This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: EbifNe5pgS57qtLwv60qBU66Tan6jSxHBE98HgkhSdI= Subject key identifier: DD:B9:98:B3:10:A3:4A:0C:31:B2:BA:AA:77:7F:58:98:C4:E7:B3:52 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 46DD692C91CC2FD7776E10BDC024F2BF425143E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 0206 Signing time: Mon 22 Dec 2025 23:20:05 +0000 Manifest this update: Mon 22 Dec 2025 23:15:05 +0000 Manifest next update: Fri 26 Dec 2025 05:55:05 +0000 Files and hashes: 1: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: VpUARJ10vUYBiyoBs70cBqAWm0uDbEUqcD5B9OP/boE=) 2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:dd:69:2c:91:cc:2f:d7:77:6e:10:bd:c0:24:f2:bf:42:51:43:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Dec 22 23:15:05 2025 GMT Not After : Dec 26 05:55:05 2025 GMT Subject: CN=DDB998B310A34A0C31B2BAAA777F5898C4E7B352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:33:c6:3c:00:b3:b6:ca:15:f3:35:0a:8f: 3d:d9:66:48:00:d9:7e:73:2d:20:be:4e:8b:e0:e1: 64:bc:15:99:77:1d:9e:3c:cb:e3:6a:da:21:a5:25: 5f:d7:2c:d6:08:35:de:17:51:d7:09:fb:5f:73:26: e0:c7:dd:b7:f4:92:93:7f:ca:e6:b3:84:ac:78:db: 75:4d:20:5b:aa:1a:40:f4:c4:33:5e:69:1f:c5:ea: 15:b8:9c:11:b1:c8:e3:30:73:7d:78:c0:88:c9:e9: a3:fb:0e:30:e4:84:67:60:49:1f:eb:77:a3:95:7e: 16:b7:96:f8:e6:db:97:f1:76:a3:28:d0:00:d4:47: 72:9a:f3:9a:35:1c:fc:ea:f7:a8:82:3f:2e:87:83: 2e:86:46:77:66:15:da:b2:1e:be:14:d8:43:37:49: 09:f9:fe:a3:ce:c9:ed:20:08:e6:b8:07:a3:f5:fb: 97:0e:80:81:6b:7a:a9:e1:f6:e3:e9:79:bb:4f:50: f5:7a:03:3f:08:ed:24:ef:46:52:cd:74:aa:cf:cf: b3:06:5a:e7:97:e9:44:63:a2:63:d3:00:13:ec:5b: af:bb:27:c6:db:be:ab:c7:de:d7:d3:0f:d5:48:01: 47:50:95:05:65:44:21:94:96:52:85:e9:9f:48:8a: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:98:B3:10:A3:4A:0C:31:B2:BA:AA:77:7F:58:98:C4:E7:B3:52 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:43:24:2c:b4:fa:34:9d:b7:eb:1d:9e:49:62:93:86:8e:b7: 8e:90:17:70:67:99:75:20:71:cb:f7:4c:22:2e:5a:4f:1b:ee: 88:e6:68:de:26:2d:0b:82:7e:22:48:6e:30:d8:e7:e7:78:68: ec:ee:96:23:89:11:bb:22:12:19:0c:72:43:ee:15:64:0c:b0: 89:34:a3:1e:75:ca:c8:b2:b7:04:a0:7c:05:b0:b1:1c:6e:6f: 18:5e:cb:18:5b:1d:7d:05:fc:ae:90:70:13:bf:1c:4c:52:e2: 3d:d1:8a:47:e1:3f:29:db:c2:f6:25:72:8c:2c:25:1b:a6:e5: 24:37:55:e6:7a:e9:3a:e8:bc:1c:34:4d:2c:ae:9e:a4:6a:bf: 21:ff:99:3c:a0:14:f3:14:41:0b:c5:19:de:65:fd:dc:e3:18: c3:68:67:7d:ae:43:ac:05:f4:c4:49:b0:d6:a3:db:1b:6a:cc: bf:83:68:e9:8e:ba:93:e4:77:dc:8f:c3:e2:b5:29:00:5f:3c: e6:48:cf:65:44:97:a6:73:27:9c:44:f2:68:af:57:81:df:4f: 75:4f:7c:c2:c2:96:db:9a:da:40:8b:3a:c9:46:8a:6c:54:eb: 63:50:d3:0f:a8:4d:8f:89:db:ac:ca:a0:97:bc:4d:55:0d:92: 7a:a8:cf:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURt1pLJHML9d3bhC9wCTyv0JRQ+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTEyMjIyMzE1MDVaFw0yNTEyMjYwNTU1MDVaMDMxMTAvBgNV BAMTKEREQjk5OEIzMTBBMzRBMEMzMUIyQkFBQTc3N0Y1ODk4QzRFN0IzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUDPGPACztsoV8zUKjz3ZZkgA 2X5zLSC+Tovg4WS8FZl3HZ48y+Nq2iGlJV/XLNYINd4XUdcJ+19zJuDH3bf0kpN/ yuazhKx423VNIFuqGkD0xDNeaR/F6hW4nBGxyOMwc314wIjJ6aP7DjDkhGdgSR/r d6OVfha3lvjm25fxdqMo0ADUR3Ka85o1HPzq96iCPy6Hgy6GRndmFdqyHr4U2EM3 SQn5/qPOye0gCOa4B6P1+5cOgIFreqnh9uPpebtPUPV6Az8I7STvRlLNdKrPz7MG WueX6URjomPTABPsW6+7J8bbvqvH3tfTD9VIAUdQlQVlRCGUllKF6Z9Iis6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bmYsxCjSgwxsrqqd39YmMTns1IwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhDJCy0+jSdt+sdnklik4aOt46QF3BnmXUg ccv3TCIuWk8b7ojmaN4mLQuCfiJIbjDY5+d4aOzuliOJEbsiEhkMckPuFWQMsIk0 ox51ysiytwSgfAWwsRxubxheyxhbHX0F/K6QcBO/HExS4j3RikfhPynbwvYlcows JRum5SQ3VeZ66TrovBw0TSyunqRqvyH/mTygFPMUQQvFGd5l/dzjGMNoZ32uQ6wF 9MRJsNaj2xtqzL+DaOmOupPkd9yPw+K1KQBfPOZIz2VEl6ZzJ5xE8mivV4HfT3VP fMLCltua2kCLOslGimxU62NQ0w+oTY+J26zKoJe8TVUNknqoz9w= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:22 2025 by rpki-client