This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: 36EtYzpiXAocz9tygnCAx8MxmHrhIWIp0WZYHpJkmS4= Subject key identifier: 2E:25:C0:F5:30:3B:DC:F0:71:A4:E4:FB:BD:18:3B:D0:70:EC:78:1E Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 27A7C126AF59F06F4AB830397A8BCC7B57D5490A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01DE Signing time: Mon 08 Dec 2025 22:00:44 +0000 Manifest this update: Mon 08 Dec 2025 21:55:44 +0000 Manifest next update: Fri 12 Dec 2025 05:07:44 +0000 Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=) 2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: i5/EgKjADpqUpxoR3MolPV7DtNIn9Ln/whAMmn32pQg=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a7:c1:26:af:59:f0:6f:4a:b8:30:39:7a:8b:cc:7b:57:d5:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Dec 8 21:55:44 2025 GMT Not After : Dec 12 05:07:44 2025 GMT Subject: CN=2E25C0F5303BDCF071A4E4FBBD183BD070EC781E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:55:9b:e8:4f:1c:42:0c:d0:ba:80:46:28: be:b1:9a:24:fd:b9:66:29:07:c4:83:b7:1b:0c:0e: 40:4b:23:d5:d0:db:7f:6e:7b:d6:0f:6e:86:e1:84: 2a:3b:8f:7e:93:dc:14:43:9b:22:ed:d8:2f:fd:6b: 25:00:d7:11:b1:5e:10:ab:1c:0d:cf:6a:85:34:7e: e8:93:b3:e5:eb:13:d6:14:f0:68:f6:8e:4f:0a:f9: ca:7c:a8:a4:d3:e5:6b:87:29:78:48:88:20:0e:5a: a8:31:31:57:00:c4:0a:ba:b2:c3:c2:90:b0:e4:23: 8a:2e:f7:42:2e:87:b0:11:06:fc:e2:fe:8b:4c:f1: a8:aa:ca:47:b3:34:7d:d4:e6:3a:f1:9c:81:55:d8: e4:33:f6:ab:ef:36:aa:d9:65:0e:fe:7d:fa:5a:19: fd:9b:20:cb:0c:b4:ed:1a:f2:70:da:1b:b7:41:b7: 94:77:20:80:25:86:e9:fd:bc:10:59:fe:49:91:29: 7c:c3:5e:2c:da:90:34:4f:b4:37:5d:c0:2d:84:b5: 5b:d3:8f:52:a9:09:0b:fe:26:6a:9d:62:0a:8c:bd: d6:7e:3a:ac:79:f0:09:9c:73:19:9a:5c:81:34:d1: 39:f6:46:ac:fe:4f:6b:38:13:ff:c0:e9:86:22:b9: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:C0:F5:30:3B:DC:F0:71:A4:E4:FB:BD:18:3B:D0:70:EC:78:1E X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9c:87:6b:8e:ff:5b:9f:dc:27:43:9f:59:a1:e9:0f:94:6b: ad:84:e7:6b:78:77:57:b6:bb:6e:d5:37:2c:58:11:a4:eb:8b: 09:ca:6b:06:13:c6:92:87:9c:76:f2:fd:57:17:44:0c:12:f5: b3:b7:09:61:39:66:1b:5a:96:27:73:71:37:08:46:4b:cb:09: b1:1d:41:10:55:fd:33:c7:a7:1d:27:4f:e6:62:76:f8:ee:4d: f2:81:24:3e:23:77:68:0c:21:49:c5:10:2f:cf:fd:a6:ab:00: a8:f5:aa:a1:9b:ab:ec:74:c8:91:91:f7:d3:45:d8:b1:8c:20: d6:13:cf:b2:b9:18:94:01:dd:6e:00:77:f7:3f:c0:f7:b7:9d: ba:0f:e2:3e:71:28:88:f9:39:74:c4:54:ff:b5:f0:f1:94:b1: 24:90:d0:34:13:66:77:ba:b7:88:60:58:c7:db:ee:ec:70:26: 55:2b:dc:67:af:3d:53:4c:43:08:0f:e8:b4:8b:92:dc:56:af: a6:34:d5:a4:55:f7:bd:7c:e7:62:d3:4e:ff:8a:df:f5:70:d8: e3:b4:7f:bc:2a:46:e8:c3:29:df:70:a7:7b:c9:c0:49:34:f4: fa:de:98:34:d5:c5:a8:f8:a0:1b:c1:35:07:87:be:69:9e:5b: d8:9c:84:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6fBJq9Z8G9KuDA5eovMe1fVSQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTEyMDgyMTU1NDRaFw0yNTEyMTIwNTA3NDRaMDMxMTAvBgNV BAMTKDJFMjVDMEY1MzAzQkRDRjA3MUE0RTRGQkJEMTgzQkQwNzBFQzc4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDav1Wb6E8cQgzQuoBGKL6xmiT9 uWYpB8SDtxsMDkBLI9XQ239ue9YPbobhhCo7j36T3BRDmyLt2C/9ayUA1xGxXhCr HA3PaoU0fuiTs+XrE9YU8Gj2jk8K+cp8qKTT5WuHKXhIiCAOWqgxMVcAxAq6ssPC kLDkI4ou90Iuh7ARBvzi/otM8aiqykezNH3U5jrxnIFV2OQz9qvvNqrZZQ7+ffpa Gf2bIMsMtO0a8nDaG7dBt5R3IIAlhun9vBBZ/kmRKXzDXizakDRPtDddwC2EtVvT j1KpCQv+JmqdYgqMvdZ+Oqx58AmccxmaXIE00Tn2Rqz+T2s4E//A6YYiuT99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiXA9TA73PBxpOT7vRg70HDseB4wHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGich2uO/1uf3CdDn1mh6Q+Ua62E52t4d1e2 u27VNyxYEaTriwnKawYTxpKHnHby/VcXRAwS9bO3CWE5ZhtalidzcTcIRkvLCbEd QRBV/TPHpx0nT+ZidvjuTfKBJD4jd2gMIUnFEC/P/aarAKj1qqGbq+x0yJGR99NF 2LGMINYTz7K5GJQB3W4Ad/c/wPe3nboP4j5xKIj5OXTEVP+18PGUsSSQ0DQTZne6 t4hgWMfb7uxwJlUr3GevPVNMQwgP6LSLktxWr6Y01aRV971852LTTv+K3/Vw2OO0 f7wqRujDKd9wp3vJwEk09PremDTVxaj4oBvBNQeHvmmeW9ichL8= -----END CERTIFICATE-----Generated at Wed Dec 10 02:14:56 2025 by rpki-client