This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: z1Xe3qkqmYvfNpCZJSbmUGmI1EmkrEsO5QK9K7YNyto= Subject key identifier: DC:46:0A:CD:40:70:D3:93:D2:1B:FE:99:70:9F:D3:28:FF:2C:EA:43 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 0A5E5E486C062EA2F7216201BB4A0C03F5AFEE57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0423 Signing time: Mon 22 Dec 2025 23:12:25 +0000 Manifest this update: Mon 22 Dec 2025 23:07:25 +0000 Manifest next update: Fri 26 Dec 2025 07:12:25 +0000 Files and hashes: 1: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: JTg97fqG6/yht+9XRobGkH7tHQfr15/feCeeGumqacw=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=) 3: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5e:5e:48:6c:06:2e:a2:f7:21:62:01:bb:4a:0c:03:f5:af:ee:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Dec 22 23:07:25 2025 GMT Not After : Dec 26 07:12:25 2025 GMT Subject: CN=DC460ACD4070D393D21BFE99709FD328FF2CEA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:25:65:68:00:0a:ac:dd:89:e8:82:58:1f: 8d:b0:56:46:ca:7f:db:4b:6a:67:a5:f1:55:54:b3: 0c:ac:41:b9:6a:f5:18:23:53:0f:41:97:d2:03:3f: 7f:85:6b:0d:c2:bb:1b:b9:ef:f5:1c:49:71:87:89: 8a:ed:12:0a:30:c0:38:c5:b3:b2:89:97:8b:dd:f4: 2a:c7:91:9f:74:1e:d5:1b:12:58:d3:16:60:f6:db: ab:af:4d:73:3a:f6:77:8b:6d:45:4b:7d:f2:1f:aa: 05:1f:0d:b9:8d:f6:64:12:af:03:e5:45:3c:fc:93: 68:31:b4:0e:15:a4:80:e0:44:a3:56:06:ff:8a:0e: 66:03:4c:04:3c:6e:a2:3e:14:d1:02:1a:8b:24:bd: 71:5f:99:46:3d:bc:7c:16:af:01:0b:0a:a2:6a:31: 84:92:89:e7:67:70:3a:ce:07:46:94:1a:7d:3f:d2: 4e:f7:3e:30:de:fd:0e:fc:75:87:82:b0:e2:91:8b: db:05:ce:a2:78:36:b2:23:a1:4e:ea:a8:a8:d7:03: 24:aa:0f:4e:6e:f7:3e:da:ef:b8:9f:98:bc:2e:e3: 02:71:e2:97:11:e8:8c:75:9d:3f:8c:d3:ec:4a:62: cd:82:a7:b8:28:e2:bf:8b:17:81:c9:cb:86:52:b4: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:0A:CD:40:70:D3:93:D2:1B:FE:99:70:9F:D3:28:FF:2C:EA:43 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:fc:89:5f:63:04:3d:ec:19:00:e8:6f:8c:7f:84:84:3c: 79:5c:75:45:ed:ea:9c:8d:ab:42:cd:1e:96:f9:43:2b:a9:1c: 56:86:74:d0:95:58:6e:c2:d2:72:68:cd:50:92:0e:84:43:60: 27:96:d2:1b:df:26:f7:89:4a:a6:92:43:21:e5:45:1a:8e:93: 35:db:19:3c:b3:55:89:2c:1b:31:c1:ad:a1:36:e5:33:98:45: fe:40:18:c1:f8:2f:93:36:59:cc:0b:b0:f0:00:93:ce:07:9c: 03:27:dc:2e:ee:e2:e1:0c:e2:a5:77:cc:57:b6:3d:a3:cc:e0: 97:37:16:b4:58:40:2e:76:bf:c5:2c:29:f4:63:0c:0d:da:04: 85:f4:1c:11:46:f2:e2:05:d1:70:63:89:b7:3d:23:a1:8b:2b: 87:72:94:d0:d1:18:e1:67:3b:d0:5d:7f:25:42:fa:bd:68:ae: cf:6e:6c:68:75:0c:b0:d9:b0:72:59:96:2d:92:73:17:fd:66: 9f:98:bd:b3:01:4d:5d:bb:f3:bf:55:f2:6d:56:0d:d9:10:3b: 03:65:e5:1a:90:65:31:29:87:3f:0c:94:8b:c1:0a:92:80:05: ee:72:fe:23:47:02:5e:1e:8d:9b:c4:86:77:b2:a2:a1:7e:ce: 30:ad:50:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCl5eSGwGLqL3IWIBu0oMA/Wv7lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTEyMjIyMzA3MjVaFw0yNTEyMjYwNzEyMjVaMDMxMTAvBgNV BAMTKERDNDYwQUNENDA3MEQzOTNEMjFCRkU5OTcwOUZEMzI4RkYyQ0VBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aiVlaAAKrN2J6IJYH42wVkbK f9tLamel8VVUswysQblq9RgjUw9Bl9IDP3+Faw3Cuxu57/UcSXGHiYrtEgowwDjF s7KJl4vd9CrHkZ90HtUbEljTFmD226uvTXM69neLbUVLffIfqgUfDbmN9mQSrwPl RTz8k2gxtA4VpIDgRKNWBv+KDmYDTAQ8bqI+FNECGoskvXFfmUY9vHwWrwELCqJq MYSSiedncDrOB0aUGn0/0k73PjDe/Q78dYeCsOKRi9sFzqJ4NrIjoU7qqKjXAySq D05u9z7a77ifmLwu4wJx4pcR6Ix1nT+M0+xKYs2Cp7go4r+LF4HJy4ZStHN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3EYKzUBw05PSG/6ZcJ/TKP8s6kMwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc7/IlfYwQ97BkA6G+Mf4SEPHlcdUXt6pyN q0LNHpb5QyupHFaGdNCVWG7C0nJozVCSDoRDYCeW0hvfJveJSqaSQyHlRRqOkzXb GTyzVYksGzHBraE25TOYRf5AGMH4L5M2WcwLsPAAk84HnAMn3C7u4uEM4qV3zFe2 PaPM4Jc3FrRYQC52v8UsKfRjDA3aBIX0HBFG8uIF0XBjibc9I6GLK4dylNDRGOFn O9BdfyVC+r1ors9ubGh1DLDZsHJZli2Scxf9Zp+YvbMBTV27879V8m1WDdkQOwNl 5RqQZTEphz8MlIvBCpKABe5y/iNHAl4ejZvEhneyoqF+zjCtUMU= -----END CERTIFICATE-----Generated at Thu Dec 25 03:04:20 2025 by rpki-client