This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: dExuTNQdTfDkZoAu1gFmW6lT5gjhtftGhXvCiANrl9k= Subject key identifier: 7E:89:E9:76:C1:4A:7C:5C:D6:9D:2E:72:DA:A8:ED:55:05:28:28:9D Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 0ECE00C3E4F9CFE54F28D5F08BB69EAE9296E079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 0534 Signing time: Fri 05 Dec 2025 06:12:00 +0000 Manifest this update: Fri 05 Dec 2025 06:07:00 +0000 Manifest next update: Mon 08 Dec 2025 12:40:00 +0000 Files and hashes: 1: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 2: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 3: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: En6M7c0AlWkDXRy7KhUjec6EUeBHSXpjTp2rNTrZliY=) 4: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 5: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 6: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 7: 3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa (hash: 6ydyDgUt3ZY0YnrLuFwNCWDzxfmHy7oR4fvhY53u9z0=) 8: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 9: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 10: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 11: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 12: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 13: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ce:00:c3:e4:f9:cf:e5:4f:28:d5:f0:8b:b6:9e:ae:92:96:e0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Dec 5 06:07:00 2025 GMT Not After : Dec 8 12:40:00 2025 GMT Subject: CN=7E89E976C14A7C5CD69D2E72DAA8ED550528289D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:15:9f:a9:fc:bf:86:cc:1a:14:6a:2d:be: b7:c0:b2:d1:9d:0d:9e:f6:ed:e3:56:77:85:b4:97: 17:14:5b:6c:b0:51:27:ab:50:08:01:52:0c:ec:16: 23:98:3a:e9:d9:9d:42:26:7e:79:17:89:36:bf:1c: 45:70:88:13:03:3b:26:b3:61:aa:07:1f:c4:0f:19: 42:74:8b:71:06:94:70:4c:3f:31:a7:7c:4b:6b:6d: 66:24:cd:1b:db:9a:ff:08:69:be:3f:1e:f4:aa:b9: 93:79:a0:0d:12:56:74:9f:9c:e8:3d:f0:34:c3:68: 15:86:e3:6f:94:b1:ce:3a:cf:3d:35:cf:33:35:26: 0a:68:15:a4:55:63:7e:5c:a7:29:31:ee:af:72:cf: b0:e1:28:e1:16:37:b7:be:80:7d:9b:98:89:42:90: 3b:14:b4:4c:c1:9d:0b:0c:a6:cd:43:af:82:96:a1: 55:cd:f7:1d:48:47:a8:83:4a:9a:42:03:38:4c:0f: 69:9e:38:de:69:5c:76:6d:3c:65:28:2e:6d:5d:bf: 24:da:76:8b:41:06:cc:92:00:b8:7c:3f:b5:20:34: 05:3d:e8:dd:a1:e4:e0:ef:36:b8:f0:85:d1:5e:a2: 6c:9a:35:43:da:a5:46:90:c0:b9:79:54:08:89:d7: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:E9:76:C1:4A:7C:5C:D6:9D:2E:72:DA:A8:ED:55:05:28:28:9D X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:80:7e:ce:e3:5e:88:3c:ca:d2:46:bd:56:ea:eb:e9:14:54: 5d:2d:d2:8d:dd:01:84:b9:ea:1c:d5:74:62:90:f1:6b:59:97: 23:10:6c:7a:82:8c:cc:c3:46:24:7e:00:62:19:d7:7e:75:79: 82:41:05:24:52:64:d0:f7:fc:65:04:ff:2d:8c:57:71:81:7c: 6a:9b:3c:3d:16:d1:c8:a4:2d:b0:69:bf:78:62:c1:dc:c5:d4: e3:25:fa:bc:20:50:3d:b5:a4:51:84:4f:b4:8f:8e:d8:9f:ae: 0d:34:2f:1b:bf:9b:40:15:f9:ce:b4:6b:c8:d7:f9:b8:14:8b: 32:b6:2a:e1:3d:81:ca:79:c5:1b:ba:d2:b3:af:9a:8c:f3:37: 8e:9a:eb:23:3d:64:4d:56:cf:6b:1f:a5:e1:7d:59:ae:c5:db: ac:69:21:ed:77:b1:54:48:6e:b1:db:ec:30:88:05:ec:f2:e4: 41:7d:35:7d:59:1c:58:94:88:6e:e2:15:3b:18:f3:f7:d4:12: 89:6f:b2:f4:74:2b:ca:be:e9:60:62:86:57:47:6f:a7:10:16: f4:e4:d4:ff:61:47:d6:3a:22:71:4b:b6:c0:65:4f:df:8f:7b: ea:e2:ba:02:ff:da:eb:b4:99:fd:23:d8:26:8d:af:73:e2:11: a6:c3:d8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDs4Aw+T5z+VPKNXwi7aerpKW4HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTEyMDUwNjA3MDBaFw0yNTEyMDgxMjQwMDBaMDMxMTAvBgNV BAMTKDdFODlFOTc2QzE0QTdDNUNENjlEMkU3MkRBQThFRDU1MDUyODI4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyhWfqfy/hswaFGotvrfAstGd DZ727eNWd4W0lxcUW2ywUSerUAgBUgzsFiOYOunZnUImfnkXiTa/HEVwiBMDOyaz YaoHH8QPGUJ0i3EGlHBMPzGnfEtrbWYkzRvbmv8Iab4/HvSquZN5oA0SVnSfnOg9 8DTDaBWG42+Usc46zz01zzM1JgpoFaRVY35cpykx7q9yz7DhKOEWN7e+gH2bmIlC kDsUtEzBnQsMps1Dr4KWoVXN9x1IR6iDSppCAzhMD2meON5pXHZtPGUoLm1dvyTa dotBBsySALh8P7UgNAU96N2h5ODvNrjwhdFeomyaNUPapUaQwLl5VAiJ13sXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfonpdsFKfFzWnS5y2qjtVQUoKJ0wHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGAfs7jXog8ytJGvVbq6+kUVF0t0o3dAYS5 6hzVdGKQ8WtZlyMQbHqCjMzDRiR+AGIZ1351eYJBBSRSZND3/GUE/y2MV3GBfGqb PD0W0cikLbBpv3hiwdzF1OMl+rwgUD21pFGET7SPjtifrg00Lxu/m0AV+c60a8jX +bgUizK2KuE9gcp5xRu60rOvmozzN46a6yM9ZE1Wz2sfpeF9Wa7F26xpIe13sVRI brHb7DCIBezy5EF9NX1ZHFiUiG7iFTsY8/fUEolvsvR0K8q+6WBihldHb6cQFvTk 1P9hR9Y6InFLtsBlT9+Pe+riugL/2uu0mf0j2CaNr3PiEabD2N4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:54 2025 by rpki-client