This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: ktEM2BRPyPWP/mq/BpKk2wvf4gVj59iy7wBTfCKlzeo= Subject key identifier: FD:8C:69:DD:77:44:27:88:33:B5:FC:E5:3F:F5:8A:1B:2D:25:9A:4F Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 4140CD72E3CB2E97155C072EFCC177055063FCF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02DA Signing time: Fri 05 Dec 2025 18:11:28 +0000 Manifest this update: Fri 05 Dec 2025 18:06:28 +0000 Manifest next update: Mon 08 Dec 2025 20:36:28 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: TnpYVi1HSfAjUmqX4O7T2A03QQJ2gmz+Cs4TxZixs5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:40:cd:72:e3:cb:2e:97:15:5c:07:2e:fc:c1:77:05:50:63:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Dec 5 18:06:28 2025 GMT Not After : Dec 8 20:36:28 2025 GMT Subject: CN=FD8C69DD7744278833B5FCE53FF58A1B2D259A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:17:7f:57:38:23:b4:d5:f6:d3:34:86:47: 52:fc:16:ff:2d:77:91:60:ee:fc:fe:a9:04:1b:ab: 3d:8e:2a:35:6a:02:e2:fc:7b:c2:65:7a:78:eb:99: d9:e5:15:35:5a:95:e7:af:66:13:81:b4:38:46:21: 6c:b1:65:a8:b8:3d:37:8a:d5:f3:7b:05:f4:26:9e: e5:5e:4c:d6:e6:49:40:6c:05:fd:d7:20:c3:b8:f6: 23:a3:c7:01:dd:41:da:e5:01:1f:52:4d:b6:62:7c: 0e:27:fc:64:21:e9:2e:81:1e:ec:fd:6f:bd:e5:95: 65:bc:77:dc:14:5f:50:42:ca:59:e0:96:ee:8e:d7: 59:48:e7:65:7b:03:b8:f4:d4:22:98:8c:20:e2:06: 7d:37:36:f3:6d:4d:a0:26:4e:66:b4:c2:ec:ff:70: 12:61:4c:17:d6:17:47:de:33:69:18:31:e8:b3:6e: fb:53:b8:ed:53:af:c0:44:15:d6:89:00:28:8a:cd: ce:4c:a0:56:32:48:60:b2:f5:1b:ea:92:50:e8:f6: c8:58:64:c9:69:8b:27:de:fa:bf:e1:30:ea:d1:22: 8b:71:20:2b:85:91:36:07:34:ab:2d:27:d6:78:6b: bb:70:67:1b:5c:4d:56:68:01:c5:59:bb:ea:08:ce: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8C:69:DD:77:44:27:88:33:B5:FC:E5:3F:F5:8A:1B:2D:25:9A:4F X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:72:21:f4:9d:d8:e1:1f:72:ad:80:f7:41:a2:b2:5d:d7:75: bb:19:52:37:16:3c:0e:8b:b2:8a:a9:3d:8c:29:9f:19:88:12: 07:89:c4:b7:41:11:fa:33:60:20:b3:b9:04:b4:ed:07:ba:ff: 3b:17:1d:d8:2d:e7:f5:6b:30:a8:49:b4:c5:dc:ae:8d:10:4f: ff:c3:1b:4c:6c:eb:e3:af:ba:02:d8:29:47:e1:50:73:cb:9b: 3d:e1:db:4b:95:77:89:4c:19:e1:ed:a2:1b:bf:c7:f9:c3:4a: 31:c3:21:f6:2b:05:e3:f1:d7:07:02:13:18:f2:71:61:85:15: 12:82:b5:7c:9a:bd:8c:9d:06:4b:a8:eb:e0:3e:f9:54:03:00: b0:63:c7:41:e3:d4:d8:90:fe:cf:33:e1:df:f9:cc:42:36:e9: 9e:20:7c:85:b2:c6:32:3c:4e:73:48:c7:64:cf:c0:17:8f:53: ca:15:2a:12:f1:f9:6c:ee:9b:d3:d4:4b:3f:1f:cf:4f:17:89: 80:0d:63:93:0d:84:80:98:0f:b3:70:d2:3d:6b:53:94:ea:ac: 07:f6:b9:d7:44:37:5d:71:3e:5e:9b:0d:c0:3c:76:5b:6a:0e: 7f:5b:df:33:64:a8:d4:e4:59:79:42:82:76:ce:ce:97:30:6e: 02:4b:69:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUDNcuPLLpcVXAcu/MF3BVBj/PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTEyMDUxODA2MjhaFw0yNTEyMDgyMDM2MjhaMDMxMTAvBgNV BAMTKEZEOEM2OURENzc0NDI3ODgzM0I1RkNFNTNGRjU4QTFCMkQyNTlBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATxd/VzgjtNX20zSGR1L8Fv8t d5Fg7vz+qQQbqz2OKjVqAuL8e8JlenjrmdnlFTValeevZhOBtDhGIWyxZai4PTeK 1fN7BfQmnuVeTNbmSUBsBf3XIMO49iOjxwHdQdrlAR9STbZifA4n/GQh6S6BHuz9 b73llWW8d9wUX1BCylnglu6O11lI52V7A7j01CKYjCDiBn03NvNtTaAmTma0wuz/ cBJhTBfWF0feM2kYMeizbvtTuO1Tr8BEFdaJACiKzc5MoFYySGCy9RvqklDo9shY ZMlpiyfe+r/hMOrRIotxICuFkTYHNKstJ9Z4a7twZxtcTVZoAcVZu+oIzg9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Yxp3XdEJ4gztfzlP/WKGy0lmk8wHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5yIfSd2OEfcq2A90Gisl3XdbsZUjcWPA6L soqpPYwpnxmIEgeJxLdBEfozYCCzuQS07Qe6/zsXHdgt5/VrMKhJtMXcro0QT//D G0xs6+OvugLYKUfhUHPLmz3h20uVd4lMGeHtohu/x/nDSjHDIfYrBePx1wcCExjy cWGFFRKCtXyavYydBkuo6+A++VQDALBjx0Hj1NiQ/s8z4d/5zEI26Z4gfIWyxjI8 TnNIx2TPwBePU8oVKhLx+Wzum9PUSz8fz08XiYANY5MNhICYD7Nw0j1rU5TqrAf2 uddEN11xPl6bDcA8dltqDn9b3zNkqNTkWXlCgnbOzpcwbgJLaaw= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:18 2025 by rpki-client