This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: JQim67G/nFo99Am0O3JN6HX65N2HXUzyXFEdQpq9tF8= Subject key identifier: E0:82:C8:D6:58:0F:2B:6D:F3:B1:5E:2E:30:88:8E:6F:8C:4D:B7:FA Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 52E202890D1B190BAF623137B20CEF8585D6136F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 0235 Signing time: Wed 24 Dec 2025 20:41:37 +0000 Manifest this update: Wed 24 Dec 2025 20:36:37 +0000 Manifest next update: Sun 28 Dec 2025 00:41:37 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: Z0996aA2QOzxOok4Wn1KEj2VpCCppA5CKBIBNPfpnDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e2:02:89:0d:1b:19:0b:af:62:31:37:b2:0c:ef:85:85:d6:13:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Dec 24 20:36:37 2025 GMT Not After : Dec 28 00:41:37 2025 GMT Subject: CN=E082C8D6580F2B6DF3B15E2E30888E6F8C4DB7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cd:2e:31:41:2c:d0:af:7d:aa:71:cc:7c:57: 10:2e:ac:31:bc:e2:8d:98:c8:ac:44:d9:05:84:b9: 16:fe:5f:a4:d1:06:aa:a1:2d:18:6f:d0:ee:22:25: 48:c0:01:2a:84:21:d0:17:ff:be:70:75:d1:00:a2: 99:f2:11:65:0f:1d:86:37:6e:23:6a:d2:40:1b:7d: d7:b0:f4:fe:bf:bb:45:00:3b:18:97:0f:97:3b:6e: 0b:9f:4e:6b:be:99:18:1a:2c:ec:8f:b6:68:c5:9f: 67:66:31:c0:43:88:2b:44:b8:80:cb:0b:28:43:de: 06:49:a0:91:92:85:46:7e:48:ce:8a:64:17:ec:2a: 9b:06:20:3a:19:04:8a:3b:95:ed:d2:05:77:fa:e1: bb:1b:78:37:9c:4e:f4:31:ee:d2:c0:2a:88:b2:d3: f3:f5:c3:27:c4:a3:76:75:c6:f8:98:f9:e0:12:c7: 6e:93:5e:d3:a4:3e:7b:13:4f:9c:d1:29:c6:a9:fe: 95:a8:cc:39:71:10:37:03:43:45:6f:ef:88:24:75: 45:94:de:77:7a:45:fb:ab:59:25:de:bb:22:bb:73: 23:f9:65:76:5b:62:0a:bf:a0:2d:52:db:4d:bb:19: 84:0d:28:ab:fb:47:b0:df:34:8a:33:a2:ca:c6:fc: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:C8:D6:58:0F:2B:6D:F3:B1:5E:2E:30:88:8E:6F:8C:4D:B7:FA X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9d:c9:e0:b6:36:b8:b1:75:d8:9a:66:d5:ab:34:0a:fd:55: a4:9e:ff:6f:45:83:9a:6b:c7:2d:47:da:c5:12:34:f8:db:80: c1:8b:20:40:a5:c9:d0:56:fe:d3:2a:75:f2:f5:05:dd:70:bb: 33:54:af:be:b1:24:57:cd:2a:7a:2c:3e:de:d8:5f:0c:a7:d0: 88:71:be:72:58:93:2c:4a:9f:f9:57:49:90:58:60:b7:87:0b: 2c:94:27:15:73:85:1c:06:20:2a:7b:39:5c:73:08:04:85:15: 88:4a:e7:47:fd:fb:df:51:38:d3:1a:42:cd:69:16:12:97:94: 69:62:d7:00:63:6f:c4:bd:6d:43:b5:52:ee:1e:c0:8c:f2:40: d9:5b:a6:5a:bf:8f:ac:2b:ed:83:b9:3f:9f:c5:93:3d:a8:b2: ae:d1:40:a9:2c:20:53:2c:ec:b2:94:43:e8:28:aa:22:cc:9c: 67:8b:f3:92:37:a1:62:f7:27:ca:e6:8f:4c:13:4a:43:06:ae: 74:6f:58:d9:f1:cd:d8:19:10:e7:15:eb:d1:88:5b:24:dd:00: 7a:91:4b:a8:9c:ef:3b:39:c1:a1:b5:39:bf:9a:dc:a7:36:96: ee:83:f1:2a:7d:59:e3:44:ce:17:4d:80:cd:3e:4c:59:c7:2c: 5c:e0:a3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUuICiQ0bGQuvYjE3sgzvhYXWE28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTEyMjQyMDM2MzdaFw0yNTEyMjgwMDQxMzdaMDMxMTAvBgNV BAMTKEUwODJDOEQ2NTgwRjJCNkRGM0IxNUUyRTMwODg4RTZGOEM0REI3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnzS4xQSzQr32qccx8VxAurDG8 4o2YyKxE2QWEuRb+X6TRBqqhLRhv0O4iJUjAASqEIdAX/75wddEAopnyEWUPHYY3 biNq0kAbfdew9P6/u0UAOxiXD5c7bgufTmu+mRgaLOyPtmjFn2dmMcBDiCtEuIDL CyhD3gZJoJGShUZ+SM6KZBfsKpsGIDoZBIo7le3SBXf64bsbeDecTvQx7tLAKoiy 0/P1wyfEo3Z1xviY+eASx26TXtOkPnsTT5zRKcap/pWozDlxEDcDQ0Vv74gkdUWU 3nd6RfurWSXeuyK7cyP5ZXZbYgq/oC1S2027GYQNKKv7R7DfNIozosrG/MLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ILI1lgPK23zsV4uMIiOb4xNt/owHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2dyeC2NrixddiaZtWrNAr9VaSe/29Fg5pr xy1H2sUSNPjbgMGLIEClydBW/tMqdfL1Bd1wuzNUr76xJFfNKnosPt7YXwyn0Ihx vnJYkyxKn/lXSZBYYLeHCyyUJxVzhRwGICp7OVxzCASFFYhK50f9+99RONMaQs1p FhKXlGli1wBjb8S9bUO1Uu4ewIzyQNlbplq/j6wr7YO5P5/Fkz2osq7RQKksIFMs 7LKUQ+goqiLMnGeL85I3oWL3J8rmj0wTSkMGrnRvWNnxzdgZEOcV69GIWyTdAHqR S6ic7zs5waG1Ob+a3Kc2lu6D8Sp9WeNEzhdNgM0+TFnHLFzgo+k= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:53 2025 by rpki-client