This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: W5bOHUcw5Q2sxBSUiDINMB/dkIYARLH49WBpAaox6U4= Subject key identifier: 5F:5F:92:E4:AC:AC:27:E4:4F:BC:29:D7:F7:A9:E9:2F:8E:54:49:45 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 3DA5EBE5E58145DC8BB755803286BF65D74412CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 0407 Signing time: Fri 05 Dec 2025 17:20:43 +0000 Manifest this update: Fri 05 Dec 2025 17:15:43 +0000 Manifest next update: Tue 09 Dec 2025 02:57:43 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 4: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: +hbivefxb3z09TO/u+Q7Fu4JG0cjaFnSMz2/Fh4dWlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a5:eb:e5:e5:81:45:dc:8b:b7:55:80:32:86:bf:65:d7:44:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Dec 5 17:15:43 2025 GMT Not After : Dec 9 02:57:43 2025 GMT Subject: CN=5F5F92E4ACAC27E44FBC29D7F7A9E92F8E544945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:ea:66:df:5f:16:ad:f6:5c:cc:4d:9b:91: 64:98:e3:31:c6:35:37:b6:10:91:1a:80:21:03:b7: 45:b1:04:c1:83:6d:4a:34:bb:d4:c4:a0:f4:49:d5: fb:30:91:48:96:46:32:95:1a:97:76:9a:0b:bf:f2: e3:a1:d0:6f:c5:20:f7:8b:ae:e3:c4:54:d1:18:89: 06:ec:36:10:69:35:77:e7:76:1b:7a:8f:1f:25:e3: d8:80:c1:17:0f:3c:67:46:62:2e:64:d5:59:eb:27: 3e:4b:03:a8:40:2c:3b:91:eb:61:e8:ae:79:b9:cb: ea:a7:ad:07:37:ec:b9:b4:c6:e4:ac:9c:31:9f:9d: 1e:c6:b1:83:8b:70:db:05:ca:68:0b:9b:ec:72:bb: 4c:8b:4e:ba:94:56:15:9d:7c:12:35:e9:67:18:60: 22:ea:29:f7:5b:ea:be:a5:b6:12:fe:ee:77:eb:5d: e0:b5:9c:07:c8:8b:52:a5:d1:13:9d:59:05:96:82: 95:26:a7:06:71:a0:9f:44:92:4e:42:aa:f5:bd:44: 93:ef:5b:2d:43:50:90:a5:fc:34:93:b7:fd:04:ac: 80:b7:22:ff:f1:33:c3:4a:18:7e:50:9a:29:43:4d: d9:46:52:9c:eb:fb:2b:2f:fb:fa:a5:5f:3b:8d:8e: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5F:92:E4:AC:AC:27:E4:4F:BC:29:D7:F7:A9:E9:2F:8E:54:49:45 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bb:2c:06:6d:82:28:6a:7a:8e:3a:2b:c3:5f:8d:e5:af:51: a1:d4:9c:ea:30:ee:f6:0c:b5:2d:d9:09:9a:f6:04:1d:99:8a: 2a:2d:a7:c7:f4:d6:a3:85:02:83:b9:60:05:49:df:28:42:8b: e1:3c:64:e6:dc:8f:c4:01:bc:10:f4:19:1d:e6:ce:d1:1e:39: 75:aa:a4:72:01:41:de:e0:20:1a:44:ea:10:d4:5d:37:41:ee: ac:d1:70:a7:46:ff:9f:58:5e:a9:f7:51:5c:30:c1:0f:db:82: 34:a7:4c:70:e6:48:8e:bd:36:f4:89:dd:f4:d5:8e:37:09:29: 5c:a4:7e:89:05:73:5b:c3:1f:7b:d1:c7:48:cb:34:0b:c8:c5: 85:47:f9:60:ce:9c:b3:a3:5e:6c:15:bf:83:fc:45:18:a9:f7: 4b:d6:b5:75:58:ac:98:d1:9f:37:8a:58:f7:a0:4f:b5:1c:f8: 04:b0:b9:a8:55:f4:93:aa:92:a8:89:e9:0f:0a:c1:0e:d4:28: 3e:ac:c1:22:cb:7d:db:bd:7b:be:90:a1:a3:2a:02:65:4c:21: a5:5e:d9:60:68:60:58:37:1d:a5:41:3c:38:19:f1:a3:24:b6: 5b:07:e8:50:f4:63:4e:41:6b:3e:2f:ae:64:99:35:09:40:a6: 30:ed:dc:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaXr5eWBRdyLt1WAMoa/ZddEEsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTEyMDUxNzE1NDNaFw0yNTEyMDkwMjU3NDNaMDMxMTAvBgNV BAMTKDVGNUY5MkU0QUNBQzI3RTQ0RkJDMjlEN0Y3QTlFOTJGOEU1NDQ5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcOpm318WrfZczE2bkWSY4zHG NTe2EJEagCEDt0WxBMGDbUo0u9TEoPRJ1fswkUiWRjKVGpd2mgu/8uOh0G/FIPeL ruPEVNEYiQbsNhBpNXfndht6jx8l49iAwRcPPGdGYi5k1VnrJz5LA6hALDuR62Ho rnm5y+qnrQc37Lm0xuSsnDGfnR7GsYOLcNsFymgLm+xyu0yLTrqUVhWdfBI16WcY YCLqKfdb6r6lthL+7nfrXeC1nAfIi1Kl0ROdWQWWgpUmpwZxoJ9Ekk5CqvW9RJPv Wy1DUJCl/DSTt/0ErIC3Iv/xM8NKGH5QmilDTdlGUpzr+ysv+/qlXzuNjnIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX1+S5KysJ+RPvCnX96npL45USUUwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi7LAZtgihqeo46K8NfjeWvUaHUnOow7vYM tS3ZCZr2BB2Ziiotp8f01qOFAoO5YAVJ3yhCi+E8ZObcj8QBvBD0GR3mztEeOXWq pHIBQd7gIBpE6hDUXTdB7qzRcKdG/59YXqn3UVwwwQ/bgjSnTHDmSI69NvSJ3fTV jjcJKVykfokFc1vDH3vRx0jLNAvIxYVH+WDOnLOjXmwVv4P8RRip90vWtXVYrJjR nzeKWPegT7Uc+ASwuahV9JOqkqiJ6Q8KwQ7UKD6swSLLfdu9e76QoaMqAmVMIaVe 2WBoYFg3HaVBPDgZ8aMktlsH6FD0Y05Baz4vrmSZNQlApjDt3MY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:57 2025 by rpki-client