This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: 8aQu/Mw5VGxcbzUigl9C1kQwOuWTdpmIwAZQ+ApV5p8= Subject key identifier: 51:B3:86:7E:66:9C:D1:00:EB:5E:FD:1F:FE:C8:5E:10:89:15:09:5B Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 10CCD3AEBF06E6E9194228BF5531446CAF1DDFF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 053C Signing time: Fri 05 Dec 2025 07:02:11 +0000 Manifest this update: Fri 05 Dec 2025 06:57:11 +0000 Manifest next update: Mon 08 Dec 2025 11:02:11 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 2: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: lhT+mPzvnP1VFo7gHExM1sr5k1QHCBVk2HjxWBg7pPA=) 3: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 4: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 6: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 7: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cc:d3:ae:bf:06:e6:e9:19:42:28:bf:55:31:44:6c:af:1d:df:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Dec 5 06:57:11 2025 GMT Not After : Dec 8 11:02:11 2025 GMT Subject: CN=51B3867E669CD100EB5EFD1FFEC85E108915095B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:8b:ad:12:de:27:b3:d1:91:75:43:bd:e5: 39:0e:4e:f8:d3:38:82:e8:b5:1a:b2:b5:0b:b9:91: a9:20:08:d0:f1:05:d0:82:cb:93:50:51:3f:50:ea: a1:98:57:18:7e:bf:67:8d:6b:25:0e:1f:9e:b3:89: c8:c9:b5:46:03:ce:5e:99:52:ec:92:d2:0a:92:6f: 5d:37:e0:e3:54:cb:ba:93:51:e6:1e:fd:0c:a9:fa: f3:4a:af:f5:2d:bf:be:cb:15:d7:1e:02:66:f3:4d: f7:7e:f4:fe:df:85:35:d7:db:2a:10:3b:64:93:bc: 93:51:a1:4c:ac:59:fc:d0:3f:a2:87:19:39:e4:77: aa:9a:ec:63:4e:50:e5:9d:c6:1f:ad:8b:b9:1b:22: b7:6a:96:aa:af:4d:60:ec:74:41:98:eb:4f:6a:ff: 68:70:12:d0:36:73:92:f5:39:2d:4b:a4:fd:08:3d: 8b:23:4e:1a:d0:0d:27:b4:2b:f1:da:6a:9f:1f:a3: df:5d:23:90:fd:b8:39:69:c1:55:d0:4a:76:df:f8: 61:bf:36:88:13:aa:a8:1c:55:fe:92:78:bd:b4:82: ef:6c:96:05:8c:e6:ae:40:71:5b:5d:df:9a:b6:c5: de:4c:44:c6:b3:4c:f9:23:47:53:04:3d:ef:d1:e2: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:86:7E:66:9C:D1:00:EB:5E:FD:1F:FE:C8:5E:10:89:15:09:5B X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:88:09:e1:5a:79:35:94:2b:f1:75:07:a9:69:b3:b9:21:cc: 68:27:e7:27:94:2f:7e:47:0b:06:31:a3:1c:bc:76:c7:5e:d4: fe:73:6c:85:15:5b:9e:f9:1d:d7:9b:be:3f:b5:c9:4a:34:f7: 90:9f:cc:20:c3:2b:7b:b6:8f:e3:0c:85:d9:f9:38:0f:33:cc: b4:d1:3d:9a:61:64:6f:8e:04:95:84:4d:70:2b:33:99:1d:29: 44:53:5c:29:c7:84:7c:05:ea:2c:b3:19:74:09:62:c2:4b:92: e2:9f:86:0e:3c:94:0c:2a:63:bd:78:5c:22:0a:6e:61:d3:22: c9:46:1b:d3:fd:e4:e0:08:35:ce:41:61:8f:0a:8b:b8:ae:54: e9:be:44:50:66:48:bb:cf:88:ea:9f:99:ae:f8:95:c8:90:af: fe:dc:fc:2b:08:65:f3:3c:64:ab:33:56:0b:7f:9c:f0:77:a5: 07:36:91:4e:a5:46:6b:47:76:38:f6:10:69:9e:d0:22:67:20: 56:9a:3b:0d:f7:d4:af:58:32:4f:54:d5:70:ca:92:b2:19:92: ec:0d:5f:08:db:6a:fb:2c:a5:78:30:a0:57:2f:93:d6:eb:10: e6:7e:96:05:19:4e:26:ee:4f:5b:84:50:bd:74:d9:c6:5a:cd: 81:85:9e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMzTrr8G5ukZQii/VTFEbK8d3/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTEyMDUwNjU3MTFaFw0yNTEyMDgxMTAyMTFaMDMxMTAvBgNV BAMTKDUxQjM4NjdFNjY5Q0QxMDBFQjVFRkQxRkZFQzg1RTEwODkxNTA5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8outEt4ns9GRdUO95TkOTvjT OILotRqytQu5kakgCNDxBdCCy5NQUT9Q6qGYVxh+v2eNayUOH56zicjJtUYDzl6Z UuyS0gqSb1034ONUy7qTUeYe/Qyp+vNKr/Utv77LFdceAmbzTfd+9P7fhTXX2yoQ O2STvJNRoUysWfzQP6KHGTnkd6qa7GNOUOWdxh+ti7kbIrdqlqqvTWDsdEGY609q /2hwEtA2c5L1OS1LpP0IPYsjThrQDSe0K/Haap8fo99dI5D9uDlpwVXQSnbf+GG/ NogTqqgcVf6SeL20gu9slgWM5q5AcVtd35q2xd5MRMazTPkjR1MEPe/R4tuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbOGfmac0QDrXv0f/sheEIkVCVswHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESICeFaeTWUK/F1B6lps7khzGgn5yeUL35H CwYxoxy8dsde1P5zbIUVW575Hdebvj+1yUo095CfzCDDK3u2j+MMhdn5OA8zzLTR PZphZG+OBJWETXArM5kdKURTXCnHhHwF6iyzGXQJYsJLkuKfhg48lAwqY714XCIK bmHTIslGG9P95OAINc5BYY8Ki7iuVOm+RFBmSLvPiOqfma74lciQr/7c/CsIZfM8 ZKszVgt/nPB3pQc2kU6lRmtHdjj2EGme0CJnIFaaOw331K9YMk9U1XDKkrIZkuwN XwjbavsspXgwoFcvk9brEOZ+lgUZTibuT1uEUL102cZazYGFnmg= -----END CERTIFICATE-----Generated at Sun Dec 7 03:12:25 2025 by rpki-client