This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft File: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft (raw, json) Hash identifier: vQM19fXjrWISJ37RMf86a0H5fnLJf/+HXkmle2v9Ot8= Subject key identifier: 2D:FA:42:C2:72:F9:DC:74:7E:25:33:72:D9:C9:97:16:E6:F0:76:8D Authority key identifier: 3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB Certificate issuer: /CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Certificate serial: 7B55FC313163371C05007B63D5AC0BCA7DDADE9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft Manifest number: 03 Signing time: Tue 02 Dec 2025 12:01:59 +0000 Manifest this update: Tue 02 Dec 2025 11:56:59 +0000 Manifest next update: Fri 05 Dec 2025 22:53:59 +0000 Files and hashes: 1: 3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl (hash: s7uRNRi/bMBGgwRwlWq9pv3S1qWFhXHntDtzCOeRYy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:55:fc:31:31:63:37:1c:05:00:7b:63:d5:ac:0b:ca:7d:da:de:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB Validity Not Before: Dec 2 11:56:59 2025 GMT Not After : Dec 5 22:53:59 2025 GMT Subject: CN=2DFA42C272F9DC747E253372D9C99716E6F0768D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:40:27:93:1d:fa:90:49:ba:eb:eb:26:35: 03:db:c3:b5:12:2c:ae:88:bb:54:e1:a6:cd:d4:c3: 59:ed:ba:77:c8:c8:0b:f3:16:b0:fb:f3:f5:30:ce: 66:6c:56:48:f9:ca:91:3f:c1:46:9b:1b:4f:b3:77: e5:dd:e2:c9:58:03:9d:68:71:d6:1d:b2:f5:e4:cc: 01:8d:7a:10:2b:f4:48:55:0f:bb:e7:0f:c7:f1:86: 09:a4:9e:2c:1e:01:70:25:17:b4:03:2c:8e:0f:13: 48:21:42:f2:d7:16:4d:02:82:39:0f:e7:8d:e6:3f: 81:22:50:e9:36:96:14:d7:8a:f3:94:25:1c:3a:a0: 47:3f:16:43:5f:ee:b0:2c:0a:48:3e:1a:f8:83:73: 40:2f:f0:55:6e:2c:1b:90:fb:97:90:d4:8d:68:1e: 13:65:09:6e:43:07:a7:64:42:3e:e0:13:2c:14:cc: 53:35:6f:9b:45:f2:77:ed:d0:22:aa:9a:38:76:37: 46:30:8a:9a:15:f7:ad:eb:d8:0f:2f:3f:fc:d6:3a: e9:94:74:63:4d:f7:17:5e:b8:4b:d1:e2:84:5a:18: d6:3e:10:8a:2e:63:36:e5:9c:1d:f5:d5:fc:3a:ae: e9:79:f2:4f:51:c6:5b:69:06:d6:45:44:1c:b5:46: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:42:C2:72:F9:DC:74:7E:25:33:72:D9:C9:97:16:E6:F0:76:8D X509v3 Authority Key Identifier: keyid:3C:71:A1:05:04:1D:9E:A0:1E:F4:C6:96:D4:5D:0D:4C:BF:69:BB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/3C71A105041D9EA01EF4C696D45D0D4CBF69BBFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9e:7b:28:e5:34:f1:57:59:e4:ac:90:0e:47:7b:27:3d:12: fc:9c:54:8c:9b:41:27:75:1b:bc:2a:e6:9f:02:8f:bd:34:e3: 21:bc:dd:1c:c4:68:cb:0e:f2:b1:ee:be:1b:ee:bf:ba:c1:1e: 10:db:a0:a9:32:da:80:21:82:fe:da:8a:37:02:6c:f4:26:b4: bb:34:37:b4:21:07:d5:6c:a6:f4:a2:46:86:1d:1b:9b:40:ce: 78:c3:8f:07:65:eb:5f:55:13:e0:2c:03:6e:28:40:91:cf:0d: b0:33:6d:3e:de:be:c8:1b:cd:a2:2d:01:6d:8e:8f:db:e0:c9: 11:13:6a:a6:3b:62:7f:5e:88:67:8e:cc:64:e4:bf:27:8b:a2: 32:13:39:2d:32:76:95:bc:c6:b8:59:35:e3:3d:b7:5f:ad:1e: be:54:47:43:32:cf:03:3d:c9:95:72:2a:84:39:93:ef:a2:9b: 8d:22:3a:2e:a9:5f:8c:42:8f:c4:f4:42:50:1d:ea:18:88:3d: b5:2e:1a:ae:2b:93:bb:51:70:97:2b:d8:73:cd:41:58:bb:5b: 65:80:93:89:41:ae:34:59:12:ce:d0:aa:ff:17:d1:c2:b0:e5: a3:2c:8e:a8:fc:2a:d8:2a:43:48:49:48:89:5c:f3:7f:89:0b: 49:5b:8f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1X8MTFjNxwFAHtj1awLyn3a3p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENC RjY5QkJGQjAeFw0yNTEyMDIxMTU2NTlaFw0yNTEyMDUyMjUzNTlaMDMxMTAvBgNV BAMTKDJERkE0MkMyNzJGOURDNzQ3RTI1MzM3MkQ5Qzk5NzE2RTZGMDc2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLUAnkx36kEm66+smNQPbw7US LK6Iu1Thps3Uw1ntunfIyAvzFrD78/UwzmZsVkj5ypE/wUabG0+zd+Xd4slYA51o cdYdsvXkzAGNehAr9EhVD7vnD8fxhgmkniweAXAlF7QDLI4PE0ghQvLXFk0CgjkP 543mP4EiUOk2lhTXivOUJRw6oEc/FkNf7rAsCkg+GviDc0Av8FVuLBuQ+5eQ1I1o HhNlCW5DB6dkQj7gEywUzFM1b5tF8nft0CKqmjh2N0YwipoV963r2A8vP/zWOumU dGNN9xdeuEvR4oRaGNY+EIouYzblnB311fw6rul58k9RxltpBtZFRBy1RrtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfpCwnL53HR+JTNy2cmXFubwdo0wHwYDVR0j BBgwFoAUPHGhBQQdnqAe9MaW1F0NTL9pu/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUzMDllMi1mOTI5LTQyZDktOWMzYi1hOTFhMDA2OTBjZjEvMC8zQzcxQTEwNTA0 MUQ5RUEwMUVGNEM2OTZENDVEMEQ0Q0JGNjlCQkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBENENCRjY5 QkJGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvM0M3MUExMDUwNDFEOUVBMDFFRjRDNjk2RDQ1RDBE NENCRjY5QkJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6eeyjlNPFXWeSskA5Heyc9EvycVIybQSd1 G7wq5p8Cj7004yG83RzEaMsO8rHuvhvuv7rBHhDboKky2oAhgv7aijcCbPQmtLs0 N7QhB9VspvSiRoYdG5tAznjDjwdl619VE+AsA24oQJHPDbAzbT7evsgbzaItAW2O j9vgyRETaqY7Yn9eiGeOzGTkvyeLojITOS0ydpW8xrhZNeM9t1+tHr5UR0MyzwM9 yZVyKoQ5k++im40iOi6pX4xCj8T0QlAd6hiIPbUuGq4rk7tRcJcr2HPNQVi7W2WA k4lBrjRZEs7Qqv8X0cKw5aMsjqj8KtgqQ0hJSIlc83+JC0lbj7U= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:04 2025 by rpki-client