This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: iSeC9hEvG+vPfMRGzn60RKYBeerAN27PQS4IF6qnwbY= Subject key identifier: C5:32:D6:D4:5F:16:D0:85:7A:E0:19:74:B1:C0:3D:26:3E:D4:A7:95 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 7A6C72AAEC90307965E5B5BDF44DF6990A4A6188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 013F Signing time: Wed 17 Dec 2025 00:01:16 +0000 Manifest this update: Tue 16 Dec 2025 23:56:16 +0000 Manifest next update: Sat 20 Dec 2025 01:48:16 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: vY6dd+6uVaeh8CAp8T8lcs5C5TF307V1feLQvTD3INk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:72:aa:ec:90:30:79:65:e5:b5:bd:f4:4d:f6:99:0a:4a:61:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Dec 16 23:56:16 2025 GMT Not After : Dec 20 01:48:16 2025 GMT Subject: CN=C532D6D45F16D0857AE01974B1C03D263ED4A795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:38:d8:09:01:e4:85:7e:74:ea:e1:a3:29: e1:f6:ea:17:ed:8a:5f:77:69:53:ce:40:92:43:07: 34:e2:8d:6e:79:be:ae:18:51:4e:7b:ae:16:2e:51: ac:53:15:5b:de:62:d5:51:b1:ac:c5:8b:08:bd:94: d0:de:dd:d5:87:fd:ea:82:3a:e6:4c:0b:36:f0:35: f5:27:d4:32:61:3d:d5:22:ef:1a:a2:07:df:b3:8c: f0:f2:50:ad:11:80:00:38:f9:4c:73:2b:dd:d1:16: 3c:05:61:2f:b2:f2:5e:fc:2e:43:ce:40:04:5c:55: 07:e5:2e:af:82:e1:7c:bf:c7:06:76:c7:07:60:08: b8:f1:17:17:03:08:be:e6:69:3d:c0:d8:71:08:26: 95:8e:36:62:df:d1:b6:0c:b4:c8:c8:93:e7:52:91: d8:15:d9:aa:d0:d0:bd:2b:33:f8:2d:29:bf:11:41: b4:6a:1a:34:39:49:d5:10:fc:d8:a7:4d:0b:8b:9c: 7c:5d:9d:3d:79:2d:85:5d:b7:57:a9:08:fb:ad:13: 32:e0:b4:8d:53:6c:1a:09:13:a7:4a:a2:31:70:12: 35:41:17:9b:9f:48:b7:a5:29:48:ca:06:80:63:ab: 60:eb:ac:2f:3e:d0:57:65:8a:b8:ad:9f:08:99:94: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:D6:D4:5F:16:D0:85:7A:E0:19:74:B1:C0:3D:26:3E:D4:A7:95 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:65:1b:8d:76:1c:fa:25:38:9c:0c:84:3b:f7:f3:f0:7d:de: 6f:b1:47:29:76:3a:68:e8:ee:9c:60:98:03:a6:f3:bf:22:6a: 26:45:82:0f:69:c8:61:64:13:fb:d2:93:39:0c:95:3f:2f:31: fb:7f:ff:7e:40:d1:64:76:60:73:2a:6a:f0:66:ac:7d:95:2e: 57:40:45:9f:84:29:23:ad:17:79:1e:c5:74:3d:44:95:4a:8b: 5e:4a:6b:2d:e0:f0:2b:46:b9:3a:f8:84:e4:3b:19:de:75:5d: c3:72:d3:7d:d3:42:b3:2e:79:63:0d:fc:13:63:aa:e5:2f:09: b5:a9:df:55:8d:04:59:d4:3b:d3:9f:98:f3:c2:d2:5b:fb:6e: ca:84:b6:e9:2e:89:0f:d1:ff:b0:de:e7:88:b2:7c:1e:ab:83: 5e:60:26:9a:1f:57:ef:9a:5c:a3:99:cb:cd:b4:4e:00:7f:3e: dc:ea:7a:c7:14:07:0a:c1:fe:3d:d5:8b:4c:bc:d2:8d:d5:28: 20:ac:cc:48:91:f8:37:7c:dc:10:eb:e8:69:1d:1a:2f:06:5d: ff:f1:00:c3:33:2b:f3:e8:58:22:de:23:5a:c3:82:e1:75:e2: a3:c7:5b:d7:3e:18:9e:a4:5a:a0:24:bc:67:cf:fa:9e:f9:93: 29:2f:11:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemxyquyQMHll5bW99E32mQpKYYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTEyMTYyMzU2MTZaFw0yNTEyMjAwMTQ4MTZaMDMxMTAvBgNV BAMTKEM1MzJENkQ0NUYxNkQwODU3QUUwMTk3NEIxQzAzRDI2M0VENEE3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/DjYCQHkhX506uGjKeH26hft il93aVPOQJJDBzTijW55vq4YUU57rhYuUaxTFVveYtVRsazFiwi9lNDe3dWH/eqC OuZMCzbwNfUn1DJhPdUi7xqiB9+zjPDyUK0RgAA4+UxzK93RFjwFYS+y8l78LkPO QARcVQflLq+C4Xy/xwZ2xwdgCLjxFxcDCL7maT3A2HEIJpWONmLf0bYMtMjIk+dS kdgV2arQ0L0rM/gtKb8RQbRqGjQ5SdUQ/NinTQuLnHxdnT15LYVdt1epCPutEzLg tI1TbBoJE6dKojFwEjVBF5ufSLelKUjKBoBjq2DrrC8+0FdliritnwiZlFl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTLW1F8W0IV64Bl0scA9Jj7Up5UwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9lG412HPolOJwMhDv38/B93m+xRyl2Omjo 7pxgmAOm878iaiZFgg9pyGFkE/vSkzkMlT8vMft//35A0WR2YHMqavBmrH2VLldA RZ+EKSOtF3kexXQ9RJVKi15Kay3g8CtGuTr4hOQ7Gd51XcNy033TQrMueWMN/BNj quUvCbWp31WNBFnUO9OfmPPC0lv7bsqEtukuiQ/R/7De54iyfB6rg15gJpofV++a XKOZy820TgB/PtzqescUBwrB/j3Vi0y80o3VKCCszEiR+Dd83BDr6GkdGi8GXf/x AMMzK/PoWCLeI1rDguF14qPHW9c+GJ6kWqAkvGfP+p75kykvEZ0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:36 2025 by rpki-client