This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: hShA8VvnCas1OuGUycU3EF8AWyeqZl5Cmkb8Md0RxO8= Subject key identifier: 33:CD:DA:9E:9A:32:C2:72:DE:8B:95:92:2E:BE:77:C5:40:E8:F1:DA Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 53CA9E52A367E29CBC43F79C4CFE1115B6F9B610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 02D3 Signing time: Wed 17 Dec 2025 00:52:28 +0000 Manifest this update: Wed 17 Dec 2025 00:47:28 +0000 Manifest next update: Sat 20 Dec 2025 05:55:28 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: +FiEMQn+bof+/ZdEFGp6Dq9/UIExpSElpnCjlOgif5Q=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: 9OAoWczmJPqSai15ZAPOgSohr4eVEGJzypq/J/xc2bI=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: jViwUvKpH3REt2G/ZR7JiRF7Hwf3hscpXp6g0ME48Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:9e:52:a3:67:e2:9c:bc:43:f7:9c:4c:fe:11:15:b6:f9:b6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Dec 17 00:47:28 2025 GMT Not After : Dec 20 05:55:28 2025 GMT Subject: CN=33CDDA9E9A32C272DE8B95922EBE77C540E8F1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:61:f2:6f:d3:cd:2b:ec:32:a3:31:47:ca: 28:82:2d:87:3b:a8:d7:97:9d:7e:83:9f:ba:07:fb: 43:a8:1f:a6:ce:45:3f:a7:8d:f8:97:34:ce:b5:c3: b5:6b:82:dc:5b:be:1d:0d:ae:76:b8:a7:c5:dd:48: d9:88:9d:57:94:c2:28:5e:fe:23:03:49:9d:2b:03: 10:27:d2:14:1e:7e:22:b2:78:0e:76:89:66:73:d8: 0c:70:e1:d5:8b:0f:c7:46:7b:29:ab:98:42:be:81: 62:70:13:2f:ce:19:eb:93:b5:4d:8c:7c:e4:f1:93: 25:f0:f1:52:84:30:93:e6:15:4e:32:63:29:ea:cc: 20:3d:22:28:84:c4:27:34:34:01:9a:75:7d:d6:d8: 67:5f:89:88:67:c5:c1:0a:2d:0e:f1:94:10:a6:10: 7a:a4:f2:ff:0e:a6:de:98:a8:f4:27:30:3a:fc:05: da:7a:8e:5e:c8:a5:a2:48:5a:3f:42:30:79:55:d0: bc:2e:33:d3:ed:4d:b4:89:a7:ac:92:16:61:0b:5f: 91:01:22:4a:93:c2:5c:2b:55:e7:47:eb:90:50:5c: d5:96:9a:8b:94:ce:68:b2:b3:27:4d:83:fa:dd:74: b4:d4:3d:52:46:bf:d7:e9:b9:b9:79:15:98:83:46: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CD:DA:9E:9A:32:C2:72:DE:8B:95:92:2E:BE:77:C5:40:E8:F1:DA X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:91:8e:24:b7:16:8b:e7:1e:3d:13:e1:6c:a8:06:3d:ea:67: e8:0c:91:f2:35:53:9e:63:5d:2c:4c:dc:f1:96:10:3d:4b:26: 7e:43:3f:00:4e:b6:35:66:45:2c:b5:b1:79:09:95:e2:10:3c: 75:6e:b5:82:6f:cc:88:ea:47:0b:23:e7:55:d0:bb:4e:81:71: 48:0c:08:b2:50:56:ae:c0:22:d9:e3:ef:81:31:c7:b1:a2:59: 22:d3:b7:66:3a:e4:6d:e1:87:73:61:61:53:50:2e:52:d1:5a: d9:0b:a0:7b:03:53:f4:63:ee:a6:9d:e5:7d:a8:47:b3:2f:ce: 30:b1:ba:a8:0d:ff:ea:c2:8b:ba:3a:00:6f:f2:33:00:cc:c6: d6:25:09:e3:e3:04:1c:71:a7:09:3d:14:94:d5:59:4d:5f:66: f3:b9:05:cf:09:7c:ef:6e:cc:d9:05:7c:ec:5a:a3:89:1c:a6: 28:e6:87:9c:71:fd:e9:9e:1d:77:24:bc:fc:82:a7:ee:f8:76: 50:93:6f:3d:08:02:25:35:7f:37:08:08:6e:e1:5c:83:10:16: 3d:39:d1:20:8f:ab:41:2a:ed:0e:38:0d:31:67:0c:e2:3d:64: 2e:d7:bf:28:22:c9:9c:03:5b:fc:d9:dc:ff:ea:8b:fa:27:7e: 65:24:4c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8qeUqNn4py8Q/ecTP4RFbb5thAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTEyMTcwMDQ3MjhaFw0yNTEyMjAwNTU1MjhaMDMxMTAvBgNV BAMTKDMzQ0REQTlFOUEzMkMyNzJERThCOTU5MjJFQkU3N0M1NDBFOEYxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK2Hyb9PNK+wyozFHyiiCLYc7 qNeXnX6Dn7oH+0OoH6bORT+njfiXNM61w7Vrgtxbvh0Nrna4p8XdSNmInVeUwihe /iMDSZ0rAxAn0hQefiKyeA52iWZz2Axw4dWLD8dGeymrmEK+gWJwEy/OGeuTtU2M fOTxkyXw8VKEMJPmFU4yYynqzCA9IiiExCc0NAGadX3W2GdfiYhnxcEKLQ7xlBCm EHqk8v8Opt6YqPQnMDr8Bdp6jl7IpaJIWj9CMHlV0LwuM9PtTbSJp6ySFmELX5EB IkqTwlwrVedH65BQXNWWmouUzmiysydNg/rddLTUPVJGv9fpubl5FZiDRnq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM83anpoywnLei5WSLr53xUDo8dowHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6RjiS3FovnHj0T4WyoBj3qZ+gMkfI1U55j XSxM3PGWED1LJn5DPwBOtjVmRSy1sXkJleIQPHVutYJvzIjqRwsj51XQu06BcUgM CLJQVq7AItnj74Exx7GiWSLTt2Y65G3hh3NhYVNQLlLRWtkLoHsDU/Rj7qad5X2o R7MvzjCxuqgN/+rCi7o6AG/yMwDMxtYlCePjBBxxpwk9FJTVWU1fZvO5Bc8JfO9u zNkFfOxao4kcpijmh5xx/emeHXckvPyCp+74dlCTbz0IAiU1fzcICG7hXIMQFj05 0SCPq0Eq7Q44DTFnDOI9ZC7XvygiyZwDW/zZ3P/qi/onfmUkTCw= -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:49 2025 by rpki-client