This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: ba4Cm8F1UOOadLfTSw7hGFtyYvBeUkZ3pd5AbPPX/hU= Subject key identifier: D7:BB:77:B9:19:FD:10:E7:AB:AE:D7:A4:03:50:3C:38:86:79:22:FB Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 60B6718504A9F5C301315956F1782B2AA8C73C11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0236 Signing time: Fri 05 Dec 2025 21:12:00 +0000 Manifest this update: Fri 05 Dec 2025 21:07:00 +0000 Manifest next update: Tue 09 Dec 2025 04:42:00 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: a3p1YU15UtZIFU+TBbsVefBYkeVMV8XHjWzUe03QLh8=) 2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 5: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b6:71:85:04:a9:f5:c3:01:31:59:56:f1:78:2b:2a:a8:c7:3c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Dec 5 21:07:00 2025 GMT Not After : Dec 9 04:42:00 2025 GMT Subject: CN=D7BB77B919FD10E7ABAED7A403503C38867922FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:06:c9:57:45:92:31:d4:1e:8a:69:cf:cc: 20:e5:62:c5:c5:f0:2a:f5:7e:ea:b2:d1:0a:a2:fc: 90:ac:8b:7e:f3:f8:3f:79:cc:e2:d1:fa:71:2d:4d: 58:0b:0b:69:11:c1:4e:3b:20:2d:76:2f:08:e3:66: e8:5c:21:00:fa:a9:33:05:bb:ac:30:3a:f7:c4:ea: 2f:73:62:4e:5f:1c:42:78:18:c5:be:74:71:f5:21: d6:ea:b4:d3:63:5b:99:a4:a7:34:17:63:de:14:9c: b4:77:72:76:d1:38:a4:ed:8f:f9:71:1e:eb:90:de: 83:9f:b9:b5:d2:59:f6:41:f5:1b:04:0b:4c:3e:ce: 63:ae:50:62:1e:f2:11:35:dd:db:64:81:ff:9e:d7: 4e:66:23:08:6b:70:70:9f:46:0d:ed:5e:1e:4a:f3: 11:d7:73:20:f3:6f:7b:da:5f:b2:e1:80:3f:ab:b0: 68:8e:03:57:59:ec:5f:c4:75:e2:ad:f5:56:ba:2f: 31:36:0e:ed:33:2d:39:a5:2a:86:64:d0:a9:83:6c: cc:f6:27:24:5f:54:45:35:15:b8:80:6a:87:a3:d3: b1:ed:5d:61:91:e3:4e:df:dc:61:4e:75:5e:83:f3: 05:af:e6:86:14:38:16:fb:da:78:35:dc:f5:63:86: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:77:B9:19:FD:10:E7:AB:AE:D7:A4:03:50:3C:38:86:79:22:FB X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d6:9e:65:b4:d2:26:4f:c7:4a:9d:af:47:72:cf:5c:e3:fe: fb:19:63:c9:19:9e:ff:75:31:da:00:bb:7c:70:c8:0a:28:23: 7a:8f:01:4c:ec:17:9c:b7:11:6b:9a:56:47:e5:c1:ad:ae:aa: 46:c0:1f:5e:a4:e6:d8:f7:d3:95:d1:bd:f6:4e:3e:1a:86:0e: c7:58:d7:60:7e:b6:26:d6:74:e9:45:16:75:b6:d6:09:db:d8: 18:ff:87:53:e1:37:b7:90:9f:32:ed:52:71:d6:34:7a:7d:ed: 5e:c0:2f:3e:81:5c:56:24:49:32:b0:c5:c2:fe:3d:ee:40:5e: 29:96:25:2b:0e:30:62:82:30:00:97:28:47:4c:7d:c2:ec:49: cc:2a:e8:05:12:53:1d:69:9a:8e:d0:62:25:f1:d4:4a:a8:79: bd:f0:04:4b:25:83:47:e7:51:44:d2:72:46:95:4b:46:61:13: f0:31:e1:17:f1:cf:26:f9:85:55:29:ec:68:aa:70:27:cf:c9: 4a:9d:af:c6:ed:93:4a:31:ff:d1:91:29:de:66:44:c5:29:27: 70:a2:df:51:69:11:d1:72:59:c0:46:1a:20:2f:db:7f:8d:8b: d5:11:4d:08:63:37:91:ef:78:af:74:b0:40:fe:ef:e3:5e:e9: 56:52:b2:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLZxhQSp9cMBMVlW8XgrKqjHPBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTEyMDUyMTA3MDBaFw0yNTEyMDkwNDQyMDBaMDMxMTAvBgNV BAMTKEQ3QkI3N0I5MTlGRDEwRTdBQkFFRDdBNDAzNTAzQzM4ODY3OTIyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2AbJV0WSMdQeimnPzCDlYsXF 8Cr1fuqy0Qqi/JCsi37z+D95zOLR+nEtTVgLC2kRwU47IC12LwjjZuhcIQD6qTMF u6wwOvfE6i9zYk5fHEJ4GMW+dHH1IdbqtNNjW5mkpzQXY94UnLR3cnbROKTtj/lx HuuQ3oOfubXSWfZB9RsEC0w+zmOuUGIe8hE13dtkgf+e105mIwhrcHCfRg3tXh5K 8xHXcyDzb3vaX7LhgD+rsGiOA1dZ7F/EdeKt9Va6LzE2Du0zLTmlKoZk0KmDbMz2 JyRfVEU1FbiAaoej07HtXWGR407f3GFOdV6D8wWv5oYUOBb72ng13PVjhhGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17t3uRn9EOerrtekA1A8OIZ5IvswHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHWnmW00iZPx0qdr0dyz1zj/vsZY8kZnv91 MdoAu3xwyAooI3qPAUzsF5y3EWuaVkflwa2uqkbAH16k5tj305XRvfZOPhqGDsdY 12B+tibWdOlFFnW21gnb2Bj/h1PhN7eQnzLtUnHWNHp97V7ALz6BXFYkSTKwxcL+ Pe5AXimWJSsOMGKCMACXKEdMfcLsScwq6AUSUx1pmo7QYiXx1Eqoeb3wBEslg0fn UUTSckaVS0ZhE/Ax4Rfxzyb5hVUp7GiqcCfPyUqdr8btk0ox/9GRKd5mRMUpJ3Ci 31FpEdFyWcBGGiAv23+Ni9URTQhjN5HveK90sED+7+Ne6VZSskk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:09 2025 by rpki-client