This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: fE/aod1fOTDMgZxlAsjCYlB7DpPmMhy6Dy+8QyyPYKc= Subject key identifier: 0E:C6:2D:45:94:29:63:53:39:1E:71:51:1E:A6:9D:F6:B9:94:C4:D5 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 0EFA31BC8891D478429D5C2CDDC64B9F93EC8D25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 05:31:49 +0000 Manifest this update: Fri 05 Dec 2025 05:26:49 +0000 Manifest next update: Mon 08 Dec 2025 09:10:49 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: zcZduBlHbvGNduneh5OSuZFmT7WUTlK4ZVA6/954dZo=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fa:31:bc:88:91:d4:78:42:9d:5c:2c:dd:c6:4b:9f:93:ec:8d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Dec 5 05:26:49 2025 GMT Not After : Dec 8 09:10:49 2025 GMT Subject: CN=0EC62D4594296353391E71511EA69DF6B994C4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:4d:38:fb:8e:99:80:e8:c7:d8:6c:03:c5: 8a:a9:4f:d0:a0:17:b7:3e:1f:e5:18:4d:7f:14:07: 9b:e0:6d:a9:b1:80:a9:c1:2c:ec:11:5e:49:59:dc: f1:f1:1c:24:85:39:d9:19:8a:ee:68:82:6a:41:f9: 51:3e:15:c2:72:5b:b7:1d:9c:b1:fc:33:0d:a4:dc: 88:f6:74:50:9a:4d:bf:ef:00:52:06:06:76:02:d2: 5d:cf:b3:d9:0a:7b:0c:02:7f:72:08:21:4d:67:7f: 83:f7:85:1d:de:da:9b:ca:80:da:04:5f:65:4e:ab: 1c:6c:9f:0c:6f:23:2f:4c:f3:28:3a:b7:cb:8a:6d: a4:6b:46:57:5a:e7:80:ad:cf:5f:24:a2:9d:51:a6: 85:00:a5:f1:53:0f:4c:43:bd:89:c9:8c:c9:2f:2b: c0:bc:5b:93:3a:23:b0:5d:61:ac:72:10:ee:c6:53: 07:1c:0a:6e:f6:10:50:ba:a6:75:3c:a1:8e:05:4c: bf:4f:88:18:e3:36:b7:b3:29:4b:f3:88:ac:fa:5c: cc:c0:87:0a:12:1e:54:e8:13:37:33:30:6d:49:65: 5b:ce:a9:0e:ed:86:eb:a1:83:eb:7a:99:b2:ec:32: 74:cd:b3:83:3b:fc:75:92:04:45:8c:8e:a7:d3:70: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:2D:45:94:29:63:53:39:1E:71:51:1E:A6:9D:F6:B9:94:C4:D5 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:05:94:ef:46:61:d0:4f:20:7d:30:bd:71:00:6d:33:cc: 20:c6:73:2d:1d:24:7c:58:d3:27:01:ac:ed:df:83:4f:d7:c7: a0:9a:c3:0c:9d:b4:ae:9d:2a:93:dc:92:2b:99:b8:7a:b1:5c: d8:f2:d7:2f:d4:a4:89:40:5c:23:f0:b8:31:e7:60:95:39:15: f5:9f:a0:48:21:ad:5b:8a:6e:99:02:ab:2c:9c:9b:ca:91:53: d0:97:ff:e9:73:75:2f:4a:eb:e4:91:6e:47:e5:a2:ef:15:2f: 55:a0:85:5a:a1:14:98:85:d1:91:dc:d0:0a:13:02:75:4b:28: 75:cd:1f:37:b1:ad:14:b9:ee:06:46:63:b1:27:de:05:59:82: c7:b9:dc:16:e9:6a:53:76:f1:c4:8c:31:c1:ef:b5:93:56:0d: ea:dc:05:a7:43:b8:a4:f4:61:d1:a8:e5:70:72:13:e9:19:e4: 1f:90:b4:84:84:ec:56:85:4b:7e:2e:c6:05:c9:ec:b9:6b:eb: cf:9e:22:3e:16:11:9e:84:0b:89:ce:a4:01:d0:a1:c7:64:d1: 89:76:cf:38:f1:98:0d:dd:72:bc:ac:68:81:ff:35:21:8a:00: 13:a2:21:27:a1:ef:ed:ba:cb:e6:51:f2:92:96:5c:04:01:ee: 21:a6:f1:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvoxvIiR1HhCnVws3cZLn5PsjSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTEyMDUwNTI2NDlaFw0yNTEyMDgwOTEwNDlaMDMxMTAvBgNV BAMTKDBFQzYyRDQ1OTQyOTYzNTMzOTFFNzE1MTFFQTY5REY2Qjk5NEM0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyhk04+46ZgOjH2GwDxYqpT9Cg F7c+H+UYTX8UB5vgbamxgKnBLOwRXklZ3PHxHCSFOdkZiu5ogmpB+VE+FcJyW7cd nLH8Mw2k3Ij2dFCaTb/vAFIGBnYC0l3Ps9kKewwCf3IIIU1nf4P3hR3e2pvKgNoE X2VOqxxsnwxvIy9M8yg6t8uKbaRrRlda54Ctz18kop1RpoUApfFTD0xDvYnJjMkv K8C8W5M6I7BdYaxyEO7GUwccCm72EFC6pnU8oY4FTL9PiBjjNrezKUvziKz6XMzA hwoSHlToEzczMG1JZVvOqQ7thuuhg+t6mbLsMnTNs4M7/HWSBEWMjqfTcAbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsYtRZQpY1M5HnFRHqad9rmUxNUwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR+BZTvRmHQTyB9ML1xAG0zzCDGcy0dJHxY 0ycBrO3fg0/Xx6CawwydtK6dKpPckiuZuHqxXNjy1y/UpIlAXCPwuDHnYJU5FfWf oEghrVuKbpkCqyycm8qRU9CX/+lzdS9K6+SRbkflou8VL1WghVqhFJiF0ZHc0AoT AnVLKHXNHzexrRS57gZGY7En3gVZgse53BbpalN28cSMMcHvtZNWDercBadDuKT0 YdGo5XByE+kZ5B+QtISE7FaFS34uxgXJ7Llr68+eIj4WEZ6EC4nOpAHQocdk0Yl2 zzjxmA3dcrysaIH/NSGKABOiISeh7+26y+ZR8pKWXAQB7iGm8b8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:32:21 2025 by rpki-client