This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: vsR/Sm2u+UiODveJ2BaVyRPeLGHtpZxUfGI7XUFkX+E= Subject key identifier: 07:D4:A9:3A:42:5A:29:D2:3B:86:0C:B2:C1:98:87:01:DF:B6:02:E0 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 1AFA873CA6924621BE844153E64112F06CA3A468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 011E Signing time: Fri 05 Dec 2025 00:02:08 +0000 Manifest this update: Thu 04 Dec 2025 23:57:08 +0000 Manifest next update: Mon 08 Dec 2025 08:19:08 +0000 Files and hashes: 1: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: spbsqMlRdHC9nq3x/IxxjPfA6lnz4/GwmPFZBszlsIQ=) 2: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 4: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) 5: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fa:87:3c:a6:92:46:21:be:84:41:53:e6:41:12:f0:6c:a3:a4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Dec 4 23:57:08 2025 GMT Not After : Dec 8 08:19:08 2025 GMT Subject: CN=07D4A93A425A29D23B860CB2C1988701DFB602E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:2b:8f:eb:08:5b:4a:d7:04:0b:1d:b7:e8: 27:e7:3e:5f:ba:eb:19:f4:30:39:db:4c:39:ae:b1: de:dc:8e:69:30:64:47:d0:20:86:07:22:42:29:e0: c7:fb:a8:19:e7:37:af:97:e3:2c:1f:b8:e9:9f:d3: 47:9a:93:7b:cb:a2:ba:96:0f:5f:64:3c:1a:f1:52: ba:ab:f9:d7:fb:e4:b0:e7:c4:7a:c9:52:0e:bc:33: 52:ca:9e:d8:b2:76:0f:6a:3d:9e:42:5b:bf:f7:82: e1:04:76:11:69:63:12:57:2c:68:90:90:f2:0c:ab: 56:7d:ce:1b:b1:27:74:c8:8c:94:a5:ce:24:3a:40: 5e:7a:0b:78:41:40:7f:d3:39:f4:b5:84:c9:8c:c6: ef:93:c4:a0:f6:9d:6c:a5:24:a2:0d:37:a8:86:8a: c2:6d:08:32:e0:dd:6e:ab:d8:ab:bb:a6:e2:78:07: 0a:d4:e0:8e:80:08:b4:7f:64:a1:53:77:2c:c5:53: ee:88:6e:ff:24:77:f9:62:e9:36:1a:d7:6e:ac:4b: c6:b1:8d:3a:b0:8d:f4:cf:d0:36:9e:f7:d5:31:0e: 11:a4:04:4e:f0:ee:74:34:9a:7d:22:4e:1b:81:4e: be:55:d9:74:12:f8:05:64:8c:c6:bc:96:d2:07:8a: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D4:A9:3A:42:5A:29:D2:3B:86:0C:B2:C1:98:87:01:DF:B6:02:E0 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0b:2a:b6:ce:35:ac:aa:f8:22:b8:b8:b3:a5:4a:06:b0:08: d6:27:b0:7d:2f:c4:11:21:fb:7d:55:e5:7e:20:96:7d:25:e4: ed:05:80:a4:7d:19:c8:54:a5:a8:99:91:ec:fc:01:32:7d:e4: 32:36:e8:cc:67:dd:85:28:40:3e:ed:21:35:f3:6b:a2:ba:a9: 79:ea:67:1e:38:cc:2f:ed:d4:c0:16:0f:54:26:11:41:66:48: 3f:76:ff:53:a7:60:64:0e:c5:f8:11:f2:38:55:20:33:7e:cc: 97:3b:73:57:56:93:57:84:ce:c4:40:ea:a2:7f:ea:50:07:93: 33:7e:f0:8d:38:b7:35:6e:c7:20:af:9d:1a:ee:3e:52:ce:64: 71:96:8a:d5:9d:ae:13:97:61:13:d4:ef:a3:9d:34:d9:74:bf: 57:b4:2b:b3:62:62:0a:0e:62:d6:e1:a3:16:d1:08:1e:d4:d3: 3f:8c:d8:4e:65:a9:0b:16:be:6f:f4:d6:41:27:ca:33:c3:f0: 28:68:94:d7:3a:fa:66:61:31:d0:85:9c:f8:67:c9:24:35:72: da:a9:e2:52:ba:a4:da:60:f2:f2:da:70:4b:1a:3b:71:68:9b: 06:a6:ea:98:fd:0c:87:1b:17:2d:41:8f:ae:4c:81:e1:3c:b9: 9f:13:30:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvqHPKaSRiG+hEFT5kES8GyjpGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTEyMDQyMzU3MDhaFw0yNTEyMDgwODE5MDhaMDMxMTAvBgNV BAMTKDA3RDRBOTNBNDI1QTI5RDIzQjg2MENCMkMxOTg4NzAxREZCNjAyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlyuP6whbStcECx236CfnPl+6 6xn0MDnbTDmusd7cjmkwZEfQIIYHIkIp4Mf7qBnnN6+X4ywfuOmf00eak3vLorqW D19kPBrxUrqr+df75LDnxHrJUg68M1LKntiydg9qPZ5CW7/3guEEdhFpYxJXLGiQ kPIMq1Z9zhuxJ3TIjJSlziQ6QF56C3hBQH/TOfS1hMmMxu+TxKD2nWylJKINN6iG isJtCDLg3W6r2Ku7puJ4BwrU4I6ACLR/ZKFTdyzFU+6Ibv8kd/li6TYa126sS8ax jTqwjfTP0Dae99UxDhGkBE7w7nQ0mn0iThuBTr5V2XQS+AVkjMa8ltIHihyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9SpOkJaKdI7hgyywZiHAd+2AuAwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8LKrbONayq+CK4uLOlSgawCNYnsH0vxBEh +31V5X4gln0l5O0FgKR9GchUpaiZkez8ATJ95DI26Mxn3YUoQD7tITXza6K6qXnq Zx44zC/t1MAWD1QmEUFmSD92/1OnYGQOxfgR8jhVIDN+zJc7c1dWk1eEzsRA6qJ/ 6lAHkzN+8I04tzVuxyCvnRruPlLOZHGWitWdrhOXYRPU76OdNNl0v1e0K7NiYgoO YtbhoxbRCB7U0z+M2E5lqQsWvm/01kEnyjPD8CholNc6+mZhMdCFnPhnySQ1ctqp 4lK6pNpg8vLacEsaO3Fomwam6pj9DIcbFy1Bj65MgeE8uZ8TMLU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:33 2025 by rpki-client