This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: fl6oZEvEDI/uO6TDiKZEbWEJxKeiIR4ebGRJPYgaTEI= Subject key identifier: FA:9E:29:30:07:54:8B:91:F9:B6:F3:09:20:FD:BF:6B:00:C2:67:AF Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 797C30C71078D2BE3372CAA05E99FF20C756B893 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 02CE Signing time: Fri 05 Dec 2025 15:02:28 +0000 Manifest this update: Fri 05 Dec 2025 14:57:28 +0000 Manifest next update: Tue 09 Dec 2025 00:58:28 +0000 Files and hashes: 1: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: 9Jv4HDwNpb47nRylcCUEY9m4eBhTvftRVJQs87bewVw=) 2: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: +FiEMQn+bof+/ZdEFGp6Dq9/UIExpSElpnCjlOgif5Q=) 3: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: 9OAoWczmJPqSai15ZAPOgSohr4eVEGJzypq/J/xc2bI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7c:30:c7:10:78:d2:be:33:72:ca:a0:5e:99:ff:20:c7:56:b8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Dec 5 14:57:28 2025 GMT Not After : Dec 9 00:58:28 2025 GMT Subject: CN=FA9E293007548B91F9B6F30920FDBF6B00C267AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:16:16:bc:4a:c7:8a:f5:03:2c:b2:99:7b: 64:ec:08:f3:10:91:d3:70:7e:c7:c2:c9:d8:3a:78: f2:82:26:ba:5f:ff:06:ac:93:43:3d:f1:8f:2c:a6: 09:68:3e:4f:83:2d:1c:57:b8:e6:6c:fa:eb:ff:6f: b4:b2:92:cd:18:84:02:d7:98:36:dc:ac:60:3d:51: 47:92:af:55:be:87:cc:5f:a5:e3:ae:98:eb:93:f1: 21:b6:ee:6c:13:83:f1:25:20:8a:d3:5d:6c:95:71: c9:87:16:3b:34:b6:05:bb:e6:af:65:fb:1d:ce:94: 09:6d:a7:6d:c7:b4:d6:63:c9:c0:d5:fc:42:6e:33: 19:90:70:48:88:62:d6:1a:51:4c:cc:05:fe:d0:f7: 23:bd:e0:fb:0b:2d:bf:a4:38:36:0f:db:2d:7d:80: 60:32:fc:e0:70:b7:4d:c7:1c:82:07:c4:d4:ef:7e: 76:b6:86:87:f2:66:d9:9a:6f:6b:dc:32:40:a1:75: e4:97:68:7e:61:4b:52:19:18:74:85:6d:0d:70:50: 05:7d:ee:46:d1:83:58:0f:2a:10:f0:84:60:41:d7: 7d:32:5d:f2:f8:e5:f4:e8:b8:0d:50:54:b9:07:61: bf:cb:cd:66:25:ed:d5:a8:81:9e:a0:9f:e6:f5:00: 72:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:29:30:07:54:8B:91:F9:B6:F3:09:20:FD:BF:6B:00:C2:67:AF X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ea:f4:e9:d6:3f:4d:88:ff:77:0d:54:38:23:0a:34:08:50: d0:8c:90:c8:18:d9:14:99:d3:e8:0f:ef:a4:8d:30:1b:a7:64: bb:06:7b:e2:ed:75:bf:87:f4:85:77:18:3b:6c:8b:ff:de:e7: c3:96:1d:89:4e:06:89:7c:e5:15:29:46:0e:c3:15:58:19:1d: fb:62:f2:11:4f:a4:b3:c8:38:4d:d6:26:08:c4:48:72:e2:c6: fa:42:2f:ce:81:75:6a:bd:8e:b5:c7:7b:66:5c:70:95:1e:4d: 0a:7b:b5:ff:82:05:74:d9:32:29:07:c0:2c:56:c8:ab:7c:a5: 01:5b:8b:79:d8:4e:b3:52:5f:b7:16:a9:c5:9b:9e:23:65:51: 5d:d0:60:d7:db:3f:c6:02:a8:cf:03:07:b8:0d:e6:d3:e9:18: 31:7e:93:85:3d:51:1c:b3:ec:fe:82:2c:cb:cf:f1:7f:ba:22: 48:2b:b7:0e:70:7b:18:e4:de:81:a3:34:10:8c:a2:4e:f4:3e: 45:58:2c:0b:a0:9a:dc:a4:c6:94:a2:32:df:6f:b2:e9:ce:8e: c9:96:15:96:7c:4d:ff:86:57:17:aa:12:9e:31:03:71:2e:46: e4:56:66:44:92:b1:dd:44:24:47:43:ae:0d:ff:6f:75:30:9b: e9:0d:13:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXwwxxB40r4zcsqgXpn/IMdWuJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTEyMDUxNDU3MjhaFw0yNTEyMDkwMDU4MjhaMDMxMTAvBgNV BAMTKEZBOUUyOTMwMDc1NDhCOTFGOUI2RjMwOTIwRkRCRjZCMDBDMjY3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/BYWvErHivUDLLKZe2TsCPMQ kdNwfsfCydg6ePKCJrpf/wask0M98Y8spgloPk+DLRxXuOZs+uv/b7Syks0YhALX mDbcrGA9UUeSr1W+h8xfpeOumOuT8SG27mwTg/ElIIrTXWyVccmHFjs0tgW75q9l +x3OlAltp23HtNZjycDV/EJuMxmQcEiIYtYaUUzMBf7Q9yO94PsLLb+kODYP2y19 gGAy/OBwt03HHIIHxNTvfna2hofyZtmab2vcMkChdeSXaH5hS1IZGHSFbQ1wUAV9 7kbRg1gPKhDwhGBB130yXfL45fTouA1QVLkHYb/LzWYl7dWogZ6gn+b1AHL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+p4pMAdUi5H5tvMJIP2/awDCZ68wHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfq9OnWP02I/3cNVDgjCjQIUNCMkMgY2RSZ 0+gP76SNMBunZLsGe+Ltdb+H9IV3GDtsi//e58OWHYlOBol85RUpRg7DFVgZHfti 8hFPpLPIOE3WJgjESHLixvpCL86BdWq9jrXHe2ZccJUeTQp7tf+CBXTZMikHwCxW yKt8pQFbi3nYTrNSX7cWqcWbniNlUV3QYNfbP8YCqM8DB7gN5tPpGDF+k4U9URyz 7P6CLMvP8X+6Ikgrtw5wexjk3oGjNBCMok70PkVYLAugmtykxpSiMt9vsunOjsmW FZZ8Tf+GVxeqEp4xA3EuRuRWZkSSsd1EJEdDrg3/b3Uwm+kNE7I= -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:56 2025 by rpki-client