This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: WwKqQIpWeOB2EZYNjEReSWYNfs80UOwkMbK3eMORO2Y= Subject key identifier: 06:58:49:6D:4A:30:13:5C:6F:6C:4C:E7:A4:AF:63:8C:26:24:D6:DC Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 35ECE29F0C34081ABC1BFAE187DC1F0576952C45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01CF Signing time: Thu 18 Dec 2025 04:20:47 +0000 Manifest this update: Thu 18 Dec 2025 04:15:47 +0000 Manifest next update: Sun 21 Dec 2025 15:43:47 +0000 Files and hashes: 1: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: 1yE3+hc1pSulvmdh2APuQ8agos6My4SNUo8vAcRB11I=) 2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) 4: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ec:e2:9f:0c:34:08:1a:bc:1b:fa:e1:87:dc:1f:05:76:95:2c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Dec 18 04:15:47 2025 GMT Not After : Dec 21 15:43:47 2025 GMT Subject: CN=0658496D4A30135C6F6C4CE7A4AF638C2624D6DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:68:aa:b4:45:35:cd:3e:a1:44:7e:02:61: fa:e9:6b:b4:df:bd:5b:73:e5:62:90:eb:d1:cc:20: 97:d2:26:b3:7a:0a:c0:dd:ab:b8:87:86:fd:32:d6: cc:c5:74:98:1f:1e:79:fa:03:5c:ec:ca:04:8e:78: 5c:1e:e4:38:95:6e:48:9e:dc:ec:9e:c6:ff:6d:9e: ce:7f:d0:a8:0a:4c:f0:77:86:08:79:f0:39:a6:80: 8a:ae:0e:df:dc:8d:c0:c3:02:08:53:08:0c:2e:7e: 27:ab:1c:0a:89:d2:9a:1b:85:e4:a1:43:20:9c:33: 73:88:64:eb:10:f2:06:b4:ac:5b:40:17:70:6c:14: 2a:08:7c:a5:24:64:4e:63:80:21:2d:d7:34:ff:a8: 86:fe:a0:a4:ee:e7:bb:7c:b1:74:9c:aa:d7:71:18: 30:4c:d1:a2:8c:75:e7:7a:7a:e5:a8:b6:5f:4a:aa: b3:93:ed:79:01:14:db:5d:09:96:cb:9a:2e:22:f5: fa:bf:71:bf:d1:8d:85:67:7e:67:c7:02:12:fd:d7: 54:d5:3b:13:d8:5d:ef:43:45:67:aa:3c:a0:7b:0d: 17:3c:11:2c:4b:32:d9:0f:22:50:f8:7e:51:86:ae: 88:e0:60:16:6a:02:65:a5:68:35:41:c6:ee:6b:e2: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:49:6D:4A:30:13:5C:6F:6C:4C:E7:A4:AF:63:8C:26:24:D6:DC X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b7:dd:c1:4f:30:07:e8:47:08:c9:a4:60:c6:db:c5:4e:d4: 2a:17:af:da:2b:03:b1:43:c1:b8:34:bb:5a:fe:b0:06:4c:a3: 57:39:42:30:62:d8:7f:0e:f2:9c:64:be:b9:6c:bc:6b:6d:22: f5:1c:76:4e:f9:74:0f:0c:c9:53:4b:1c:ca:68:6d:ad:1a:b8: d4:a9:c9:7e:66:cf:32:be:67:1d:cc:7a:14:12:df:2f:e5:27: 7a:1a:75:ca:75:f9:12:a2:78:c6:91:ec:f8:96:3c:b9:17:f9: 37:e3:ac:7f:05:57:4f:38:7f:fd:85:05:20:e6:90:2e:7b:06: 36:03:ef:91:f1:57:0e:7b:f4:33:41:b4:e7:1d:c2:7c:5f:4b: 67:99:46:ac:e1:82:cf:1a:0c:71:01:a5:5a:c2:66:4c:6d:50: ac:ec:2d:9b:b1:25:68:ea:d8:ed:b0:eb:90:28:6d:de:57:77: 8f:25:99:9c:5a:bf:05:f4:a1:6f:38:43:38:f9:24:f5:f8:ce: f1:b9:76:a9:d6:77:cd:fc:b7:df:51:e8:a7:18:ae:8a:33:9f: e1:f1:c1:22:cf:a2:79:36:cf:55:d3:f4:2f:e6:66:20:fb:71: b4:d2:a0:1f:c8:9c:1e:57:3b:e7:47:df:37:f8:d6:0f:5c:3e: f8:1b:ca:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNezinww0CBq8G/rhh9wfBXaVLEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTEyMTgwNDE1NDdaFw0yNTEyMjExNTQzNDdaMDMxMTAvBgNV BAMTKDA2NTg0OTZENEEzMDEzNUM2RjZDNENFN0E0QUY2MzhDMjYyNEQ2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzmiqtEU1zT6hRH4CYfrpa7Tf vVtz5WKQ69HMIJfSJrN6CsDdq7iHhv0y1szFdJgfHnn6A1zsygSOeFwe5DiVbkie 3Oyexv9tns5/0KgKTPB3hgh58DmmgIquDt/cjcDDAghTCAwufierHAqJ0pobheSh QyCcM3OIZOsQ8ga0rFtAF3BsFCoIfKUkZE5jgCEt1zT/qIb+oKTu57t8sXScqtdx GDBM0aKMded6euWotl9KqrOT7XkBFNtdCZbLmi4i9fq/cb/RjYVnfmfHAhL911TV OxPYXe9DRWeqPKB7DRc8ESxLMtkPIlD4flGGrojgYBZqAmWlaDVBxu5r4l/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlhJbUowE1xvbEznpK9jjCYk1twwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG33cFPMAfoRwjJpGDG28VO1CoXr9orA7FD wbg0u1r+sAZMo1c5QjBi2H8O8pxkvrlsvGttIvUcdk75dA8MyVNLHMpoba0auNSp yX5mzzK+Zx3MehQS3y/lJ3oadcp1+RKieMaR7PiWPLkX+TfjrH8FV084f/2FBSDm kC57BjYD75HxVw579DNBtOcdwnxfS2eZRqzhgs8aDHEBpVrCZkxtUKzsLZuxJWjq 2O2w65Aobd5Xd48lmZxavwX0oW84Qzj5JPX4zvG5dqnWd838t99R6KcYroozn+Hx wSLPonk2z1XT9C/mZiD7cbTSoB/InB5XO+dH3zf41g9cPvgbykc= -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:00 2025 by rpki-client