This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: WCBvbpw/INdRRGNvTrt7Cu92eXQv72ynRko5Jldd0d0= Subject key identifier: C9:2D:4D:4B:B2:7A:92:06:2E:FE:69:F1:33:8E:D3:E1:EE:0E:6B:33 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 50BDC7DB05EC2D7A602ED2121270167A497732D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0263 Signing time: Fri 19 Dec 2025 12:43:02 +0000 Manifest this update: Fri 19 Dec 2025 12:38:02 +0000 Manifest next update: Mon 22 Dec 2025 22:44:02 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: i47GZu9vHsLVfJvvbEfmS2fLnDxDLoZOk8C6RHN9+c0=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bd:c7:db:05:ec:2d:7a:60:2e:d2:12:12:70:16:7a:49:77:32:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Dec 19 12:38:02 2025 GMT Not After : Dec 22 22:44:02 2025 GMT Subject: CN=C92D4D4BB27A92062EFE69F1338ED3E1EE0E6B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:9c:c6:36:c3:c7:c0:a6:c4:a1:78:2b:ee: 8c:bb:3b:bb:96:cd:5c:1f:85:6d:48:15:ac:10:60: 97:00:b1:46:58:a0:ad:7a:78:70:58:09:c7:59:08: 96:6c:20:b2:68:fd:0c:45:a6:fd:e6:2f:6e:49:84: a7:99:e5:8f:56:d7:59:53:89:bc:20:39:fc:2d:5d: 24:d8:1b:29:75:32:3f:2f:ca:94:a7:57:5f:0c:2d: 9d:a2:79:8f:4a:49:54:2b:aa:5a:a8:cd:a1:10:d1: b1:70:57:bd:6a:d3:4d:e9:c6:66:b0:aa:b8:df:6d: 1b:18:2a:50:f4:bd:fb:2c:15:b0:9e:0e:31:02:6a: e9:bc:29:bf:f6:49:31:2f:93:fa:69:c4:9a:f6:39: 1a:fe:08:52:37:5e:6d:c5:4e:0b:c9:cd:89:01:b1: 0d:80:dc:e4:6e:a4:54:7b:40:ae:cb:3c:43:e9:d5: a0:93:eb:ac:45:20:e5:c9:30:33:e0:88:75:e0:7f: 37:0a:4c:d6:8b:ac:08:17:2d:c6:32:72:81:97:90: 75:41:e5:0e:d0:84:2a:e2:77:51:9c:66:c5:f2:6e: de:9f:93:b9:3a:b1:7f:56:30:7e:da:4d:31:23:18: 6d:82:00:91:bb:f7:8e:ed:ea:cd:a5:6c:e6:f6:9b: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:4D:4B:B2:7A:92:06:2E:FE:69:F1:33:8E:D3:E1:EE:0E:6B:33 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:de:9e:3b:1b:44:3c:bb:69:26:72:55:a5:b5:ad:82:63:6e: a8:d9:21:eb:5d:7e:a9:67:95:10:0f:e5:a1:73:d0:8a:1f:88: 6f:42:be:09:b8:ea:90:70:c1:b2:49:28:00:5c:e8:b0:22:cd: 4b:1c:48:14:77:f7:cc:cc:b0:ac:c9:3d:dd:d9:e1:74:c4:4f: ca:e2:e5:9c:07:c4:c9:ff:36:70:02:53:eb:27:b9:7a:fa:4f: 71:d5:3c:91:20:21:0c:03:d4:11:3f:31:36:9a:88:db:9f:09: ff:d0:a6:3d:ee:ee:43:d7:93:f6:c2:fd:b6:3b:8d:42:44:8e: fa:cf:1a:77:dc:f5:e6:35:cf:89:3d:b8:4b:17:94:ef:a7:1f: 61:d2:55:26:f7:a8:e6:c1:32:fb:00:dd:cc:08:fa:eb:75:31: 59:3a:19:b7:6c:8e:93:28:bc:e8:20:70:73:6f:32:9f:71:c7: 97:b6:aa:ee:84:bd:96:5c:ad:0f:94:94:aa:dc:06:52:c7:6b: 14:04:38:fd:e2:96:16:2a:ac:c7:59:ba:50:19:14:c3:9f:5c: a0:65:a0:34:ae:32:48:45:6d:cd:09:bf:6e:b2:ec:7c:ff:19: 8c:6f:ae:94:8a:cd:8a:1c:92:2d:60:52:2b:30:c9:9e:d5:3c: c4:49:bc:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUL3H2wXsLXpgLtISEnAWekl3MtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTEyMTkxMjM4MDJaFw0yNTEyMjIyMjQ0MDJaMDMxMTAvBgNV BAMTKEM5MkQ0RDRCQjI3QTkyMDYyRUZFNjlGMTMzOEVEM0UxRUUwRTZCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCji5zGNsPHwKbEoXgr7oy7O7uW zVwfhW1IFawQYJcAsUZYoK16eHBYCcdZCJZsILJo/QxFpv3mL25JhKeZ5Y9W11lT ibwgOfwtXSTYGyl1Mj8vypSnV18MLZ2ieY9KSVQrqlqozaEQ0bFwV71q003pxmaw qrjfbRsYKlD0vfssFbCeDjECaum8Kb/2STEvk/ppxJr2ORr+CFI3Xm3FTgvJzYkB sQ2A3ORupFR7QK7LPEPp1aCT66xFIOXJMDPgiHXgfzcKTNaLrAgXLcYycoGXkHVB 5Q7QhCrid1GcZsXybt6fk7k6sX9WMH7aTTEjGG2CAJG7947t6s2lbOb2mz/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyS1NS7J6kgYu/mnxM47T4e4OazMwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXenjsbRDy7aSZyVaW1rYJjbqjZIetdfqln lRAP5aFz0IofiG9Cvgm46pBwwbJJKABc6LAizUscSBR398zMsKzJPd3Z4XTET8ri 5ZwHxMn/NnACU+snuXr6T3HVPJEgIQwD1BE/MTaaiNufCf/Qpj3u7kPXk/bC/bY7 jUJEjvrPGnfc9eY1z4k9uEsXlO+nH2HSVSb3qObBMvsA3cwI+ut1MVk6GbdsjpMo vOggcHNvMp9xx5e2qu6EvZZcrQ+UlKrcBlLHaxQEOP3ilhYqrMdZulAZFMOfXKBl oDSuMkhFbc0Jv26y7Hz/GYxvrpSKzYocki1gUiswyZ7VPMRJvIg= -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:38 2025 by rpki-client