This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: 9OZEEA1BxtyPPXLr85gWrOzefm38CKNLoZIQ0OidqtQ= Subject key identifier: AC:8E:26:75:51:72:E1:36:F6:8A:92:E4:3C:A9:00:60:F5:0F:B6:E0 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 52A94887B8908B615D818297D3F642B872F1048F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 0543 Signing time: Sun 21 Dec 2025 01:52:46 +0000 Manifest this update: Sun 21 Dec 2025 01:47:46 +0000 Manifest next update: Wed 24 Dec 2025 13:30:46 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 2: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: 9ESCnKsZPZOF8hLElWAJRRJ5JcxiHFT//lhk9r5g7Ks=) 3: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 6: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a9:48:87:b8:90:8b:61:5d:81:82:97:d3:f6:42:b8:72:f1:04:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Dec 21 01:47:46 2025 GMT Not After : Dec 24 13:30:46 2025 GMT Subject: CN=AC8E26755172E136F68A92E43CA90060F50FB6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:f5:be:09:f5:8d:ac:05:ae:2c:92:db:24: 36:ad:6a:16:10:6c:49:d3:6d:31:85:40:b9:ac:3f: ab:9c:8e:91:f1:83:bc:10:6a:6d:e5:9c:dc:d5:07: b1:5a:49:8b:16:81:9c:14:04:42:c9:16:a4:b9:b0: ec:fd:13:3d:a9:86:27:14:8e:58:df:c9:56:f8:13: af:ec:f8:36:f1:f0:d7:86:29:55:59:0f:9c:68:55: 26:a7:28:cb:bf:6b:38:cc:ab:b3:d8:25:94:20:f6: ed:10:b6:e5:d5:48:1c:d7:03:1e:59:81:7e:a8:ee: 41:9f:7b:7c:37:e0:af:ba:4e:f9:45:1c:03:5c:31: bd:4d:29:14:5f:bd:1a:9e:bd:17:36:92:06:72:5c: 3e:d8:45:ca:f5:ae:51:5b:54:0e:2c:04:c5:37:b8: b5:a5:7c:7c:ad:12:55:66:ca:46:4e:f4:80:cd:ac: 51:4b:5b:d4:a5:70:b5:eb:8c:46:a3:0e:84:10:c2: 2a:e4:0b:4c:87:1d:50:fa:d6:6a:0c:18:29:ed:12: 38:3e:91:32:c1:13:ac:41:63:d3:9d:52:5e:34:c7: e8:ac:53:48:09:d5:08:a0:55:da:b9:17:33:76:70: ad:00:a5:12:44:7d:a5:ed:73:0d:93:88:6a:fa:af: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8E:26:75:51:72:E1:36:F6:8A:92:E4:3C:A9:00:60:F5:0F:B6:E0 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:8f:ae:21:12:a6:a1:72:8f:8a:dd:b3:5c:13:60:5d:95: 7f:ee:95:09:b9:ca:e2:21:e7:94:bb:2c:db:58:6d:45:ac:1e: ac:48:ee:7b:b2:94:e4:50:f1:22:e2:a2:55:b9:17:3e:91:96: b0:74:a7:d7:88:ea:da:09:79:75:4f:61:66:bb:24:a6:56:d7: 51:32:d9:fb:c7:b1:dd:28:a7:41:07:25:8a:2d:83:16:09:79: 03:7b:f2:f7:df:f5:1a:8d:dd:ff:9d:19:35:7d:f4:5a:ca:70: a2:3c:82:73:dc:54:96:43:a9:17:3f:df:4e:01:30:d9:83:96: 61:4c:d9:25:d0:1d:7d:fc:11:bc:de:16:f2:30:9f:61:03:67: 5e:b6:79:1d:35:67:d4:d6:9d:39:24:c5:5f:ca:76:af:53:58: 3a:49:1d:5f:f6:91:c1:6e:f7:f5:da:7f:fb:58:16:12:39:fd: 29:15:10:9b:25:ae:66:7f:88:5b:77:5d:db:7c:0e:0a:c5:ff: 9f:5f:81:0d:28:2f:0b:b3:ad:57:b0:f2:40:18:77:1b:b8:d7: d7:f3:97:5d:30:1f:31:61:3a:bf:b3:f9:dd:7e:8c:14:db:f7: 74:c7:b4:87:05:c8:52:8e:04:a1:fb:1b:0a:98:07:96:33:ea: 3b:46:d8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqlIh7iQi2FdgYKX0/ZCuHLxBI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTEyMjEwMTQ3NDZaFw0yNTEyMjQxMzMwNDZaMDMxMTAvBgNV BAMTKEFDOEUyNjc1NTE3MkUxMzZGNjhBOTJFNDNDQTkwMDYwRjUwRkI2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhfW+CfWNrAWuLJLbJDatahYQ bEnTbTGFQLmsP6ucjpHxg7wQam3lnNzVB7FaSYsWgZwUBELJFqS5sOz9Ez2phicU jljfyVb4E6/s+Dbx8NeGKVVZD5xoVSanKMu/azjMq7PYJZQg9u0QtuXVSBzXAx5Z gX6o7kGfe3w34K+6TvlFHANcMb1NKRRfvRqevRc2kgZyXD7YRcr1rlFbVA4sBMU3 uLWlfHytElVmykZO9IDNrFFLW9SlcLXrjEajDoQQwirkC0yHHVD61moMGCntEjg+ kTLBE6xBY9OdUl40x+isU0gJ1QigVdq5FzN2cK0ApRJEfaXtcw2TiGr6r6cvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrI4mdVFy4Tb2ipLkPKkAYPUPtuAwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJIj64hEqahco+K3bNcE2BdlX/ulQm5yuIh 55S7LNtYbUWsHqxI7nuylORQ8SLiolW5Fz6RlrB0p9eI6toJeXVPYWa7JKZW11Ey 2fvHsd0op0EHJYotgxYJeQN78vff9RqN3f+dGTV99FrKcKI8gnPcVJZDqRc/304B MNmDlmFM2SXQHX38EbzeFvIwn2EDZ162eR01Z9TWnTkkxV/Kdq9TWDpJHV/2kcFu 9/Xaf/tYFhI5/SkVEJslrmZ/iFt3Xdt8DgrF/59fgQ0oLwuzrVew8kAYdxu419fz l10wHzFhOr+z+d1+jBTb93THtIcFyFKOBKH7GwqYB5Yz6jtG2PM= -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:30 2025 by rpki-client