This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: JgdRR2qUR7tcfpp8ORslGSOvs7i9bkiGWzMRuvQ9fHU= Subject key identifier: AE:6C:35:A4:24:04:77:F6:31:10:AC:64:31:59:AB:DF:12:46:68:62 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 4EF14509789B296520D269B6B4CF29402002A28E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02D9 Signing time: Wed 03 Dec 2025 11:21:28 +0000 Manifest this update: Wed 03 Dec 2025 11:16:28 +0000 Manifest next update: Sat 06 Dec 2025 18:03:28 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: NZ5P31/EpYJNC6IURy+YKmOFC8D/zKpbp6SAWA1j1js=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f1:45:09:78:9b:29:65:20:d2:69:b6:b4:cf:29:40:20:02:a2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Dec 3 11:16:28 2025 GMT Not After : Dec 6 18:03:28 2025 GMT Subject: CN=AE6C35A4240477F63110AC643159ABDF12466862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:d0:e8:ad:8f:41:54:d5:01:87:1a:29:06: 01:e1:26:19:a8:73:43:1a:6f:d5:a2:dd:e4:1c:aa: 76:77:3a:74:2f:b1:82:0f:39:ed:10:70:ea:78:9b: d5:d8:b1:b4:32:95:c4:27:88:f4:1c:7b:d2:ae:01: 60:64:71:68:68:db:91:a5:48:bc:79:0d:4c:04:da: 4b:52:68:4f:db:87:1f:0e:d5:91:4d:9f:8a:ea:e5: 50:33:40:5e:1c:da:a1:de:65:6e:33:8d:e4:1f:a6: d4:a6:da:79:76:c1:e6:28:b5:91:06:64:db:12:35: 3e:6a:14:1d:28:15:6c:af:a0:07:72:59:12:16:4c: 34:89:02:c1:aa:04:a9:29:8c:fa:e0:d3:fc:e5:0c: 11:88:62:1b:66:ba:11:1c:5f:ed:33:93:b2:5f:45: 6c:f5:22:ae:40:63:19:c2:09:f2:12:0e:71:3f:0b: b0:0c:18:fb:02:de:d4:2d:f6:14:b1:81:dc:f6:a6: 70:e7:2a:22:64:9d:3a:5c:bb:68:0e:b6:40:fe:b9: 68:c8:23:9e:c0:d7:03:8a:3f:4b:d3:55:73:bc:17: cd:26:6c:bf:c8:0c:18:ab:11:2c:ef:05:5d:ea:2b: d2:68:e2:99:5f:77:ec:b4:5a:13:14:38:18:a0:7f: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:35:A4:24:04:77:F6:31:10:AC:64:31:59:AB:DF:12:46:68:62 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ca:98:19:4f:c5:54:1b:06:5a:f7:93:db:99:d0:e0:cf:fc: 91:d3:05:1b:d8:16:51:6a:8f:5c:08:b6:73:b2:b8:81:10:c5: c0:7b:6b:79:26:35:2e:ee:a7:0b:5f:b9:f8:0e:bb:82:a9:cd: a9:9b:c7:24:26:7b:e8:fd:25:18:22:aa:6d:9e:5f:88:7b:58: dd:93:d8:cf:8d:68:17:d1:54:ed:c9:51:19:e7:30:f7:7c:e4: 4d:7b:2a:fe:51:03:40:e7:3c:2b:69:9e:55:01:29:da:b6:a5: 9b:a4:c1:9d:53:18:09:b1:56:a4:8f:6c:9d:1e:57:04:60:a4: c9:c5:b5:24:a9:f4:82:cf:6e:fe:89:32:99:21:05:bf:2d:ec: f2:5b:a7:bd:7a:aa:56:44:c5:3d:e4:01:50:2f:e1:e2:72:64: 1d:a5:27:b4:d9:10:0e:b2:17:37:d5:19:88:18:7c:b6:58:86: cf:92:ca:89:e6:24:0f:da:29:ef:46:c6:7a:cf:60:f6:7e:b2: 1e:e0:a3:5a:bb:59:54:4c:5f:6f:14:fa:75:64:8e:47:0c:ca: 75:8d:11:be:ba:98:ea:d3:12:f9:2d:58:74:9d:c7:68:2d:6b: 5c:3b:0f:88:a0:e5:34:23:25:39:37:ec:c7:7e:5c:43:82:b7: 63:6e:d2:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvFFCXibKWUg0mm2tM8pQCACoo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTEyMDMxMTE2MjhaFw0yNTEyMDYxODAzMjhaMDMxMTAvBgNV BAMTKEFFNkMzNUE0MjQwNDc3RjYzMTEwQUM2NDMxNTlBQkRGMTI0NjY4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFNDorY9BVNUBhxopBgHhJhmo c0Mab9Wi3eQcqnZ3OnQvsYIPOe0QcOp4m9XYsbQylcQniPQce9KuAWBkcWho25Gl SLx5DUwE2ktSaE/bhx8O1ZFNn4rq5VAzQF4c2qHeZW4zjeQfptSm2nl2weYotZEG ZNsSNT5qFB0oFWyvoAdyWRIWTDSJAsGqBKkpjPrg0/zlDBGIYhtmuhEcX+0zk7Jf RWz1Iq5AYxnCCfISDnE/C7AMGPsC3tQt9hSxgdz2pnDnKiJknTpcu2gOtkD+uWjI I57A1wOKP0vTVXO8F80mbL/IDBirESzvBV3qK9Jo4plfd+y0WhMUOBigfyaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmw1pCQEd/YxEKxkMVmr3xJGaGIwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLKmBlPxVQbBlr3k9uZ0ODP/JHTBRvYFlFq j1wItnOyuIEQxcB7a3kmNS7upwtfufgOu4KpzambxyQme+j9JRgiqm2eX4h7WN2T 2M+NaBfRVO3JURnnMPd85E17Kv5RA0DnPCtpnlUBKdq2pZukwZ1TGAmxVqSPbJ0e VwRgpMnFtSSp9ILPbv6JMpkhBb8t7PJbp716qlZExT3kAVAv4eJyZB2lJ7TZEA6y FzfVGYgYfLZYhs+SyonmJA/aKe9GxnrPYPZ+sh7go1q7WVRMX28U+nVkjkcMynWN Eb66mOrTEvktWHSdx2gta1w7D4ig5TQjJTk37Md+XEOCt2Nu0ig= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:23 2025 by rpki-client