This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: D4dNWjl7iyXvpB+AmBQs0USi64x8sqlYmza5d1kfOjw= Subject key identifier: 87:5A:DB:57:D3:EA:29:65:00:BC:3B:3A:BD:F6:D9:2D:59:A2:5D:99 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 77B14FA7215AD867C19B6EBED95F13762FDEC761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 041F Signing time: Sat 13 Dec 2025 20:52:05 +0000 Manifest this update: Sat 13 Dec 2025 20:47:05 +0000 Manifest next update: Wed 17 Dec 2025 04:27:05 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=) 2: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=) 3: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: QEo3I1YDcGTkSlbQL04xTu9G5jgkHh7x3kgWL15Fuo0=) 4: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 04:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b1:4f:a7:21:5a:d8:67:c1:9b:6e:be:d9:5f:13:76:2f:de:c7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Dec 13 20:47:05 2025 GMT Not After : Dec 17 04:27:05 2025 GMT Subject: CN=875ADB57D3EA296500BC3B3ABDF6D92D59A25D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:1b:71:4d:81:d5:b1:c1:42:9e:f5:78:3f: ba:0e:5b:e2:02:a5:c9:68:70:04:0f:c0:ea:26:b3: 40:00:e6:47:99:76:ad:1c:d0:93:83:21:a1:de:18: c5:c5:7b:97:5b:57:c2:68:24:94:c7:ea:94:57:63: b7:ae:05:0f:29:d4:21:48:fa:0b:c7:5c:eb:f3:ab: 1d:4f:bd:f7:29:63:ba:24:5e:82:ba:d4:c0:27:02: 97:06:ab:cf:a2:af:c0:cc:10:3e:29:2e:e4:da:5c: bc:34:17:53:55:98:df:84:6e:cf:4b:23:a3:75:cb: 52:21:36:fa:29:0c:98:ad:20:c6:f7:b3:22:25:ee: f3:c4:df:35:5a:db:f4:e9:bf:92:20:b2:fd:15:32: b9:57:59:33:bb:bf:d3:c2:a7:fb:cc:e4:28:d7:a5: e2:1a:ab:ee:eb:69:d7:b1:13:b1:a1:23:c8:53:c4: 6c:8f:e9:1e:9c:11:12:10:94:c8:ff:74:1c:0e:4d: da:aa:2d:75:91:6f:31:e1:63:c2:c1:e9:ac:e1:00: 1c:90:3a:09:7b:72:f2:fe:86:a3:4f:c7:61:f9:00: d3:ff:30:60:56:fb:2b:4b:82:07:2d:6d:ce:cf:bd: c1:cb:6f:32:87:35:96:f0:d6:f6:34:52:af:a8:86: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5A:DB:57:D3:EA:29:65:00:BC:3B:3A:BD:F6:D9:2D:59:A2:5D:99 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:eb:b8:b5:9d:13:51:b5:99:2c:46:ff:8e:0e:53:fa:14:52: ca:38:46:f5:ad:d9:74:a5:d9:38:ba:60:2a:68:df:00:75:35: 6d:e4:ea:aa:ff:d5:12:a2:15:d3:8d:48:b6:d1:43:71:fb:22: 34:fe:c8:fa:64:d1:4f:e5:35:13:1c:41:6f:65:ba:5b:0c:60: 93:3c:c3:1b:43:39:e2:4d:b2:fc:67:3c:c9:eb:ba:0d:b4:f9: 3d:b1:50:f2:0c:32:b5:13:10:f4:2a:3a:53:9e:91:d9:30:52: 87:d7:33:48:99:ac:f2:ae:75:32:51:5b:48:14:06:7e:ca:65: 2b:65:e6:4a:c0:29:0c:03:9d:dd:c9:5e:46:30:21:b9:64:d1: 1f:f7:a0:55:e5:c1:ee:c1:7f:cf:dc:f9:ce:e8:23:0e:c4:e7: 23:65:fd:cd:4f:87:de:20:11:4c:b0:22:c6:b6:91:83:8f:e0: b9:09:0e:7f:0d:56:be:71:b0:ee:3b:b9:f6:22:c7:68:56:e5: 45:ff:ac:e2:19:f9:c4:c6:28:1b:87:95:ae:43:2f:fb:94:71: 1b:ae:98:8e:92:6d:57:53:4d:38:61:39:eb:38:1d:ac:37:0e: 32:11:37:f7:4b:1a:6b:78:da:94:e9:bb:64:6b:92:d2:cf:35: 15:37:9d:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7FPpyFa2GfBm26+2V8Tdi/ex2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTEyMTMyMDQ3MDVaFw0yNTEyMTcwNDI3MDVaMDMxMTAvBgNV BAMTKDg3NUFEQjU3RDNFQTI5NjUwMEJDM0IzQUJERjZEOTJENTlBMjVEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VxtxTYHVscFCnvV4P7oOW+IC pclocAQPwOoms0AA5keZdq0c0JODIaHeGMXFe5dbV8JoJJTH6pRXY7euBQ8p1CFI +gvHXOvzqx1PvfcpY7okXoK61MAnApcGq8+ir8DMED4pLuTaXLw0F1NVmN+Ebs9L I6N1y1IhNvopDJitIMb3syIl7vPE3zVa2/Tpv5Igsv0VMrlXWTO7v9PCp/vM5CjX peIaq+7radexE7GhI8hTxGyP6R6cERIQlMj/dBwOTdqqLXWRbzHhY8LB6azhAByQ Ogl7cvL+hqNPx2H5ANP/MGBW+ytLggctbc7PvcHLbzKHNZbw1vY0Uq+ohmQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh1rbV9PqKWUAvDs6vfbZLVmiXZkwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPruLWdE1G1mSxG/44OU/oUUso4RvWt2XSl 2Ti6YCpo3wB1NW3k6qr/1RKiFdONSLbRQ3H7IjT+yPpk0U/lNRMcQW9lulsMYJM8 wxtDOeJNsvxnPMnrug20+T2xUPIMMrUTEPQqOlOekdkwUofXM0iZrPKudTJRW0gU Bn7KZStl5krAKQwDnd3JXkYwIblk0R/3oFXlwe7Bf8/c+c7oIw7E5yNl/c1Ph94g EUywIsa2kYOP4LkJDn8NVr5xsO47ufYix2hW5UX/rOIZ+cTGKBuHla5DL/uUcRuu mI6SbVdTTThhOes4Haw3DjIRN/dLGmt42pTpu2RrktLPNRU3nTc= -----END CERTIFICATE-----Generated at Tue Dec 16 03:10:44 2025 by rpki-client