This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: 6bXELn0P6em8GosTWnQxnI2Ikn+ya+asQQY7bvLHKgw= Subject key identifier: 1A:2D:3E:38:FD:C1:FB:2D:93:0D:AE:2E:EB:C6:C6:98:15:33:64:D5 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 23E370C02496E170D925C9D6E407B181512211FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0127 Signing time: Wed 17 Dec 2025 13:52:12 +0000 Manifest this update: Wed 17 Dec 2025 13:47:12 +0000 Manifest next update: Sat 20 Dec 2025 16:20:12 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 5KCQ2eAeISpz1ZQJWb0YTQboX/hm/DKlZ/3FToAWxEA=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e3:70:c0:24:96:e1:70:d9:25:c9:d6:e4:07:b1:81:51:22:11:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Dec 17 13:47:12 2025 GMT Not After : Dec 20 16:20:12 2025 GMT Subject: CN=1A2D3E38FDC1FB2D930DAE2EEBC6C698153364D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:fa:a4:b4:7c:b0:43:a5:78:1e:26:bd:1f: a2:1d:52:0a:76:92:85:47:54:af:ca:1c:cc:b7:0d: af:4c:34:3b:ee:9d:11:03:b4:87:04:d0:9c:4c:c6: 0c:93:c8:9d:c0:c5:fe:ce:fa:f9:eb:e3:bc:26:2b: 62:ae:8a:0d:57:8d:db:e7:67:d3:24:76:7c:94:5a: e8:59:85:6f:00:2c:db:17:21:fe:e4:c0:30:93:fc: 83:da:be:40:aa:63:4d:24:da:61:04:78:47:e1:ea: bb:6c:b9:73:89:68:aa:cf:3c:3f:9c:bf:fc:e2:ce: 2f:9f:59:d4:8b:ec:e0:b5:76:74:fb:2f:7a:af:09: 0d:45:f2:d9:c9:95:06:3b:8e:bc:98:ac:57:bf:43: 57:d7:dd:37:8e:af:df:6f:60:77:ea:72:36:70:fb: 6f:7b:f2:b7:0a:76:d1:d4:aa:42:26:3a:7a:c2:f1: c2:46:bd:c0:21:96:09:42:6a:42:bb:13:74:ea:81: 40:3b:bf:b6:fd:95:c3:ff:9d:de:78:d8:01:9c:2c: 50:5f:43:d8:8a:0e:4e:37:f2:93:b9:63:fb:2f:a4: c3:a4:58:29:a7:8f:5e:00:18:39:97:4d:ae:84:c2: b2:6e:e7:a9:0d:96:41:15:94:78:63:46:a4:9f:53: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:3E:38:FD:C1:FB:2D:93:0D:AE:2E:EB:C6:C6:98:15:33:64:D5 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:12:61:4f:80:9d:2f:d8:63:e5:da:02:26:ef:d2:4b:6b:c3: 61:bf:47:3d:95:61:c9:76:42:7b:96:a9:21:99:49:15:99:7c: 25:50:14:ec:da:47:31:97:9a:ca:11:6f:10:f4:df:32:86:aa: 5e:10:29:57:ec:33:0d:25:4c:c3:f1:51:71:dd:3a:19:53:ca: 03:60:0d:3c:a6:52:2e:0e:0c:62:6d:46:1c:9f:97:49:7f:6b: 73:9c:a9:eb:7a:fe:a8:d1:f4:a9:6d:e9:b0:77:50:bf:46:e7: c8:63:5e:6c:60:2a:30:65:19:36:2b:0b:f4:e5:1d:12:33:bf: 09:56:de:4f:05:77:5a:04:32:4d:d6:c8:8d:49:91:34:2e:f5: aa:fc:9d:2e:b4:9e:20:c9:8a:61:e0:45:bc:26:8f:b2:cc:12: e6:36:1c:3b:b3:c4:7e:c9:7d:6d:44:6b:f0:17:a8:09:df:a0: 9c:4e:9c:f5:5b:e4:a3:a0:57:f7:85:96:6f:36:4f:80:f1:56: 8f:08:a0:2b:ac:2e:a1:00:d6:b0:de:ab:5a:17:5a:9c:79:52: b3:51:66:a3:c8:bd:a0:d5:80:79:c8:d3:40:7a:86:f0:cd:46: 4f:9d:10:cd:ed:4c:8b:a3:55:26:72:0b:d5:73:c3:35:de:1a: 96:c8:f8:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+NwwCSW4XDZJcnW5AexgVEiEfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEyMTcxMzQ3MTJaFw0yNTEyMjAxNjIwMTJaMDMxMTAvBgNV BAMTKDFBMkQzRTM4RkRDMUZCMkQ5MzBEQUUyRUVCQzZDNjk4MTUzMzY0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6fqktHywQ6V4Hia9H6IdUgp2 koVHVK/KHMy3Da9MNDvunREDtIcE0JxMxgyTyJ3Axf7O+vnr47wmK2Kuig1Xjdvn Z9MkdnyUWuhZhW8ALNsXIf7kwDCT/IPavkCqY00k2mEEeEfh6rtsuXOJaKrPPD+c v/zizi+fWdSL7OC1dnT7L3qvCQ1F8tnJlQY7jryYrFe/Q1fX3TeOr99vYHfqcjZw +2978rcKdtHUqkImOnrC8cJGvcAhlglCakK7E3TqgUA7v7b9lcP/nd542AGcLFBf Q9iKDk438pO5Y/svpMOkWCmnj14AGDmXTa6EwrJu56kNlkEVlHhjRqSfU00RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGi0+OP3B+y2TDa4u68bGmBUzZNUwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8SYU+AnS/YY+XaAibv0ktrw2G/Rz2VYcl2 QnuWqSGZSRWZfCVQFOzaRzGXmsoRbxD03zKGql4QKVfsMw0lTMPxUXHdOhlTygNg DTymUi4ODGJtRhyfl0l/a3Ocqet6/qjR9Klt6bB3UL9G58hjXmxgKjBlGTYrC/Tl HRIzvwlW3k8Fd1oEMk3WyI1JkTQu9ar8nS60niDJimHgRbwmj7LMEuY2HDuzxH7J fW1Ea/AXqAnfoJxOnPVb5KOgV/eFlm82T4DxVo8IoCusLqEA1rDeq1oXWpx5UrNR ZqPIvaDVgHnI00B6hvDNRk+dEM3tTIujVSZyC9VzwzXeGpbI+GY= -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:32 2025 by rpki-client