This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: 1k0JLqn1HZ6To+AXfIGDns5ESGAC8vItJMYfJm4eng8= Subject key identifier: B6:E3:9D:2F:6A:5E:DC:B1:6A:28:5D:3F:65:F2:98:59:79:EF:FA:E0 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 72B8B6E1C3CF8022D079604C55D7299E570F3CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01AE Signing time: Wed 17 Dec 2025 18:42:21 +0000 Manifest this update: Wed 17 Dec 2025 18:37:21 +0000 Manifest next update: Sun 21 Dec 2025 05:46:21 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: nM/sjJYbt8TJO/3IrlRIz2N5wB75guqG34S81v+vDs4=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:b6:e1:c3:cf:80:22:d0:79:60:4c:55:d7:29:9e:57:0f:3c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Dec 17 18:37:21 2025 GMT Not After : Dec 21 05:46:21 2025 GMT Subject: CN=B6E39D2F6A5EDCB16A285D3F65F2985979EFFAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:21:79:63:87:ce:d6:c1:95:59:67:80:87: 23:26:6a:e9:4d:39:4e:e5:3e:9b:e0:2a:20:f8:f5: cd:23:e9:07:fb:b3:52:ca:a2:61:f0:5d:f1:6f:2b: 62:c3:d0:50:3e:4b:c9:a7:52:83:37:fe:53:56:a0: c4:c0:12:5c:c7:5b:ee:b7:60:3e:70:bc:06:62:78: 55:1b:85:50:cb:b6:62:54:d4:17:ce:67:00:1b:f4: 62:1f:7c:8b:00:19:06:74:2d:6a:e5:c1:ef:7d:e9: af:5c:7d:cc:ce:f2:0f:37:91:8d:16:3c:07:87:9a: f1:a8:ab:8f:3b:45:e2:0e:ca:23:b1:4a:c1:66:d7: bf:69:d9:97:7b:b6:f3:e3:0e:62:9c:ff:d1:ea:38: ce:f4:8a:e9:b4:68:bf:5f:b9:87:8e:c8:b5:3a:f6: 30:ec:4a:65:6c:0b:80:71:94:95:2a:be:14:3c:ab: f9:43:4c:30:ca:5e:64:03:e9:77:46:c5:1e:d1:f3: 95:9f:e9:eb:59:7b:ad:36:55:27:d3:1f:91:af:cc: 17:8b:ea:ad:6c:ee:4a:3d:ca:82:68:3d:d9:66:c2: 44:1f:b2:ed:b9:1e:aa:7e:cc:d5:1f:b6:79:5a:84: 36:a8:07:0b:c1:ab:dd:1c:48:a1:ae:47:57:f7:02: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:9D:2F:6A:5E:DC:B1:6A:28:5D:3F:65:F2:98:59:79:EF:FA:E0 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a8:2f:bc:0a:a7:14:d8:7c:b6:33:6a:b2:44:e3:fa:64:ab: 4f:a9:3f:e5:6d:1b:7d:09:34:c5:8a:68:1a:64:cc:c7:0e:08: 4b:03:dc:4d:19:44:0b:2d:ed:72:66:50:3c:e8:e5:dd:22:42: b3:59:be:4d:a6:0c:15:9d:47:08:01:f4:b2:4e:e8:25:38:cb: 3c:8d:52:c8:1d:f9:21:30:7b:cf:9e:83:3a:c8:d8:00:54:c5: 68:36:9a:4b:0f:40:3c:da:39:a8:56:dc:5b:1a:55:14:4d:4a: aa:da:cc:06:6d:e5:da:90:55:22:43:67:07:ce:4e:05:7a:e8: 05:b5:21:5d:71:78:73:d0:b1:b8:32:e7:f1:d4:99:70:7f:01: 62:68:48:33:25:3c:58:c5:57:fb:14:6e:80:60:57:1c:c0:db: 64:02:49:ed:80:db:33:39:e9:9a:65:25:50:3a:44:ef:6d:3f: 77:b2:5e:33:45:47:72:cf:92:b3:c9:25:3a:91:db:b1:2b:d3: 52:77:36:77:c2:99:63:3c:ab:bf:02:59:d1:f4:a6:7c:f5:39: 03:fb:4f:77:70:21:3c:89:da:72:d5:83:f9:f2:c5:29:8f:8d: 09:5e:60:e7:21:91:74:0f:00:36:c3:51:d4:e0:7c:f7:87:37: 8c:79:bf:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcri24cPPgCLQeWBMVdcpnlcPPO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTEyMTcxODM3MjFaFw0yNTEyMjEwNTQ2MjFaMDMxMTAvBgNV BAMTKEI2RTM5RDJGNkE1RURDQjE2QTI4NUQzRjY1RjI5ODU5NzlFRkZBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubyF5Y4fO1sGVWWeAhyMmaulN OU7lPpvgKiD49c0j6Qf7s1LKomHwXfFvK2LD0FA+S8mnUoM3/lNWoMTAElzHW+63 YD5wvAZieFUbhVDLtmJU1BfOZwAb9GIffIsAGQZ0LWrlwe996a9cfczO8g83kY0W PAeHmvGoq487ReIOyiOxSsFm179p2Zd7tvPjDmKc/9HqOM70ium0aL9fuYeOyLU6 9jDsSmVsC4BxlJUqvhQ8q/lDTDDKXmQD6XdGxR7R85Wf6etZe602VSfTH5GvzBeL 6q1s7ko9yoJoPdlmwkQfsu25Hqp+zNUftnlahDaoBwvBq90cSKGuR1f3ArXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtuOdL2pe3LFqKF0/ZfKYWXnv+uAwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeoL7wKpxTYfLYzarJE4/pkq0+pP+VtG30J NMWKaBpkzMcOCEsD3E0ZRAst7XJmUDzo5d0iQrNZvk2mDBWdRwgB9LJO6CU4yzyN Usgd+SEwe8+egzrI2ABUxWg2mksPQDzaOahW3FsaVRRNSqrazAZt5dqQVSJDZwfO TgV66AW1IV1xeHPQsbgy5/HUmXB/AWJoSDMlPFjFV/sUboBgVxzA22QCSe2A2zM5 6ZplJVA6RO9tP3eyXjNFR3LPkrPJJTqR27Er01J3NnfCmWM8q78CWdH0pnz1OQP7 T3dwITyJ2nLVg/nyxSmPjQleYOchkXQPADbDUdTgfPeHN4x5vx8= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:47 2025 by rpki-client