This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: 3fVqCDSRvQkbBkzLM98pbYXCbJWWyzQuK3H7TgwPP3U= Subject key identifier: 1B:A5:23:BB:9B:07:05:12:63:AD:24:5F:E5:E8:75:9D:09:D2:59:46 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 2211593BDFB42F35190B84BF6CCC6A331E21E072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 011D Signing time: Tue 02 Dec 2025 12:32:13 +0000 Manifest this update: Tue 02 Dec 2025 12:27:13 +0000 Manifest next update: Fri 05 Dec 2025 23:53:13 +0000 Files and hashes: 1: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 2: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: 0kI+pmxkcjx3bWkHtdlp6li4/IwCMvJucqv9VqgMb6c=) 3: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 4: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:11:59:3b:df:b4:2f:35:19:0b:84:bf:6c:cc:6a:33:1e:21:e0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Dec 2 12:27:13 2025 GMT Not After : Dec 5 23:53:13 2025 GMT Subject: CN=1BA523BB9B07051263AD245FE5E8759D09D25946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:cc:9d:05:02:0a:68:b1:ce:a3:d2:9e:ef: b7:34:7d:8c:6b:7a:10:f6:9f:a1:84:91:27:4b:ce: a0:05:5e:d9:a6:fa:41:9d:cf:46:62:69:cc:42:6e: 30:da:46:1f:1a:93:34:b1:13:f9:a1:1b:93:d5:e9: 17:5b:79:f1:8b:73:8f:73:d1:53:a6:ea:ce:d3:35: 63:86:9b:9c:ee:3c:a5:a6:4e:47:e0:8d:89:20:20: fd:e3:c6:2d:13:ee:d3:1a:9c:a9:7c:b9:20:81:e5: 4a:10:3c:70:ac:89:6f:cb:63:0b:51:e5:86:b9:14: bc:4f:7b:24:52:5b:3c:65:38:51:3a:ee:9e:cb:6e: d6:96:9f:71:81:c4:ff:55:4c:d6:b4:55:a1:31:d8: 4b:63:b1:ea:ef:3e:24:15:8c:5f:31:db:bd:24:5e: b4:9b:49:55:18:05:d7:71:41:a9:91:9e:b0:9b:68: 25:12:63:67:ad:36:4a:87:df:ca:b7:b0:d5:0a:2f: 25:d3:45:59:9b:a2:f0:56:2b:b8:39:13:1c:57:ea: ea:02:29:47:ab:b9:3f:49:94:c8:0d:e7:10:5f:28: 8f:99:d3:98:c8:72:85:72:3f:3e:dc:df:0e:96:8b: 4c:ff:c2:9d:16:ab:af:c2:77:14:f7:21:6a:53:df: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:23:BB:9B:07:05:12:63:AD:24:5F:E5:E8:75:9D:09:D2:59:46 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fc:dc:3e:b5:75:a0:56:63:5e:15:fe:c3:e3:ed:e9:cb:7d: d7:2f:72:3a:1a:75:bb:82:b8:31:c2:ca:2e:13:78:5f:8a:b3: ad:d7:88:79:52:d9:0e:f8:12:d1:45:97:60:94:04:d7:84:80: 5d:35:48:f2:30:cf:5c:f4:eb:47:86:35:5d:df:1b:ca:5f:3f: da:1f:ec:e0:18:5c:43:a9:47:d8:01:8f:32:50:3c:61:f7:c9: 58:e4:74:dd:82:85:e6:43:55:a2:16:d3:99:3d:93:94:1a:f2: 60:6a:65:53:94:83:06:20:c4:cd:41:08:6a:82:ec:bc:22:54: 05:18:70:af:00:14:b3:f9:ca:3f:50:e5:ba:ed:83:be:5c:d8: db:94:d9:f0:8a:f9:ae:f0:06:e9:2c:f5:d2:13:45:83:3f:2b: df:94:46:50:8d:c7:63:6f:e4:c5:98:e0:53:37:fc:36:99:54: 9a:c4:ce:d1:ee:29:20:0b:c2:2e:e7:a5:1a:34:c7:96:ce:f9: 41:c6:10:22:fd:5d:cf:a3:75:da:47:7e:90:9b:20:6b:46:50: 04:11:0d:23:f9:89:27:6f:6b:cc:67:39:36:74:6c:0a:8f:9c: ea:83:7a:8c:cd:92:bb:23:be:f1:75:1c:a9:3f:53:19:84:2c: ff:5a:f6:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhFZO9+0LzUZC4S/bMxqMx4h4HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTEyMDIxMjI3MTNaFw0yNTEyMDUyMzUzMTNaMDMxMTAvBgNV BAMTKDFCQTUyM0JCOUIwNzA1MTI2M0FEMjQ1RkU1RTg3NTlEMDlEMjU5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVcydBQIKaLHOo9Ke77c0fYxr ehD2n6GEkSdLzqAFXtmm+kGdz0ZiacxCbjDaRh8akzSxE/mhG5PV6RdbefGLc49z 0VOm6s7TNWOGm5zuPKWmTkfgjYkgIP3jxi0T7tManKl8uSCB5UoQPHCsiW/LYwtR 5Ya5FLxPeyRSWzxlOFE67p7LbtaWn3GBxP9VTNa0VaEx2EtjservPiQVjF8x270k XrSbSVUYBddxQamRnrCbaCUSY2etNkqH38q3sNUKLyXTRVmbovBWK7g5ExxX6uoC KUeruT9JlMgN5xBfKI+Z05jIcoVyPz7c3w6Wi0z/wp0Wq6/CdxT3IWpT31FPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6Uju5sHBRJjrSRf5eh1nQnSWUYwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj83D61daBWY14V/sPj7enLfdcvcjoadbuC uDHCyi4TeF+Ks63XiHlS2Q74EtFFl2CUBNeEgF01SPIwz1z060eGNV3fG8pfP9of 7OAYXEOpR9gBjzJQPGH3yVjkdN2CheZDVaIW05k9k5Qa8mBqZVOUgwYgxM1BCGqC 7LwiVAUYcK8AFLP5yj9Q5brtg75c2NuU2fCK+a7wBuks9dITRYM/K9+URlCNx2Nv 5MWY4FM3/DaZVJrEztHuKSALwi7npRo0x5bO+UHGECL9Xc+jddpHfpCbIGtGUAQR DSP5iSdva8xnOTZ0bAqPnOqDeozNkrsjvvF1HKk/UxmELP9a9kk= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:21 2025 by rpki-client