This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: BLfnYCu1/gOdGX9prOur1U4vc8B+9wJPfIlBMy+cLac= Subject key identifier: FD:C1:73:70:11:F2:40:30:45:6A:80:A8:8F:EE:08:C7:46:0C:1B:8F Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 5E47F1DE33E3D10421081A3D3595E88932F5B52F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 01BC Signing time: Wed 17 Dec 2025 15:52:24 +0000 Manifest this update: Wed 17 Dec 2025 15:47:24 +0000 Manifest next update: Sat 20 Dec 2025 16:08:24 +0000 Files and hashes: 1: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 2: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: 67QPBkXbk0bhDKZnQYsmpefZ6v+SArZZsURdCA6yc5U=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:47:f1:de:33:e3:d1:04:21:08:1a:3d:35:95:e8:89:32:f5:b5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Dec 17 15:47:24 2025 GMT Not After : Dec 20 16:08:24 2025 GMT Subject: CN=FDC1737011F24030456A80A88FEE08C7460C1B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:03:71:b6:b6:63:2b:ed:26:3a:cc:86:9f: 0f:9d:ce:7b:d0:1c:e3:0e:dc:a2:9b:3e:b4:33:19: c3:c0:af:25:f6:60:2a:eb:57:18:4b:a3:5a:4b:44: 9d:40:f4:be:84:bd:5d:b9:f4:5e:d6:e1:a8:67:98: 5d:48:92:a2:86:67:91:4a:60:4a:c5:8f:26:ed:06: f2:de:3c:e9:e9:a0:af:2f:75:2c:3c:d6:b2:36:93: 49:bb:35:f3:20:02:bf:d5:76:55:de:e5:d8:9f:4b: 32:d5:5e:db:fd:d6:48:07:61:34:b1:20:ef:2e:59: 4a:c8:f2:1a:7a:35:7a:6c:de:34:f7:0e:0f:47:2d: 02:d4:4e:43:16:b0:0e:58:c9:9e:38:ca:e9:5c:33: 09:3e:af:f3:0f:e3:31:7a:ea:44:f3:05:a3:30:4d: 85:c1:75:d4:a2:eb:64:96:4d:f1:71:b8:bc:66:20: 5e:83:5d:bc:70:59:b7:f5:ea:b1:da:fb:38:de:32: 4f:44:ab:f5:12:32:df:66:a2:82:51:88:c0:50:e9: 83:1b:92:ea:1c:b9:7d:b8:e1:de:7b:ea:90:b9:33: 71:87:d8:29:e5:98:af:80:0f:bd:55:54:70:f0:d5: be:67:f0:1a:c8:bd:22:19:ed:84:6b:f7:a2:69:e7: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C1:73:70:11:F2:40:30:45:6A:80:A8:8F:EE:08:C7:46:0C:1B:8F X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e9:41:c1:23:86:82:35:46:58:10:fe:48:16:61:86:3e:fa: 7f:7c:09:77:6b:7b:12:7b:ab:6c:1f:d1:b4:f7:35:09:70:ab: eb:12:69:18:bb:71:14:4f:7d:44:56:f7:f7:31:6a:4d:e7:fc: a9:39:a8:66:b3:a0:f8:c3:04:0c:e6:6d:55:d5:ea:41:5d:23: 91:64:83:be:e0:86:3e:6f:0e:02:0e:a6:1e:32:09:78:7d:23: a7:fc:3d:74:fa:98:f2:88:da:3b:69:15:7f:31:0f:e9:53:2f: c6:d8:5e:40:b6:e3:42:48:58:a4:5f:27:77:8d:80:6e:32:75: 6e:c5:83:51:67:15:35:02:81:a4:90:dd:19:ad:f1:af:fe:3f: 6e:e1:8e:80:5a:41:10:7b:29:fb:62:0e:18:3b:96:2a:42:14: 98:59:46:ae:60:c5:6b:5b:fe:3a:78:8b:91:ae:bd:0e:8c:42: ce:f8:94:db:6b:f2:27:06:8b:52:b4:00:a7:fa:90:4a:2e:f5: 00:0d:03:7c:96:02:5e:21:1d:aa:b8:3a:fe:da:ae:e8:3f:ad: c1:8e:d7:fa:91:47:7a:20:d6:1a:e0:c5:63:29:dd:83:70:99: 96:a3:3b:3f:6d:70:73:c3:1b:83:1f:d0:cd:6b:60:11:2a:14: f3:04:8c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkfx3jPj0QQhCBo9NZXoiTL1tS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTEyMTcxNTQ3MjRaFw0yNTEyMjAxNjA4MjRaMDMxMTAvBgNV BAMTKEZEQzE3MzcwMTFGMjQwMzA0NTZBODBBODhGRUUwOEM3NDYwQzFCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yANxtrZjK+0mOsyGnw+dznvQ HOMO3KKbPrQzGcPAryX2YCrrVxhLo1pLRJ1A9L6EvV259F7W4ahnmF1IkqKGZ5FK YErFjybtBvLePOnpoK8vdSw81rI2k0m7NfMgAr/VdlXe5difSzLVXtv91kgHYTSx IO8uWUrI8hp6NXps3jT3Dg9HLQLUTkMWsA5YyZ44yulcMwk+r/MP4zF66kTzBaMw TYXBddSi62SWTfFxuLxmIF6DXbxwWbf16rHa+zjeMk9Eq/USMt9mooJRiMBQ6YMb kuocuX244d576pC5M3GH2CnlmK+AD71VVHDw1b5n8BrIvSIZ7YRr96Jp5zThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cFzcBHyQDBFaoCoj+4Ix0YMG48wHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfpQcEjhoI1RlgQ/kgWYYY++n98CXdrexJ7 q2wf0bT3NQlwq+sSaRi7cRRPfURW9/cxak3n/Kk5qGazoPjDBAzmbVXV6kFdI5Fk g77ghj5vDgIOph4yCXh9I6f8PXT6mPKI2jtpFX8xD+lTL8bYXkC240JIWKRfJ3eN gG4ydW7Fg1FnFTUCgaSQ3Rmt8a/+P27hjoBaQRB7KftiDhg7lipCFJhZRq5gxWtb /jp4i5GuvQ6MQs74lNtr8icGi1K0AKf6kEou9QANA3yWAl4hHaq4Ov7arug/rcGO 1/qRR3og1hrgxWMp3YNwmZajOz9tcHPDG4Mf0M1rYBEqFPMEjAk= -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:20 2025 by rpki-client