This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: VCRSTosx9GDUVys5o7BGk/+9Rhg3VhJwflrDRi1RuJE= Subject key identifier: 60:54:B6:44:97:21:FA:0F:23:2C:B8:FF:D5:BC:F2:1E:2A:DB:44:BE Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 049F209838F2E1A880E17F1F40E76EC43C5BB95D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 02CD Signing time: Wed 03 Dec 2025 12:22:27 +0000 Manifest this update: Wed 03 Dec 2025 12:17:27 +0000 Manifest next update: Sat 06 Dec 2025 15:00:27 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: +FiEMQn+bof+/ZdEFGp6Dq9/UIExpSElpnCjlOgif5Q=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: 9OAoWczmJPqSai15ZAPOgSohr4eVEGJzypq/J/xc2bI=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: Gz86nUizt9C6tG6AIdqmzBNbP3A2tk6U1/rfWh8ADME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9f:20:98:38:f2:e1:a8:80:e1:7f:1f:40:e7:6e:c4:3c:5b:b9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Dec 3 12:17:27 2025 GMT Not After : Dec 6 15:00:27 2025 GMT Subject: CN=6054B6449721FA0F232CB8FFD5BCF21E2ADB44BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:bd:7e:7b:ca:9a:71:56:6a:af:f8:c0:b7: 85:f6:41:6e:06:27:c4:4a:8b:cc:d9:1d:de:0a:b7: 9d:44:dd:4f:c1:03:f0:dd:f0:76:06:e3:1c:df:07: dc:71:9d:8c:6a:55:cf:de:3a:03:fd:3d:15:c0:b2: 25:94:dd:25:8b:74:ca:01:ca:c1:03:92:c4:94:c1: de:88:ea:8d:ef:8e:51:4d:e8:13:40:c6:eb:b3:7e: 30:72:ff:9f:f9:b8:8c:ff:6b:e4:43:c8:df:97:79: fc:13:3d:6a:68:56:3b:bd:24:6f:de:59:a1:33:49: 69:1f:61:14:ac:5b:2d:b9:ea:9c:40:a7:07:40:f1: 46:9f:14:94:86:df:8a:0f:7d:2b:89:82:a5:67:2d: fd:d5:2b:3b:8a:54:06:d5:12:95:40:4a:1e:ce:71: 37:08:f7:00:82:9f:c3:f4:52:04:a0:cb:a3:63:9f: 23:b0:70:0b:29:6a:f2:0e:93:c1:58:5a:da:ae:85: 8b:15:bf:90:7b:6b:da:c9:36:7b:68:8a:00:8a:c1: d2:dc:91:00:e1:05:71:3a:20:35:0b:a7:4b:5f:ba: 4a:dd:97:c2:d3:ba:75:55:c1:ad:e4:63:d0:33:cc: df:c3:4a:e1:ba:cc:04:6b:1a:76:5c:86:aa:00:a1: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:54:B6:44:97:21:FA:0F:23:2C:B8:FF:D5:BC:F2:1E:2A:DB:44:BE X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:14:5e:c0:8a:37:87:01:21:7f:c2:a5:e5:d1:9d:90:ad:4c: 7c:ca:d5:5e:db:1e:dd:5e:34:2c:59:97:f6:b5:3a:84:e6:d9: 61:9a:0c:cd:36:98:52:bb:1b:7a:40:1f:ac:d4:2b:90:e8:e2: 4f:7e:1f:09:10:c8:fc:3c:3c:60:32:e5:c1:87:d4:dd:b9:bd: f0:05:c9:ad:5a:23:8b:d8:64:13:f8:75:aa:65:b3:ea:9a:68: 28:c2:10:05:5c:35:71:7a:fd:8a:b4:aa:fa:19:c6:c4:9e:c2: 1e:a1:2e:c0:1e:08:cc:ae:37:89:b2:98:4f:37:80:1e:53:1e: 51:bf:48:01:7e:1e:d6:c4:3a:34:c4:72:9d:ff:74:64:9e:dc: 4c:c5:66:ec:9e:07:20:ca:d8:e4:33:c4:f3:df:bb:58:fc:4e: 92:28:70:43:02:3d:da:4b:ef:f2:3e:93:1c:6b:b2:51:c7:7f: f7:f4:a6:8c:22:1f:9c:f1:52:4f:a9:75:48:a4:b0:73:46:a7: 88:38:63:04:4e:75:df:55:ad:09:ed:76:52:90:d6:40:18:3d: 5b:c1:7f:fc:ba:15:0a:8c:af:9b:fa:df:16:23:bf:aa:ca:5e: f4:d3:b5:95:dd:d2:87:f4:04:05:af:ec:7c:65:e7:32:b1:ad: f6:68:53:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJ8gmDjy4aiA4X8fQOduxDxbuV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTEyMDMxMjE3MjdaFw0yNTEyMDYxNTAwMjdaMDMxMTAvBgNV BAMTKDYwNTRCNjQ0OTcyMUZBMEYyMzJDQjhGRkQ1QkNGMjFFMkFEQjQ0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeS71+e8qacVZqr/jAt4X2QW4G J8RKi8zZHd4Kt51E3U/BA/Dd8HYG4xzfB9xxnYxqVc/eOgP9PRXAsiWU3SWLdMoB ysEDksSUwd6I6o3vjlFN6BNAxuuzfjBy/5/5uIz/a+RDyN+XefwTPWpoVju9JG/e WaEzSWkfYRSsWy256pxApwdA8UafFJSG34oPfSuJgqVnLf3VKzuKVAbVEpVASh7O cTcI9wCCn8P0UgSgy6NjnyOwcAspavIOk8FYWtquhYsVv5B7a9rJNntoigCKwdLc kQDhBXE6IDULp0tfukrdl8LTunVVwa3kY9AzzN/DSuG6zARrGnZchqoAocbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYFS2RJch+g8jLLj/1bzyHirbRL4wHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8UXsCKN4cBIX/CpeXRnZCtTHzK1V7bHt1e NCxZl/a1OoTm2WGaDM02mFK7G3pAH6zUK5Do4k9+HwkQyPw8PGAy5cGH1N25vfAF ya1aI4vYZBP4dapls+qaaCjCEAVcNXF6/Yq0qvoZxsSewh6hLsAeCMyuN4mymE83 gB5THlG/SAF+HtbEOjTEcp3/dGSe3EzFZuyeByDK2OQzxPPfu1j8TpIocEMCPdpL 7/I+kxxrslHHf/f0powiH5zxUk+pdUiksHNGp4g4YwROdd9VrQntdlKQ1kAYPVvB f/y6FQqMr5v63xYjv6rKXvTTtZXd0of0BAWv7Hxl5zKxrfZoU6I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:52 2025 by rpki-client