This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: nSUyGgvKd60tJhaETT2JAX5wF/OghIstWLu1dDj2yN8= Subject key identifier: 69:E8:15:0B:95:F5:FB:2B:34:56:48:E0:C4:18:79:34:D6:5C:90:69 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 663CCAE53C8F5D60274F63A39DCBBD300B196E53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03DF Signing time: Wed 17 Dec 2025 07:22:17 +0000 Manifest this update: Wed 17 Dec 2025 07:17:17 +0000 Manifest next update: Sat 20 Dec 2025 09:00:17 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: a+6G+QDRUilf9o5tPhiQsLvsJdSAvuPvTrqS15Jwnco=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3c:ca:e5:3c:8f:5d:60:27:4f:63:a3:9d:cb:bd:30:0b:19:6e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Dec 17 07:17:17 2025 GMT Not After : Dec 20 09:00:17 2025 GMT Subject: CN=69E8150B95F5FB2B345648E0C4187934D65C9069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:7a:d4:30:1f:b8:86:0d:48:f9:b8:79:2b: b2:f4:99:c9:25:2a:c2:52:99:56:2f:70:1a:13:bb: 90:18:36:6a:01:75:8d:21:1b:b8:83:1c:8b:61:2c: 09:26:78:d9:de:d6:5b:43:01:89:d9:70:39:63:06: 19:01:45:25:90:a1:0a:ac:55:9f:fe:5b:7e:18:24: 0b:25:d9:14:d2:01:a2:d6:39:a4:90:ee:1f:02:8f: 81:b5:34:6f:df:6a:4e:30:6f:8a:9e:df:5c:97:a5: e1:26:9e:ae:5a:0e:d8:5a:e8:8d:18:59:f6:bd:37: 14:29:98:c7:b3:38:5d:d2:60:a2:3c:0d:65:cb:31: 86:53:ff:db:c0:7c:9f:de:7c:28:f6:3d:90:97:81: 8e:f2:0c:f3:a2:76:68:d8:af:b1:5f:a1:b6:86:ec: 4c:7f:dd:99:96:57:31:a8:ec:af:c7:b6:e2:f7:25: 6e:2e:38:c2:d3:d0:07:16:1e:bc:db:1d:ab:37:75: 5b:56:69:29:36:c6:c6:8e:f5:a1:fe:50:1d:a3:71: f5:47:e9:03:bd:48:3a:bf:dd:3e:a2:52:a1:d6:c1: 16:37:b8:74:69:a0:96:de:6b:4a:29:60:75:4e:21: 5c:ee:ce:bf:30:5a:38:d3:88:df:ce:ca:16:7a:2c: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E8:15:0B:95:F5:FB:2B:34:56:48:E0:C4:18:79:34:D6:5C:90:69 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:05:13:d6:32:f8:7f:74:f0:06:5a:ac:94:6f:3c:40:50:3d: 55:4f:ec:80:bb:b0:42:03:f7:fe:f6:32:a1:19:41:fb:cf:4d: f2:ca:9e:17:23:aa:90:19:91:26:1d:1d:6b:37:11:5b:9c:ad: 42:77:a6:8c:4d:c6:2a:42:f4:57:a3:d4:ed:86:df:96:79:69: 87:2c:22:45:ec:56:cb:83:00:6a:af:07:eb:88:bc:5c:e5:99: cb:f2:e5:3f:67:e9:18:54:df:26:33:d6:76:19:41:bd:f0:9e: 7d:66:66:18:64:33:12:21:c9:e9:4e:7d:9f:db:79:59:b4:40: ee:57:c2:b9:ac:e9:51:0f:b2:ad:8a:1e:c9:24:29:1d:45:79: b4:63:2c:7e:d2:95:40:61:8c:be:0b:94:ab:9f:50:3f:77:d8: fb:2a:10:2b:e5:df:64:8e:02:63:52:65:e3:db:25:69:f3:59: cc:1b:f0:4a:28:85:6a:78:e8:f1:90:4c:b2:45:6a:aa:f3:0b: 1a:8d:63:29:42:61:ac:61:57:c5:0e:ce:6f:c0:a3:be:e5:cc: 61:a2:72:bd:33:b1:0f:eb:60:d5:d7:bc:68:71:1e:97:78:86: 14:71:c6:30:88:39:0b:f6:8d:14:36:46:4f:b5:d5:9b:8e:af: 59:01:32:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjzK5TyPXWAnT2Ojncu9MAsZblMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTEyMTcwNzE3MTdaFw0yNTEyMjAwOTAwMTdaMDMxMTAvBgNV BAMTKDY5RTgxNTBCOTVGNUZCMkIzNDU2NDhFMEM0MTg3OTM0RDY1QzkwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ynrUMB+4hg1I+bh5K7L0mckl KsJSmVYvcBoTu5AYNmoBdY0hG7iDHIthLAkmeNne1ltDAYnZcDljBhkBRSWQoQqs VZ/+W34YJAsl2RTSAaLWOaSQ7h8Cj4G1NG/fak4wb4qe31yXpeEmnq5aDtha6I0Y Wfa9NxQpmMezOF3SYKI8DWXLMYZT/9vAfJ/efCj2PZCXgY7yDPOidmjYr7FfobaG 7Ex/3ZmWVzGo7K/HtuL3JW4uOMLT0AcWHrzbHas3dVtWaSk2xsaO9aH+UB2jcfVH 6QO9SDq/3T6iUqHWwRY3uHRpoJbea0opYHVOIVzuzr8wWjjTiN/OyhZ6LGX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaegVC5X1+ys0VkjgxBh5NNZckGkwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoFE9Yy+H908AZarJRvPEBQPVVP7IC7sEID 9/72MqEZQfvPTfLKnhcjqpAZkSYdHWs3EVucrUJ3poxNxipC9Fej1O2G35Z5aYcs IkXsVsuDAGqvB+uIvFzlmcvy5T9n6RhU3yYz1nYZQb3wnn1mZhhkMxIhyelOfZ/b eVm0QO5Xwrms6VEPsq2KHskkKR1FebRjLH7SlUBhjL4LlKufUD932PsqECvl32SO AmNSZePbJWnzWcwb8EoohWp46PGQTLJFaqrzCxqNYylCYaxhV8UOzm/Ao77lzGGi cr0zsQ/rYNXXvGhxHpd4hhRxxjCIOQv2jRQ2Rk+11ZuOr1kBMnw= -----END CERTIFICATE-----Generated at Thu Dec 18 11:14:26 2025 by rpki-client