This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: +wVcGXNlVR7/g8ymB3CZ5Uf2OZkLFkCdO6M9Z42n7cc= Subject key identifier: 7B:E4:CA:55:B0:3F:03:F4:4F:CE:AA:2F:31:97:F2:EE:19:65:9A:36 Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 7F225AE371AEB909EB157A353D6641D54ADBC078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 011D Signing time: Tue 23 Dec 2025 09:00:57 +0000 Manifest this update: Tue 23 Dec 2025 08:55:57 +0000 Manifest next update: Fri 26 Dec 2025 14:17:57 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) 2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) 3: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: tmGA/VJ1cXZslVOKEb2foYpHhZTg08hHVZ+XeQwyJpc=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:22:5a:e3:71:ae:b9:09:eb:15:7a:35:3d:66:41:d5:4a:db:c0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Dec 23 08:55:57 2025 GMT Not After : Dec 26 14:17:57 2025 GMT Subject: CN=7BE4CA55B03F03F44FCEAA2F3197F2EE19659A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:d8:a6:3a:57:87:9f:cd:67:45:7c:9e:e0: 2b:a9:a9:e5:cf:aa:36:ae:86:e8:4d:44:c9:d2:17: a6:10:43:d4:ff:2f:66:86:20:cc:58:ee:be:b2:9f: 84:0e:58:45:ac:08:26:15:80:09:1c:b0:45:43:76: 88:5d:89:3d:46:16:83:d0:d5:ae:06:ab:9c:b4:c5: 91:cf:e3:be:06:3d:c0:7e:55:a5:09:80:4f:55:ad: 93:74:82:7e:a7:9d:b9:5f:67:46:16:88:a1:78:e6: f2:0a:a2:da:88:23:7a:c0:0d:ea:c7:9b:3a:31:ba: 8b:91:eb:19:ac:f7:bb:2d:77:b0:28:c5:17:13:0e: 02:a0:dd:89:3f:82:3f:3d:4f:74:ae:5b:69:b0:7c: c6:73:9b:ef:7b:82:dd:0b:77:87:4d:b8:c1:02:00: 77:52:3a:a5:60:e7:5f:ba:03:ce:7d:2d:2a:73:69: 79:af:ff:90:05:2d:d8:50:88:af:62:92:db:b3:48: 81:b4:70:14:59:75:87:30:38:fb:d2:f8:0b:d4:fb: 2c:03:48:f9:65:10:7d:66:d9:fc:62:8f:02:3b:a2: 90:a4:00:19:c6:e2:b8:c5:b9:41:a3:c5:26:13:7f: 2e:3e:94:c0:a6:dc:8e:d3:5b:0c:f9:de:c7:95:a8: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E4:CA:55:B0:3F:03:F4:4F:CE:AA:2F:31:97:F2:EE:19:65:9A:36 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:af:97:64:19:e7:e6:fa:97:33:98:69:61:9f:df:b6:8a:2d: 0a:96:87:5e:ab:ec:5a:ea:3f:79:d1:7a:a6:8f:68:b1:60:6b: 29:a7:74:27:47:29:f5:12:13:38:b3:a7:94:d8:42:b6:81:9e: 6f:7a:b7:ef:ad:80:4e:8a:d8:52:89:3c:de:d6:96:27:e3:33: ee:dd:44:86:1d:ff:5d:ec:53:34:7d:88:24:3d:3f:38:5c:fc: 8c:ee:2d:27:35:b7:c2:65:e3:50:b7:e5:54:2e:9b:b3:e9:af: cf:24:a6:fa:82:b5:97:8c:0b:bb:a8:78:cb:d5:85:02:43:4c: cc:79:54:13:27:f5:97:2c:c7:b9:06:9c:1d:27:03:1a:7c:92: 4a:12:cb:32:96:ba:00:30:a7:48:06:ed:c8:98:84:cb:05:d0: a7:6d:86:27:6c:9c:fe:1e:d7:1c:c7:54:b9:71:68:15:39:88: c1:98:08:e3:d2:f2:4d:04:e3:e1:12:a4:05:0e:b0:60:22:05: 50:cb:10:ab:bf:7f:c6:ae:80:69:1d:71:2d:e0:08:24:0a:f6: b7:06:f0:f1:d5:3f:56:3b:bb:9c:82:de:43:07:6e:f6:59:6d: 2e:a2:cf:74:73:a7:17:db:9f:50:85:cb:f8:9c:ab:39:c6:8f: 84:9b:90:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyJa43GuuQnrFXo1PWZB1UrbwHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNTEyMjMwODU1NTdaFw0yNTEyMjYxNDE3NTdaMDMxMTAvBgNV BAMTKDdCRTRDQTU1QjAzRjAzRjQ0RkNFQUEyRjMxOTdGMkVFMTk2NTlBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JdimOleHn81nRXye4CupqeXP qjauhuhNRMnSF6YQQ9T/L2aGIMxY7r6yn4QOWEWsCCYVgAkcsEVDdohdiT1GFoPQ 1a4Gq5y0xZHP474GPcB+VaUJgE9VrZN0gn6nnblfZ0YWiKF45vIKotqII3rADerH mzoxuouR6xms97std7AoxRcTDgKg3Yk/gj89T3SuW2mwfMZzm+97gt0Ld4dNuMEC AHdSOqVg51+6A859LSpzaXmv/5AFLdhQiK9iktuzSIG0cBRZdYcwOPvS+AvU+ywD SPllEH1m2fxijwI7opCkABnG4rjFuUGjxSYTfy4+lMCm3I7TWwz53seVqA3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe+TKVbA/A/RPzqovMZfy7hllmjYwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqvl2QZ5+b6lzOYaWGf37aKLQqWh16r7Frq P3nReqaPaLFgaymndCdHKfUSEzizp5TYQraBnm96t++tgE6K2FKJPN7WlifjM+7d RIYd/13sUzR9iCQ9Pzhc/IzuLSc1t8Jl41C35VQum7Ppr88kpvqCtZeMC7uoeMvV hQJDTMx5VBMn9Zcsx7kGnB0nAxp8kkoSyzKWugAwp0gG7ciYhMsF0KdthidsnP4e 1xzHVLlxaBU5iMGYCOPS8k0E4+ESpAUOsGAiBVDLEKu/f8augGkdcS3gCCQK9rcG 8PHVP1Y7u5yC3kMHbvZZbS6iz3Rzpxfbn1CFy/icqznGj4SbkAE= -----END CERTIFICATE-----Generated at Wed Dec 24 13:38:51 2025 by rpki-client