This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: bnzp66G6doGAOwELnM7laomYIT0ALFK7lg4XR0wGACU= Subject key identifier: 2E:F2:E8:68:3F:00:62:E9:C2:46:E9:C5:BF:4D:37:CB:34:EA:0F:17 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 288834354C7704E3519E895FF2FF18B58A82BE0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 031F Signing time: Fri 19 Dec 2025 05:53:48 +0000 Manifest this update: Fri 19 Dec 2025 05:48:48 +0000 Manifest next update: Mon 22 Dec 2025 14:17:48 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: FxdIuszJGHFi+rSwtLmhCMj1tL7+Caee3NkWFGeMKwY=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 14:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:88:34:35:4c:77:04:e3:51:9e:89:5f:f2:ff:18:b5:8a:82:be:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Dec 19 05:48:48 2025 GMT Not After : Dec 22 14:17:48 2025 GMT Subject: CN=2EF2E8683F0062E9C246E9C5BF4D37CB34EA0F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:04:7b:c5:f1:59:73:26:70:90:ef:fb:fc: 5b:68:a8:a7:10:05:ef:a1:5a:52:60:2f:66:4e:8e: 92:5b:33:01:ce:53:83:fa:70:05:72:9e:e4:56:6c: d2:6d:11:b0:db:6f:fa:de:cc:b2:ee:20:56:3c:45: 57:e0:56:c3:87:c2:19:34:a0:06:80:a9:9b:da:d3: e5:92:42:b5:1f:a8:38:9d:c0:8b:e5:56:37:c0:38: cc:c4:89:d5:81:c7:20:eb:be:06:2e:db:43:6c:7f: 57:45:0c:27:9e:15:2e:b4:d6:2d:1b:e1:ce:52:55: 74:78:21:fe:98:f2:bb:3f:2d:63:91:5c:26:55:0b: 80:bb:bf:16:2d:d2:7b:33:51:d7:e5:fc:2f:4b:b1: bd:ca:01:a8:a3:4a:8e:9b:27:89:62:8b:97:52:80: 16:27:50:02:9b:c7:04:d1:ef:a2:18:ad:92:05:5d: e9:88:46:07:65:da:33:11:b5:ba:94:0a:e1:47:f2: 8f:ca:57:18:ce:22:9a:0d:dd:52:43:36:42:37:a6: 35:20:53:18:e7:26:e2:09:b1:07:03:4b:1a:38:c9: f1:31:ab:18:19:e0:d2:00:a9:b3:cc:3b:e3:27:6e: d5:37:8a:32:03:57:a1:9f:f2:d1:33:9f:1a:76:46: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:E8:68:3F:00:62:E9:C2:46:E9:C5:BF:4D:37:CB:34:EA:0F:17 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a1:6c:b5:cc:09:31:68:da:42:2f:e9:fa:12:db:52:10:d0: c8:ad:2d:e1:19:71:83:41:d0:3d:f0:4e:cf:bc:65:89:79:41: ad:96:48:62:ee:b5:c1:01:6b:6e:e6:f1:ef:4b:3f:c9:48:ed: ac:b6:8d:bc:90:3a:14:9c:8b:df:b4:ce:d6:87:84:2b:1c:a6: ed:ed:de:b0:0a:b4:23:09:22:b4:5d:5e:9b:32:99:0f:44:82: b5:4e:d2:bb:17:6a:04:0c:1f:28:f8:ea:b0:79:4d:65:05:06: de:07:27:5f:c5:1b:f5:c2:16:40:47:dc:a8:c9:45:16:98:20: d6:6a:c0:48:76:32:43:cf:e8:46:52:a8:2a:ed:ff:fc:d0:a8: 9d:14:ba:0b:43:bb:c0:de:de:af:dc:3c:fd:e8:64:d4:84:bf: 93:0e:cf:42:10:9e:51:71:21:e3:3a:54:25:26:e6:8f:c4:6b: d3:2d:4e:f7:18:e2:d7:f5:42:9c:ae:8e:1c:9d:16:44:95:5a: ce:7f:6b:e7:59:9a:ea:52:39:6e:61:68:06:83:53:53:ef:28: d9:3a:94:a4:08:75:3d:26:92:9d:cf:58:41:8f:1f:bb:af:88: 77:f9:ab:05:c5:27:59:8f:42:5d:38:eb:14:13:9a:3f:38:48: 02:e5:d7:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIg0NUx3BONRnolf8v8YtYqCvgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTEyMTkwNTQ4NDhaFw0yNTEyMjIxNDE3NDhaMDMxMTAvBgNV BAMTKDJFRjJFODY4M0YwMDYyRTlDMjQ2RTlDNUJGNEQzN0NCMzRFQTBGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmgR7xfFZcyZwkO/7/FtoqKcQ Be+hWlJgL2ZOjpJbMwHOU4P6cAVynuRWbNJtEbDbb/rezLLuIFY8RVfgVsOHwhk0 oAaAqZva0+WSQrUfqDidwIvlVjfAOMzEidWBxyDrvgYu20Nsf1dFDCeeFS601i0b 4c5SVXR4If6Y8rs/LWORXCZVC4C7vxYt0nszUdfl/C9Lsb3KAaijSo6bJ4lii5dS gBYnUAKbxwTR76IYrZIFXemIRgdl2jMRtbqUCuFH8o/KVxjOIpoN3VJDNkI3pjUg UxjnJuIJsQcDSxo4yfExqxgZ4NIAqbPMO+MnbtU3ijIDV6Gf8tEznxp2Rl9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvLoaD8AYunCRunFv003yzTqDxcwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKhbLXMCTFo2kIv6foS21IQ0MitLeEZcYNB 0D3wTs+8ZYl5Qa2WSGLutcEBa27m8e9LP8lI7ay2jbyQOhSci9+0ztaHhCscpu3t 3rAKtCMJIrRdXpsymQ9EgrVO0rsXagQMHyj46rB5TWUFBt4HJ1/FG/XCFkBH3KjJ RRaYINZqwEh2MkPP6EZSqCrt//zQqJ0UugtDu8De3q/cPP3oZNSEv5MOz0IQnlFx IeM6VCUm5o/Ea9MtTvcY4tf1QpyujhydFkSVWs5/a+dZmupSOW5haAaDU1PvKNk6 lKQIdT0mkp3PWEGPH7uviHf5qwXFJ1mPQl046xQTmj84SALl14I= -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:15 2025 by rpki-client