This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: XKi1WvmlZ4r4SkgZaXUm50Jq3C5pRQxa0k42FkUfGp8= Subject key identifier: 74:29:6B:DF:32:E0:6B:2F:F0:D9:1F:0D:7D:EF:88:F7:07:0B:D1:4F Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 40BC5DB61EC9DF60941335E89FDF65F4ECED7DD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02DF Signing time: Tue 16 Dec 2025 21:11:24 +0000 Manifest this update: Tue 16 Dec 2025 21:06:24 +0000 Manifest next update: Fri 19 Dec 2025 21:51:24 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: cc4DUhA07KefTH+hWmAb4SQYGgovRqxG3kS9UTJp+0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:5d:b6:1e:c9:df:60:94:13:35:e8:9f:df:65:f4:ec:ed:7d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Dec 16 21:06:24 2025 GMT Not After : Dec 19 21:51:24 2025 GMT Subject: CN=74296BDF32E06B2FF0D91F0D7DEF88F7070BD14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:42:6c:87:75:a2:46:0d:c0:45:4c:e4:88: da:0a:3c:05:8f:c0:9c:14:0f:73:5b:52:fd:18:af: 74:b3:68:da:0a:b0:5d:7f:16:b4:3b:68:0d:de:de: d2:2c:fa:77:b9:6e:3a:07:22:b4:f0:8e:16:38:7c: 3a:c5:98:fe:66:21:29:83:29:af:52:77:27:be:78: d7:e4:02:45:d8:56:95:9f:b4:f0:a5:91:4b:f2:39: c5:7d:e2:3a:04:86:ba:e9:a1:10:3c:ea:e7:da:19: 6a:05:73:f6:54:9f:bb:a7:95:b2:2d:84:4d:3e:99: 90:b0:85:0c:4e:2d:fd:73:f5:b8:0a:89:cf:94:43: ee:e7:0f:5b:b1:12:e7:4d:07:3d:d9:89:0e:00:a6: 34:24:3c:2a:1a:38:98:18:a2:32:b3:51:51:8e:c3: cc:05:5b:47:64:77:5d:db:d3:ad:7d:c4:e8:2d:af: 59:68:09:7f:a7:4f:b2:26:c6:a9:c0:b4:23:74:38: 17:a7:9e:28:d2:5c:b4:8b:5d:63:14:32:c3:6a:37: e7:f6:9a:b0:e4:c9:b5:8f:8e:7c:71:ba:fb:88:c5: 1d:ee:0d:a9:90:9f:6a:79:3b:51:f6:dd:4f:33:7c: ec:c3:b4:b5:87:dc:4a:42:18:1b:bb:bb:2b:c9:69: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:6B:DF:32:E0:6B:2F:F0:D9:1F:0D:7D:EF:88:F7:07:0B:D1:4F X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:92:55:43:a3:d5:42:7f:c5:27:03:ba:45:bb:85:da:74:b1: 9a:78:80:c5:76:cb:3c:dd:5d:3c:6b:2e:f3:d1:fc:4b:76:8b: 7f:d8:f9:e9:0a:eb:2e:0f:03:74:97:34:c3:56:a2:bf:cc:1a: 5b:a5:1d:4d:52:e9:40:77:ca:3c:b1:6a:66:2f:4c:0e:bb:aa: 01:da:9e:e7:1b:e2:47:f3:b8:67:1c:f0:b8:20:31:be:99:16: 4f:4d:8f:b0:00:44:48:32:7d:04:b0:1f:f4:f9:14:9f:41:23: cf:f8:2b:1f:f1:62:1a:74:57:9f:92:63:21:0f:a6:3e:2f:02: 6b:12:db:6f:64:b3:d6:30:84:5f:ff:d8:a1:a0:fa:90:0c:fa: e5:a5:2d:f3:24:fb:d3:eb:cd:ae:f8:3e:cb:8e:af:de:2b:b2: 97:40:5e:85:53:f0:50:1d:0a:f5:ec:6d:86:1d:20:22:b3:35: 72:5a:21:b5:fb:3f:18:cc:b8:df:64:23:a5:f0:c9:3c:7e:ad: 6d:0f:e0:b6:36:e7:b7:b4:8c:68:47:e1:74:2d:e8:0f:5e:c5: 52:1b:bb:bd:52:53:e5:4a:ee:94:10:c2:90:82:4e:b0:58:e1: 56:dd:dd:10:2b:b8:f9:c4:be:42:4f:54:c0:96:9d:d9:d3:7f: bc:e6:31:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLxdth7J32CUEzXon99l9OztfdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTEyMTYyMTA2MjRaFw0yNTEyMTkyMTUxMjRaMDMxMTAvBgNV BAMTKDc0Mjk2QkRGMzJFMDZCMkZGMEQ5MUYwRDdERUY4OEY3MDcwQkQxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54EJsh3WiRg3ARUzkiNoKPAWP wJwUD3NbUv0Yr3SzaNoKsF1/FrQ7aA3e3tIs+ne5bjoHIrTwjhY4fDrFmP5mISmD Ka9Sdye+eNfkAkXYVpWftPClkUvyOcV94joEhrrpoRA86ufaGWoFc/ZUn7unlbIt hE0+mZCwhQxOLf1z9bgKic+UQ+7nD1uxEudNBz3ZiQ4ApjQkPCoaOJgYojKzUVGO w8wFW0dkd13b0619xOgtr1loCX+nT7ImxqnAtCN0OBennijSXLSLXWMUMsNqN+f2 mrDkybWPjnxxuvuIxR3uDamQn2p5O1H23U8zfOzDtLWH3EpCGBu7uyvJaRNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdClr3zLgay/w2R8Nfe+I9wcL0U8wHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOSVUOj1UJ/xScDukW7hdp0sZp4gMV2yzzd XTxrLvPR/Et2i3/Y+ekK6y4PA3SXNMNWor/MGlulHU1S6UB3yjyxamYvTA67qgHa nucb4kfzuGcc8LggMb6ZFk9Nj7AAREgyfQSwH/T5FJ9BI8/4Kx/xYhp0V5+SYyEP pj4vAmsS229ks9YwhF//2KGg+pAM+uWlLfMk+9Prza74PsuOr94rspdAXoVT8FAd CvXsbYYdICKzNXJaIbX7PxjMuN9kI6XwyTx+rW0P4LY257e0jGhH4XQt6A9exVIb u71SU+VK7pQQwpCCTrBY4Vbd3RAruPnEvkJPVMCWndnTf7zmMRs= -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:18 2025 by rpki-client