This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: 5gJ2vghNnuc28XOJ7kHPlhnf18vQxZaH+LWUV0HEhDo= Subject key identifier: 02:69:C6:38:6A:08:97:FD:98:62:F1:70:FE:57:7D:BC:CA:22:1C:1F Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 75DCFA3003FB76FFEB91A81DA4DA6AE45A2EBF93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 023B Signing time: Wed 17 Dec 2025 12:22:01 +0000 Manifest this update: Wed 17 Dec 2025 12:17:01 +0000 Manifest next update: Sat 20 Dec 2025 20:24:01 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 2: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 3: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: LBINTfqMRnEJurRcZ38dqXJ9zteQwczHx0jYtUBIugM=) 4: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 5: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dc:fa:30:03:fb:76:ff:eb:91:a8:1d:a4:da:6a:e4:5a:2e:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Dec 17 12:17:01 2025 GMT Not After : Dec 20 20:24:01 2025 GMT Subject: CN=0269C6386A0897FD9862F170FE577DBCCA221C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:ac:c2:70:cc:c9:4a:ca:2a:98:f5:00:c0: 62:5d:bb:1d:33:48:a2:74:86:26:08:33:d3:a2:bf: 85:8e:34:34:5b:a8:37:50:b1:6a:82:7b:cf:f9:9a: d8:ff:85:fc:90:c8:5c:16:ca:87:9f:2b:f1:f0:de: 4a:77:ea:3c:f1:63:e0:07:41:44:d2:25:2c:02:14: 42:00:a5:39:6f:c1:f2:dc:94:94:75:da:17:96:27: 0f:8f:97:ac:f9:81:a2:95:84:c8:c2:51:af:38:c6: b5:4e:84:15:f1:b4:9c:2f:33:23:8c:f5:95:81:8b: 1d:2a:c1:94:31:d7:e3:9d:81:c2:3f:1d:c0:bf:3f: e8:01:09:17:2c:c8:9e:b4:ce:58:67:93:14:f7:3d: c6:91:dd:0e:ba:c1:61:4d:1b:86:fc:4b:5c:7c:49: cc:ce:98:5d:6a:a2:57:9d:6a:e0:94:8d:31:7c:54: bf:45:ac:6a:7b:e2:df:79:7c:77:45:5e:fa:60:61: f7:e4:f0:bc:66:92:1c:0f:fe:3e:bd:fc:09:c0:7b: d5:13:40:a9:a9:8d:6d:da:c0:e0:86:86:99:71:19: e5:cc:e0:3b:96:e2:62:6c:46:9e:82:b5:00:22:5a: a9:1f:d4:b8:39:f0:85:a8:ab:6c:c7:52:f7:cd:c5: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:C6:38:6A:08:97:FD:98:62:F1:70:FE:57:7D:BC:CA:22:1C:1F X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:ac:d5:89:fc:33:7f:c3:2e:f0:f7:61:71:52:60:7d:0d: 43:76:69:d2:25:e5:88:1a:88:a1:26:d1:b6:d6:31:8a:5b:11: 21:19:69:cf:66:4c:ed:0c:e0:1e:6a:7b:9c:df:f7:6a:3a:4c: 38:f6:29:58:fe:40:0d:d7:5f:98:b4:e5:74:87:80:ac:e0:29: ce:ab:e3:b4:f9:db:6c:50:3f:58:72:d5:fb:c7:93:42:38:40: 69:11:4f:55:a9:eb:29:5e:db:13:5c:6b:e8:6a:d8:35:f7:98: d7:4b:36:b7:92:82:ca:84:bd:37:f6:6e:65:41:e9:6f:8b:39: 3f:59:2d:8f:b7:48:0e:d2:e9:b0:f9:5f:8f:c9:95:8c:dc:f9: ef:2c:b5:d5:6e:4b:45:c0:ca:73:ae:7a:09:96:f7:ae:ba:a0: a8:bf:6a:7b:04:ae:aa:87:15:8d:1b:1d:ab:4b:23:1c:05:4a: 7d:37:e7:e6:7e:55:81:1d:2d:72:93:e9:ec:f6:e8:a4:de:62: d3:0d:b9:f8:41:c3:c4:30:b0:53:07:23:28:82:db:f6:c4:3c: 31:f6:c2:05:b3:d6:73:88:f4:78:18:bf:66:d1:a4:f0:5b:65: f6:8e:36:1e:e1:6d:af:ae:61:27:ff:ec:06:c6:f0:3e:71:2e: 8d:f7:0b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddz6MAP7dv/rkagdpNpq5Fouv5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTEyMTcxMjE3MDFaFw0yNTEyMjAyMDI0MDFaMDMxMTAvBgNV BAMTKDAyNjlDNjM4NkEwODk3RkQ5ODYyRjE3MEZFNTc3REJDQ0EyMjFDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvP6zCcMzJSsoqmPUAwGJdux0z SKJ0hiYIM9Oiv4WONDRbqDdQsWqCe8/5mtj/hfyQyFwWyoefK/Hw3kp36jzxY+AH QUTSJSwCFEIApTlvwfLclJR12heWJw+Pl6z5gaKVhMjCUa84xrVOhBXxtJwvMyOM 9ZWBix0qwZQx1+OdgcI/HcC/P+gBCRcsyJ60zlhnkxT3PcaR3Q66wWFNG4b8S1x8 SczOmF1qoledauCUjTF8VL9FrGp74t95fHdFXvpgYffk8LxmkhwP/j69/AnAe9UT QKmpjW3awOCGhplxGeXM4DuW4mJsRp6CtQAiWqkf1Lg58IWoq2zHUvfNxcbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmnGOGoIl/2YYvFw/ld9vMoiHB8wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB/rNWJ/DN/wy7w92FxUmB9DUN2adIl5Yga iKEm0bbWMYpbESEZac9mTO0M4B5qe5zf92o6TDj2KVj+QA3XX5i05XSHgKzgKc6r 47T522xQP1hy1fvHk0I4QGkRT1Wp6yle2xNca+hq2DX3mNdLNreSgsqEvTf2bmVB 6W+LOT9ZLY+3SA7S6bD5X4/JlYzc+e8stdVuS0XAynOuegmW9666oKi/ansErqqH FY0bHatLIxwFSn035+Z+VYEdLXKT6ez26KTeYtMNufhBw8QwsFMHIyiC2/bEPDH2 wgWz1nOI9HgYv2bRpPBbZfaONh7hba+uYSf/7AbG8D5xLo33C4Q= -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:49 2025 by rpki-client