This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft File: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft (raw, json) Hash identifier: vzcLCjfJqIcLP/09LVJpjUDIwY7DQheutzq0JOYuAdA= Subject key identifier: DA:42:1C:FF:F1:A5:63:D5:04:20:A3:61:83:8C:C4:B5:41:33:77:46 Authority key identifier: 3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB Certificate issuer: /CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Certificate serial: 1B15DAEB766B3ADF908F89553B2142704C537344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft Manifest number: 04 Signing time: Thu 04 Dec 2025 23:01:58 +0000 Manifest this update: Thu 04 Dec 2025 22:56:58 +0000 Manifest next update: Mon 08 Dec 2025 01:03:58 +0000 Files and hashes: 1: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl (hash: H+CYbV3oeEMh/4KD/yUuavjB2EZ39lLuI/z/2Ig8hk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:da:eb:76:6b:3a:df:90:8f:89:55:3b:21:42:70:4c:53:73:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Validity Not Before: Dec 4 22:56:58 2025 GMT Not After : Dec 8 01:03:58 2025 GMT Subject: CN=DA421CFFF1A563D50420A361838CC4B541337746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:fd:66:b9:81:6d:82:44:ff:e5:e9:b1:56: 9a:2f:1e:fd:a3:5c:1c:ed:cd:96:c4:4c:49:7f:fa: 5e:39:bf:d0:80:a7:f7:d3:9c:3d:c3:9b:bd:92:20: fb:e8:fe:0b:6f:43:19:7d:67:cd:e2:51:1d:2e:1f: ff:f9:4b:e0:ba:22:6d:c8:c4:07:c2:f4:c8:e2:78: d7:b6:0a:ad:77:d3:13:61:7b:70:8b:de:18:e9:69: 3c:50:27:a0:1c:50:17:de:43:53:46:02:d4:3e:00: 16:8b:ac:a2:5a:87:25:f0:90:9f:6f:f5:1e:c8:9a: 81:e4:76:68:bd:9f:d1:0d:c2:35:76:29:17:aa:21: aa:c9:77:24:26:b8:51:ba:ef:80:a8:2c:43:ea:9e: 3e:7b:61:36:a0:5a:13:8a:ed:c8:b6:b3:5b:00:95: 76:cb:99:f8:22:52:fa:f3:a0:9b:a0:39:a9:41:6f: 6a:00:e5:11:27:90:57:ea:27:fa:eb:f0:7d:0f:f1: 27:4a:24:b0:b8:42:34:26:ee:0e:18:39:f1:96:1b: 54:ac:57:57:b1:44:85:ed:b2:fd:21:14:68:81:05: a3:06:71:86:f2:50:4b:20:5d:e8:41:b1:ff:0a:20: 6a:9f:ff:6e:6b:dc:bc:64:46:3a:e0:0b:b9:fa:a2: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:1C:FF:F1:A5:63:D5:04:20:A3:61:83:8C:C4:B5:41:33:77:46 X509v3 Authority Key Identifier: keyid:3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:15:cf:86:7b:6c:80:d7:d1:48:9a:74:e4:9e:c3:3e:e6:4c: 5a:6e:83:e5:63:75:4c:3b:28:38:e2:10:2d:43:f3:8a:36:61: 74:b0:02:0d:ff:a6:cf:b6:2d:8b:7e:46:09:12:b2:75:f3:2f: 19:78:37:4a:ad:07:76:79:a0:40:bf:31:dc:9a:b0:c7:5a:a4: 60:a0:c0:4c:8f:02:77:dc:ae:e6:5a:57:04:11:50:ed:6d:ef: ee:79:b4:21:ea:b3:74:d3:e3:69:82:ee:c9:39:7b:c3:64:d8: 79:ac:ec:c4:d3:3d:02:9b:1d:cf:c7:41:d9:c4:68:c0:e2:dd: 91:2a:56:0b:4e:16:3e:1f:91:92:58:60:51:23:bf:f3:73:42: 87:57:bb:60:64:a4:2f:f3:33:24:53:e4:eb:74:85:0e:30:eb: 1a:81:dc:7a:f1:5c:c9:b6:bc:00:d3:ff:8f:f2:93:5e:48:85: 1a:eb:6f:fd:51:14:88:08:2c:99:af:0f:5c:7d:25:63:6a:b3: 5b:68:52:83:75:77:70:8e:f8:f8:c7:08:73:8e:6f:a9:62:cc: e1:a5:17:01:96:4e:ec:64:dc:a9:42:29:40:99:bd:6d:73:92: a5:5e:38:88:cb:33:4e:f0:e7:20:2b:1d:90:b7:ca:fb:2c:42: 9c:ce:24:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxXa63ZrOt+Qj4lVOyFCcExTc0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENC RjY5QkJGQjAeFw0yNTEyMDQyMjU2NThaFw0yNTEyMDgwMTAzNThaMDMxMTAvBgNV BAMTKERBNDIxQ0ZGRjFBNTYzRDUwNDIwQTM2MTgzOENDNEI1NDEzMzc3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqP1muYFtgkT/5emxVpovHv2j XBztzZbETEl/+l45v9CAp/fTnD3Dm72SIPvo/gtvQxl9Z83iUR0uH//5S+C6Im3I xAfC9MjieNe2Cq130xNhe3CL3hjpaTxQJ6AcUBfeQ1NGAtQ+ABaLrKJahyXwkJ9v 9R7ImoHkdmi9n9ENwjV2KReqIarJdyQmuFG674CoLEPqnj57YTagWhOK7ci2s1sA lXbLmfgiUvrzoJugOalBb2oA5REnkFfqJ/rr8H0P8SdKJLC4QjQm7g4YOfGWG1Ss V1exRIXtsv0hFGiBBaMGcYbyUEsgXehBsf8KIGqf/25r3LxkRjrgC7n6on9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kIc//GlY9UEIKNhg4zEtUEzd0YwHwYDVR0j BBgwFoAUPHGhBQQdnqAe9MaW1F0NTL9pu/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUzMDllMi1mOTI5LTQyZDktOWMzYi1hOTFhMDA2OTBjZjEvMC8zQzcxQTEwNTA0 MUQ5RUEwMUVGNEM2OTZENDVEMEQ0Q0JGNjlCQkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENCRjY5 QkJGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBE NENCRjY5QkJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8Vz4Z7bIDX0UiadOSewz7mTFpug+VjdUw7 KDjiEC1D84o2YXSwAg3/ps+2LYt+RgkSsnXzLxl4N0qtB3Z5oEC/MdyasMdapGCg wEyPAnfcruZaVwQRUO1t7+55tCHqs3TT42mC7sk5e8Nk2Hms7MTTPQKbHc/HQdnE aMDi3ZEqVgtOFj4fkZJYYFEjv/NzQodXu2BkpC/zMyRT5Ot0hQ4w6xqB3HrxXMm2 vADT/4/yk15IhRrrb/1RFIgILJmvD1x9JWNqs1toUoN1d3CO+PjHCHOOb6lizOGl FwGWTuxk3KlCKUCZvW1zkqVeOIjLM07w5yArHZC3yvssQpzOJOs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:15:56 2025 by rpki-client