This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: tSXmurXMknpnDsvYhO1R9LPi2/h39whz0Fxnv8Gz9nE= Subject key identifier: 21:FC:0C:C6:2C:1B:9A:F6:5C:57:8A:8F:F0:84:61:FD:C0:3F:7B:34 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 3843FCE33F669B9D86184688A6A93FFA36D78D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 03AA Signing time: Mon 01 Dec 2025 11:01:01 +0000 Manifest this update: Mon 01 Dec 2025 10:56:01 +0000 Manifest next update: Thu 04 Dec 2025 16:25:01 +0000 Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: FdhXqfkzC4drdkE3yB52CVieaAfrIafQ6omojeyHv9I=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:43:fc:e3:3f:66:9b:9d:86:18:46:88:a6:a9:3f:fa:36:d7:8d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Dec 1 10:56:01 2025 GMT Not After : Dec 4 16:25:01 2025 GMT Subject: CN=21FC0CC62C1B9AF65C578A8FF08461FDC03F7B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:a9:7d:08:d0:d2:d7:38:ab:ba:3d:cb:b0: 1e:0d:88:b0:80:e6:24:0f:c0:e6:b6:ce:97:09:48: 3a:7a:12:54:3a:c2:fc:ab:a5:12:e4:7b:53:5f:5e: 31:60:50:6b:60:32:e1:a4:aa:e9:0d:37:3f:14:36: 61:59:fb:60:1f:8e:57:ef:39:e0:0f:49:01:34:a7: 1e:17:eb:c8:65:b5:b9:23:db:ac:de:cf:fd:7b:7d: fc:cc:72:28:41:a4:9d:aa:47:4b:fb:05:02:6c:e3: 28:8a:87:c7:9d:0d:6a:f5:41:4b:c4:8c:f0:60:d7: fe:4d:8b:ac:4a:1b:b1:5a:37:04:fb:31:a8:a9:2f: 2e:d0:56:8a:65:fb:8b:11:1d:9f:5b:d7:70:f1:92: 84:23:60:1d:68:1a:30:e1:44:16:22:4f:2b:87:66: 67:13:60:86:7c:ab:2d:86:75:28:3a:7c:6c:77:a5: d2:54:e4:7e:6d:0f:56:b5:4e:f9:91:a6:9a:d0:df: 71:5a:8f:7e:eb:33:1b:a3:be:0a:5c:df:86:c8:c8: ba:7b:ab:f7:4b:6e:ed:42:3d:d8:ce:f0:d6:c8:b4: 3b:8f:95:9f:f6:25:75:24:73:65:df:09:18:5f:84: a1:34:d6:e5:8f:3b:e0:d0:72:a8:8b:36:1e:d0:6f: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:0C:C6:2C:1B:9A:F6:5C:57:8A:8F:F0:84:61:FD:C0:3F:7B:34 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:dc:87:50:a1:de:12:42:c2:e1:d4:fc:55:eb:4b:76:ac:fa: 91:96:a9:69:f8:9c:a0:b2:13:9b:58:19:c6:ea:fd:ff:a7:f6: e3:ac:f0:e1:2d:14:e2:44:9f:93:f3:58:ea:c9:ff:87:1a:32: 29:bb:97:b7:ce:9d:9c:e9:85:27:69:08:f8:e1:c2:a6:ec:c0: 5b:3a:6c:41:9d:5e:f3:ce:63:67:c0:30:e4:31:ae:bc:2d:29: fe:e0:b1:55:38:6b:aa:07:0f:ca:b2:4e:ff:5c:ed:18:1f:cb: f5:f8:24:1f:99:c6:88:aa:9b:67:85:29:5d:6c:e2:ad:f9:a0: 51:ac:ff:c7:72:a4:76:3b:7c:6a:ce:6d:84:d4:4d:45:2d:b1: 88:16:4f:44:55:50:03:55:88:0c:c7:0f:e8:97:81:b0:7a:88: d9:e9:25:90:39:3f:aa:f5:7b:29:d6:c6:66:78:07:24:61:c9: d2:33:93:24:79:cc:62:6b:3d:91:02:5d:59:24:2a:43:38:96: eb:bb:19:a5:1a:3e:56:73:fb:66:a2:2e:82:64:66:34:e5:34: b5:0f:c6:af:de:d1:f8:fb:8d:aa:4e:4a:4a:15:37:c9:cb:c2: b9:89:0e:18:42:45:62:e2:2a:a8:e0:2c:fc:80:a3:88:35:4b: b7:3a:b1:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEP84z9mm52GGEaIpqk/+jbXjXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTEyMDExMDU2MDFaFw0yNTEyMDQxNjI1MDFaMDMxMTAvBgNV BAMTKDIxRkMwQ0M2MkMxQjlBRjY1QzU3OEE4RkYwODQ2MUZEQzAzRjdCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnz6l9CNDS1ziruj3LsB4NiLCA 5iQPwOa2zpcJSDp6ElQ6wvyrpRLke1NfXjFgUGtgMuGkqukNNz8UNmFZ+2Afjlfv OeAPSQE0px4X68hltbkj26zez/17ffzMcihBpJ2qR0v7BQJs4yiKh8edDWr1QUvE jPBg1/5Ni6xKG7FaNwT7MaipLy7QVopl+4sRHZ9b13DxkoQjYB1oGjDhRBYiTyuH ZmcTYIZ8qy2GdSg6fGx3pdJU5H5tD1a1TvmRpprQ33Faj37rMxujvgpc34bIyLp7 q/dLbu1CPdjO8NbItDuPlZ/2JXUkc2XfCRhfhKE01uWPO+DQcqiLNh7Qb+FlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfwMxiwbmvZcV4qP8IRh/cA/ezQwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTch1Ch3hJCwuHU/FXrS3as+pGWqWn4nKCy E5tYGcbq/f+n9uOs8OEtFOJEn5PzWOrJ/4caMim7l7fOnZzphSdpCPjhwqbswFs6 bEGdXvPOY2fAMOQxrrwtKf7gsVU4a6oHD8qyTv9c7Rgfy/X4JB+Zxoiqm2eFKV1s 4q35oFGs/8dypHY7fGrObYTUTUUtsYgWT0RVUANViAzHD+iXgbB6iNnpJZA5P6r1 eynWxmZ4ByRhydIzkyR5zGJrPZECXVkkKkM4luu7GaUaPlZz+2aiLoJkZjTlNLUP xq/e0fj7japOSkoVN8nLwrmJDhhCRWLiKqjgLPyAo4g1S7c6sd4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:57 2025 by rpki-client