This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: bp44Du6GV0/uCjF6uLG7vbKXqJicJD5AZT9EkrzurXc= Subject key identifier: A0:D2:4B:0D:34:B3:CF:5A:23:7E:D8:66:B6:6B:54:A3:66:43:F1:FE Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 689020A0D4D607EAA203C875B3116FCEC41D4B1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 0520 Signing time: Wed 17 Dec 2025 10:30:53 +0000 Manifest this update: Wed 17 Dec 2025 10:25:53 +0000 Manifest next update: Sat 20 Dec 2025 12:19:53 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: ofiLglq6ndK9chYcM+Tris2LONiur+pwAPt6ME5xr4w=) 2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=) 3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:90:20:a0:d4:d6:07:ea:a2:03:c8:75:b3:11:6f:ce:c4:1d:4b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Dec 17 10:25:53 2025 GMT Not After : Dec 20 12:19:53 2025 GMT Subject: CN=A0D24B0D34B3CF5A237ED866B66B54A36643F1FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:fd:b1:2b:aa:71:de:b3:83:1d:0f:45:13: 32:a4:66:e5:f3:61:78:0c:34:40:a9:37:c5:c0:45: e0:3f:30:7a:5c:25:e8:b4:01:4e:67:9b:45:fe:f4: 84:ae:9a:a7:67:69:80:fc:95:6e:3b:7c:de:14:e0: 64:aa:51:d8:ed:f0:25:08:94:ff:c4:71:b5:e0:5c: a1:ad:89:a7:8d:0c:5f:23:71:35:2c:66:13:9f:b9: 56:27:a0:1b:53:1b:1e:df:5e:92:3b:d5:6a:7f:b1: 2d:a1:df:0a:d8:69:ff:11:58:7f:9d:d9:03:26:ca: b8:54:b4:30:7f:5b:3a:f5:c2:1a:4a:a0:9d:60:b0: 12:4a:e3:13:8a:77:a0:3b:ce:3b:d5:9e:1b:0b:6b: 26:dd:e6:24:7f:94:84:4e:b3:06:d0:54:54:12:8b: 15:e9:67:50:b2:e1:4d:ea:f9:38:74:30:8a:fa:20: 14:78:70:cf:8b:db:15:f6:e7:ae:87:7f:c5:e9:8a: f9:bc:04:11:94:58:ed:87:35:89:d8:cb:a5:28:e0: 96:ae:a5:01:c5:6c:d6:88:c3:24:a9:26:de:73:20: 4c:d2:a5:62:5e:2b:43:dc:cc:6b:00:78:95:7e:25: 33:34:24:b1:9d:27:0e:07:14:39:07:e3:2d:d4:17: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D2:4B:0D:34:B3:CF:5A:23:7E:D8:66:B6:6B:54:A3:66:43:F1:FE X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1b:47:a0:57:b2:57:10:ba:39:08:60:ab:64:63:9a:24:5d: 3f:06:27:d6:90:a8:40:85:88:87:24:f9:5a:b5:be:ab:b1:ab: de:a1:e1:18:14:f3:bf:d6:22:76:d7:a0:16:a3:9c:b9:30:29: 64:e2:51:60:5b:45:d9:cf:3e:59:3d:f1:4b:fa:eb:4e:a7:d0: 7a:f0:ba:8f:d5:64:47:f0:67:33:05:ff:54:bd:ab:34:75:f6: 30:6e:39:5a:70:82:98:c3:29:49:51:95:2d:6a:09:34:8e:8c: 04:7b:bc:bc:5c:22:10:45:24:6c:9e:0d:9c:6c:73:47:5a:ec: 68:ae:03:1f:af:e2:a7:3f:6f:29:63:df:d3:3b:41:2b:a6:09: bc:f1:57:db:89:3d:b8:c5:6d:92:d4:be:9c:a9:ea:ac:f3:0b: 31:fa:97:b5:f3:3d:d6:dd:5e:d3:f6:5f:04:95:5f:3e:8f:6b: c3:b8:de:7f:7d:a6:29:8f:8a:f7:8c:41:9b:07:07:d8:d6:b2: 24:a0:c2:e6:f4:3e:c4:7b:cf:53:cb:cf:f9:51:8e:b7:e2:8b: ba:8e:c1:51:c3:6c:fe:75:d8:5b:21:a4:8b:79:e7:b6:7c:3f: 2d:d2:4d:50:30:ea:32:bb:31:71:2c:64:26:bf:ef:0c:bf:67: ee:9b:0e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJAgoNTWB+qiA8h1sxFvzsQdSx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTEyMTcxMDI1NTNaFw0yNTEyMjAxMjE5NTNaMDMxMTAvBgNV BAMTKEEwRDI0QjBEMzRCM0NGNUEyMzdFRDg2NkI2NkI1NEEzNjY0M0YxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEs/2xK6px3rODHQ9FEzKkZuXz YXgMNECpN8XAReA/MHpcJei0AU5nm0X+9ISumqdnaYD8lW47fN4U4GSqUdjt8CUI lP/EcbXgXKGtiaeNDF8jcTUsZhOfuVYnoBtTGx7fXpI71Wp/sS2h3wrYaf8RWH+d 2QMmyrhUtDB/Wzr1whpKoJ1gsBJK4xOKd6A7zjvVnhsLaybd5iR/lIROswbQVFQS ixXpZ1Cy4U3q+Th0MIr6IBR4cM+L2xX2566Hf8Xpivm8BBGUWO2HNYnYy6Uo4Jau pQHFbNaIwySpJt5zIEzSpWJeK0PczGsAeJV+JTM0JLGdJw4HFDkH4y3UF7mLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNJLDTSzz1ojfthmtmtUo2ZD8f4wHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMbR6BXslcQujkIYKtkY5okXT8GJ9aQqECF iIck+Vq1vquxq96h4RgU87/WInbXoBajnLkwKWTiUWBbRdnPPlk98Uv6606n0Hrw uo/VZEfwZzMF/1S9qzR19jBuOVpwgpjDKUlRlS1qCTSOjAR7vLxcIhBFJGyeDZxs c0da7GiuAx+v4qc/bylj39M7QSumCbzxV9uJPbjFbZLUvpyp6qzzCzH6l7XzPdbd XtP2XwSVXz6Pa8O43n99pimPiveMQZsHB9jWsiSgwub0PsR7z1PLz/lRjrfii7qO wVHDbP512FshpIt557Z8Py3STVAw6jK7MXEsZCa/7wy/Z+6bDpc= -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:51 2025 by rpki-client