This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: TdZ02il9CStpRpGsThSxqGMc2XtI1E3gVjElRKiU2V0= Subject key identifier: 1F:3B:02:57:9A:29:E2:16:5D:74:6C:8C:3D:2A:3D:B8:5B:4A:0A:A9 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 3AD4C0A4CAE94806B3680F46A82AB422F17A6202 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 03AC Signing time: Sat 06 Dec 2025 01:11:01 +0000 Manifest this update: Sat 06 Dec 2025 01:06:01 +0000 Manifest next update: Tue 09 Dec 2025 05:58:01 +0000 Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: 7p8EHDBYC0ord90UqOXRUmNSkbUTLHuIEWn26dUh2r8=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d4:c0:a4:ca:e9:48:06:b3:68:0f:46:a8:2a:b4:22:f1:7a:62:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Dec 6 01:06:01 2025 GMT Not After : Dec 9 05:58:01 2025 GMT Subject: CN=1F3B02579A29E2165D746C8C3D2A3DB85B4A0AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:9c:c6:86:2e:98:30:37:8e:cc:5f:f3:2e: 61:48:d5:ff:60:b3:25:4b:25:25:f2:e9:cc:91:bc: 69:1b:fb:50:8f:4f:42:e7:47:b8:d3:b3:42:29:8e: 82:f6:43:f9:84:89:fd:f0:d4:6d:d8:ce:5b:c9:e5: b7:c1:35:ef:ef:9d:ca:d6:e0:2a:b1:c2:05:7d:1b: 64:80:8a:6b:7e:bd:35:b8:33:7a:7c:cb:74:1e:f8: 8d:95:61:75:32:c8:73:0b:c4:f6:7f:58:1e:37:af: 5b:5c:37:e1:ff:c4:3d:ee:c3:92:67:b2:4e:da:35: 0f:00:67:57:58:96:5f:75:5f:d8:41:df:79:f9:97: 39:f5:1c:bc:c0:06:7a:42:ac:fc:08:f8:cf:8f:15: d4:8d:16:3f:f9:e5:09:2c:14:60:6b:61:c2:55:46: 5b:05:2c:2f:d6:17:05:e3:4a:4d:1c:8e:53:fb:72: 5d:80:3c:4c:ba:fb:9d:e3:9b:dc:9f:84:31:ee:79: 5f:a5:e1:7c:7a:9a:3f:a0:18:34:f2:ab:7e:6a:10: df:57:dd:42:8e:2b:e7:bb:d8:21:e8:e8:7c:71:5c: 4f:19:19:a2:2c:56:cc:dc:c4:9b:1c:b6:a1:6b:1e: 07:78:e4:6b:91:5d:fa:4c:98:d0:2b:50:6b:37:8d: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3B:02:57:9A:29:E2:16:5D:74:6C:8C:3D:2A:3D:B8:5B:4A:0A:A9 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:13:04:37:13:e8:00:a0:68:de:c3:50:5d:0a:92:e3:d3:ee: a8:ae:c0:ad:19:3b:df:7f:5c:d8:1d:70:76:cc:d7:78:4e:48: 15:df:74:b9:0c:c0:0e:a1:c8:68:90:69:39:08:0e:9f:91:04: 30:be:c7:46:19:22:39:08:da:94:73:04:78:60:31:6f:93:d0: 53:a6:55:a5:c4:28:7d:c0:e7:e8:c1:73:24:68:10:52:ed:0e: db:7c:42:ae:de:b0:14:79:10:76:9f:38:d7:41:f5:d4:06:b0: d3:76:01:96:70:64:af:05:7b:c1:25:75:7c:e5:58:c2:23:6f: 40:a1:fb:50:e3:68:2d:1e:d3:0a:89:45:28:a6:63:70:ac:da: f0:18:f8:79:c1:e6:ef:2a:07:c7:54:9c:a8:8d:fe:95:07:3a: 18:a1:93:a9:5e:02:31:14:a5:f7:29:e3:a5:7a:a2:9a:0c:9e: 26:78:5b:bf:26:3e:9b:0f:52:9c:8b:90:55:cf:a3:c4:2f:f1: 0b:dd:22:fe:69:ad:25:02:d2:f8:43:40:07:42:ad:45:93:7a: e7:ab:ef:56:61:8a:b6:95:0b:26:a3:5c:d3:7b:4c:ff:f9:a1: 8a:f4:11:b1:41:a3:ba:6f:33:8f:14:38:7e:2a:e4:e0:e5:2e: a2:ad:e6:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtTApMrpSAazaA9GqCq0IvF6YgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTEyMDYwMTA2MDFaFw0yNTEyMDkwNTU4MDFaMDMxMTAvBgNV BAMTKDFGM0IwMjU3OUEyOUUyMTY1RDc0NkM4QzNEMkEzREI4NUI0QTBBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hZzGhi6YMDeOzF/zLmFI1f9g syVLJSXy6cyRvGkb+1CPT0LnR7jTs0IpjoL2Q/mEif3w1G3YzlvJ5bfBNe/vncrW 4CqxwgV9G2SAimt+vTW4M3p8y3Qe+I2VYXUyyHMLxPZ/WB43r1tcN+H/xD3uw5Jn sk7aNQ8AZ1dYll91X9hB33n5lzn1HLzABnpCrPwI+M+PFdSNFj/55QksFGBrYcJV RlsFLC/WFwXjSk0cjlP7cl2APEy6+53jm9yfhDHueV+l4Xx6mj+gGDTyq35qEN9X 3UKOK+e72CHo6HxxXE8ZGaIsVszcxJsctqFrHgd45GuRXfpMmNArUGs3jQMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzsCV5op4hZddGyMPSo9uFtKCqkwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcTBDcT6ACgaN7DUF0KkuPT7qiuwK0ZO99/ XNgdcHbM13hOSBXfdLkMwA6hyGiQaTkIDp+RBDC+x0YZIjkI2pRzBHhgMW+T0FOm VaXEKH3A5+jBcyRoEFLtDtt8Qq7esBR5EHafONdB9dQGsNN2AZZwZK8Fe8EldXzl WMIjb0Ch+1DjaC0e0wqJRSimY3Cs2vAY+HnB5u8qB8dUnKiN/pUHOhihk6leAjEU pfcp46V6opoMniZ4W78mPpsPUpyLkFXPo8Qv8QvdIv5prSUC0vhDQAdCrUWTeuer 71ZhiraVCyajXNN7TP/5oYr0EbFBo7pvM48UOH4q5ODlLqKt5r8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:49 2025 by rpki-client