This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: yTkG6B4VZX2MYOKShkotPY7isRfuZQTaARaxmNT7HWE= Subject key identifier: 30:30:C0:B5:81:32:DF:80:3A:68:2D:70:B7:3B:6A:66:D4:63:55:48 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 12EC5EA2F06722B1B542E45ABC6C7B34D98B07D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 0238 Signing time: Wed 17 Dec 2025 09:04:10 +0000 Manifest this update: Wed 17 Dec 2025 08:59:10 +0000 Manifest next update: Sat 20 Dec 2025 18:59:10 +0000 Files and hashes: 1: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 2: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) 3: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: Urywzx9gUMFsrfjSeoo/g1GBu5OXlj2qwSClT7rTCws=) 4: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ec:5e:a2:f0:67:22:b1:b5:42:e4:5a:bc:6c:7b:34:d9:8b:07:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Dec 17 08:59:10 2025 GMT Not After : Dec 20 18:59:10 2025 GMT Subject: CN=3030C0B58132DF803A682D70B73B6A66D4635548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:92:03:cb:fe:55:90:a7:0b:3b:43:a3:a8: a5:ee:b7:25:0a:a2:84:d9:04:1e:12:3f:f1:84:22: 34:26:93:92:dc:9e:74:14:ab:83:c9:e5:d1:59:66: 7d:ea:4a:fd:69:72:dc:68:87:b0:48:2c:08:6e:27: 31:22:d5:cb:63:e9:90:07:5e:d2:67:5d:b7:01:16: 55:9b:4d:78:87:3d:04:ce:8f:f3:9c:04:7b:27:0f: fd:fa:d4:9b:ab:6c:c6:8c:82:1d:79:2c:a7:fd:21: 16:ab:a2:1d:2b:b5:e3:d7:df:0c:0e:a8:8d:9b:f2: d5:60:20:ed:6e:55:a8:f6:0a:b8:c2:6b:f0:a9:49: 7c:d0:a3:7a:28:4c:ec:bf:55:e5:b8:8a:3a:eb:22: 5e:89:66:db:78:49:bb:67:83:62:6d:7a:16:ec:15: b9:71:cf:41:1e:49:b8:a5:f9:3d:88:5a:37:31:df: 2d:87:ee:55:f8:0c:14:05:0c:20:28:3d:2f:20:5b: b9:a6:00:c8:89:b2:43:0e:f8:d3:88:64:59:ee:26: e1:47:52:cd:15:33:d0:b4:52:f6:98:b6:a3:66:0c: 1a:b5:6e:93:48:63:8b:62:00:32:91:7a:10:03:84: 0d:2d:84:16:5e:56:d8:c2:4f:45:e7:40:7a:4f:38: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:C0:B5:81:32:DF:80:3A:68:2D:70:B7:3B:6A:66:D4:63:55:48 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8e:e8:0e:9c:a9:63:45:48:b5:e1:ae:7f:89:18:6a:fa:f2: de:68:b1:ea:7a:88:3e:55:91:bc:fa:9b:da:3b:b4:cc:71:5e: e3:f5:ab:11:e7:a6:69:7d:86:e6:8b:10:74:fe:7a:a3:ba:9a: 82:47:e7:06:f9:88:7e:0a:d7:ea:3a:8d:8d:ae:fb:ae:39:f7: 1c:cc:0c:4c:4e:db:82:65:93:f1:47:8b:40:93:8f:7b:a4:0c: 1d:89:0c:f3:92:4f:a0:a6:c9:16:d8:ae:4d:61:24:e2:c4:94: 0c:c8:15:55:4a:95:32:6d:b7:a1:88:bd:2c:31:7d:33:0a:5c: fb:15:e5:df:e5:86:52:cd:9e:97:ba:c7:85:1c:1a:5c:1e:d7: 5a:42:1f:1e:53:eb:1b:66:94:f8:bc:74:ad:5d:c5:16:f8:2e: 49:a4:3c:2a:e4:20:c1:e3:68:98:a1:ad:1a:de:20:68:c6:17: a4:98:82:a7:d1:ac:21:91:43:c8:9d:ec:6a:a2:c3:4b:59:eb: 62:0b:51:56:cd:f5:09:53:c7:f9:89:50:30:11:e9:39:e9:46: 2f:40:fb:70:ce:a0:7e:a0:2e:82:84:91:38:68:29:d6:83:f3: b2:90:22:57:93:6e:be:4c:ca:c9:a2:c2:60:2e:84:88:d6:90: 80:b7:4a:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuxeovBnIrG1QuRavGx7NNmLB9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTEyMTcwODU5MTBaFw0yNTEyMjAxODU5MTBaMDMxMTAvBgNV BAMTKDMwMzBDMEI1ODEzMkRGODAzQTY4MkQ3MEI3M0I2QTY2RDQ2MzU1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxZIDy/5VkKcLO0OjqKXutyUK ooTZBB4SP/GEIjQmk5LcnnQUq4PJ5dFZZn3qSv1pctxoh7BILAhuJzEi1ctj6ZAH XtJnXbcBFlWbTXiHPQTOj/OcBHsnD/361JurbMaMgh15LKf9IRaroh0rtePX3wwO qI2b8tVgIO1uVaj2CrjCa/CpSXzQo3ooTOy/VeW4ijrrIl6JZtt4Sbtng2Jtehbs Fblxz0EeSbil+T2IWjcx3y2H7lX4DBQFDCAoPS8gW7mmAMiJskMO+NOIZFnuJuFH Us0VM9C0UvaYtqNmDBq1bpNIY4tiADKRehADhA0thBZeVtjCT0XnQHpPOBJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDDAtYEy34A6aC1wtztqZtRjVUgwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGO6A6cqWNFSLXhrn+JGGr68t5osep6iD5V kbz6m9o7tMxxXuP1qxHnpml9huaLEHT+eqO6moJH5wb5iH4K1+o6jY2u+6459xzM DExO24Jlk/FHi0CTj3ukDB2JDPOST6CmyRbYrk1hJOLElAzIFVVKlTJtt6GIvSwx fTMKXPsV5d/lhlLNnpe6x4UcGlwe11pCHx5T6xtmlPi8dK1dxRb4LkmkPCrkIMHj aJihrRreIGjGF6SYgqfRrCGRQ8id7Gqiw0tZ62ILUVbN9QlTx/mJUDAR6TnpRi9A +3DOoH6gLoKEkThoKdaD87KQIleTbr5MysmiwmAuhIjWkIC3SuA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:03 2025 by rpki-client