This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: j18XBqnxA6xYxuWkuV29wkaFd8ZhJLDwMRSMWS1gEHU= Subject key identifier: 52:B5:D3:22:FE:01:0C:EA:B3:68:95:83:F4:78:1A:FB:88:54:7E:DE Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 0AFF177B85929269E1C9CBA17EBC27A9FD9D647D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 040C Signing time: Wed 17 Dec 2025 15:10:43 +0000 Manifest this update: Wed 17 Dec 2025 15:05:43 +0000 Manifest next update: Sat 20 Dec 2025 22:39:43 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: ackW+m7xDYl2oaWKlAIc5AMRuR4JQkismVkPSGId1nQ=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:17:7b:85:92:92:69:e1:c9:cb:a1:7e:bc:27:a9:fd:9d:64:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Dec 17 15:05:43 2025 GMT Not After : Dec 20 22:39:43 2025 GMT Subject: CN=52B5D322FE010CEAB3689583F4781AFB88547EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:8c:b4:31:56:29:39:88:f4:1e:a1:9a:08: b0:6c:bc:dc:ce:64:90:9b:b1:ff:70:86:b9:46:d0: 35:fb:cf:33:fc:ef:46:8e:3b:fc:cd:ff:09:b7:67: 4c:49:3c:7d:a1:37:f1:e4:44:6d:c1:82:3c:d3:35: 34:67:c7:68:0c:70:7c:a3:b3:e2:b5:f3:58:2d:d1: 5e:94:62:0f:c3:cf:0a:4e:97:98:e6:89:d7:29:6a: e8:0e:a0:02:b7:6a:ca:58:37:9c:1a:cc:55:9f:04: 66:ce:a8:02:57:c2:f9:c9:8a:6c:12:36:a8:e6:1a: 4c:2d:86:fc:05:fe:75:63:e0:70:21:38:05:b2:57: 89:c5:68:b5:6b:d0:94:fb:6b:61:06:d6:26:24:2b: b9:96:23:04:9d:75:f4:22:bf:3c:70:07:d8:5e:a7: b7:5f:c9:93:9f:41:26:cd:bc:bb:d1:af:20:31:fa: f7:e4:49:42:9b:0c:c1:7e:1a:0c:c8:69:fb:4a:fb: 82:3e:03:a4:1c:38:0f:68:78:65:ae:cf:a6:e8:21: 1c:a5:43:cb:a6:e1:8e:f3:44:64:1a:74:0a:c5:a5: 0d:7a:0c:5a:53:58:8d:f0:4c:23:12:34:ee:42:3f: 1a:8b:0a:5a:4f:40:ac:64:5f:b4:0a:30:ac:8a:7f: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B5:D3:22:FE:01:0C:EA:B3:68:95:83:F4:78:1A:FB:88:54:7E:DE X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:99:d0:e2:9e:f6:f3:6d:bc:bd:8e:9d:ec:63:da:ab:04:13: 27:a1:e4:06:0b:8c:28:26:79:a7:53:05:b7:d2:02:c1:74:fd: 4a:b4:88:e8:78:c5:27:96:4f:28:69:d6:dd:4f:ae:e0:7e:7c: 51:79:59:5d:a0:90:23:72:0a:63:e1:e7:41:e9:d2:50:d2:b6: 31:33:a2:ec:26:77:38:32:07:75:9e:f5:3f:48:ea:04:4c:7e: 2d:15:91:4c:bf:a5:bb:6f:b2:87:ba:1e:11:5c:4e:d7:8b:e4: fb:72:70:d5:31:92:40:50:05:a9:4d:ee:c6:18:38:e8:bc:32: 18:d2:d8:4e:fb:dd:f3:fe:51:af:65:38:96:d8:2d:18:9a:5b: 08:7f:4c:a3:be:fc:91:f3:e0:01:64:aa:49:f2:33:96:46:09: 89:e7:cb:d3:cc:83:f8:cd:60:78:67:77:bf:16:f9:10:1a:b6: 15:72:ec:7a:3b:c0:99:95:31:20:a8:a6:eb:8d:df:d1:08:17: 27:97:92:fe:e3:73:2e:0a:f5:a3:81:50:1d:a1:0d:11:7a:72: 7a:ee:91:50:42:b6:14:e0:98:7b:6c:25:b2:85:c1:fe:49:35: 65:ec:35:c4:1e:3c:87:99:e1:dd:8e:b7:be:39:7c:3e:1d:ac: 7e:ce:98:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv8Xe4WSkmnhycuhfrwnqf2dZH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTEyMTcxNTA1NDNaFw0yNTEyMjAyMjM5NDNaMDMxMTAvBgNV BAMTKDUyQjVEMzIyRkUwMTBDRUFCMzY4OTU4M0Y0NzgxQUZCODg1NDdFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDszYy0MVYpOYj0HqGaCLBsvNzO ZJCbsf9whrlG0DX7zzP870aOO/zN/wm3Z0xJPH2hN/HkRG3BgjzTNTRnx2gMcHyj s+K181gt0V6UYg/DzwpOl5jmidcpaugOoAK3aspYN5wazFWfBGbOqAJXwvnJimwS NqjmGkwthvwF/nVj4HAhOAWyV4nFaLVr0JT7a2EG1iYkK7mWIwSddfQivzxwB9he p7dfyZOfQSbNvLvRryAx+vfkSUKbDMF+GgzIaftK+4I+A6QcOA9oeGWuz6boIRyl Q8um4Y7zRGQadArFpQ16DFpTWI3wTCMSNO5CPxqLClpPQKxkX7QKMKyKf+DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUrXTIv4BDOqzaJWD9Hga+4hUft4wHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGZ0OKe9vNtvL2Onexj2qsEEyeh5AYLjCgm eadTBbfSAsF0/Uq0iOh4xSeWTyhp1t1PruB+fFF5WV2gkCNyCmPh50Hp0lDStjEz ouwmdzgyB3We9T9I6gRMfi0VkUy/pbtvsoe6HhFcTteL5PtycNUxkkBQBalN7sYY OOi8MhjS2E773fP+Ua9lOJbYLRiaWwh/TKO+/JHz4AFkqknyM5ZGCYnny9PMg/jN YHhnd78W+RAathVy7Ho7wJmVMSCopuuN39EIFyeXkv7jcy4K9aOBUB2hDRF6cnru kVBCthTgmHtsJbKFwf5JNWXsNcQePIeZ4d2Ot745fD4drH7OmLs= -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:51 2025 by rpki-client