This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: 0hWwySE9bmlQJgy729FLeNmR8OWBfysGMWXAOHPSQck= Subject key identifier: 20:B7:B4:5C:77:59:B2:9D:91:73:4D:E3:2B:42:11:5F:B9:32:EC:FC Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 5A1CEA5F025ADC43C7AE21E6477DA962CFCA0760 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 0222 Signing time: Sat 20 Dec 2025 08:02:45 +0000 Manifest this update: Sat 20 Dec 2025 07:57:45 +0000 Manifest next update: Tue 23 Dec 2025 18:47:45 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: TiJqJuy2a+8buPSyDDugFGm2fOnHBwtfKgw0K9FmeeY=) 3: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1c:ea:5f:02:5a:dc:43:c7:ae:21:e6:47:7d:a9:62:cf:ca:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Dec 20 07:57:45 2025 GMT Not After : Dec 23 18:47:45 2025 GMT Subject: CN=20B7B45C7759B29D91734DE32B42115FB932ECFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:ed:78:d9:e4:c4:1b:6d:99:88:a2:93:3e: bd:7f:79:55:7d:96:42:3a:3c:a0:3f:bf:00:c9:b3: 2f:bc:0e:76:dd:8e:63:66:f8:dd:27:2c:21:d6:33: 26:d4:d3:02:26:0d:8c:7a:70:18:9c:35:97:a4:dd: 34:b3:b3:5f:18:57:af:15:d0:d1:e6:09:7f:a8:e9: f1:76:a3:5f:07:78:0b:66:ae:3d:25:55:5f:74:0d: cb:ea:45:fc:84:7e:3b:40:93:1f:8e:5c:33:7b:ad: 02:d6:63:65:95:34:42:10:e6:41:22:3f:bf:09:11: 36:5d:24:e7:e8:9f:c1:f3:7e:83:a6:12:4c:4b:9f: 29:7c:3f:05:3e:04:0c:8c:81:ad:5c:1e:c1:9b:18: f4:55:3a:78:73:bc:bd:49:a8:21:f4:3f:98:69:20: 73:f4:91:e6:ca:d7:f4:46:46:34:e5:b9:2d:e8:02: b1:cd:83:1c:50:19:d5:87:4c:d9:82:fc:1a:e7:74: 03:d4:ca:77:3b:49:e5:5e:7b:3b:22:d5:82:7b:e5: 47:25:e3:91:cf:c2:25:74:62:91:bd:d9:14:fd:2c: 00:7a:63:6b:a3:65:6c:13:27:e5:68:ab:2f:2c:9d: 49:75:0a:4c:78:bf:08:be:22:0e:29:38:3b:5c:17: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:B4:5C:77:59:B2:9D:91:73:4D:E3:2B:42:11:5F:B9:32:EC:FC X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a3:4d:43:7f:c5:b4:b4:ca:1e:13:6a:be:b8:6a:67:4c:c6: b0:34:af:82:7e:e1:c4:90:38:59:76:ee:a2:c1:84:ff:b7:94: 5f:7c:81:de:fa:f8:64:4c:95:15:54:a0:d3:3c:39:d8:8a:66: e0:51:3b:dd:13:41:6f:90:4e:e6:c7:b1:8e:bf:80:d5:47:86: cb:b8:3d:a3:2d:6d:e0:01:52:77:4a:4f:5b:3d:03:2a:a3:75: b1:59:e2:d8:8a:e9:d6:9d:5e:79:b4:d6:3d:49:04:6b:9e:1e: f6:43:4c:67:4a:e8:39:e8:a2:19:68:fd:1c:e3:b9:f3:37:ad: 1e:3e:36:c6:c6:05:d5:3d:04:38:26:b7:42:f3:1b:ee:29:2b: 07:33:87:4a:27:36:68:27:8a:17:4c:52:9d:32:17:94:74:08: a2:99:e0:da:f0:8c:e0:5e:87:78:7a:89:dd:09:84:02:c5:a7: 98:03:28:e8:80:ea:bc:4f:17:db:c2:e0:e8:37:b1:95:39:eb: 69:cc:b7:4b:a5:1f:78:a5:dd:f7:a0:08:2d:30:5f:15:1e:84: 44:92:c9:51:c9:a2:73:e0:0e:42:b7:db:d4:6d:a6:bf:ff:54: d6:88:55:cc:ea:03:d3:94:d0:48:1b:f0:57:8b:f7:b9:29:f2: 9f:95:d4:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhzqXwJa3EPHriHmR32pYs/KB2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTEyMjAwNzU3NDVaFw0yNTEyMjMxODQ3NDVaMDMxMTAvBgNV BAMTKDIwQjdCNDVDNzc1OUIyOUQ5MTczNERFMzJCNDIxMTVGQjkzMkVDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjfO142eTEG22ZiKKTPr1/eVV9 lkI6PKA/vwDJsy+8DnbdjmNm+N0nLCHWMybU0wImDYx6cBicNZek3TSzs18YV68V 0NHmCX+o6fF2o18HeAtmrj0lVV90DcvqRfyEfjtAkx+OXDN7rQLWY2WVNEIQ5kEi P78JETZdJOfon8HzfoOmEkxLnyl8PwU+BAyMga1cHsGbGPRVOnhzvL1JqCH0P5hp IHP0kebK1/RGRjTluS3oArHNgxxQGdWHTNmC/BrndAPUync7SeVeezsi1YJ75Ucl 45HPwiV0YpG92RT9LAB6Y2ujZWwTJ+Voqy8snUl1Ckx4vwi+Ig4pODtcF/fXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILe0XHdZsp2Rc03jK0IRX7ky7PwwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyjTUN/xbS0yh4Tar64amdMxrA0r4J+4cSQ OFl27qLBhP+3lF98gd76+GRMlRVUoNM8OdiKZuBRO90TQW+QTubHsY6/gNVHhsu4 PaMtbeABUndKT1s9AyqjdbFZ4tiK6dadXnm01j1JBGueHvZDTGdK6Dnoohlo/Rzj ufM3rR4+NsbGBdU9BDgmt0LzG+4pKwczh0onNmgnihdMUp0yF5R0CKKZ4NrwjOBe h3h6id0JhALFp5gDKOiA6rxPF9vC4Og3sZU562nMt0ulH3il3fegCC0wXxUehESS yVHJonPgDkK329Rtpr//VNaIVczqA9OU0Egb8FeL97kp8p+V1Lc= -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:21 2025 by rpki-client