This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: oBoaLnt0cwL9Zh6HGzl2F8lMrFtG/UX0pbVqI8kOFo0= Subject key identifier: 76:F3:4E:DE:E7:68:53:BF:8D:62:A3:91:D2:E9:D0:BE:2B:CB:41:57 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 6AFE5FF5867FADA3A16621A88DB89F4B774885F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 012A Signing time: Wed 24 Dec 2025 00:52:54 +0000 Manifest this update: Wed 24 Dec 2025 00:47:54 +0000 Manifest next update: Sat 27 Dec 2025 11:33:54 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: c0nDVnK2MeaIIxBDeZ0Mq/6OiILnB5olSfK0XUykdYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fe:5f:f5:86:7f:ad:a3:a1:66:21:a8:8d:b8:9f:4b:77:48:85:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Dec 24 00:47:54 2025 GMT Not After : Dec 27 11:33:54 2025 GMT Subject: CN=76F34EDEE76853BF8D62A391D2E9D0BE2BCB4157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:d3:39:c2:fd:46:14:f5:99:0b:72:03:2f: f8:2e:3e:4b:1a:9c:7d:00:a1:f4:b3:ea:4c:29:16: 52:81:6b:b8:36:3d:8e:75:36:c8:13:6d:1d:be:ea: 64:a0:5f:4c:dc:0c:ec:2a:dd:43:2b:20:34:79:a6: 00:c1:be:01:24:07:37:c6:8f:1e:90:29:5f:7a:05: 87:16:42:43:9f:f6:14:7b:ce:4f:76:d8:46:3b:38: f5:d9:93:8c:2f:58:45:9c:a1:9e:99:ac:97:b6:46: f0:97:49:aa:db:b0:5b:fa:69:d4:97:99:20:32:66: f0:e4:db:15:e2:20:be:7a:8e:59:57:57:9c:ea:7b: 02:ec:6b:50:d6:a5:35:3e:2f:69:46:ab:1d:d3:32: c4:f4:43:c9:c8:10:32:a3:ac:e5:da:8c:88:4d:11: 5c:1d:b8:81:c2:f5:86:ee:27:43:4c:51:14:02:48: 34:67:25:9b:c2:07:56:ed:f4:75:37:9b:c9:14:92: 82:fb:66:8b:35:5c:c7:e2:1d:94:89:f2:81:d2:14: be:1c:d8:4b:6c:90:fc:b4:f6:a5:da:ff:61:1d:32: a2:1a:29:5b:fb:0f:44:c8:09:6a:ee:bf:f5:20:bc: 0d:69:ce:7a:5b:73:c2:55:28:02:5f:30:2d:09:55: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F3:4E:DE:E7:68:53:BF:8D:62:A3:91:D2:E9:D0:BE:2B:CB:41:57 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a1:f9:5d:8f:0c:cb:e8:76:9b:c5:f7:cf:6f:29:2f:e1:b7: af:78:66:db:a1:5b:ac:25:06:18:05:f4:d2:3c:c6:77:a6:7a: 7c:cf:7c:30:cd:b1:b1:48:1b:ff:fa:c8:a3:f4:15:51:5a:10: fa:e0:54:3e:56:7d:56:b5:10:5d:0e:95:4c:b4:34:0c:25:df: a1:7d:87:66:c8:99:f3:33:9d:52:b7:d6:7a:6d:c7:c9:f6:1b: 68:eb:f9:21:19:b2:8f:02:40:62:f5:a9:73:a6:3e:ab:ea:44: 26:b4:7f:95:19:5e:da:dd:1c:47:21:65:10:22:3e:9e:0a:61: be:9f:eb:07:bf:1a:18:7e:c8:2f:60:e3:d2:39:b8:24:66:e3: b6:b8:86:db:13:b1:28:96:aa:6c:d5:96:30:0c:91:35:c0:81: c8:48:48:bc:c6:44:5a:2e:1a:e4:5e:09:08:e3:d9:91:97:e5: e7:4f:c6:00:03:3f:0c:69:7b:c0:81:4c:1b:57:34:c9:45:ab: d3:32:51:a8:e4:8d:7d:3a:4f:e2:8c:04:1e:bf:4a:a6:86:bb: 68:7b:29:aa:43:37:1d:7c:dc:bc:4c:4f:09:00:74:0c:89:25: 58:a5:8a:3e:86:87:35:62:3b:94:ea:57:67:2c:6b:02:8d:f6: e6:3c:39:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUav5f9YZ/raOhZiGojbifS3dIhfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEyMjQwMDQ3NTRaFw0yNTEyMjcxMTMzNTRaMDMxMTAvBgNV BAMTKDc2RjM0RURFRTc2ODUzQkY4RDYyQTM5MUQyRTlEMEJFMkJDQjQxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SdM5wv1GFPWZC3IDL/guPksa nH0AofSz6kwpFlKBa7g2PY51NsgTbR2+6mSgX0zcDOwq3UMrIDR5pgDBvgEkBzfG jx6QKV96BYcWQkOf9hR7zk922EY7OPXZk4wvWEWcoZ6ZrJe2RvCXSarbsFv6adSX mSAyZvDk2xXiIL56jllXV5zqewLsa1DWpTU+L2lGqx3TMsT0Q8nIEDKjrOXajIhN EVwduIHC9YbuJ0NMURQCSDRnJZvCB1bt9HU3m8kUkoL7Zos1XMfiHZSJ8oHSFL4c 2EtskPy09qXa/2EdMqIaKVv7D0TICWruv/UgvA1pznpbc8JVKAJfMC0JVZ+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdvNO3udoU7+NYqOR0unQvivLQVcwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKh+V2PDMvodpvF989vKS/ht694ZtuhW6wl BhgF9NI8xnemenzPfDDNsbFIG//6yKP0FVFaEPrgVD5WfVa1EF0OlUy0NAwl36F9 h2bImfMznVK31nptx8n2G2jr+SEZso8CQGL1qXOmPqvqRCa0f5UZXtrdHEchZRAi Pp4KYb6f6we/Ghh+yC9g49I5uCRm47a4htsTsSiWqmzVljAMkTXAgchISLzGRFou GuReCQjj2ZGX5edPxgADPwxpe8CBTBtXNMlFq9MyUajkjX06T+KMBB6/SqaGu2h7 KapDNx183LxMTwkAdAyJJVilij6GhzViO5TqV2csawKN9uY8OYU= -----END CERTIFICATE-----Generated at Wed Dec 24 21:51:28 2025 by rpki-client