This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: uEZ4YBQus+bpus8vXtRsxdV8CHBdedmMGFZ+Fdu+YOo= Subject key identifier: 1F:FA:41:CF:27:75:AB:4A:F1:CE:5E:52:BE:D0:03:AD:FB:26:B4:FF Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 15C32F4A06011C3BD69CD74615BC969CB73E9C06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04EB Signing time: Sat 06 Dec 2025 06:42:13 +0000 Manifest this update: Sat 06 Dec 2025 06:37:13 +0000 Manifest next update: Tue 09 Dec 2025 08:43:13 +0000 Files and hashes: 1: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 2: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: LHQG7f9H0VStoLQFWWpzjRkcHY6zDXqqHElyzEpSYDA=) 3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c3:2f:4a:06:01:1c:3b:d6:9c:d7:46:15:bc:96:9c:b7:3e:9c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Dec 6 06:37:13 2025 GMT Not After : Dec 9 08:43:13 2025 GMT Subject: CN=1FFA41CF2775AB4AF1CE5E52BED003ADFB26B4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:57:a0:8a:f1:37:00:cc:01:cb:ec:41:f7: 05:e3:9c:5d:50:1a:9d:0e:b9:d2:75:03:8f:be:ee: fa:1f:76:97:ef:54:3a:6b:03:d4:6f:90:cd:cf:bf: 94:e7:52:5c:0a:6c:52:68:b7:5c:4e:fb:b5:d7:39: 21:55:0e:60:4e:b1:ee:77:17:64:e1:e3:21:05:0f: 46:59:39:e1:38:f4:3f:4f:a2:a0:68:99:bc:85:32: 0c:31:61:37:70:60:6c:af:4f:cf:89:d1:9d:0e:c8: 08:f8:ab:ff:b2:a5:9e:0f:61:47:b7:be:4a:8a:49: df:11:a1:01:f0:92:41:02:01:a9:52:ad:47:b6:f7: a7:17:d0:c7:9b:e4:7d:7c:17:9f:5f:5c:53:32:9a: 95:75:6b:e9:7a:0e:ee:04:49:bd:4b:60:1a:53:d8: f6:dc:ff:c0:26:4e:c1:a0:e7:b7:a0:e1:61:f4:b6: 81:05:6c:02:1d:d3:a3:85:b0:df:16:0c:8d:d2:8c: b9:24:94:e9:d8:25:9d:dc:3c:af:03:28:be:bc:2a: 4f:6d:8c:83:9c:67:be:bb:c1:29:9a:91:f8:bf:13: 7c:8a:8a:7c:2b:0a:5e:09:fb:3e:6c:23:a9:63:49: 72:00:63:f0:cc:50:fe:a3:7f:2c:57:3f:82:f5:18: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FA:41:CF:27:75:AB:4A:F1:CE:5E:52:BE:D0:03:AD:FB:26:B4:FF X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:0f:50:cd:b0:b3:f4:9d:28:c6:f7:65:45:55:4e:94:69: 6b:09:ce:0b:42:51:63:32:77:6d:e5:1d:cf:3b:1e:7b:b7:20: 82:80:72:9c:34:bc:7b:a6:23:a1:99:1a:9d:b1:c4:4e:33:dd: 65:e6:ce:b8:96:a2:4c:98:7d:8e:68:1c:d3:0e:42:bd:46:65: e4:27:a7:db:47:81:a5:4b:31:19:0c:2c:5d:70:e6:c9:bf:60: 5f:91:a6:82:42:9f:7e:e1:2e:20:85:38:44:88:f0:0e:81:41: d4:cf:fc:55:87:74:73:ed:6b:ba:88:7b:97:7f:fa:94:a3:cb: 1a:49:d8:cd:3d:05:8a:b8:33:26:8c:a1:55:51:e5:db:ea:03: 22:ef:a2:1d:30:fc:98:03:b4:54:3b:9b:e5:8d:9b:9f:8b:9c: 41:d8:13:b1:f8:61:b4:4e:4c:ee:7f:3a:f7:0e:ae:4a:c9:29: e8:73:1a:82:2c:70:ab:c4:07:3c:c1:4e:c5:60:95:b3:8e:a5: b5:e5:0a:b0:ab:96:62:a0:72:94:38:e8:7f:c9:fa:44:cf:ac: 0b:32:9d:c8:c6:bd:30:49:13:4e:a5:04:92:7c:29:46:04:d7: 9d:c8:60:8c:8d:33:2f:cb:cc:4a:f8:d0:08:41:80:2f:10:1c: 05:93:c0:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcMvSgYBHDvWnNdGFbyWnLc+nAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTEyMDYwNjM3MTNaFw0yNTEyMDkwODQzMTNaMDMxMTAvBgNV BAMTKDFGRkE0MUNGMjc3NUFCNEFGMUNFNUU1MkJFRDAwM0FERkIyNkI0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhJ1egivE3AMwBy+xB9wXjnF1Q Gp0OudJ1A4++7vofdpfvVDprA9RvkM3Pv5TnUlwKbFJot1xO+7XXOSFVDmBOse53 F2Th4yEFD0ZZOeE49D9PoqBombyFMgwxYTdwYGyvT8+J0Z0OyAj4q/+ypZ4PYUe3 vkqKSd8RoQHwkkECAalSrUe296cX0Meb5H18F59fXFMympV1a+l6Du4ESb1LYBpT 2Pbc/8AmTsGg57eg4WH0toEFbAId06OFsN8WDI3SjLkklOnYJZ3cPK8DKL68Kk9t jIOcZ767wSmakfi/E3yKinwrCl4J+z5sI6ljSXIAY/DMUP6jfyxXP4L1GKBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/pBzyd1q0rxzl5SvtADrfsmtP8wHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADljD1DNsLP0nSjG92VFVU6UaWsJzgtCUWMy d23lHc87Hnu3IIKAcpw0vHumI6GZGp2xxE4z3WXmzriWokyYfY5oHNMOQr1GZeQn p9tHgaVLMRkMLF1w5sm/YF+RpoJCn37hLiCFOESI8A6BQdTP/FWHdHPta7qIe5d/ +pSjyxpJ2M09BYq4MyaMoVVR5dvqAyLvoh0w/JgDtFQ7m+WNm5+LnEHYE7H4YbRO TO5/OvcOrkrJKehzGoIscKvEBzzBTsVglbOOpbXlCrCrlmKgcpQ46H/J+kTPrAsy ncjGvTBJE06lBJJ8KUYE153IYIyNMy/LzEr40AhBgC8QHAWTwMc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:54 2025 by rpki-client