This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: mWbIf42OeTBHenDh2m+UvLrCmvUV/2bTyxrOAp9AvfI= Subject key identifier: 9D:C9:9F:CD:DD:7C:54:20:87:D6:AC:42:FD:E2:E4:21:EA:57:50:B9 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 56711DBF523C5733A6681BEBB9091BE2975022BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 023A Signing time: Fri 05 Dec 2025 03:42:18 +0000 Manifest this update: Fri 05 Dec 2025 03:37:18 +0000 Manifest next update: Mon 08 Dec 2025 05:50:18 +0000 Files and hashes: 1: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: d2SpK3U9Zmm/7+DldoniMl/PgVj/YpX42kHhFvvCuyQ=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 3: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:71:1d:bf:52:3c:57:33:a6:68:1b:eb:b9:09:1b:e2:97:50:22:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Dec 5 03:37:18 2025 GMT Not After : Dec 8 05:50:18 2025 GMT Subject: CN=9DC99FCDDD7C542087D6AC42FDE2E421EA5750B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:bc:58:4f:7f:37:56:9f:ca:ae:dc:ce:8c: 18:56:21:f3:79:0e:b8:c2:84:38:b3:22:7e:b6:0e: 58:19:39:ce:f3:96:e2:90:c0:4f:4d:2c:8e:9c:54: 63:30:f5:0c:4b:4d:a5:64:3a:9d:a6:96:da:35:64: 21:04:22:8e:54:1a:76:2f:47:63:eb:b8:99:6d:8f: 7e:95:b3:61:d9:74:0c:6d:d9:2c:90:35:21:21:c1: 58:4f:99:37:5d:02:06:bd:c5:06:f4:9b:db:77:2b: c2:ea:4a:97:5c:d8:08:12:af:50:eb:d5:18:fc:81: e2:d6:4e:d7:83:04:0e:72:d7:43:02:77:81:87:aa: 4f:4f:aa:b8:83:cc:7e:36:23:c3:d3:1c:4c:7c:b5: 3e:8b:5b:a5:a7:29:bf:d8:f9:ed:0a:50:1b:f8:c3: f2:a1:47:e2:96:3c:0f:ff:17:60:10:f2:6c:6b:1a: 2a:f8:c6:74:d2:e6:a0:10:c8:c6:b5:e3:4a:3f:82: 84:31:20:fd:cb:71:1c:2f:a7:e9:f9:36:c4:71:22: c9:0a:d1:8a:9a:a8:cf:4b:ba:58:92:dd:ac:a5:d1: 88:5d:5c:ab:0d:c3:ae:57:97:64:26:0b:a5:1c:02: 91:24:2c:9f:5d:02:f8:25:9c:71:b7:a8:7f:67:7d: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:9F:CD:DD:7C:54:20:87:D6:AC:42:FD:E2:E4:21:EA:57:50:B9 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:97:0a:1b:33:e3:e8:7e:c5:80:a2:90:51:05:ba:73:15:6d: 6e:0a:a4:1d:8c:07:b6:70:76:36:e3:0e:44:7e:9b:4b:66:5e: c8:72:ae:3f:97:8b:d7:f4:08:03:61:33:b5:a6:65:89:56:e2: e1:3a:03:3c:ff:7f:a4:80:07:54:1f:51:c2:b0:be:ad:63:04: 64:50:94:d9:54:07:7f:e5:b7:bb:1f:82:76:25:35:99:d8:45: 1d:58:0d:30:07:78:d2:56:ca:47:17:9c:72:95:1d:a1:2c:d3: 93:50:36:0d:8d:36:00:f6:30:28:5f:79:01:bf:03:37:a2:4d: 8a:95:b4:5c:38:cf:ce:2f:27:19:22:94:b0:81:33:39:a7:59: b1:2d:ee:3f:69:dd:0f:d2:52:00:e7:db:09:3a:2f:f9:ca:73: 50:1a:ad:21:c9:fa:7d:9d:bd:df:63:bc:b7:b6:0a:63:8e:2b: dc:fd:14:5c:be:95:34:09:3b:b4:bf:7b:38:a5:0f:d2:4c:cd: ed:b0:21:fa:d8:79:4f:86:ef:a2:e5:37:74:18:08:73:65:7f: 93:2c:61:bd:23:44:96:22:e2:c6:3d:3e:98:04:f6:18:5c:70: d3:c9:3e:a8:65:24:2f:c7:6a:3a:b8:a4:56:c7:41:4e:d4:e5: 1b:bb:a6:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnEdv1I8VzOmaBvruQkb4pdQIr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTEyMDUwMzM3MThaFw0yNTEyMDgwNTUwMThaMDMxMTAvBgNV BAMTKDlEQzk5RkNEREQ3QzU0MjA4N0Q2QUM0MkZERTJFNDIxRUE1NzUwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnhrxYT383Vp/KrtzOjBhWIfN5 DrjChDizIn62DlgZOc7zluKQwE9NLI6cVGMw9QxLTaVkOp2mlto1ZCEEIo5UGnYv R2PruJltj36Vs2HZdAxt2SyQNSEhwVhPmTddAga9xQb0m9t3K8LqSpdc2AgSr1Dr 1Rj8geLWTteDBA5y10MCd4GHqk9PqriDzH42I8PTHEx8tT6LW6WnKb/Y+e0KUBv4 w/KhR+KWPA//F2AQ8mxrGir4xnTS5qAQyMa140o/goQxIP3LcRwvp+n5NsRxIskK 0YqaqM9LuliS3ayl0YhdXKsNw65Xl2QmC6UcApEkLJ9dAvglnHG3qH9nfaKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUncmfzd18VCCH1qxC/eLkIepXULkwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWXChsz4+h+xYCikFEFunMVbW4KpB2MB7Zw djbjDkR+m0tmXshyrj+Xi9f0CANhM7WmZYlW4uE6Azz/f6SAB1QfUcKwvq1jBGRQ lNlUB3/lt7sfgnYlNZnYRR1YDTAHeNJWykcXnHKVHaEs05NQNg2NNgD2MChfeQG/ AzeiTYqVtFw4z84vJxkilLCBMzmnWbEt7j9p3Q/SUgDn2wk6L/nKc1AarSHJ+n2d vd9jvLe2CmOOK9z9FFy+lTQJO7S/ezilD9JMze2wIfrYeU+G76LlN3QYCHNlf5Ms Yb0jRJYi4sY9PpgE9hhccNPJPqhlJC/Hajq4pFbHQU7U5Ru7piM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:18 2025 by rpki-client