This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: h6F6mxu5YFiBAaIZc4v922RjZ8HJGam898nBVcdyjLk= Subject key identifier: 5B:B0:58:63:21:6F:5C:FA:D4:65:B2:6B:72:B9:F4:9C:81:40:3C:E2 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 47C256742D28AB0B495D7389C9E050109C6B57D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0126 Signing time: Mon 15 Dec 2025 08:32:14 +0000 Manifest this update: Mon 15 Dec 2025 08:27:14 +0000 Manifest next update: Thu 18 Dec 2025 13:44:14 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 7DSDm2gcOIJX92P0tB4vHXi0oylCXercA1xHAk68j2A=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 13:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c2:56:74:2d:28:ab:0b:49:5d:73:89:c9:e0:50:10:9c:6b:57:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Dec 15 08:27:14 2025 GMT Not After : Dec 18 13:44:14 2025 GMT Subject: CN=5BB05863216F5CFAD465B26B72B9F49C81403CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:aa:c8:fc:8d:c8:59:31:ae:37:ed:93:a0: 6f:89:bc:ab:52:9c:d6:8a:b1:d2:06:dc:05:4d:11: 72:8d:ce:e6:82:20:a9:47:b2:6c:df:d9:ff:a6:47: e9:2c:05:90:40:7b:da:e5:2a:4a:65:d3:84:48:f0: 53:fe:b4:6f:d8:57:9e:3c:eb:30:be:18:29:20:4d: 43:3a:06:59:a7:c5:69:ae:ff:dd:a3:13:ef:c7:95: e9:7b:3e:46:75:5c:55:db:2d:5b:2a:95:2f:cd:b8: f5:a1:a4:bb:d4:47:84:6f:21:76:a4:92:62:4c:31: 8a:c9:2f:8f:fe:a7:33:f0:11:e9:4f:af:73:29:47: 0f:c6:f3:f9:d6:60:81:32:23:6e:03:c0:72:9d:97: 38:a4:7e:ab:3d:8d:34:8a:ab:1c:74:b3:2f:af:04: 9d:63:2e:f7:e3:6b:d4:cf:d5:31:bf:7a:8d:a1:ed: ad:77:41:db:df:70:17:dd:a9:ec:4b:84:86:92:40: b6:14:c9:64:44:f5:cc:9d:39:1b:b6:a5:e5:0d:3c: ef:43:ab:1f:1d:fe:40:a0:07:d0:74:d7:7a:d7:89: eb:40:ce:46:79:11:25:7e:c1:a8:7f:bb:a4:03:92: b3:72:ce:a0:ee:7b:d7:48:ab:c7:04:bf:e4:70:ad: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:58:63:21:6F:5C:FA:D4:65:B2:6B:72:B9:F4:9C:81:40:3C:E2 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:05:75:91:47:a0:f5:c3:d0:bd:55:7e:d6:e2:72:8e:9f:dd: 9d:0f:bd:65:5c:ae:ce:c4:df:36:1e:a0:23:a9:10:bb:db:57: 07:a2:3f:1f:9c:2c:4a:b9:24:9d:68:16:9f:3e:9e:9e:d3:f5: e1:84:2a:a5:39:36:0a:ca:8b:9a:e5:15:4f:62:8a:be:42:39: a9:01:56:b7:90:52:0b:f2:f4:31:4d:c3:a2:36:e4:6d:7f:ff: 13:45:cb:29:64:ce:e8:c1:e2:4f:d8:29:d2:a5:43:24:a9:0e: ff:5a:43:ab:f7:5a:e0:6b:79:59:5d:d9:f8:81:24:cb:9b:46: 6a:17:48:97:ca:67:8f:99:50:7d:41:24:3b:25:5b:90:16:66: 72:46:60:02:b5:5a:ec:bd:62:0b:6a:06:4c:7f:28:52:8d:71: 1e:98:61:b6:36:b5:eb:b5:8c:cf:b6:65:5f:0f:99:df:78:53: 73:99:39:3b:d9:26:56:ef:d6:c2:2d:92:13:fb:9f:07:dc:96: 25:ad:5c:24:76:66:06:9e:ec:70:90:dc:9f:f5:f8:eb:28:9a: 9d:7f:0b:2b:59:6f:a4:f0:60:1d:61:f9:74:33:d1:50:33:5b: c0:c5:44:64:43:24:56:9d:d5:41:68:37:06:c8:92:a5:b3:55: 9c:c3:9f:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8JWdC0oqwtJXXOJyeBQEJxrV9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEyMTUwODI3MTRaFw0yNTEyMTgxMzQ0MTRaMDMxMTAvBgNV BAMTKDVCQjA1ODYzMjE2RjVDRkFENDY1QjI2QjcyQjlGNDlDODE0MDNDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRarI/I3IWTGuN+2ToG+JvKtS nNaKsdIG3AVNEXKNzuaCIKlHsmzf2f+mR+ksBZBAe9rlKkpl04RI8FP+tG/YV548 6zC+GCkgTUM6BlmnxWmu/92jE+/Hlel7PkZ1XFXbLVsqlS/NuPWhpLvUR4RvIXak kmJMMYrJL4/+pzPwEelPr3MpRw/G8/nWYIEyI24DwHKdlzikfqs9jTSKqxx0sy+v BJ1jLvfja9TP1TG/eo2h7a13QdvfcBfdqexLhIaSQLYUyWRE9cydORu2peUNPO9D qx8d/kCgB9B013rXietAzkZ5ESV+wah/u6QDkrNyzqDue9dIq8cEv+RwrePdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7BYYyFvXPrUZbJrcrn0nIFAPOIwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4FdZFHoPXD0L1Vftbico6f3Z0PvWVcrs7E 3zYeoCOpELvbVweiPx+cLEq5JJ1oFp8+np7T9eGEKqU5NgrKi5rlFU9iir5COakB VreQUgvy9DFNw6I25G1//xNFyylkzujB4k/YKdKlQySpDv9aQ6v3WuBreVld2fiB JMubRmoXSJfKZ4+ZUH1BJDslW5AWZnJGYAK1Wuy9YgtqBkx/KFKNcR6YYbY2teu1 jM+2ZV8Pmd94U3OZOTvZJlbv1sItkhP7nwfcliWtXCR2Zgae7HCQ3J/1+Osomp1/ CytZb6TwYB1h+XQz0VAzW8DFRGRDJFad1UFoNwbIkqWzVZzDnyg= -----END CERTIFICATE-----Generated at Tue Dec 16 20:22:45 2025 by rpki-client