This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: mikq7AkFuCHhUC8nF7cA/HUYKsEI7FXzSGyKTFShHdU= Subject key identifier: 5E:2B:1A:43:66:7F:04:1D:AD:F8:AC:2E:5E:97:BD:1D:03:CD:1A:72 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 020082B2FD21910ADAD465343BA1B8F43344B9CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 23:12:39 +0000 Manifest this update: Thu 18 Dec 2025 23:07:39 +0000 Manifest next update: Mon 22 Dec 2025 06:58:39 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: S+fKz1yyy/kZYSOAbj890MMm08Y5Xzzl3ao9LSR8meI=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:82:b2:fd:21:91:0a:da:d4:65:34:3b:a1:b8:f4:33:44:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Dec 18 23:07:39 2025 GMT Not After : Dec 22 06:58:39 2025 GMT Subject: CN=5E2B1A43667F041DADF8AC2E5E97BD1D03CD1A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:3a:ab:51:f3:40:ca:a5:f1:d3:49:e5:77: 33:e1:ee:1d:6f:ed:3b:4b:97:8f:15:6c:53:fd:fd: 3d:1f:92:ef:d4:3b:5c:85:c8:01:39:57:62:02:ff: 32:94:dc:9d:75:7c:56:89:3b:b9:bc:01:03:f4:57: 1a:c7:02:19:71:68:18:e1:da:e8:5f:a3:75:4d:85: 29:38:6c:1d:0f:de:dc:03:84:70:14:ce:4f:63:80: dc:25:ec:ad:3a:85:6d:21:ce:d2:8c:49:4e:3a:f0: ca:2a:27:93:2b:f5:99:c4:5a:d0:99:07:4c:9f:4b: c5:e6:28:f5:06:12:8c:65:aa:5f:a6:d9:bb:7d:47: dd:cd:c5:b4:85:fb:52:28:7e:f5:c5:c0:d5:df:86: d5:72:f5:43:e8:d3:ff:bb:6a:1d:97:b9:1b:f5:8c: 60:d5:d7:36:47:e6:4f:eb:fb:6a:64:70:f0:28:50: 87:3f:ef:41:35:59:0f:92:d8:ac:be:f3:2a:b1:b2: a8:57:21:46:90:2c:cc:cf:e4:8b:1f:2e:ff:37:01: 6f:06:a2:5f:d3:99:39:a1:42:85:99:32:41:fe:9f: 40:f3:c5:ff:a7:77:3d:86:cb:3e:c9:2d:2e:ba:34: e9:8b:ca:e0:7a:27:69:a3:d9:7c:19:11:e6:ce:14: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:1A:43:66:7F:04:1D:AD:F8:AC:2E:5E:97:BD:1D:03:CD:1A:72 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e8:6a:d6:fd:10:3d:22:2f:0c:ab:fb:e6:58:c3:70:37:1a: 53:bf:cd:5c:ef:f7:88:ed:c4:6d:a8:ac:c5:80:d2:4c:65:ba: 74:fb:35:0c:53:5a:6f:f0:56:e0:f4:e8:96:b7:2c:7c:af:53: 4a:bd:b2:a4:1a:92:bc:f7:0c:04:07:4d:8a:ff:78:77:0d:90: b9:0f:8b:d1:fd:04:51:a6:55:77:98:c4:64:50:59:6b:e7:5c: 0f:b6:93:fa:02:22:75:17:89:d9:fa:20:17:6b:1d:ea:44:e5: 02:c9:f5:ed:d6:dc:2c:8c:ec:70:d9:11:5f:18:77:aa:eb:17: cd:74:77:bd:7b:cd:c7:02:7a:24:be:3d:5f:77:dd:68:72:6d: dc:d7:70:0b:e4:18:84:e7:3a:02:b0:b4:36:08:9e:c4:1c:35: e1:80:ab:95:ab:16:e3:a6:5b:0b:af:03:8c:30:26:a4:59:e2: 0e:f5:6c:84:f2:7e:66:57:e5:06:be:51:1e:2b:75:6d:1c:76: d8:7f:9a:97:8e:56:bd:d2:e3:ae:92:11:d8:81:cf:41:e2:e3: 27:34:89:0f:15:c4:be:d0:09:f2:3c:b6:92:6c:a4:fc:08:21: f4:b8:25:00:f1:c4:26:59:fb:eb:14:32:5a:e1:5d:13:90:22: 54:2b:b0:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgCCsv0hkQra1GU0O6G49DNEucowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTEyMTgyMzA3MzlaFw0yNTEyMjIwNjU4MzlaMDMxMTAvBgNV BAMTKDVFMkIxQTQzNjY3RjA0MURBREY4QUMyRTVFOTdCRDFEMDNDRDFBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ljqrUfNAyqXx00nldzPh7h1v 7TtLl48VbFP9/T0fku/UO1yFyAE5V2IC/zKU3J11fFaJO7m8AQP0VxrHAhlxaBjh 2uhfo3VNhSk4bB0P3twDhHAUzk9jgNwl7K06hW0hztKMSU468MoqJ5Mr9ZnEWtCZ B0yfS8XmKPUGEoxlql+m2bt9R93NxbSF+1IofvXFwNXfhtVy9UPo0/+7ah2XuRv1 jGDV1zZH5k/r+2pkcPAoUIc/70E1WQ+S2Ky+8yqxsqhXIUaQLMzP5IsfLv83AW8G ol/TmTmhQoWZMkH+n0Dzxf+ndz2Gyz7JLS66NOmLyuB6J2mj2XwZEebOFPk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXisaQ2Z/BB2t+KwuXpe9HQPNGnIwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXoatb9ED0iLwyr++ZYw3A3GlO/zVzv94jt xG2orMWA0kxlunT7NQxTWm/wVuD06Ja3LHyvU0q9sqQakrz3DAQHTYr/eHcNkLkP i9H9BFGmVXeYxGRQWWvnXA+2k/oCInUXidn6IBdrHepE5QLJ9e3W3CyM7HDZEV8Y d6rrF810d717zccCeiS+PV933WhybdzXcAvkGITnOgKwtDYInsQcNeGAq5WrFuOm WwuvA4wwJqRZ4g71bITyfmZX5Qa+UR4rdW0cdth/mpeOVr3S466SEdiBz0Hi4yc0 iQ8VxL7QCfI8tpJspPwIIfS4JQDxxCZZ++sUMlrhXROQIlQrsKE= -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:07 2025 by rpki-client