This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: d5CvExITrkFumGlYg3376E7hUScMZ1YSe6kqHnzTcmU= Subject key identifier: D7:CE:66:E9:34:C4:6E:89:B6:86:7E:E4:A0:03:E1:C1:6E:29:30:6D Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 100E009D43D91F96C8B8D890F11AECC0D6081175 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 053E Signing time: Sun 28 Dec 2025 00:12:02 +0000 Manifest this update: Sun 28 Dec 2025 00:07:02 +0000 Manifest next update: Wed 31 Dec 2025 09:28:02 +0000 Files and hashes: 1: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 2: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: MG/J/pE598W0dSws8CxeYL22B2yFb4db9pJ8veM+SQU=) 3: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 4: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) 5: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 6: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: zubx4XjBq87KwKwie4SbJb3Fj1Zuzvqgr/H/hHvCf/0=) 7: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 8: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 9: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: 3d/V5R3s99pTSM8/puBLUbnmOCHIHkwIjm/VO8zQunM=) 10: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 11: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: fIkIpHXzaqCHNxCG6X2MWkJKY0BIzdIi0ICJ0NLvemI=) 12: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 13: 3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa (hash: 6ydyDgUt3ZY0YnrLuFwNCWDzxfmHy7oR4fvhY53u9z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0e:00:9d:43:d9:1f:96:c8:b8:d8:90:f1:1a:ec:c0:d6:08:11:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Dec 28 00:07:02 2025 GMT Not After : Dec 31 09:28:02 2025 GMT Subject: CN=D7CE66E934C46E89B6867EE4A003E1C16E29306D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:14:d0:67:ea:ed:17:16:7e:5c:2d:7b:7f:e2: c9:ee:54:81:3a:dc:6e:c3:86:c4:8e:ff:25:15:5c: 0e:8e:99:e8:ec:fa:67:1b:80:2a:24:58:aa:ef:3b: fe:5c:2c:d4:29:36:2d:02:78:fd:5b:f6:7a:f2:8c: 44:11:b5:ed:7b:c0:3f:fa:1e:2c:3d:a7:0d:fd:22: f0:8a:61:a2:e8:38:86:60:44:f3:07:91:76:3f:06: 31:0e:fb:9d:cb:4f:3b:ba:60:5b:b7:7c:d9:71:5a: 46:57:d1:34:68:25:96:c8:04:1d:92:f9:e7:a1:0c: 6a:63:90:69:3d:3d:68:13:84:e1:6e:8c:c7:7c:42: f1:39:b3:e6:fd:a2:1c:3b:5c:69:05:9a:56:8e:6a: c1:48:f3:ee:e0:34:9f:71:fe:d2:9a:5c:21:8c:5b: 80:f5:1b:1f:5a:ab:84:fd:31:58:8d:ef:54:f5:f8: 7c:79:39:24:21:d4:85:58:a5:21:5a:36:03:e8:70: fc:5f:d9:d0:67:63:71:b7:67:c2:3e:c5:22:c6:77: 1b:62:5a:59:0a:ca:fa:55:de:15:17:88:01:2a:02: 0c:16:6d:48:a8:b0:cc:c7:ff:86:5b:e9:fd:2b:16: f0:8c:e6:be:83:9c:a2:54:c1:ee:c0:d7:a5:6b:9f: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:66:E9:34:C4:6E:89:B6:86:7E:E4:A0:03:E1:C1:6E:29:30:6D X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:45:59:63:4e:24:5a:2b:0e:fc:b2:cb:85:67:03:26:03:e7: 58:2e:d1:e4:09:fd:6e:12:0f:00:c0:95:37:f7:25:c2:37:ac: fc:19:db:6d:bd:12:63:ff:7d:e1:3f:bc:b6:00:6a:18:67:5f: 76:28:bb:da:fa:96:47:20:36:7a:d9:c0:7d:c7:eb:5a:c1:08: 50:c1:bd:c7:f0:55:30:e6:8b:34:f9:c4:f7:ce:8c:b5:79:60: fb:7a:84:b5:8f:bc:43:86:bd:97:81:68:d2:b2:a3:03:7c:7b: 15:f0:96:4b:54:c3:c0:ed:d9:1b:67:1e:b7:0f:29:a2:5f:1b: b3:c8:4c:45:ba:16:e9:20:ec:35:b1:18:ac:e6:61:c7:59:b8: 6e:b2:4e:73:03:3c:65:ba:b2:2e:b7:3b:76:fa:35:52:14:75: d9:a2:56:34:76:aa:af:f3:05:e2:1b:45:e4:8a:c9:d0:cf:b9: 96:7d:68:4c:53:35:9e:cc:f9:89:91:e9:22:c0:0d:58:27:1c: a2:db:24:20:84:3a:6c:fc:57:ee:06:77:16:79:0a:09:b7:9b: 5f:e9:94:22:87:14:a4:50:6d:84:77:90:58:3f:48:e5:db:56: f1:4b:db:05:43:aa:63:6a:26:9d:9d:18:94:2b:76:02:a2:c7: ec:34:c8:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEA4AnUPZH5bIuNiQ8RrswNYIEXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTEyMjgwMDA3MDJaFw0yNTEyMzEwOTI4MDJaMDMxMTAvBgNV BAMTKEQ3Q0U2NkU5MzRDNDZFODlCNjg2N0VFNEEwMDNFMUMxNkUyOTMwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxFNBn6u0XFn5cLXt/4snuVIE6 3G7DhsSO/yUVXA6Omejs+mcbgCokWKrvO/5cLNQpNi0CeP1b9nryjEQRte17wD/6 Hiw9pw39IvCKYaLoOIZgRPMHkXY/BjEO+53LTzu6YFu3fNlxWkZX0TRoJZbIBB2S +eehDGpjkGk9PWgThOFujMd8QvE5s+b9ohw7XGkFmlaOasFI8+7gNJ9x/tKaXCGM W4D1Gx9aq4T9MViN71T1+Hx5OSQh1IVYpSFaNgPocPxf2dBnY3G3Z8I+xSLGdxti WlkKyvpV3hUXiAEqAgwWbUiosMzH/4Zb6f0rFvCM5r6DnKJUwe7A16Vrn7HdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU185m6TTEbom2hn7koAPhwW4pMG0wHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdFWWNOJForDvyyy4VnAyYD51gu0eQJ/W4S DwDAlTf3JcI3rPwZ2229EmP/feE/vLYAahhnX3You9r6lkcgNnrZwH3H61rBCFDB vcfwVTDmizT5xPfOjLV5YPt6hLWPvEOGvZeBaNKyowN8exXwlktUw8Dt2RtnHrcP KaJfG7PITEW6Fukg7DWxGKzmYcdZuG6yTnMDPGW6si63O3b6NVIUddmiVjR2qq/z BeIbReSKydDPuZZ9aExTNZ7M+YmR6SLADVgnHKLbJCCEOmz8V+4GdxZ5Cgm3m1/p lCKHFKRQbYR3kFg/SOXbVvFL2wVDqmNqJp2dGJQrdgKix+w0yCc= -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:29 2025 by rpki-client