This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json)
Hash identifier: OOtdIXHKtrsVVCJrGKJiMzqQyV7N0JXaHGTfnyrNiwQ=
Subject key identifier: 93:D6:08:5B:D5:DD:B9:9D:B2:23:21:19:35:80:CD:DA:25:9C:EB:4D
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial: 1678450B940BC78176244F7281210E58CBE72E98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
Manifest number: 053A
Signing time: Thu 18 Dec 2025 20:32:14 +0000
Manifest this update: Thu 18 Dec 2025 20:27:14 +0000
Manifest next update: Mon 22 Dec 2025 06:01:14 +0000
Files and hashes: 1: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=)
2: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=)
3: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=)
4: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=)
5: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=)
6: 3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa (hash: 6ydyDgUt3ZY0YnrLuFwNCWDzxfmHy7oR4fvhY53u9z0=)
7: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: 7j0b9RB3/wBBzixSA6G/euYh2ApPhL92fQqhxI9vNqs=)
8: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=)
9: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=)
10: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=)
11: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=)
12: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=)
13: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:78:45:0b:94:0b:c7:81:76:24:4f:72:81:21:0e:58:cb:e7:2e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Validity
Not Before: Dec 18 20:27:14 2025 GMT
Not After : Dec 22 06:01:14 2025 GMT
Subject: CN=93D6085BD5DDB99DB22321193580CDDA259CEB4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:ae:e3:69:2a:59:ff:05:18:23:fe:bb:1f:
03:aa:83:31:84:eb:a1:27:b8:cc:bd:85:8e:8d:61:
53:b2:49:f3:6b:78:89:25:fc:b8:63:b9:15:35:e8:
68:aa:8d:91:c2:6a:9a:de:ea:47:6c:23:85:8a:b3:
45:4d:17:e5:1d:b1:cd:3e:fc:3d:2a:71:52:00:12:
98:02:59:b5:51:fe:ac:ba:57:18:8f:fe:1d:7f:56:
a6:9b:96:7a:fc:ca:ce:cc:fe:53:20:2a:a4:46:bf:
5b:2f:c0:c3:e3:b4:b3:15:7d:4a:94:77:83:a7:22:
fd:3f:d7:42:af:43:64:37:70:7c:00:ab:d3:05:6d:
4c:65:14:45:de:6f:c2:b7:ee:cc:49:37:c2:c0:38:
eb:4f:9c:d6:4a:e9:f5:48:74:50:b8:71:36:ed:2c:
84:a6:60:4d:9d:3e:7c:40:ac:5b:e5:8a:f3:a4:23:
eb:a3:e3:58:73:bb:51:bc:71:9e:25:bf:22:9c:4a:
84:fa:b5:34:3e:85:22:b3:27:63:0f:f4:b6:1a:f2:
fb:ed:b1:c6:14:9a:42:a7:da:67:7a:2c:27:50:b9:
32:aa:ea:16:3f:00:b1:f8:2e:4a:8f:1d:0e:3a:e9:
a0:2c:a7:67:04:98:4e:da:91:4b:a6:b1:d4:61:de:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:08:5B:D5:DD:B9:9D:B2:23:21:19:35:80:CD:DA:25:9C:EB:4D
X509v3 Authority Key Identifier:
keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2e:04:45:4e:cd:e5:28:42:15:c2:e9:11:f9:41:2a:ee:35:
cf:6e:03:bb:3d:c5:46:6c:71:ba:2f:ee:b1:63:94:29:c5:73:
59:3e:b2:14:18:76:fe:b3:62:18:21:7e:61:ae:9f:fd:fd:4e:
14:b1:84:15:ad:11:ca:31:b6:d7:fc:c8:1a:dd:85:b0:67:72:
be:ab:a6:c4:3e:84:47:f2:ff:85:9d:f7:02:db:54:d0:71:2e:
9c:27:e1:6e:b8:35:eb:c6:0b:d7:93:43:e8:77:ed:0a:26:40:
b2:9f:4b:11:b0:5f:1a:b1:de:97:c1:2e:a0:03:39:b6:8c:ff:
5f:37:1b:ec:be:9e:21:2f:07:db:b2:c8:8a:01:38:c7:fe:45:
55:1a:cf:18:6e:8a:04:14:3e:2a:ad:47:be:e5:4b:1a:39:52:
7b:8e:4b:dc:99:62:2a:7a:b2:49:f9:29:33:6b:28:5d:01:50:
53:d9:cc:ac:88:36:2e:5b:c1:1f:4d:a2:5e:61:04:6b:84:69:
c8:9b:ad:ed:0c:ef:d3:c8:f1:69:80:65:d9:66:c6:a9:32:67:
7e:bd:b6:bb:b1:95:ad:83:22:81:74:c9:e8:ed:8b:2f:fd:a2:
34:43:61:a7:ad:4c:6b:9a:ee:f4:65:d5:84:79:c3:55:20:ca:
37:0a:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:44 2025 by rpki-client