This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: cVsFSl9SWTCwkO9509EJGcyjPU19NZogxSVKW3IcouQ= Subject key identifier: 2F:76:F0:33:33:FC:8A:B7:73:42:F6:D8:FD:5F:05:BB:FD:3F:20:19 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 18888FEC908EFAB5057D58C61DBDE8E4775BBB9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 014C Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:55:53 +0000 Manifest next update: Tue 09 Dec 2025 18:32:53 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: kY99f0Iz1pgcm3rCG8jo1QleDFweTKGJsC+Sg2FtwXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:88:8f:ec:90:8e:fa:b5:05:7d:58:c6:1d:bd:e8:e4:77:5b:bb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Dec 6 06:55:53 2025 GMT Not After : Dec 9 18:32:53 2025 GMT Subject: CN=2F76F03333FC8AB77342F6D8FD5F05BBFD3F2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d2:2d:2a:81:fd:5a:47:25:5e:d8:de:ab:97: 0d:43:43:d7:a2:17:58:ad:d0:ce:fe:fc:c1:59:d7: aa:49:9d:2a:9a:3e:9d:3d:57:55:7e:4d:9a:19:17: 49:b8:96:6e:58:1b:5f:9d:e6:94:fa:4a:cd:35:21: 2f:9b:2b:b1:a9:41:35:82:41:e1:c0:e1:0c:d4:96: 8e:1c:2a:18:19:a6:a9:9e:d4:ed:59:74:ee:35:e2: 71:a9:0c:bb:22:d1:32:5d:f0:04:af:2e:34:f3:26: e3:c8:61:92:74:67:9a:91:28:48:09:89:de:54:c8: c9:80:4a:e4:8e:f0:cd:89:43:00:b1:b3:23:59:49: af:04:83:bf:26:ff:d3:95:98:75:cf:15:65:2f:2a: 7c:f6:7c:f8:bf:c2:4e:33:49:80:54:63:89:9e:9f: f5:f3:75:b0:7f:79:b9:90:89:6e:74:c1:35:58:f5: 01:bb:6e:43:5f:93:83:5e:1b:1b:f3:6f:cc:78:b3: 6e:9b:8a:02:80:1e:c3:a2:b2:f4:e0:52:95:3e:fc: 52:bf:1b:43:fb:33:63:55:04:0b:53:15:c1:dd:ab: b3:e8:16:e5:72:ec:b4:33:a6:4e:e4:44:e8:cb:e2: 4c:3f:e7:5e:39:22:07:51:06:59:cd:77:ec:76:00: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:76:F0:33:33:FC:8A:B7:73:42:F6:D8:FD:5F:05:BB:FD:3F:20:19 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:01:11:27:e7:99:11:28:b0:ca:c3:81:73:14:bb:f9:f0:4b: 35:90:5c:d6:4d:76:b1:1c:83:61:36:d5:73:fa:ff:b7:2e:c6: 13:16:ad:fc:c4:60:05:5a:c8:90:bb:4a:d3:c9:e8:13:96:58: 5b:a7:8a:b8:16:b0:80:97:8d:b9:08:3d:f3:c7:21:ca:55:05: 12:5c:c4:96:40:65:ea:9e:b5:3d:ad:4a:0b:3f:37:b1:36:08: 4f:9e:4f:f2:a9:3e:75:3d:74:7f:e1:ee:e0:cd:b6:fb:b3:d9: 9b:e8:07:eb:1d:37:fa:96:e8:62:8b:ed:41:fa:3e:7a:9b:5a: dd:2d:75:b0:7c:89:d1:ec:16:60:cc:cc:2b:63:f1:51:18:5c: d7:58:d5:5a:53:53:9f:9f:40:be:01:1b:47:c2:ce:55:91:80: fb:8c:e1:e4:e1:6b:34:1e:49:a7:ab:ed:40:41:4d:5d:a2:72: 4d:ed:90:5b:18:bd:93:da:00:a1:c7:8b:92:b9:34:25:c6:fb: ab:b8:38:53:ce:0e:72:0e:d8:95:ed:76:f4:34:2e:d9:79:45: 5a:da:c7:e7:34:e2:49:63:48:47:3e:70:35:47:33:fa:f2:1b: 5f:6f:37:bc:17:33:b9:32:3e:52:f4:80:b3:fc:06:3a:21:2f: c1:b2:1f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIiP7JCO+rUFfVjGHb3o5Hdbu54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTEyMDYwNjU1NTNaFw0yNTEyMDkxODMyNTNaMDMxMTAvBgNV BAMTKDJGNzZGMDMzMzNGQzhBQjc3MzQyRjZEOEZENUYwNUJCRkQzRjIwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0i0qgf1aRyVe2N6rlw1DQ9ei F1it0M7+/MFZ16pJnSqaPp09V1V+TZoZF0m4lm5YG1+d5pT6Ss01IS+bK7GpQTWC QeHA4QzUlo4cKhgZpqme1O1ZdO414nGpDLsi0TJd8ASvLjTzJuPIYZJ0Z5qRKEgJ id5UyMmASuSO8M2JQwCxsyNZSa8Eg78m/9OVmHXPFWUvKnz2fPi/wk4zSYBUY4me n/XzdbB/ebmQiW50wTVY9QG7bkNfk4NeGxvzb8x4s26bigKAHsOisvTgUpU+/FK/ G0P7M2NVBAtTFcHdq7PoFuVy7LQzpk7kROjL4kw/5145IgdRBlnNd+x2AKBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3bwMzP8irdzQvbY/V8Fu/0/IBkwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMBESfnmREosMrDgXMUu/nwSzWQXNZNdrEc g2E21XP6/7cuxhMWrfzEYAVayJC7StPJ6BOWWFunirgWsICXjbkIPfPHIcpVBRJc xJZAZeqetT2tSgs/N7E2CE+eT/KpPnU9dH/h7uDNtvuz2ZvoB+sdN/qW6GKL7UH6 PnqbWt0tdbB8idHsFmDMzCtj8VEYXNdY1VpTU5+fQL4BG0fCzlWRgPuM4eThazQe Saer7UBBTV2ick3tkFsYvZPaAKHHi5K5NCXG+6u4OFPODnIO2JXtdvQ0Ltl5RVra x+c04kljSEc+cDVHM/ryG19vN7wXM7kyPlL0gLP8BjohL8GyHwI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:54 2025 by rpki-client