ff:88:03:18: 1c:89:82:f6:95:8c:6f:18:cf:e0:d1:fc:5d:a0:1e: c4:8a:4f:a7:33:6f:39:13:91:ce:0d:bc:93:af:f7: 62:e7:dd:a2:fe:52:c7:5d:31:c3:8c:7b:c1:4b:0d: 47:da:2e:84:ed:b8:df:2d:55:85:45:93:c2:f3:a2: 04:0f:eb:8f:00:55:f4:67:04:2c:d6:03:ab:db:14: e1:a8:01:0f:73:ba:01:78:bd:bd:0b:a9:64:7c:18: 0e:97:1e:cc:87:df:0b:b5:5a:21:8a:7b:65:79:b0: be:fe:23:30:4e:ac:08:79:a6:68:5f:0a:e6:e1:cb: 5b:01:49:df:ed:f6:1e:b4:f9:45:35:60:ab:18:24: 4c:f8:72:9b:87:af:eb:0f:10:5f:ad:17:56:ae:88: d6:8b:11:55:19:cd:50:9f:6c:8d:fb:c5:71:b0:26: 7a:a7:b0:7e:fb:37:eb:bb:25:4f:96:b0:9d:f7:b1: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:C6:EB:F7:D5:BD:FA:E7:AF:04:8B:3D:61:EC:A6:14:87:9A:38 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:64:f9:56:52:79:f9:0f:9f:31:3c:d2:5f:ab:9c:4f:c1: a8:ca:66:2d:ad:51:b7:5b:ed:d0:e9:8d:a7:19:fe:0a:62:a2: 20:1c:5f:52:29:e0:9f:1f:dc:04:69:22:49:65:e2:c0:42:e6: 7f:85:c8:5e:b5:fe:c2:45:bf:85:a6:c6:d0:5a:bd:de:48:e7: 71:93:ea:f1:43:cb:87:c2:5d:28:33:2b:8e:3a:ff:c7:90:cc: 60:36:6d:98:de:5c:53:6e:87:25:08:b5:2c:16:14:65:ac:33: 64:ae:5f:3d:9d:ba:d8:fa:5f:2e:7a:d6:75:b6:ae:2c:9d:93: 10:20:ae:9c:1f:af:7d:7c:d7:17:98:4e:0a:e2:b9:ae:dd:77: 18:b7:e9:d8:03:f3:1c:91:53:60:44:25:d4:fd:0b:cf:6d:ef: 2d:17:c6:96:e0:0a:ec:3d:b3:78:28:f8:8c:d9:d3:fe:b3:b0: e4:8d:8c:b8:af:6c:93:7a:eb:84:16:29:38:ca:51:46:64:5f: 7e:73:80:ac:90:36:13:d6:1d:fe:e8:38:07:db:23:9d:49:38: be:8a:8d:bf:99:d5:55:85:95:2e:ad:4b:b8:63:f8:71:dd:71: 5d:14:cb:f2:30:24:f1:9f:86:d9:a9:f2:32:6a:f9:fc:83:90: df:e7:6a:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaUM9p+oAiareZPDRY+GKXkVAAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTEyMDUyMzU3MDNaFw0yNTEyMDkwNzU4MDNaMDMxMTAvBgNV BAMTKDhFNjNDNkVCRjdENUJERkFFN0FGMDQ4QjNENjFFQ0E2MTQ4NzlBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvfa/dZn9xPu0UjM6bq2o4Zh8 gQY5D2kZ7SD3eGkwhNFXUyCIcxQV4yJsfEPbAzVtyJZuKtYj9K+Dja2MsODuCr/2 m3En/4gDGByJgvaVjG8Yz+DR/F2gHsSKT6czbzkTkc4NvJOv92Ln3aL+UsddMcOM e8FLDUfaLoTtuN8tVYVFk8LzogQP648AVfRnBCzWA6vbFOGoAQ9zugF4vb0LqWR8 GA6XHsyH3wu1WiGKe2V5sL7+IzBOrAh5pmhfCubhy1sBSd/t9h60+UU1YKsYJEz4 cpuHr+sPEF+tF1auiNaLEVUZzVCfbI37xXGwJnqnsH77N+u7JU+WsJ33sZX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmPG6/fVvfrnrwSLPWHsphSHmjgwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdnZPlWUnn5D58xPNJfq5xPwajKZi2tUbdb 7dDpjacZ/gpioiAcX1Ip4J8f3ARpIkll4sBC5n+FyF61/sJFv4WmxtBavd5I53GT 6vFDy4fCXSgzK446/8eQzGA2bZjeXFNuhyUItSwWFGWsM2SuXz2dutj6Xy561nW2 riydkxAgrpwfr3181xeYTgriua7ddxi36dgD8xyRU2BEJdT9C89t7y0XxpbgCuw9 s3go+IzZ0/6zsOSNjLivbJN664QWKTjKUUZkX35zgKyQNhPWHf7oOAfbI51JOL6K jb+Z1VWFlS6tS7hj+HHdcV0Uy/IwJPGfhtmp8jJq+fyDkN/nalI= -----END CERTIFICATE-----Generated at Sun Dec 7 10:48:07 2025 by rpki-client