This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: jM89A8W6IobE6uMjDZPRKn4vEmY+id+hJsR2pnZHhvQ= Subject key identifier: 3A:F0:7E:17:45:65:A1:C5:2B:3D:31:A2:69:83:CA:1C:55:AD:3C:CA Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 3ABA8721199306EE4C78BB4139300BE19C330B14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: 0108 Signing time: Wed 17 Dec 2025 08:51:08 +0000 Manifest this update: Wed 17 Dec 2025 08:46:08 +0000 Manifest next update: Sat 20 Dec 2025 16:24:08 +0000 Files and hashes: 1: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 2: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) 3: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: 8WhufP8hkG3hzwtj/retxFHcAlwpy3EaX8xVAA3+GTw=) 4: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:87:21:19:93:06:ee:4c:78:bb:41:39:30:0b:e1:9c:33:0b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Dec 17 08:46:08 2025 GMT Not After : Dec 20 16:24:08 2025 GMT Subject: CN=3AF07E174565A1C52B3D31A26983CA1C55AD3CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:d8:3a:ea:1f:85:f7:1f:d0:d8:4c:96:77: d1:b8:d9:94:65:36:14:0c:c3:73:a0:e9:9a:15:2a: a8:f7:e5:05:8c:cb:a4:e5:b9:07:be:99:8f:63:45: 44:31:dc:93:40:40:d2:bf:b4:7a:1f:69:56:40:40: 5a:6e:56:54:8b:8f:a1:58:7f:ce:60:63:b1:85:0f: ad:81:56:1c:20:0c:20:37:5a:31:c5:d1:eb:3b:0d: d2:e6:49:73:3b:97:74:a4:a3:88:c8:8b:40:60:87: 69:7c:38:9a:99:dd:c7:26:f2:9d:e6:34:32:fc:e6: d9:25:5f:3e:3e:63:1f:71:5f:c4:67:6d:f9:9a:51: 79:5c:ad:2a:48:8e:f8:ad:78:c4:cf:1d:a4:74:a4: 28:3a:0d:73:4d:b9:b4:23:9c:38:96:05:49:9a:d2: fa:e7:c9:8f:f1:ef:62:5b:99:d8:ba:49:84:ca:23: ba:39:6f:06:cc:29:67:16:9f:5c:e7:36:8a:e9:a2: d5:3c:8d:01:e6:13:eb:14:65:b9:d8:04:ec:fc:04: 3e:d5:46:4f:52:24:32:a0:8b:73:81:74:05:e8:73: 9a:03:9e:25:bc:0b:e6:7b:9c:6e:e3:25:63:b0:dd: 01:04:dc:3a:85:bd:a2:bc:ae:31:4e:02:8d:51:1c: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:7E:17:45:65:A1:C5:2B:3D:31:A2:69:83:CA:1C:55:AD:3C:CA X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:96:45:1a:69:f5:54:cd:27:ef:7c:6c:d9:41:6f:3c:e3:ca: d3:4c:3d:fb:7d:e4:98:64:fc:64:26:23:34:a0:e0:92:33:3c: 36:73:93:3e:75:dd:fe:4a:09:be:7b:29:01:59:09:b0:33:a6: 4f:90:7e:e7:e8:f8:70:cd:ec:54:e9:eb:fb:46:dc:f5:2e:8b: 87:b9:68:57:3e:08:aa:c9:1a:fb:8f:92:c6:5a:7d:6c:ef:76: be:2f:bb:83:e1:26:fe:31:84:56:cf:c5:98:08:6d:c7:65:8f: fc:7c:b0:6e:ed:73:bf:ec:9d:20:05:bc:17:75:6b:a7:4f:c0: e5:27:fe:30:04:46:6e:c4:69:c6:df:02:7d:89:83:85:4a:38: 8b:34:30:c4:f6:3b:94:19:b9:56:be:cb:a5:40:7e:aa:43:dc: a2:65:26:7c:83:19:65:07:17:ad:ed:06:d0:58:77:3d:67:e7: 5a:c4:81:7b:a9:75:06:0b:c7:ad:9e:7f:30:de:30:dd:2b:14: 89:d8:d8:71:14:3b:55:fc:6c:47:20:09:fb:cf:10:d1:ff:be: e3:ae:35:90:dd:ba:e7:fb:f2:b7:bd:c3:ae:f4:b7:e7:50:f4: 4d:9d:67:a9:42:bf:0d:63:8d:4b:f8:95:91:35:1e:03:40:89: 08:51:4a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrqHIRmTBu5MeLtBOTAL4ZwzCxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTEyMTcwODQ2MDhaFw0yNTEyMjAxNjI0MDhaMDMxMTAvBgNV BAMTKDNBRjA3RTE3NDU2NUExQzUyQjNEMzFBMjY5ODNDQTFDNTVBRDNDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmtg66h+F9x/Q2EyWd9G42ZRl NhQMw3Og6ZoVKqj35QWMy6TluQe+mY9jRUQx3JNAQNK/tHofaVZAQFpuVlSLj6FY f85gY7GFD62BVhwgDCA3WjHF0es7DdLmSXM7l3Sko4jIi0Bgh2l8OJqZ3ccm8p3m NDL85tklXz4+Yx9xX8RnbfmaUXlcrSpIjviteMTPHaR0pCg6DXNNubQjnDiWBUma 0vrnyY/x72Jbmdi6SYTKI7o5bwbMKWcWn1znNorpotU8jQHmE+sUZbnYBOz8BD7V Rk9SJDKgi3OBdAXoc5oDniW8C+Z7nG7jJWOw3QEE3DqFvaK8rjFOAo1RHIU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvB+F0VlocUrPTGiaYPKHFWtPMowHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyWRRpp9VTNJ+98bNlBbzzjytNMPft95Jhk /GQmIzSg4JIzPDZzkz513f5KCb57KQFZCbAzpk+Qfufo+HDN7FTp6/tG3PUui4e5 aFc+CKrJGvuPksZafWzvdr4vu4PhJv4xhFbPxZgIbcdlj/x8sG7tc7/snSAFvBd1 a6dPwOUn/jAERm7EacbfAn2Jg4VKOIs0MMT2O5QZuVa+y6VAfqpD3KJlJnyDGWUH F63tBtBYdz1n51rEgXupdQYLx62efzDeMN0rFInY2HEUO1X8bEcgCfvPENH/vuOu NZDduuf78re9w670t+dQ9E2dZ6lCvw1jjUv4lZE1HgNAiQhRSjQ= -----END CERTIFICATE-----Generated at Wed Dec 17 11:21:38 2025 by rpki-client