This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft File: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft (raw, json) Hash identifier: +4aC8ncOCQFcp4mHCILEpn8V9JJWw5SRQV3ct+COkR8= Subject key identifier: 06:52:68:9B:82:20:57:CB:BD:54:47:78:EE:D7:02:3A:E5:60:20:60 Authority key identifier: 3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB Certificate issuer: /CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Certificate serial: 5E03AA390953FF09B261B7CF5F3910D96B22BCD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft Manifest number: 0A Signing time: Thu 18 Dec 2025 10:01:59 +0000 Manifest this update: Thu 18 Dec 2025 09:56:59 +0000 Manifest next update: Sun 21 Dec 2025 14:24:59 +0000 Files and hashes: 1: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl (hash: K8RwKzzaO9lyagI080+XRb8tc/SQmU3N1wZy18Z7VjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:03:aa:39:09:53:ff:09:b2:61:b7:cf:5f:39:10:d9:6b:22:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Validity Not Before: Dec 18 09:56:59 2025 GMT Not After : Dec 21 14:24:59 2025 GMT Subject: CN=0652689B822057CBBD544778EED7023AE5602060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:83:31:27:9c:09:12:a1:b8:88:bd:38:92: c0:21:74:ce:37:2d:2b:1f:08:37:56:48:46:5f:af: 37:ff:25:1b:20:a4:9e:da:78:4c:73:62:77:67:37: b7:db:e1:36:9b:b0:06:38:9f:5d:79:62:45:e7:92: f0:3e:b1:d6:78:59:79:c0:2f:11:11:a4:fe:c6:07: be:4f:c4:17:37:c5:38:0a:63:bf:f9:54:fa:45:a2: cd:cc:51:d4:03:85:e1:2f:33:83:d3:98:50:27:eb: 89:59:48:40:ca:72:b2:07:64:05:c0:d9:dc:ac:6a: ea:bd:ef:6b:13:38:f4:65:95:77:10:73:80:b7:5a: b5:ef:41:b6:26:e0:c2:a1:b7:18:a3:bd:06:4b:0e: 6e:c2:1e:e6:0e:9a:c6:70:ab:e0:da:b7:53:b4:35: a9:f0:96:47:65:57:2c:f9:1d:d1:da:aa:c7:4a:68: 82:8a:9a:b6:05:67:25:33:cc:8e:ff:a9:8d:ff:93: 69:9a:a9:92:e5:fa:71:58:82:f1:0a:3c:63:e3:ec: 3b:00:cf:e8:70:bd:57:3a:67:c2:55:db:c4:1d:79: 94:e7:28:70:e4:8c:2a:55:1e:bf:de:3b:de:a4:74: 7e:2c:83:01:47:68:72:cb:eb:b5:2a:4d:e0:a7:49: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:52:68:9B:82:20:57:CB:BD:54:47:78:EE:D7:02:3A:E5:60:20:60 X509v3 Authority Key Identifier: keyid:3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:31:57:98:9a:89:1d:00:0f:18:bb:d3:07:9e:11:b0:78: c1:6b:5c:c1:dc:ce:4a:0e:a8:49:31:04:1a:76:26:7e:62:11: 54:67:80:77:48:65:e0:a5:7f:c5:13:b1:59:e1:a3:9f:87:af: 1e:95:23:41:eb:d8:d0:aa:6c:ba:19:f7:3d:13:2e:04:d3:4f: cb:9e:28:70:14:5a:47:99:91:39:99:4b:b1:93:9d:44:ff:7f: 01:70:a9:a6:45:b2:11:d1:35:bf:6e:da:67:ca:e1:c6:7e:dc: ba:16:be:bb:0c:f4:9b:7f:e1:bb:22:b0:5a:86:68:e8:cf:36: 8f:eb:46:80:04:ac:f7:b9:fb:a5:50:9b:a4:ba:18:47:e0:14: 44:73:56:d4:89:a9:05:0e:61:bf:b7:d1:77:33:a5:2e:48:88: 14:1e:3a:2c:2e:86:02:4c:43:a5:79:da:68:9e:31:6b:f5:5c: 5e:b7:62:87:85:f5:4c:2f:de:72:cd:b4:34:ee:fe:d8:02:3d: e2:36:e7:28:0e:54:2b:25:aa:3a:52:e0:14:89:81:63:a7:6e: ee:d0:c3:df:5d:91:01:a7:f8:60:8c:22:67:57:5d:a4:2e:b1: 9c:ad:65:6c:8c:f6:30:25:9d:24:ac:e3:fc:d8:f0:19:c9:9d: f3:2b:0b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgOqOQlT/wmyYbfPXzkQ2WsivNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENC RjY5QkJGQjAeFw0yNTEyMTgwOTU2NTlaFw0yNTEyMjExNDI0NTlaMDMxMTAvBgNV BAMTKDA2NTI2ODlCODIyMDU3Q0JCRDU0NDc3OEVFRDcwMjNBRTU2MDIwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKYMxJ5wJEqG4iL04ksAhdM43 LSsfCDdWSEZfrzf/JRsgpJ7aeExzYndnN7fb4TabsAY4n115YkXnkvA+sdZ4WXnA LxERpP7GB75PxBc3xTgKY7/5VPpFos3MUdQDheEvM4PTmFAn64lZSEDKcrIHZAXA 2dysauq972sTOPRllXcQc4C3WrXvQbYm4MKhtxijvQZLDm7CHuYOmsZwq+Dat1O0 NanwlkdlVyz5HdHaqsdKaIKKmrYFZyUzzI7/qY3/k2maqZLl+nFYgvEKPGPj7DsA z+hwvVc6Z8JV28QdeZTnKHDkjCpVHr/eO96kdH4sgwFHaHLL67UqTeCnSaT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlJom4IgV8u9VEd47tcCOuVgIGAwHwYDVR0j BBgwFoAUPHGhBQQdnqAe9MaW1F0NTL9pu/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUzMDllMi1mOTI5LTQyZDktOWMzYi1hOTFhMDA2OTBjZjEvMC8zQzcxQTEwNTA0 MUQ5RUEwMUVGNEM2OTZENDVEMEQ0Q0JGNjlCQkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENCRjY5 QkJGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBE NENCRjY5QkJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMKMVeYmokdAA8Yu9MHnhGweMFrXMHczkoO qEkxBBp2Jn5iEVRngHdIZeClf8UTsVnho5+Hrx6VI0Hr2NCqbLoZ9z0TLgTTT8ue KHAUWkeZkTmZS7GTnUT/fwFwqaZFshHRNb9u2mfK4cZ+3LoWvrsM9Jt/4bsisFqG aOjPNo/rRoAErPe5+6VQm6S6GEfgFERzVtSJqQUOYb+30XczpS5IiBQeOiwuhgJM Q6V52mieMWv1XF63YoeF9Uwv3nLNtDTu/tgCPeI25ygOVCslqjpS4BSJgWOnbu7Q w99dkQGn+GCMImdXXaQusZytZWyM9jAlnSSs4/zY8BnJnfMrCyU= -----END CERTIFICATE-----Generated at Fri Dec 19 10:50:24 2025 by rpki-client