This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: XnC6ePp3EGpr21n+ec/2ZFe/mOSM84AXtNDm2txe9bk= Subject key identifier: 6D:0B:B4:76:93:86:68:02:29:20:14:C5:4F:EA:33:03:AF:F6:20:A5 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 6C470F600735C400833603296DF2C9A089F548BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 0124 Signing time: Thu 18 Dec 2025 14:02:08 +0000 Manifest this update: Thu 18 Dec 2025 13:57:08 +0000 Manifest next update: Mon 22 Dec 2025 01:16:08 +0000 Files and hashes: 1: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 3: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: rCFpsMIXH6xuE8SublgyPl2ws8JM3x9fBfDKL7EJPzQ=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:47:0f:60:07:35:c4:00:83:36:03:29:6d:f2:c9:a0:89:f5:48:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Dec 18 13:57:08 2025 GMT Not After : Dec 22 01:16:08 2025 GMT Subject: CN=6D0BB47693866802292014C54FEA3303AFF620A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:c0:24:92:fb:55:f4:19:f4:18:ee:19:0e: 26:d9:30:4f:e6:a9:1c:86:71:8d:58:e9:f8:01:1a: b1:ea:39:fa:c9:de:02:20:bc:7d:aa:db:26:fe:df: d3:58:b9:33:e0:cc:5f:1e:ce:e4:06:28:a0:9d:49: c5:bd:f3:6d:18:af:62:ca:d9:d8:68:f6:13:1b:0c: f1:8b:58:0b:4f:ed:e5:01:92:0c:f7:ff:eb:7c:bf: a8:6c:42:3f:70:40:d8:cb:56:7c:3d:ec:64:11:20: 15:a4:e7:4c:5f:80:46:5f:d7:11:7d:a2:85:8e:ab: ec:59:03:82:59:82:d1:40:8e:e9:68:88:b9:6e:5b: ba:e1:5c:03:11:41:ad:33:02:ea:f9:df:46:07:2e: a0:0d:14:6d:b2:c6:25:b2:e5:33:8d:b9:2a:00:af: 5b:3f:0c:1b:54:e6:93:4c:4c:15:81:59:89:4e:cb: 59:a7:21:8b:8f:9a:87:1f:bf:8d:cc:55:19:7f:3c: 4f:88:4c:37:01:44:8e:72:f7:23:24:44:b8:3f:06: 51:ee:ae:98:90:6c:68:ce:61:2c:4c:a5:90:7f:ec: 2f:54:08:af:6c:35:d9:8f:30:d5:7d:60:e0:95:ba: 80:dc:10:b1:24:50:d2:99:54:7b:03:dc:25:46:cf: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0B:B4:76:93:86:68:02:29:20:14:C5:4F:EA:33:03:AF:F6:20:A5 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ab:4c:69:bd:2b:5f:2d:8c:3f:0e:64:8f:22:28:df:05:25: bd:40:1a:29:ab:5a:b2:fe:a5:d9:87:49:0b:db:2f:f2:21:6c: b5:6a:cd:10:8c:e1:55:89:10:fd:f3:4f:b6:84:37:91:69:af: f8:51:b6:d1:49:02:49:15:2b:5e:4f:2f:63:6b:62:75:25:84: 6a:49:2b:3e:7b:8c:5a:98:d7:dd:c3:f7:91:87:5e:13:1f:bb: ca:15:c0:4d:49:c6:50:39:87:04:ed:46:1a:f3:27:7b:a8:5b: 56:34:54:73:ca:60:e2:31:ef:6d:71:45:62:8d:0e:65:aa:36: d1:e5:d8:55:59:8b:57:fd:1a:c9:45:56:07:cc:b2:e0:25:95: ce:49:d8:1c:e6:5b:cb:4f:41:91:a0:82:9c:f9:2d:d7:63:c7: 2e:f4:87:27:46:2d:10:ee:25:25:cd:e5:71:3f:49:07:4d:d9: 3e:a2:1c:01:b3:c7:ba:b6:ad:07:94:47:3b:d9:97:37:89:e0: 5c:17:48:e3:1b:98:a3:c2:37:99:7f:67:00:7c:ff:9f:f9:ca: 5f:2e:2a:00:ad:60:c7:29:f4:a2:73:59:f8:09:b8:0d:61:33: 7a:88:5c:96:59:ac:30:56:9d:78:1d:7e:b9:de:f0:44:9b:fa: 25:9e:48:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEcPYAc1xACDNgMpbfLJoIn1SLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTEyMTgxMzU3MDhaFw0yNTEyMjIwMTE2MDhaMDMxMTAvBgNV BAMTKDZEMEJCNDc2OTM4NjY4MDIyOTIwMTRDNTRGRUEzMzAzQUZGNjIwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeosAkkvtV9Bn0GO4ZDibZME/m qRyGcY1Y6fgBGrHqOfrJ3gIgvH2q2yb+39NYuTPgzF8ezuQGKKCdScW9820Yr2LK 2dho9hMbDPGLWAtP7eUBkgz3/+t8v6hsQj9wQNjLVnw97GQRIBWk50xfgEZf1xF9 ooWOq+xZA4JZgtFAjuloiLluW7rhXAMRQa0zAur530YHLqANFG2yxiWy5TONuSoA r1s/DBtU5pNMTBWBWYlOy1mnIYuPmocfv43MVRl/PE+ITDcBRI5y9yMkRLg/BlHu rpiQbGjOYSxMpZB/7C9UCK9sNdmPMNV9YOCVuoDcELEkUNKZVHsD3CVGz3KvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbQu0dpOGaAIpIBTFT+ozA6/2IKUwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmrTGm9K18tjD8OZI8iKN8FJb1AGimrWrL+ pdmHSQvbL/IhbLVqzRCM4VWJEP3zT7aEN5Fpr/hRttFJAkkVK15PL2NrYnUlhGpJ Kz57jFqY193D95GHXhMfu8oVwE1JxlA5hwTtRhrzJ3uoW1Y0VHPKYOIx721xRWKN DmWqNtHl2FVZi1f9GslFVgfMsuAllc5J2BzmW8tPQZGggpz5Lddjxy70hydGLRDu JSXN5XE/SQdN2T6iHAGzx7q2rQeURzvZlzeJ4FwXSOMbmKPCN5l/ZwB8/5/5yl8u KgCtYMcp9KJzWfgJuA1hM3qIXJZZrDBWnXgdfrne8ESb+iWeSGc= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:19 2025 by rpki-client