This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: 2xMCgoQgkXUuZMcboIqU87mQKOKMR/lOIVGiheXzDIY= Subject key identifier: 83:60:77:7D:41:1E:C8:6B:9D:BF:62:62:DE:D8:1A:88:E9:D2:67:67 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 6989FC3DC1355F6FE22288AE5678AA27C2F91BB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 053B Signing time: Wed 03 Dec 2025 01:12:11 +0000 Manifest this update: Wed 03 Dec 2025 01:07:11 +0000 Manifest next update: Sat 06 Dec 2025 07:02:11 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 2: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 4: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 6: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 7: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: W2pPxMQQI2RKTNqPnRPIydA1/a9Ff4L9l/iVHZ1crXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:fc:3d:c1:35:5f:6f:e2:22:88:ae:56:78:aa:27:c2:f9:1b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Dec 3 01:07:11 2025 GMT Not After : Dec 6 07:02:11 2025 GMT Subject: CN=8360777D411EC86B9DBF6262DED81A88E9D26767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:c0:b5:6d:70:96:36:1a:6c:af:ad:60:19: 87:11:44:f1:2e:f3:9a:55:97:55:7f:08:69:db:e6: 0a:2d:16:d2:93:67:09:cd:8e:0e:ac:15:42:dc:47: 8c:77:c9:fb:f7:be:37:c8:9c:93:f3:da:c4:5c:8d: 0d:a8:fa:6b:c2:5d:bd:14:95:72:2a:72:bb:58:2b: b7:bb:c9:62:de:ad:7b:bb:13:f4:28:70:ff:d0:dd: 8a:1d:17:2b:62:d0:a3:11:3c:6b:69:b3:fa:fc:ed: 4e:79:fe:7c:03:9f:8e:ac:04:75:0a:d4:93:29:89: 16:e5:04:c8:76:8b:99:74:69:3d:fb:28:a0:fd:0d: 73:f9:e9:fe:42:6c:b7:c3:73:30:c4:ab:74:9e:56: 99:c7:8c:62:3c:33:9b:c2:e6:b2:81:67:35:38:6f: c0:d5:ec:23:05:b4:22:0f:2e:28:e9:f4:41:2f:f2: 11:2d:81:75:d9:73:ec:5e:00:f0:77:44:79:60:e2: b7:6e:32:e6:69:13:96:83:d5:9c:6f:fb:97:e1:e6: 41:7b:b0:b8:16:45:57:74:0e:94:8d:6d:a3:36:9a: 53:08:44:45:af:e1:1d:d9:1e:c8:e3:72:f5:8c:32: 89:e2:8e:55:90:4c:57:c6:7e:42:85:d9:60:83:54: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:77:7D:41:1E:C8:6B:9D:BF:62:62:DE:D8:1A:88:E9:D2:67:67 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:6a:5f:32:06:59:d9:9a:9c:57:63:53:37:4f:b9:95:ea: 01:46:d3:f2:d5:59:ae:e7:56:3c:72:40:b9:a7:cf:40:99:96: d4:79:54:0b:8e:f0:b4:57:1a:e1:b7:bb:cb:8c:b7:9a:50:96: ab:5a:73:83:0f:f1:a6:2a:84:0a:87:e7:b5:a2:df:5a:76:ce: 8a:a3:30:45:cb:6d:13:68:c3:c5:8f:d5:e5:22:0e:b5:f8:76: a8:10:cf:e3:84:16:8b:0a:60:42:05:8f:d8:d5:e8:36:d1:be: d8:e3:4b:0a:ed:cb:9b:92:4a:21:d5:37:44:84:ad:e3:48:9c: 49:3e:0c:3c:db:78:f1:3c:e0:0c:16:b5:9e:f8:0d:d1:38:c9: ee:11:1e:60:88:53:58:be:46:97:05:57:ed:0f:ae:e9:8d:bd: 01:ee:f0:78:02:a2:0d:e7:89:98:17:f1:02:35:60:21:33:40: 2b:76:b4:f5:f3:88:73:bf:53:9f:19:37:46:c0:31:5f:6d:0b: 9a:24:b6:71:9d:47:ae:f0:27:bf:10:4b:d2:1a:01:fd:3c:cb: 1d:fb:4c:60:16:87:39:fa:12:83:a1:de:c5:d0:f8:5f:34:43: 39:ce:29:34:c3:91:9b:e1:d2:55:16:22:b0:bf:cf:e5:b5:8d: 6d:1d:d2:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYn8PcE1X2/iIoiuVniqJ8L5G7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTEyMDMwMTA3MTFaFw0yNTEyMDYwNzAyMTFaMDMxMTAvBgNV BAMTKDgzNjA3NzdENDExRUM4NkI5REJGNjI2MkRFRDgxQTg4RTlEMjY3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1cC1bXCWNhpsr61gGYcRRPEu 85pVl1V/CGnb5gotFtKTZwnNjg6sFULcR4x3yfv3vjfInJPz2sRcjQ2o+mvCXb0U lXIqcrtYK7e7yWLerXu7E/QocP/Q3YodFyti0KMRPGtps/r87U55/nwDn46sBHUK 1JMpiRblBMh2i5l0aT37KKD9DXP56f5CbLfDczDEq3SeVpnHjGI8M5vC5rKBZzU4 b8DV7CMFtCIPLijp9EEv8hEtgXXZc+xeAPB3RHlg4rduMuZpE5aD1Zxv+5fh5kF7 sLgWRVd0DpSNbaM2mlMIREWv4R3ZHsjjcvWMMonijlWQTFfGfkKF2WCDVMKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2B3fUEeyGudv2Ji3tgaiOnSZ2cwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImPal8yBlnZmpxXY1M3T7mV6gFG0/LVWa7n VjxyQLmnz0CZltR5VAuO8LRXGuG3u8uMt5pQlqtac4MP8aYqhAqH57Wi31p2zoqj MEXLbRNow8WP1eUiDrX4dqgQz+OEFosKYEIFj9jV6DbRvtjjSwrty5uSSiHVN0SE reNInEk+DDzbePE84AwWtZ74DdE4ye4RHmCIU1i+RpcFV+0PrumNvQHu8HgCog3n iZgX8QI1YCEzQCt2tPXziHO/U58ZN0bAMV9tC5oktnGdR67wJ78QS9IaAf08yx37 TGAWhzn6EoOh3sXQ+F80QznOKTTDkZvh0lUWIrC/z+W1jW0d0iE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:46 2025 by rpki-client