This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: F5uFXAqT4YkFK62EsZySKJPjGI/1G1NzpXLiRbIuqds= Subject key identifier: 9D:9A:8A:BB:2E:04:17:7A:CD:E9:8E:CC:2B:D6:C1:64:80:AC:2B:CC Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 4C9D6268562E65152A4F4F9A45DBD12CA2364E8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 013A Signing time: Wed 24 Dec 2025 13:10:48 +0000 Manifest this update: Wed 24 Dec 2025 13:05:48 +0000 Manifest next update: Sat 27 Dec 2025 20:12:48 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: aSjeWz/EYbhrSlrLDYgYUF3s1FsXp/cijZg/ak72DO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9d:62:68:56:2e:65:15:2a:4f:4f:9a:45:db:d1:2c:a2:36:4e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Dec 24 13:05:48 2025 GMT Not After : Dec 27 20:12:48 2025 GMT Subject: CN=9D9A8ABB2E04177ACDE98ECC2BD6C16480AC2BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:98:cb:8b:74:16:ec:49:bc:20:11:d6:c6: e9:ba:97:e4:ce:fd:25:43:e5:da:8f:fe:c7:80:0e: 31:8b:17:c1:c0:d5:c5:d2:ab:66:16:39:fe:90:7f: 9b:41:2f:35:7a:2f:8e:bf:b9:3e:1c:89:2d:2e:38: 29:64:fd:a3:72:83:15:ec:af:9d:d7:14:eb:c8:60: 27:4f:60:de:b3:2c:76:5f:fc:02:c2:fd:c4:63:cc: 7c:22:f4:9b:05:e3:f6:61:e9:e1:21:d3:bc:25:f0: 05:1e:e3:51:f3:ae:cd:27:52:a6:20:77:79:ae:74: 0b:3f:3b:33:fd:6d:b9:dc:a1:b3:2d:b5:41:a3:10: 10:1f:59:a4:f7:4e:86:c6:0a:45:a6:52:9a:72:dd: cd:f3:75:a6:32:36:70:d9:b6:2e:fb:54:2e:c4:6d: e5:28:4b:34:3b:66:ab:fa:66:f4:f2:ad:fd:ff:79: 17:b3:6f:0f:20:0f:e2:04:4c:68:07:08:10:33:5f: 83:fa:ec:9b:17:db:fc:37:24:eb:11:cb:39:40:b5: 7e:fa:ed:72:c1:9c:aa:6d:4e:86:a0:9c:70:b9:d5: 13:05:55:9a:63:49:55:85:46:18:47:fd:29:24:ec: 3c:39:32:6a:3a:ce:1c:1c:a3:b7:46:f4:03:e6:e3: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:8A:BB:2E:04:17:7A:CD:E9:8E:CC:2B:D6:C1:64:80:AC:2B:CC X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5c:94:78:18:aa:41:79:f2:e7:13:57:c9:6a:ab:c7:81:db: c8:56:c9:4e:54:18:c5:2a:a3:1c:35:db:79:8b:e9:68:44:c5: 1a:a7:24:7a:93:37:d3:1c:9c:96:6d:b7:f6:25:ee:8b:24:ce: 66:d7:f5:90:04:ff:f2:21:97:f9:d3:c9:2f:2b:0f:e5:2e:cb: 81:22:cc:73:d7:ca:ef:eb:e6:e8:38:db:d3:4b:b1:e1:8a:a5: 6a:93:37:14:c0:29:aa:41:b5:4a:3a:b2:3b:d7:1c:3f:95:9e: f7:69:6d:ab:81:41:91:17:79:d4:6e:cc:9c:ae:bb:93:1d:e2: 86:e6:56:7c:8a:de:32:5e:1d:86:e2:4c:ee:f2:a5:f7:c1:97: b9:2f:64:22:ca:dc:0c:62:06:35:cf:d7:ad:ef:ff:49:a2:a0: ad:77:45:e0:d7:4d:52:06:ff:c2:56:08:d7:87:ed:c2:3e:43: 7b:6a:84:55:e1:76:d0:6a:e2:01:66:3b:02:c7:a1:db:b0:d8: 8a:f5:9b:eb:3e:a5:4e:d9:b0:fe:5b:5a:4b:a0:ed:16:63:91: 34:af:c5:53:0b:f5:6d:29:86:1b:cf:cc:b2:c9:e6:57:dd:37: 12:4d:57:a5:c5:fb:02:66:ce:56:2b:09:28:0b:fb:8e:7a:dc: 7f:de:7b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJ1iaFYuZRUqT0+aRdvRLKI2To0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTEyMjQxMzA1NDhaFw0yNTEyMjcyMDEyNDhaMDMxMTAvBgNV BAMTKDlEOUE4QUJCMkUwNDE3N0FDREU5OEVDQzJCRDZDMTY0ODBBQzJCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRpjLi3QW7Em8IBHWxum6l+TO /SVD5dqP/seADjGLF8HA1cXSq2YWOf6Qf5tBLzV6L46/uT4ciS0uOClk/aNygxXs r53XFOvIYCdPYN6zLHZf/ALC/cRjzHwi9JsF4/Zh6eEh07wl8AUe41Hzrs0nUqYg d3mudAs/OzP9bbncobMttUGjEBAfWaT3TobGCkWmUppy3c3zdaYyNnDZti77VC7E beUoSzQ7Zqv6ZvTyrf3/eRezbw8gD+IETGgHCBAzX4P67JsX2/w3JOsRyzlAtX76 7XLBnKptToagnHC51RMFVZpjSVWFRhhH/Skk7Dw5Mmo6zhwco7dG9APm404TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZqKuy4EF3rN6Y7MK9bBZICsK8wwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVclHgYqkF58ucTV8lqq8eB28hWyU5UGMUq oxw123mL6WhExRqnJHqTN9McnJZtt/Yl7oskzmbX9ZAE//Ihl/nTyS8rD+Uuy4Ei zHPXyu/r5ug429NLseGKpWqTNxTAKapBtUo6sjvXHD+VnvdpbauBQZEXedRuzJyu u5Md4obmVnyK3jJeHYbiTO7ypffBl7kvZCLK3AxiBjXP163v/0mioK13ReDXTVIG /8JWCNeH7cI+Q3tqhFXhdtBq4gFmOwLHoduw2Ir1m+s+pU7ZsP5bWkug7RZjkTSv xVML9W0phhvPzLLJ5lfdNxJNV6XF+wJmzlYrCSgL+4563H/ee14= -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:24 2025 by rpki-client