This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json) Hash identifier: SAdcHMUiBMsMZOYDdqGYhphm81iL3LQtmrH7WMSuwFI= Subject key identifier: 53:69:B0:A4:19:CE:5E:3F:2F:90:5D:B4:17:C3:CA:1D:38:E3:3E:56 Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E Certificate serial: 78F0884E70EE1392300F5972BDB297C8AB02A776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft Manifest number: AF Signing time: Tue 23 Dec 2025 17:22:12 +0000 Manifest this update: Tue 23 Dec 2025 17:17:12 +0000 Manifest next update: Fri 26 Dec 2025 22:28:12 +0000 Files and hashes: 1: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=) 2: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: YbPKEmVayUTNuVN3t4MVOKCWdoEr6Ap5XxosxkBZ3Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:88:4e:70:ee:13:92:30:0f:59:72:bd:b2:97:c8:ab:02:a7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E Validity Not Before: Dec 23 17:17:12 2025 GMT Not After : Dec 26 22:28:12 2025 GMT Subject: CN=5369B0A419CE5E3F2F905DB417C3CA1D38E33E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:17:86:8d:35:19:a0:01:2d:cf:92:05:6f: a5:4d:27:36:28:35:c3:a7:ba:83:c9:e1:82:e5:a6: 22:bc:ce:12:4e:ec:2b:45:4a:5e:c0:ed:4e:cd:18: 68:58:91:d5:86:4b:39:1a:2a:55:21:8c:74:1f:36: 2f:29:64:ea:a8:ea:9b:36:76:a7:0c:42:89:4a:2b: 0a:3b:b9:30:76:8a:46:e9:cc:7b:62:ca:56:e1:05: ea:26:9a:63:f8:c3:c1:ce:66:85:fa:67:3d:87:78: 6b:9b:73:3e:0d:02:10:ca:43:61:31:76:30:60:bc: 48:78:37:c1:83:24:7f:5b:e8:4f:1d:4e:21:c6:70: f3:b5:9e:30:ae:38:b3:bd:e0:75:3d:af:3f:91:3a: 47:12:9e:f7:80:a9:5d:cb:51:1a:5e:68:da:3e:42: dd:f0:af:e6:95:4a:b5:4b:94:f8:6a:41:7d:97:d7: 52:12:7b:b9:99:35:31:da:50:f1:de:02:dd:98:70: e6:4b:57:68:22:85:b9:45:fc:59:a1:ad:9d:78:17: 27:60:6c:58:97:95:2d:92:97:18:bd:ac:b5:3c:2c: e6:f3:e0:67:52:7a:92:1d:f0:54:86:2a:0c:1e:6f: c9:3c:12:a0:06:e4:3e:6b:3e:91:f3:ff:f3:64:c2: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:69:B0:A4:19:CE:5E:3F:2F:90:5D:B4:17:C3:CA:1D:38:E3:3E:56 X509v3 Authority Key Identifier: keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e2:0d:21:df:49:8d:d3:b2:3d:55:2d:fb:8a:69:aa:d0:d7: 76:7d:1e:ff:ab:1b:67:ae:ad:74:85:30:4e:aa:e3:44:81:ff: eb:70:67:13:ed:9b:04:d4:57:ad:b3:0a:5f:26:25:0b:40:34: ef:b3:77:3f:35:d1:da:be:d9:97:e2:b5:4e:95:d7:51:45:34: a6:e2:63:4a:df:27:99:a7:b8:c1:e5:bb:ff:18:bd:73:49:04: 3d:a6:c8:12:b5:c7:36:c9:69:9a:71:dc:5b:8a:f8:8a:31:17: fc:7f:6b:ad:ce:01:ea:ef:e8:8a:19:5f:df:a1:a4:a2:87:39: b4:d7:6e:2a:f9:30:bf:b7:61:ea:38:07:1c:e0:f8:4c:e7:0f: 55:11:90:2f:d7:9d:a3:9d:c3:ba:95:61:8a:ff:03:d9:83:2a: cd:46:c5:19:ad:eb:6c:bd:95:64:8b:67:c3:ae:03:41:6e:83: 70:80:a4:0a:63:49:af:98:94:52:7e:08:1e:fe:3b:2a:9b:e8: fa:cd:ee:45:cd:4f:1f:d1:0e:52:81:b8:6b:f1:95:89:69:fd: 06:9e:52:08:e9:21:5a:11:64:60:86:e1:f2:c3:0f:fb:ab:3a: f4:41:79:bb:6f:47:88:2b:4a:42:11:53:88:96:0d:71:27:e1: 21:9b:e2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePCITnDuE5IwD1lyvbKXyKsCp3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx NzY5QTQzRTAeFw0yNTEyMjMxNzE3MTJaFw0yNTEyMjYyMjI4MTJaMDMxMTAvBgNV BAMTKDUzNjlCMEE0MTlDRTVFM0YyRjkwNURCNDE3QzNDQTFEMzhFMzNFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqxeGjTUZoAEtz5IFb6VNJzYo NcOnuoPJ4YLlpiK8zhJO7CtFSl7A7U7NGGhYkdWGSzkaKlUhjHQfNi8pZOqo6ps2 dqcMQolKKwo7uTB2ikbpzHtiylbhBeommmP4w8HOZoX6Zz2HeGubcz4NAhDKQ2Ex djBgvEh4N8GDJH9b6E8dTiHGcPO1njCuOLO94HU9rz+ROkcSnveAqV3LURpeaNo+ Qt3wr+aVSrVLlPhqQX2X11ISe7mZNTHaUPHeAt2YcOZLV2gihblF/FmhrZ14Fydg bFiXlS2Slxi9rLU8LObz4GdSepId8FSGKgweb8k8EqAG5D5rPpHz//NkwsTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2mwpBnOXj8vkF20F8PKHTjjPlYwHwYDVR0j BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5 QTQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2Njcx MzMxNzY5QTQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPiDSHfSY3Tsj1VLfuKaarQ13Z9Hv+rG2eu rXSFME6q40SB/+twZxPtmwTUV62zCl8mJQtANO+zdz810dq+2ZfitU6V11FFNKbi Y0rfJ5mnuMHlu/8YvXNJBD2myBK1xzbJaZpx3FuK+IoxF/x/a63OAerv6IoZX9+h pKKHObTXbir5ML+3Yeo4Bxzg+EznD1URkC/XnaOdw7qVYYr/A9mDKs1GxRmt62y9 lWSLZ8OuA0Fug3CApApjSa+YlFJ+CB7+Oyqb6PrN7kXNTx/RDlKBuGvxlYlp/Qae UgjpIVoRZGCG4fLDD/urOvRBebtvR4grSkIRU4iWDXEn4SGb4to= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:54 2025 by rpki-client