This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: BrBSrkx4Y/tqcT7nYIOEp1qTMWwLFFOLkuydHLrG8g4= Subject key identifier: 12:1F:94:3D:B5:EE:D6:A7:33:B0:BF:3E:C8:C3:8D:24:9E:1E:8A:C4 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 739C96F52C81E69823458BD4C7173A291EBF5893 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0536 Signing time: Wed 24 Dec 2025 02:10:41 +0000 Manifest this update: Wed 24 Dec 2025 02:05:41 +0000 Manifest next update: Sat 27 Dec 2025 12:31:41 +0000 Files and hashes: 1: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 3: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 4: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 5: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: 1XOELPsoHyrgDZ04/A30u8mt3L57mthm3gaHqJ/5lkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9c:96:f5:2c:81:e6:98:23:45:8b:d4:c7:17:3a:29:1e:bf:58:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Dec 24 02:05:41 2025 GMT Not After : Dec 27 12:31:41 2025 GMT Subject: CN=121F943DB5EED6A733B0BF3EC8C38D249E1E8AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:23:1f:98:ec:6e:88:ff:37:54:59:c6:88: bc:cf:d0:a7:f1:a4:93:2a:87:8e:c0:e5:87:f6:60: 5e:e7:c0:b7:c1:17:28:d6:33:19:d6:f0:11:c2:b3: bc:dc:d0:e4:2a:db:be:98:01:20:8e:10:3a:67:a7: f3:eb:51:a5:cc:2d:7e:4e:79:e6:c4:7e:99:98:75: c9:9b:57:f6:fe:14:a3:d7:c2:47:2e:34:ed:60:11: 39:2d:c7:37:e0:34:18:de:25:3d:57:8a:10:ec:7b: 09:57:d2:ff:34:f5:2c:5a:01:f0:0e:27:75:f9:d7: 1f:54:57:6e:8e:74:33:26:94:b3:26:49:1d:4b:c5: 29:45:74:3f:29:86:e9:9a:81:24:e3:1b:07:53:f0: 0a:b3:4e:6a:6a:39:38:41:c2:d8:c2:21:03:17:a9: 4d:2f:ab:9d:79:82:61:ff:8e:f9:ee:b2:f2:7b:67: c5:1b:7e:16:b1:a4:26:04:82:3a:c9:d3:89:78:f3: 80:9e:e0:5f:02:dd:55:8a:15:85:2b:d1:51:40:22: fd:90:51:71:ee:81:b1:87:18:d6:3e:e7:a8:54:55: 32:c4:f6:97:1c:3b:73:4d:0f:47:d0:ba:70:6b:d8: 8b:b1:77:5e:45:94:d6:45:de:99:18:0e:e5:9f:24: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:94:3D:B5:EE:D6:A7:33:B0:BF:3E:C8:C3:8D:24:9E:1E:8A:C4 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:03:ea:81:a7:e3:0c:55:65:1e:89:7e:0d:ea:a9:99:68:0d: 2c:e5:86:31:db:d6:44:b0:1c:74:12:8f:a5:36:b0:e4:94:e2: e4:b0:64:e6:8a:9d:5d:75:62:c8:31:bb:df:83:94:53:29:87: 97:93:e5:c9:f8:e5:82:e7:c2:7a:89:c9:47:b7:a3:a9:1d:8a: 41:dc:61:ca:65:ed:37:ef:64:d5:27:ff:8d:e2:f5:52:6f:b3: d3:e0:15:90:66:d2:82:49:99:93:d2:db:7a:6f:c7:db:60:99: a7:5c:12:55:8b:43:c6:46:fd:5d:46:04:ee:60:50:39:93:dc: 64:03:be:cb:4b:d1:0b:15:06:d4:f1:f5:19:a4:ae:26:fa:59: b1:64:cf:29:90:d2:f5:0c:29:65:7c:24:1c:86:7b:f3:df:00: 7f:60:d3:a0:5e:eb:14:ac:d9:34:a7:8c:fb:2f:06:53:b9:42: a5:ba:62:18:fe:39:49:d5:26:6c:cc:ec:81:00:f6:f7:8a:ae: bc:41:c3:02:e8:97:e8:9a:91:10:80:e2:7b:36:74:22:72:13: 33:4b:0f:83:e5:77:78:ca:8e:37:ce:26:0a:ca:0e:e5:9c:fc: b8:cf:b2:fe:9f:06:37:be:21:00:d2:cf:67:e3:a3:a3:a9:ac: 25:bc:ca:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5yW9SyB5pgjRYvUxxc6KR6/WJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTEyMjQwMjA1NDFaFw0yNTEyMjcxMjMxNDFaMDMxMTAvBgNV BAMTKDEyMUY5NDNEQjVFRUQ2QTczM0IwQkYzRUM4QzM4RDI0OUUxRThBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDSMfmOxuiP83VFnGiLzP0Kfx pJMqh47A5Yf2YF7nwLfBFyjWMxnW8BHCs7zc0OQq276YASCOEDpnp/PrUaXMLX5O eebEfpmYdcmbV/b+FKPXwkcuNO1gETktxzfgNBjeJT1XihDsewlX0v809SxaAfAO J3X51x9UV26OdDMmlLMmSR1LxSlFdD8phumagSTjGwdT8AqzTmpqOThBwtjCIQMX qU0vq515gmH/jvnusvJ7Z8UbfhaxpCYEgjrJ04l484Ce4F8C3VWKFYUr0VFAIv2Q UXHugbGHGNY+56hUVTLE9pccO3NND0fQunBr2Iuxd15FlNZF3pkYDuWfJJSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEh+UPbXu1qczsL8+yMONJJ4eisQwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwD6oGn4wxVZR6Jfg3qqZloDSzlhjHb1kSw HHQSj6U2sOSU4uSwZOaKnV11Ysgxu9+DlFMph5eT5cn45YLnwnqJyUe3o6kdikHc Ycpl7TfvZNUn/43i9VJvs9PgFZBm0oJJmZPS23pvx9tgmadcElWLQ8ZG/V1GBO5g UDmT3GQDvstL0QsVBtTx9Rmkrib6WbFkzymQ0vUMKWV8JByGe/PfAH9g06Be6xSs 2TSnjPsvBlO5QqW6Yhj+OUnVJmzM7IEA9veKrrxBwwLol+iakRCA4ns2dCJyEzNL D4Pld3jKjjfOJgrKDuWc/LjPsv6fBje+IQDSz2fjo6OprCW8ymc= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:13 2025 by rpki-client