This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: tpVaZP165qzzTlTIlLxzx+l5L6eOwCxR+w/NIsra9OA= Subject key identifier: F5:A0:6D:38:63:8C:3D:E8:D4:A2:DA:12:97:09:3A:51:C1:1F:BC:C9 Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 6594E972AFE4E5108DBB90D7BD2E7F417722C302 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 013D Signing time: Thu 18 Dec 2025 07:01:22 +0000 Manifest this update: Thu 18 Dec 2025 06:56:22 +0000 Manifest next update: Sun 21 Dec 2025 17:19:22 +0000 Files and hashes: 1: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: pPUYpl/v+Nz9/PAxXgyppbWs0g+d6M2/XxfhxMvyvGk=) 2: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: fcE9nxP4F/tonEL2jLycsAVcDyzYWrh05xw29/4haAg=) 3: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: WyVvseBUv5X8ksDjsVqSJfve5PyMPgdJn+/FGNUqcmk=) 4: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:94:e9:72:af:e4:e5:10:8d:bb:90:d7:bd:2e:7f:41:77:22:c3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Dec 18 06:56:22 2025 GMT Not After : Dec 21 17:19:22 2025 GMT Subject: CN=F5A06D38638C3DE8D4A2DA1297093A51C11FBCC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:01:9d:ec:a1:97:45:41:4d:cb:89:09:91: c0:68:95:0d:30:47:01:3b:df:bf:d1:35:ba:35:7b: 26:49:16:49:c3:8c:d5:6a:9d:6c:e7:7e:d0:91:6a: 93:51:33:31:c1:3c:1a:2d:06:af:79:5b:c4:20:e8: 7e:d4:f9:5e:3d:e0:92:91:38:82:7a:df:3e:5f:40: 9f:47:32:47:a3:40:66:ff:6e:8b:13:ad:ac:f6:52: 42:64:5b:d6:a0:b0:e1:10:87:2d:06:9d:62:96:84: 60:3d:d5:68:dd:77:20:03:80:e4:73:db:62:7c:ce: cc:7e:69:7c:d6:5c:83:63:d4:cc:b4:bc:b6:bb:a8: 85:db:f0:31:d3:35:88:0d:3d:b7:11:6e:5c:27:85: 93:f7:2c:3d:47:38:90:d0:5d:16:34:7a:4c:61:40: e7:ff:d2:4c:cc:83:fc:45:e7:44:d7:0a:cd:3c:bb: 28:db:a5:44:df:4e:cb:91:e4:31:05:25:ce:9a:91: b2:cd:72:f8:6a:ac:74:95:2c:bd:c1:50:97:bd:7d: 35:ab:5c:4f:d7:f1:7a:35:60:b7:af:1b:5e:a7:e2: 2e:41:5f:78:0b:aa:67:69:14:16:51:d3:74:a7:b4: 62:0f:92:ea:5d:d4:27:26:32:9d:b2:a0:84:be:62: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:6D:38:63:8C:3D:E8:D4:A2:DA:12:97:09:3A:51:C1:1F:BC:C9 X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fc:7c:ea:c1:cc:35:66:00:b8:41:94:34:d9:87:3e:98:97: c0:ac:0b:2e:47:2f:4e:fc:44:65:b3:04:9c:24:0a:de:63:4a: 24:17:1d:d3:6f:f4:24:dd:06:a3:00:a4:87:d4:27:01:09:1b: 4e:ba:a1:9a:a9:18:6a:56:9e:82:5a:ee:7a:27:49:7a:e9:29: eb:87:c0:c1:2f:f8:a2:30:e6:c3:58:63:ed:19:dc:24:51:bb: ec:76:c9:a3:cd:59:73:0f:e0:cc:da:36:a7:18:53:77:4c:ca: 88:d1:76:5b:00:f4:0b:61:07:97:96:5a:08:92:cc:02:83:50: 5a:3a:e4:e9:81:72:16:d7:e6:e4:3e:3f:a1:e4:83:d5:8a:ea: ef:61:96:eb:a2:e5:f2:bd:93:04:74:c3:9c:ca:b8:4b:26:f1: 67:26:93:3e:27:f2:6a:3e:ed:5d:03:b6:d8:ba:01:13:45:94: 1d:4a:16:c8:14:9b:70:d6:7f:aa:33:91:37:90:ec:bc:6a:05: b8:13:c7:52:29:b5:4a:c4:46:e6:f2:db:35:bd:c1:5f:c5:e9: bd:58:8b:02:03:c6:87:eb:2a:8f:c6:27:03:45:04:33:04:4a: c1:e9:bc:94:c5:f8:2e:ae:73:0c:0a:c0:0c:e6:cd:da:3f:e6: 7d:5b:01:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZTpcq/k5RCNu5DXvS5/QXciwwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNTEyMTgwNjU2MjJaFw0yNTEyMjExNzE5MjJaMDMxMTAvBgNV BAMTKEY1QTA2RDM4NjM4QzNERThENEEyREExMjk3MDkzQTUxQzExRkJDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUBwGd7KGXRUFNy4kJkcBolQ0w RwE737/RNbo1eyZJFknDjNVqnWznftCRapNRMzHBPBotBq95W8Qg6H7U+V494JKR OIJ63z5fQJ9HMkejQGb/bosTraz2UkJkW9agsOEQhy0GnWKWhGA91WjddyADgORz 22J8zsx+aXzWXINj1My0vLa7qIXb8DHTNYgNPbcRblwnhZP3LD1HOJDQXRY0ekxh QOf/0kzMg/xF50TXCs08uyjbpUTfTsuR5DEFJc6akbLNcvhqrHSVLL3BUJe9fTWr XE/X8Xo1YLevG16n4i5BX3gLqmdpFBZR03SntGIPkupd1CcmMp2yoIS+YkK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9aBtOGOMPejUotoSlwk6UcEfvMkwHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFD8fOrBzDVmALhBlDTZhz6Yl8CsCy5HL078 RGWzBJwkCt5jSiQXHdNv9CTdBqMApIfUJwEJG066oZqpGGpWnoJa7nonSXrpKeuH wMEv+KIw5sNYY+0Z3CRRu+x2yaPNWXMP4MzaNqcYU3dMyojRdlsA9AthB5eWWgiS zAKDUFo65OmBchbX5uQ+P6Hkg9WK6u9hluui5fK9kwR0w5zKuEsm8Wcmkz4n8mo+ 7V0Dtti6ARNFlB1KFsgUm3DWf6ozkTeQ7LxqBbgTx1IptUrERuby2zW9wV/F6b1Y iwIDxofrKo/GJwNFBDMESsHpvJTF+C6ucwwKwAzmzdo/5n1bATQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:11 2025 by rpki-client