This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: y5w0RoMoL0NQOrjSgCMQwi8N6+eZxWTrzPFGnc9YMhc= Subject key identifier: 53:4D:95:C7:33:A1:27:50:89:2C:44:99:F9:64:5E:0C:D0:98:4B:D9 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 4330ECDA20AAEFFD789184CB9F1634AD99F8EEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0122 Signing time: Sat 06 Dec 2025 08:02:14 +0000 Manifest this update: Sat 06 Dec 2025 07:57:14 +0000 Manifest next update: Tue 09 Dec 2025 17:27:14 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 6eeoLAMCmPiLgKi28c3e9D8aGhRkOuREKxdawSmPdSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:30:ec:da:20:aa:ef:fd:78:91:84:cb:9f:16:34:ad:99:f8:ee:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Dec 6 07:57:14 2025 GMT Not After : Dec 9 17:27:14 2025 GMT Subject: CN=534D95C733A12750892C4499F9645E0CD0984BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:42:86:bf:6a:8b:d5:30:c3:4f:8d:97:b8: 3f:05:bf:c4:e4:6e:ae:f7:1c:3a:fa:89:66:72:52: d7:92:64:a4:26:27:da:1c:40:64:3f:76:79:3c:5b: 53:07:58:25:13:0f:bd:85:d2:46:8e:7e:85:dc:fd: 20:4b:00:bc:9f:98:2b:d9:2b:72:e0:fe:8e:06:7d: b6:c6:b2:2a:6e:f7:7f:f7:08:80:82:a3:1e:67:91: f5:50:85:b7:24:8c:dc:66:f8:ae:17:2b:20:c4:7b: 8d:6f:61:14:eb:66:e6:4d:07:b0:8b:0d:de:b3:a1: 42:c5:f3:2f:61:00:a1:47:5c:c2:b4:0a:b6:ba:aa: 65:d1:dc:8b:b8:43:b4:5f:3a:db:63:6f:78:34:8a: 5d:fc:6d:f6:0a:33:21:91:0a:ae:60:ee:09:ae:b8: fb:72:58:ad:0f:cf:2d:5a:cf:63:cf:02:6d:3c:33: fe:04:55:e0:e9:89:68:e7:7c:91:b5:4c:b0:9c:ec: b1:db:11:2b:df:03:cf:24:11:94:be:d9:c6:86:ce: e9:48:b2:4a:ba:0b:1d:76:4f:03:22:56:89:af:5b: 1a:13:0b:9b:b7:96:ca:02:88:cd:6a:ec:83:77:82: be:0f:3d:17:dc:8b:49:98:43:b5:14:d9:aa:1d:6a: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:95:C7:33:A1:27:50:89:2C:44:99:F9:64:5E:0C:D0:98:4B:D9 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a9:3c:34:4c:86:75:cc:d7:d9:48:d8:8e:62:39:4c:0d:e3: 79:82:01:56:fe:cb:e8:b4:7e:ba:d7:ea:70:df:01:58:d7:7a: 2f:ba:8d:5f:fa:67:45:26:a5:f0:ab:af:cb:fc:5d:dd:a3:af: d3:6d:54:5b:51:9b:a6:ba:92:db:2a:86:61:05:e9:36:7f:e3: a5:78:f1:f8:31:39:2e:65:b7:5a:2e:2e:53:81:c5:b6:da:39: d6:2d:82:ce:72:c7:c7:85:a5:81:e3:be:82:5e:be:6a:b0:55: 61:c9:44:7d:a9:44:f7:9c:88:d8:5d:8b:e0:64:05:85:38:b5: 80:74:80:cb:51:25:e9:c2:ae:68:c1:be:da:4c:50:0d:22:cb: 12:f6:0a:ef:5e:5a:70:bf:f6:60:74:ab:07:32:0a:48:b1:f3: ea:7b:bc:20:30:c3:d2:4c:c2:09:29:93:a3:39:78:7a:89:3b: 23:71:87:c9:8a:5a:48:a0:33:a3:ec:23:25:33:68:0c:bd:3a: 0e:7b:23:bb:68:42:a1:30:44:56:23:d7:c3:ac:7b:e3:cd:f3: dc:94:06:74:ee:41:fc:2b:a7:84:da:2d:dd:6a:ac:e3:eb:59: 83:1a:ff:69:63:82:f7:6e:f4:11:22:2a:ff:88:a7:47:37:82: c1:fd:ee:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzDs2iCq7/14kYTLnxY0rZn47qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEyMDYwNzU3MTRaFw0yNTEyMDkxNzI3MTRaMDMxMTAvBgNV BAMTKDUzNEQ5NUM3MzNBMTI3NTA4OTJDNDQ5OUY5NjQ1RTBDRDA5ODRCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPkKGv2qL1TDDT42XuD8Fv8Tk bq73HDr6iWZyUteSZKQmJ9ocQGQ/dnk8W1MHWCUTD72F0kaOfoXc/SBLALyfmCvZ K3Lg/o4GfbbGsipu93/3CICCox5nkfVQhbckjNxm+K4XKyDEe41vYRTrZuZNB7CL Dd6zoULF8y9hAKFHXMK0Cra6qmXR3Iu4Q7RfOttjb3g0il38bfYKMyGRCq5g7gmu uPtyWK0Pzy1az2PPAm08M/4EVeDpiWjnfJG1TLCc7LHbESvfA88kEZS+2caGzulI skq6Cx12TwMiVomvWxoTC5u3lsoCiM1q7IN3gr4PPRfci0mYQ7UU2aodahrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU02VxzOhJ1CJLESZ+WReDNCYS9kwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmpPDRMhnXM19lI2I5iOUwN43mCAVb+y+i0 frrX6nDfAVjXei+6jV/6Z0UmpfCrr8v8Xd2jr9NtVFtRm6a6ktsqhmEF6TZ/46V4 8fgxOS5lt1ouLlOBxbbaOdYtgs5yx8eFpYHjvoJevmqwVWHJRH2pRPeciNhdi+Bk BYU4tYB0gMtRJenCrmjBvtpMUA0iyxL2Cu9eWnC/9mB0qwcyCkix8+p7vCAww9JM wgkpk6M5eHqJOyNxh8mKWkigM6PsIyUzaAy9Og57I7toQqEwRFYj18Ose+PN89yU BnTuQfwrp4TaLd1qrOPrWYMa/2ljgvdu9BEiKv+Ip0c3gsH97vQ= -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:22 2025 by rpki-client