This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: s3Qj1jRRWRAn/H2cn5L7QSOLmxS+2OGcMbMRi/w+BWw= Subject key identifier: A6:FF:EA:3E:1B:84:10:42:C3:CE:7A:B8:DE:B3:70:43:0E:A4:5A:4B Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 34695CD7E20F22EBFB36802E30185B1DE44ED813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 03CE Signing time: Tue 23 Dec 2025 10:21:50 +0000 Manifest this update: Tue 23 Dec 2025 10:16:50 +0000 Manifest next update: Fri 26 Dec 2025 14:05:50 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: HleIvulmj1kA/lO6lD1207hTJyzgnrs91RFhYWFFSa8=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:5c:d7:e2:0f:22:eb:fb:36:80:2e:30:18:5b:1d:e4:4e:d8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Dec 23 10:16:50 2025 GMT Not After : Dec 26 14:05:50 2025 GMT Subject: CN=A6FFEA3E1B841042C3CE7AB8DEB370430EA45A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:cc:7e:19:9b:da:e5:78:ab:d1:6b:12:90: b1:4c:93:9c:9d:54:fc:a4:49:12:d3:14:a7:44:08: ec:33:fe:69:80:77:06:c0:de:11:ad:3d:d8:73:00: 78:03:10:2e:ac:8a:ff:5c:b3:f3:64:40:5d:21:6f: 40:43:73:4d:36:68:41:f5:a2:3e:de:14:ba:41:e4: c9:72:33:69:48:cf:ec:53:aa:ab:a4:f6:02:7a:3f: 4e:0f:7c:ee:b6:2a:47:d4:2a:2b:f8:63:b6:9d:9e: 7a:f3:a4:19:d5:52:b4:cc:b7:93:16:34:a9:fb:5f: 33:65:25:80:86:e2:4c:e4:4c:45:73:dc:e8:80:df: 73:ab:61:a5:18:47:97:ae:c3:27:f6:c7:5c:5d:36: d8:19:16:12:81:6a:a2:d0:a4:75:af:29:08:f2:26: 51:ab:87:f6:e6:dc:74:50:70:f6:1a:6f:45:54:00: 49:90:52:2e:71:01:55:25:d5:c8:61:19:10:d9:6f: 07:0e:76:3f:b2:e3:c7:4e:dc:6b:91:c0:84:7b:b6: a1:cf:6d:f1:93:d5:bf:a4:79:d6:35:31:ec:5e:05: 87:d6:ed:b2:ff:57:6a:f3:8d:7b:2a:81:c7:ff:40: 4f:6b:7d:63:4f:89:33:e3:c1:6d:a0:8d:1d:28:6e: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:EA:3E:1B:84:10:42:C3:CE:7A:B8:DE:B3:70:43:0E:A4:5A:4B X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:69:59:1d:d7:bd:ed:df:0d:12:ce:ee:7b:35:5a:34:3a: 2c:cb:a2:0f:26:3d:1b:52:39:8b:b2:4d:5f:98:ad:54:6c:e1: 0f:7b:56:4d:18:8e:92:5b:8e:bc:80:78:3c:c2:77:4c:29:6c: 6e:02:54:28:25:d1:e2:3d:fa:d4:85:be:55:aa:5b:19:23:43: 95:b4:a7:c2:a7:16:4c:fb:90:fa:32:0f:1f:a8:ba:88:14:a5: a9:8a:db:6c:49:f8:a0:a8:9f:ec:3f:88:65:89:48:fb:30:16: 44:91:ce:f0:96:17:85:7c:c8:bc:42:a8:ee:0b:1f:b5:fd:2d: d4:0b:6f:3f:c5:bb:71:bd:6e:61:57:b7:dc:cd:be:49:2e:fd: 9a:2c:09:33:5b:27:65:5f:9f:d9:3e:fc:86:20:4d:a7:21:77: 87:60:96:7e:3e:6a:e9:3d:7b:7e:c7:60:25:55:27:62:d6:c5: ba:8c:92:da:6b:bf:4f:ff:88:86:18:fd:54:11:22:d2:91:b9: 73:fb:7b:39:4b:4b:3d:0b:23:0f:15:c8:a8:92:fa:8b:f2:a2: c2:35:fb:50:2a:04:6a:24:99:c0:c0:06:a3:b3:67:d3:27:46: bd:6e:a4:4f:d1:5b:a8:bc:6b:5d:b9:ed:fd:26:eb:fd:ee:fb: ce:4e:72:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGlc1+IPIuv7NoAuMBhbHeRO2BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTEyMjMxMDE2NTBaFw0yNTEyMjYxNDA1NTBaMDMxMTAvBgNV BAMTKEE2RkZFQTNFMUI4NDEwNDJDM0NFN0FCOERFQjM3MDQzMEVBNDVBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhsx+GZva5Xir0WsSkLFMk5yd VPykSRLTFKdECOwz/mmAdwbA3hGtPdhzAHgDEC6siv9cs/NkQF0hb0BDc002aEH1 oj7eFLpB5MlyM2lIz+xTqquk9gJ6P04PfO62KkfUKiv4Y7adnnrzpBnVUrTMt5MW NKn7XzNlJYCG4kzkTEVz3OiA33OrYaUYR5euwyf2x1xdNtgZFhKBaqLQpHWvKQjy JlGrh/bm3HRQcPYab0VUAEmQUi5xAVUl1chhGRDZbwcOdj+y48dO3GuRwIR7tqHP bfGT1b+kedY1MexeBYfW7bL/V2rzjXsqgcf/QE9rfWNPiTPjwW2gjR0obv7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpv/qPhuEEELDznq43rNwQw6kWkswHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxsaVkd173t3w0Szu57NVo0OizLog8mPRtS OYuyTV+YrVRs4Q97Vk0YjpJbjryAeDzCd0wpbG4CVCgl0eI9+tSFvlWqWxkjQ5W0 p8KnFkz7kPoyDx+ouogUpamK22xJ+KCon+w/iGWJSPswFkSRzvCWF4V8yLxCqO4L H7X9LdQLbz/Fu3G9bmFXt9zNvkku/ZosCTNbJ2Vfn9k+/IYgTachd4dgln4+auk9 e37HYCVVJ2LWxbqMktprv0//iIYY/VQRItKRuXP7ezlLSz0LIw8VyKiS+ovyosI1 +1AqBGokmcDABqOzZ9MnRr1upE/RW6i8a1257f0m6/3u+85OcqY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:45 2025 by rpki-client