This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json) Hash identifier: cKjBxdPqMtfFC82JJ9H/IH7+Cy0qoRgJgRJp+fzrqDY= Subject key identifier: 86:AA:F5:46:46:D4:89:8F:6A:7F:EE:F9:AA:4F:88:A6:8F:B4:07:00 Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Certificate serial: 4F23A3C00D7C9D60CB45B8B4456061D63BE45BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft Manifest number: 039D Signing time: Sat 06 Dec 2025 10:21:57 +0000 Manifest this update: Sat 06 Dec 2025 10:16:57 +0000 Manifest next update: Tue 09 Dec 2025 18:45:57 +0000 Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=) 2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: gK7xEa4bnc9vCduhfDz7Aq9XUoDLXIQY2BdcSdZIAIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:23:a3:c0:0d:7c:9d:60:cb:45:b8:b4:45:60:61:d6:3b:e4:5b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Validity Not Before: Dec 6 10:16:57 2025 GMT Not After : Dec 9 18:45:57 2025 GMT Subject: CN=86AAF54646D4898F6A7FEEF9AA4F88A68FB40700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:70:8a:19:ce:2a:09:7a:d5:a0:3a:31:a4: a5:2f:9a:82:ec:7e:24:b9:ef:7f:3d:a6:0a:f1:4b: 65:72:85:9b:96:74:ef:4f:27:8e:84:ab:ce:e1:e5: 43:fb:47:2d:43:e7:9d:77:60:78:d6:c5:b3:4f:7b: 3a:48:ff:01:47:e3:6a:f9:0d:88:d0:65:8a:e3:67: 0b:66:f0:ff:bd:26:73:da:ca:38:21:4e:ac:3f:67: 8c:b9:a3:1a:d0:79:59:38:cc:27:67:2e:94:e4:0f: 05:72:b5:5c:a6:d6:20:8f:3a:85:6b:2d:40:f9:bf: f0:39:f1:4c:20:1a:2f:72:85:0a:e6:83:fc:fa:18: e0:e4:44:6e:5a:17:43:65:5c:49:ad:f7:dd:fe:ab: 63:ce:5e:ca:1c:de:6e:f5:39:f6:fa:63:df:9f:b8: b0:8d:a7:47:12:94:fc:f4:ae:45:10:40:96:8e:fe: e4:29:f3:45:f2:25:6b:bc:c8:8f:f7:c2:d9:4f:85: 89:c1:c2:66:38:96:a1:b5:8c:38:f5:1f:08:de:7b: 4e:37:a9:50:63:db:35:aa:0d:60:56:9c:42:92:3c: 8a:2b:42:d8:71:78:84:b2:96:5b:9c:38:98:fb:84: aa:04:a1:0d:de:61:cf:97:ee:63:1f:59:1d:aa:62: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:F5:46:46:D4:89:8F:6A:7F:EE:F9:AA:4F:88:A6:8F:B4:07:00 X509v3 Authority Key Identifier: keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:46:28:e7:6f:7a:83:d5:dc:0e:75:8b:1d:77:c0:b0:77:76: a6:1d:46:eb:a6:b2:ec:94:f9:73:dd:ca:1d:a4:32:b9:b0:b0: 0f:77:8c:55:e7:19:22:21:6c:3f:90:dc:79:8c:72:c3:36:1c: 9e:e6:ec:96:94:5b:49:ad:95:a2:ae:e8:1d:ca:63:48:0a:26: 4e:10:74:66:67:45:81:b0:f5:3f:c4:ac:7b:b3:e5:1d:52:3f: 16:85:2e:44:40:b8:a7:ae:6d:e0:03:cf:2a:85:49:5b:9f:cf: 83:fa:31:6a:d2:f2:58:67:eb:93:40:b5:8c:dc:63:b6:d2:c6: 07:82:78:a8:3c:0c:27:5e:df:90:a8:0a:dc:e0:e8:26:a3:84: a6:21:87:41:8c:32:6a:c2:f0:43:45:f9:41:71:5a:f8:ba:a6: 5e:54:0a:b4:bf:eb:79:88:4c:f0:c5:5a:a4:94:aa:96:b2:fb: 93:59:2c:00:98:39:b9:78:03:cc:d4:e8:13:52:7f:9c:be:4b: e8:17:d4:71:e5:66:82:5c:fa:92:dd:02:76:b8:1a:79:18:1c: 0a:05:a2:08:c1:0f:ba:54:f9:39:d2:80:02:88:d9:9c:61:98: f5:45:94:00:66:f3:1d:b8:5c:2e:72:ed:19:cd:50:46:71:71: 61:2d:5d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTyOjwA18nWDLRbi0RWBh1jvkW/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JC QzNDNUUzNjAeFw0yNTEyMDYxMDE2NTdaFw0yNTEyMDkxODQ1NTdaMDMxMTAvBgNV BAMTKDg2QUFGNTQ2NDZENDg5OEY2QTdGRUVGOUFBNEY4OEE2OEZCNDA3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5XCKGc4qCXrVoDoxpKUvmoLs fiS57389pgrxS2VyhZuWdO9PJ46Eq87h5UP7Ry1D5513YHjWxbNPezpI/wFH42r5 DYjQZYrjZwtm8P+9JnPayjghTqw/Z4y5oxrQeVk4zCdnLpTkDwVytVym1iCPOoVr LUD5v/A58UwgGi9yhQrmg/z6GODkRG5aF0NlXEmt993+q2POXsoc3m71Ofb6Y9+f uLCNp0cSlPz0rkUQQJaO/uQp80XyJWu8yI/3wtlPhYnBwmY4lqG1jDj1Hwjee043 qVBj2zWqDWBWnEKSPIorQthxeISyllucOJj7hKoEoQ3eYc+X7mMfWR2qYlTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqr1RkbUiY9qf+75qk+Ipo+0BwAwHwYDVR0j BBgwFoAUVjaf27zeaFtEQEKaIreWe7w8XjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjIxYWQ2Ny1kMzVjLTQ1NTktOWE3My03Yzc0ZjUwZGNmZmEvMC81NjM2OUZEQkJD REU2ODVCNDQ0MDQyOUEyMkI3OTY3QkJDM0M1RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JCQzND NUUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2 N0JCQzNDNUUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRGKOdveoPV3A51ix13wLB3dqYdRuumsuyU +XPdyh2kMrmwsA93jFXnGSIhbD+Q3HmMcsM2HJ7m7JaUW0mtlaKu6B3KY0gKJk4Q dGZnRYGw9T/ErHuz5R1SPxaFLkRAuKeubeADzyqFSVufz4P6MWrS8lhn65NAtYzc Y7bSxgeCeKg8DCde35CoCtzg6CajhKYhh0GMMmrC8ENF+UFxWvi6pl5UCrS/63mI TPDFWqSUqpay+5NZLACYObl4A8zU6BNSf5y+S+gX1HHlZoJc+pLdAna4GnkYHAoF ogjBD7pU+TnSgAKI2ZxhmPVFlABm8x24XC5y7RnNUEZxcWEtXdk= -----END CERTIFICATE-----Generated at Sun Dec 7 03:35:44 2025 by rpki-client