This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: wJnXQrL913BlFALdEp8UyBgbJiuzkCsdFmV8DzXAmfw= Subject key identifier: 3E:E0:43:4A:6A:71:05:FF:0D:3C:3C:79:34:EE:44:54:F3:A6:03:8F Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 39E3EE96191581967DBDDEBC136DD453503B01CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0257 Signing time: Wed 03 Dec 2025 09:41:48 +0000 Manifest this update: Wed 03 Dec 2025 09:36:48 +0000 Manifest next update: Sat 06 Dec 2025 15:36:48 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: CKaailhguOwW1w3/lcHN4J49lRe6vTW9XlqJ95LK9Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e3:ee:96:19:15:81:96:7d:bd:de:bc:13:6d:d4:53:50:3b:01:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Dec 3 09:36:48 2025 GMT Not After : Dec 6 15:36:48 2025 GMT Subject: CN=3EE0434A6A7105FF0D3C3C7934EE4454F3A6038F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:90:4a:b0:35:82:7f:db:2a:bb:fe:61:21: cf:4f:96:e5:c8:e5:c8:e6:26:88:08:cd:8e:b0:0f: db:5d:13:c3:02:ef:1a:2e:9c:32:a9:c7:d0:2f:5e: 63:f1:13:1b:6d:ec:93:78:39:f5:f5:db:c0:43:50: 98:d1:ad:aa:81:3d:8a:d2:7c:39:e4:87:2c:e7:e8: 30:8c:54:8c:a5:d7:fd:9e:dc:fb:76:86:9f:0f:5f: 9f:d9:0e:d1:c2:b2:9b:48:2b:64:e6:8a:08:41:92: c3:63:2e:25:cb:18:92:b4:6b:30:c2:49:84:31:52: 4b:11:f9:8f:bc:22:c6:99:ff:da:b6:4d:4a:1a:e5: c9:06:1c:02:dd:ae:2d:31:89:95:81:7d:56:38:db: 1a:2e:2d:76:dd:ec:d4:fa:2d:99:ee:90:89:0c:e8: e8:91:61:74:f3:38:7c:41:41:28:0a:9f:dc:e1:76: fb:83:8a:cd:26:cc:64:96:06:e4:4b:1f:93:91:81: 7b:c9:84:6b:90:b2:54:24:0c:a9:d7:43:06:2f:67: 4a:81:95:32:47:0e:56:79:b9:16:0d:86:74:41:d0: 4e:ed:d2:78:19:e6:ae:67:53:4c:ea:1a:78:c3:19: 2c:fd:10:eb:32:96:c7:2a:8b:91:c5:70:73:06:c6: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:43:4A:6A:71:05:FF:0D:3C:3C:79:34:EE:44:54:F3:A6:03:8F X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:1d:77:53:68:ed:09:d5:45:39:2f:b5:c0:fb:c1:d3:4e: 2e:a8:20:92:0e:24:3d:df:fb:81:b2:0d:fd:c1:dd:34:05:62: 0f:ad:2c:4f:19:a7:ba:86:5e:b2:34:6d:50:1a:88:ea:5b:5a: 77:89:9b:64:cc:81:55:1f:bd:a3:a7:de:b5:01:b0:0e:c5:04: 8b:68:16:b1:8b:3f:2b:c9:73:20:44:00:c3:98:2e:82:c2:7b: fa:5a:47:07:a0:72:a2:3e:1b:58:52:9a:c9:cd:3b:fc:14:72: ba:b9:11:e4:34:3f:89:54:55:c5:95:32:70:01:5d:70:d4:72: 8b:31:09:49:f3:67:4d:5b:b5:1c:a2:b3:89:68:c5:8b:78:4c: 2c:81:f8:71:58:92:35:f0:9c:f7:4f:b5:a9:41:24:1a:fa:46: 40:9d:3e:60:9b:a8:76:62:ff:84:c0:62:88:fe:fe:56:63:0c: 65:d7:59:77:9e:27:47:d5:f9:b6:00:c5:61:81:a4:b6:db:f3: 0b:b8:71:7c:21:32:d9:47:88:67:dc:32:43:fe:65:64:be:d4: 6d:b3:25:ef:82:3c:7a:e0:7b:b3:94:2c:83:ce:e2:14:0f:e0: 9c:02:ae:ab:c7:b8:bf:92:58:14:ca:70:56:b3:13:6c:0d:7b: fb:54:b1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOePulhkVgZZ9vd68E23UU1A7AcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTEyMDMwOTM2NDhaFw0yNTEyMDYxNTM2NDhaMDMxMTAvBgNV BAMTKDNFRTA0MzRBNkE3MTA1RkYwRDNDM0M3OTM0RUU0NDU0RjNBNjAzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCJBKsDWCf9squ/5hIc9PluXI 5cjmJogIzY6wD9tdE8MC7xounDKpx9AvXmPxExtt7JN4OfX128BDUJjRraqBPYrS fDnkhyzn6DCMVIyl1/2e3Pt2hp8PX5/ZDtHCsptIK2TmighBksNjLiXLGJK0azDC SYQxUksR+Y+8IsaZ/9q2TUoa5ckGHALdri0xiZWBfVY42xouLXbd7NT6LZnukIkM 6OiRYXTzOHxBQSgKn9zhdvuDis0mzGSWBuRLH5ORgXvJhGuQslQkDKnXQwYvZ0qB lTJHDlZ5uRYNhnRB0E7t0ngZ5q5nU0zqGnjDGSz9EOsylscqi5HFcHMGxu7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPuBDSmpxBf8NPDx5NO5EVPOmA48wHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/aHXdTaO0J1UU5L7XA+8HTTi6oIJIOJD3f +4GyDf3B3TQFYg+tLE8Zp7qGXrI0bVAaiOpbWneJm2TMgVUfvaOn3rUBsA7FBIto FrGLPyvJcyBEAMOYLoLCe/paRwegcqI+G1hSmsnNO/wUcrq5EeQ0P4lUVcWVMnAB XXDUcosxCUnzZ01btRyis4loxYt4TCyB+HFYkjXwnPdPtalBJBr6RkCdPmCbqHZi /4TAYoj+/lZjDGXXWXeeJ0fV+bYAxWGBpLbb8wu4cXwhMtlHiGfcMkP+ZWS+1G2z Je+CPHrge7OULIPO4hQP4JwCrqvHuL+SWBTKcFazE2wNe/tUsfE= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:48 2025 by rpki-client