This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: vkn2wsF0nhNnFSR3t3ptGkzq0og8DfDrGn/GG1eiBnY= Subject key identifier: C0:76:2A:84:7B:B8:81:33:F6:1F:09:22:34:E0:3D:32:72:BE:8A:CC Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 60EAA9472F77D91F1B1E37746464B91DB6143D77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0240 Signing time: Thu 18 Dec 2025 10:52:14 +0000 Manifest this update: Thu 18 Dec 2025 10:47:14 +0000 Manifest next update: Sun 21 Dec 2025 22:21:14 +0000 Files and hashes: 1: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: j2ll6y5G8r8rk41nTSTm/qElwi9L5+ROp3Lf4KIStcE=) 3: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:a9:47:2f:77:d9:1f:1b:1e:37:74:64:64:b9:1d:b6:14:3d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Dec 18 10:47:14 2025 GMT Not After : Dec 21 22:21:14 2025 GMT Subject: CN=C0762A847BB88133F61F092234E03D3272BE8ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:fd:0f:e3:76:0f:5c:9c:eb:5d:05:13:d4: 8b:fe:01:8f:f1:ce:b5:7b:29:a4:fa:2e:cf:04:93: 91:13:78:a8:62:ac:a2:fd:13:6f:ba:00:ef:a3:1e: 34:97:6c:ec:44:52:ca:7e:dd:7e:f2:99:32:f3:e9: c7:2f:31:7d:23:12:33:5a:69:e8:63:06:99:24:8d: b3:e2:d5:67:1e:94:1b:be:6f:fe:2a:bb:f7:d4:d2: b3:88:88:92:06:a7:63:1c:69:e6:9b:67:f6:c1:5b: eb:b8:4b:2b:37:5d:39:dc:2e:22:2b:80:90:9a:11: be:7d:53:ff:22:b1:b7:e2:7b:74:93:d9:c5:df:42: da:ad:8a:d0:3e:0e:e5:77:a3:75:f7:91:d3:5c:39: 8d:5f:36:6f:89:b6:f2:78:38:dc:4e:96:47:b4:3d: ab:b9:11:b8:5d:fe:e7:14:07:c2:bc:9c:06:b8:61: 67:5f:47:dc:7d:6b:17:02:7c:95:ce:ff:1b:d6:5a: bc:a4:94:24:e2:1a:ea:7e:c9:dd:c1:e4:60:07:28: 17:95:7a:ad:6d:0a:5e:9f:57:6f:97:0a:94:29:c1: df:23:4f:0f:9b:ce:02:5e:79:f7:50:0c:08:29:01: 0d:7f:35:18:94:21:c1:f3:4c:1e:16:37:92:f8:59: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:2A:84:7B:B8:81:33:F6:1F:09:22:34:E0:3D:32:72:BE:8A:CC X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:4b:56:dc:2b:8b:8d:b0:94:84:6f:1a:63:21:46:a1:9d: 33:15:78:a1:2d:02:19:25:c2:3b:e1:c9:d7:7b:e7:3b:99:cc: c8:a6:b6:92:7c:91:03:9c:db:ec:47:a8:36:7f:93:53:19:50: 36:38:57:f6:36:74:16:81:56:bb:49:39:5f:df:eb:6e:43:f3: f7:20:bd:a8:8c:d7:ff:4c:a6:76:f2:14:a0:90:98:ef:00:2e: a6:34:c2:d3:3a:da:5e:6d:4d:92:83:22:e8:0d:1f:15:49:30: e1:ef:77:4f:fc:87:97:fe:8f:1e:d2:12:af:6c:b4:69:69:f9: a1:4c:e6:1d:83:1e:b2:3d:65:8f:01:81:1c:0d:b3:d1:3c:f6: 8f:8b:4b:f1:b5:3e:e0:66:74:c0:5f:5c:c3:de:84:a1:06:24: 5c:2e:12:df:bf:0f:6b:4d:4e:0d:4c:20:35:5b:38:1b:4e:59: 5e:10:29:59:ae:51:bc:94:de:56:e3:ee:02:f8:93:47:13:49: 1a:30:95:7b:2b:3d:e0:1d:68:8d:1d:79:d3:39:a5:d8:23:d6: 8f:ae:e0:98:98:a4:a7:2e:b8:d7:86:dc:b0:fd:f0:12:bb:eb: cf:47:5b:90:1d:74:d0:7d:c4:d4:73:77:c6:81:38:64:5b:44: 20:36:e1:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOqpRy932R8bHjd0ZGS5HbYUPXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTEyMTgxMDQ3MTRaFw0yNTEyMjEyMjIxMTRaMDMxMTAvBgNV BAMTKEMwNzYyQTg0N0JCODgxMzNGNjFGMDkyMjM0RTAzRDMyNzJCRThBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1l/0P43YPXJzrXQUT1Iv+AY/x zrV7KaT6Ls8Ek5ETeKhirKL9E2+6AO+jHjSXbOxEUsp+3X7ymTLz6ccvMX0jEjNa aehjBpkkjbPi1WcelBu+b/4qu/fU0rOIiJIGp2McaeabZ/bBW+u4Sys3XTncLiIr gJCaEb59U/8isbfie3ST2cXfQtqtitA+DuV3o3X3kdNcOY1fNm+JtvJ4ONxOlke0 Pau5Ebhd/ucUB8K8nAa4YWdfR9x9axcCfJXO/xvWWryklCTiGup+yd3B5GAHKBeV eq1tCl6fV2+XCpQpwd8jTw+bzgJeefdQDAgpAQ1/NRiUIcHzTB4WN5L4WSzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHYqhHu4gTP2HwkiNOA9MnK+iswwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFprS1bcK4uNsJSEbxpjIUahnTMVeKEtAhkl wjvhydd75zuZzMimtpJ8kQOc2+xHqDZ/k1MZUDY4V/Y2dBaBVrtJOV/f625D8/cg vaiM1/9MpnbyFKCQmO8ALqY0wtM62l5tTZKDIugNHxVJMOHvd0/8h5f+jx7SEq9s tGlp+aFM5h2DHrI9ZY8BgRwNs9E89o+LS/G1PuBmdMBfXMPehKEGJFwuEt+/D2tN Tg1MIDVbOBtOWV4QKVmuUbyU3lbj7gL4k0cTSRowlXsrPeAdaI0dedM5pdgj1o+u 4JiYpKcuuNeG3LD98BK7689HW5AddNB9xNRzd8aBOGRbRCA24aM= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:40 2025 by rpki-client