This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: CDTuge+VwthRMdWeY1arGEh/WYF6KdLJP4AAEDsOt3s= Subject key identifier: 13:EB:40:62:01:80:09:A2:2A:EF:09:E2:E6:39:01:6B:95:58:7A:E5 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 4035DF9548244E342A15D1A204EC5682C49E1D5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0128 Signing time: Fri 19 Dec 2025 16:22:13 +0000 Manifest this update: Fri 19 Dec 2025 16:17:13 +0000 Manifest next update: Tue 23 Dec 2025 00:37:13 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: M8PAEgHWe1Edd3HkxMiSD9Q3k1c6xW8yTA53TvqickM=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:35:df:95:48:24:4e:34:2a:15:d1:a2:04:ec:56:82:c4:9e:1d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Dec 19 16:17:13 2025 GMT Not After : Dec 23 00:37:13 2025 GMT Subject: CN=13EB4062018009A22AEF09E2E639016B95587AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:4c:01:07:1d:d5:22:8f:5f:53:05:bd:1b: e6:65:59:e6:8c:32:b8:b1:59:64:28:24:02:4a:66: 43:f0:27:87:48:82:ad:91:00:5a:ca:72:e2:21:68: c8:7a:b0:2d:28:e9:c1:fe:40:97:07:3a:6f:96:d6: 78:ee:67:84:d4:f9:83:0c:73:df:7b:cf:af:80:4a: ff:8d:7b:45:47:e7:cf:e5:59:08:58:e3:cc:f1:a5: ef:bf:3e:b9:be:07:e2:f6:23:b0:8b:91:cf:b0:2e: 8c:2e:e0:43:e3:26:af:45:87:91:37:0e:81:ca:47: 3e:b0:94:e6:6c:d7:f4:d6:30:8d:73:22:7b:8f:f2: 2f:14:d8:98:50:88:0f:56:8d:09:a3:a6:a5:a5:70: c0:c6:b9:05:e5:c5:07:38:02:d5:3b:4a:bf:65:96: 89:08:06:ff:f2:36:61:91:df:be:90:48:b0:9a:4e: 6a:ec:ed:7d:9e:48:e8:dc:c4:01:72:f5:9f:27:a2: ba:3e:db:32:1c:e4:40:17:31:1e:f9:76:40:4e:78: 05:60:06:06:78:c6:89:a9:34:75:23:f6:17:93:df: 87:74:56:df:44:9a:e8:36:23:38:15:2c:30:8b:90: 46:83:0e:46:e8:b2:33:16:fc:4b:43:81:20:f6:76: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EB:40:62:01:80:09:A2:2A:EF:09:E2:E6:39:01:6B:95:58:7A:E5 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:5a:63:eb:9b:ca:40:63:50:b5:b0:8f:f0:f4:ef:d7:d2: 84:3a:fe:01:3c:21:2d:c7:e5:d4:78:0e:f6:b4:ab:fe:1e:2d: 17:62:68:c9:68:49:7a:2a:8e:32:ea:a5:98:5d:46:13:9f:52: ba:14:ba:b0:30:d3:f1:09:8a:f5:0b:c8:7e:58:c8:c6:67:67: 27:46:12:d4:25:cc:c0:cb:a6:2f:85:54:0b:06:d2:fc:a4:cf: 4d:0f:33:4b:a4:88:56:d2:7c:a1:4e:cc:86:9e:ff:9b:94:76: b0:85:44:56:45:1e:b6:68:af:15:45:52:d5:de:bc:37:05:c1: dc:91:89:3b:b4:99:4c:3b:70:c4:76:dc:c9:3f:39:a6:bf:8b: 70:59:6f:1a:67:9b:b5:d9:1f:08:00:18:f8:c8:21:47:38:4c: 21:ed:e5:5d:4a:2e:38:c6:d2:49:f8:97:11:f9:3b:3d:f3:c4: 1b:8f:d0:71:1c:6c:eb:e5:dc:02:08:66:53:1e:d2:83:eb:ec: 72:98:35:e6:5e:78:26:07:bb:f4:e7:6b:62:c6:a6:53:9e:95: 1a:63:a1:86:f6:58:a7:19:29:66:41:8a:4f:85:f7:1b:f7:7b: 1b:6a:18:57:d3:0e:bd:ef:ee:53:e2:e6:88:ff:d0:6d:20:5b: 0b:c6:25:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDXflUgkTjQqFdGiBOxWgsSeHV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEyMTkxNjE3MTNaFw0yNTEyMjMwMDM3MTNaMDMxMTAvBgNV BAMTKDEzRUI0MDYyMDE4MDA5QTIyQUVGMDlFMkU2MzkwMTZCOTU1ODdBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNUwBBx3VIo9fUwW9G+ZlWeaM MrixWWQoJAJKZkPwJ4dIgq2RAFrKcuIhaMh6sC0o6cH+QJcHOm+W1njuZ4TU+YMM c997z6+ASv+Ne0VH58/lWQhY48zxpe+/Prm+B+L2I7CLkc+wLowu4EPjJq9Fh5E3 DoHKRz6wlOZs1/TWMI1zInuP8i8U2JhQiA9WjQmjpqWlcMDGuQXlxQc4AtU7Sr9l lokIBv/yNmGR376QSLCaTmrs7X2eSOjcxAFy9Z8noro+2zIc5EAXMR75dkBOeAVg BgZ4xompNHUj9heT34d0Vt9Emug2IzgVLDCLkEaDDkbosjMW/EtDgSD2duQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE+tAYgGACaIq7wni5jkBa5VYeuUwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxsWmPrm8pAY1C1sI/w9O/X0oQ6/gE8IS3H 5dR4Dva0q/4eLRdiaMloSXoqjjLqpZhdRhOfUroUurAw0/EJivULyH5YyMZnZydG EtQlzMDLpi+FVAsG0vykz00PM0ukiFbSfKFOzIae/5uUdrCFRFZFHrZorxVFUtXe vDcFwdyRiTu0mUw7cMR23Mk/Oaa/i3BZbxpnm7XZHwgAGPjIIUc4TCHt5V1KLjjG 0kn4lxH5Oz3zxBuP0HEcbOvl3AIIZlMe0oPr7HKYNeZeeCYHu/Tna2LGplOelRpj oYb2WKcZKWZBik+F9xv3extqGFfTDr3v7lPi5oj/0G0gWwvGJY8= -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:32 2025 by rpki-client