This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: 7oglyj4KxSQnp1SwN1F4CAUTOnqkuIdLIG3q8ggpzeY= Subject key identifier: BD:7A:1D:4C:62:4C:2C:7F:EE:A9:7B:A7:44:BB:A9:B5:B4:A8:AF:13 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 21AC1A9F6A301D5BE6E2BECF8734CE4DA9F9BECD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 0202 Signing time: Thu 18 Dec 2025 18:11:51 +0000 Manifest this update: Thu 18 Dec 2025 18:06:51 +0000 Manifest next update: Mon 22 Dec 2025 05:23:51 +0000 Files and hashes: 1: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 2: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 3: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 4: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 5: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=) 6: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 7: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 8: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=) 9: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: yG6pSREfDwwJqBV3PW4QGOGEsPySOBG6VbYffKWrLts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ac:1a:9f:6a:30:1d:5b:e6:e2:be:cf:87:34:ce:4d:a9:f9:be:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Dec 18 18:06:51 2025 GMT Not After : Dec 22 05:23:51 2025 GMT Subject: CN=BD7A1D4C624C2C7FEEA97BA744BBA9B5B4A8AF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:5e:c6:2c:ed:ee:40:a7:5a:d7:88:39:70: 70:08:fe:a2:af:1a:67:0c:f1:23:48:10:8f:4b:e5: a8:7a:89:12:23:6e:f1:f5:e9:cc:59:3f:d5:7c:e1: 61:cd:b9:19:7d:2c:8d:c0:3d:7f:87:0f:e5:57:10: 59:f6:9b:f5:f1:09:99:bf:6e:f2:af:89:e6:68:ea: ab:3a:85:b7:0a:83:14:22:a7:29:60:b1:dc:3d:c8: ce:07:52:67:46:7f:b3:20:52:7c:bd:73:35:32:a2: 6c:55:51:08:a2:5d:e2:97:dc:13:d8:4f:00:39:89: 3e:98:53:cc:8a:2e:bb:5c:93:d0:e9:6f:8c:b0:48: 91:91:1f:27:a1:b3:57:a2:c4:d1:77:77:11:09:29: 8a:82:5a:27:5c:c4:f4:2c:fb:80:dd:45:39:68:4f: 2c:02:84:10:bb:75:ab:ac:38:ee:e9:41:8e:9d:d6: 12:fb:5d:68:3a:b7:37:3c:76:29:fa:4e:c4:4f:e9: 8e:65:84:10:39:6d:28:1e:18:f2:85:d7:82:65:f0: 76:57:54:fd:12:3d:15:e1:c3:0d:52:a9:34:01:47: ea:c1:14:4c:9e:1b:b4:91:3e:c1:47:ac:8c:9c:48: 4e:ca:d0:78:25:97:be:c1:54:ed:26:bc:08:d5:1b: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:1D:4C:62:4C:2C:7F:EE:A9:7B:A7:44:BB:A9:B5:B4:A8:AF:13 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:5b:be:aa:5a:54:6e:14:32:35:6f:a0:b4:77:df:7c:ab: 17:ec:74:9c:eb:64:43:4e:e5:91:c6:05:c5:22:49:c1:a0:ba: 7b:8b:8d:55:88:f4:34:99:e5:15:d0:ea:35:c3:43:de:21:d1: fc:bd:71:42:d7:43:46:d6:15:fc:72:36:e7:79:74:59:ea:2d: 5d:55:2d:ab:d9:62:44:fb:d8:2b:4f:50:3a:33:f1:e0:1f:3c: e1:91:8a:e4:43:5c:24:d2:01:62:9f:d6:08:f3:cb:a8:0e:6f: 4f:e3:13:3c:a1:33:80:9c:f2:32:6e:40:d8:68:9c:11:e3:dc: 39:45:76:0a:7b:6b:c9:6a:e8:4f:71:d5:13:0e:0d:8d:fe:da: 1b:6e:08:f7:9c:31:dc:2b:b7:e9:bd:c2:a5:6f:c4:08:31:13: c2:95:4a:9a:9f:b1:37:b6:61:56:34:61:d2:c9:ca:c0:e6:15: 1c:9f:72:98:6a:ab:6e:95:3d:90:26:57:42:59:48:4c:c9:9a: ed:cf:64:1c:44:86:21:8f:4b:24:9c:0e:cd:5e:b4:ac:52:65: 8f:47:0c:8f:1f:61:4b:bb:34:a7:df:cf:c6:0f:69:10:fb:6b: 08:87:53:80:f5:17:36:19:7b:b7:7d:c6:87:88:65:47:69:f9: 5b:a3:95:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIawan2owHVvm4r7PhzTOTan5vs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTEyMTgxODA2NTFaFw0yNTEyMjIwNTIzNTFaMDMxMTAvBgNV BAMTKEJEN0ExRDRDNjI0QzJDN0ZFRUE5N0JBNzQ0QkJBOUI1QjRBOEFGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqV7GLO3uQKda14g5cHAI/qKv GmcM8SNIEI9L5ah6iRIjbvH16cxZP9V84WHNuRl9LI3APX+HD+VXEFn2m/XxCZm/ bvKvieZo6qs6hbcKgxQipylgsdw9yM4HUmdGf7MgUny9czUyomxVUQiiXeKX3BPY TwA5iT6YU8yKLrtck9Dpb4ywSJGRHyehs1eixNF3dxEJKYqCWidcxPQs+4DdRTlo TywChBC7dausOO7pQY6d1hL7XWg6tzc8din6TsRP6Y5lhBA5bSgeGPKF14Jl8HZX VP0SPRXhww1SqTQBR+rBFEyeG7SRPsFHrIycSE7K0Hgll77BVO0mvAjVGzsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvXodTGJMLH/uqXunRLuptbSorxMwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqKW76qWlRuFDI1b6C0d998qxfsdJzrZENO 5ZHGBcUiScGgunuLjVWI9DSZ5RXQ6jXDQ94h0fy9cULXQ0bWFfxyNud5dFnqLV1V LavZYkT72CtPUDoz8eAfPOGRiuRDXCTSAWKf1gjzy6gOb0/jEzyhM4Cc8jJuQNho nBHj3DlFdgp7a8lq6E9x1RMODY3+2htuCPecMdwrt+m9wqVvxAgxE8KVSpqfsTe2 YVY0YdLJysDmFRyfcphqq26VPZAmV0JZSEzJmu3PZBxEhiGPSyScDs1etKxSZY9H DI8fYUu7NKffz8YPaRD7awiHU4D1FzYZe7d9xoeIZUdp+VujlXo= -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:01 2025 by rpki-client