This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier: daY9fMiTytCMwXUCiQVO7Oh2ygWwGlSjTRWMNhEvWts=
Subject key identifier: 85:30:FF:85:5A:11:ED:76:65:58:88:8B:AD:2D:E1:81:FC:42:09:8F
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 74B435D3E9BBD455C7F2F64FCACD554A317B11C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number: 0260
Signing time: Tue 23 Dec 2025 21:33:56 +0000
Manifest this update: Tue 23 Dec 2025 21:28:56 +0000
Manifest next update: Sat 27 Dec 2025 07:20:56 +0000
Files and hashes: 1: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
2: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
3: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: RfN9pWDeBGc5yymN7FebT133dpluKX34LaMCCuoH28E=)
4: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
5: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
6: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
7: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=)
9: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
10: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
11: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
12: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=)
13: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 07:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b4:35:d3:e9:bb:d4:55:c7:f2:f6:4f:ca:cd:55:4a:31:7b:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Dec 23 21:28:56 2025 GMT
Not After : Dec 27 07:20:56 2025 GMT
Subject: CN=8530FF855A11ED766558888BAD2DE181FC42098F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:38:72:41:5f:72:72:54:56:fd:16:1f:01:09:
84:b6:4f:e9:b1:62:4f:38:db:1d:6a:38:b3:d2:ca:
09:0c:8a:17:78:f8:5c:e6:27:13:40:f3:f7:1d:04:
0b:b8:38:0e:cb:49:59:21:57:60:e2:13:c1:4d:49:
eb:9a:0f:83:eb:95:ea:c1:fa:19:df:a1:0a:49:fd:
b5:10:a0:78:1a:8b:44:9e:f5:fa:09:af:41:32:87:
43:e2:55:ff:b0:17:e1:c2:e6:9f:c6:53:23:93:7a:
93:cd:f2:1d:60:c6:f1:cc:ed:d3:44:c1:3e:1d:8e:
94:b2:0f:1b:81:66:ce:20:ec:04:62:de:f4:b4:dc:
fc:e7:7f:12:0c:ad:0c:de:36:bb:37:f2:04:7b:76:
ab:fe:77:44:30:1d:9a:ee:aa:43:18:18:90:3b:60:
46:c1:90:05:24:b4:99:d3:81:95:cc:87:34:38:e4:
65:eb:92:22:1e:39:d2:05:a3:29:fb:1d:ce:f4:d8:
11:a0:1e:b0:6d:15:e3:3d:8d:9d:27:3f:e4:e0:e6:
4a:b9:07:ea:dd:00:e3:29:1b:cd:81:60:f0:d0:06:
73:78:2e:b7:e9:c7:77:a0:e4:44:8d:1f:ee:07:86:
a3:24:9a:c7:e9:55:6c:06:95:14:45:67:45:9b:15:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:FF:85:5A:11:ED:76:65:58:88:8B:AD:2D:E1:81:FC:42:09:8F
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8c:ff:80:4f:08:2c:a8:e3:31:70:8b:23:87:3b:a2:9c:0f:
ad:2d:ad:b4:82:d1:2b:40:92:18:ba:86:a0:d1:d2:93:83:ad:
3a:b9:fa:71:6e:34:e1:17:4a:47:be:d8:af:0e:7f:e7:79:fd:
35:40:b6:95:a9:80:fb:4d:a7:fa:30:79:59:19:dc:7c:eb:fc:
80:85:a0:ac:97:05:8d:5c:c9:1f:e5:aa:c5:e3:9e:dd:0a:0d:
95:69:40:dc:4d:fa:41:cb:39:67:17:34:cc:ce:d8:16:ec:bf:
ce:59:b2:d8:35:57:2e:df:3a:77:55:97:2f:01:d6:d7:53:88:
e7:33:c2:60:35:28:59:25:bc:dc:e2:8a:1d:7c:2b:b6:73:e0:
b2:de:78:62:bb:71:4e:be:1e:81:65:fe:4f:ec:37:53:89:14:
3d:be:82:dd:d5:d6:36:ea:be:34:2e:56:3f:bf:27:ae:03:86:
f4:da:1e:c0:ff:53:70:2e:29:8b:2e:ea:f1:07:79:23:32:66:
96:81:2c:ad:76:12:c1:08:62:b1:5e:76:1a:32:5c:df:c8:f4:
25:74:f8:f0:df:4c:12:fd:f1:ad:4b:e1:df:cc:42:7e:2b:c7:
c6:f6:dc:97:d0:dd:1f:42:84:e7:9a:0b:c4:43:0c:c9:ca:df:
ef:dd:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:59 2025 by rpki-client