This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json)
Hash identifier: zmlMXWxO7R606yF3VLnc7F1bdO5eOxYzpbd3CmPMGig=
Subject key identifier: AD:43:E0:40:31:7D:F5:0D:67:0E:41:80:39:32:91:01:4D:8B:83:D2
Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05
Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
Certificate serial: 38030CBA40E51503BEB980B6A9B41574B5D9DA05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
Manifest number: 04E7
Signing time: Sat 06 Dec 2025 02:51:13 +0000
Manifest this update: Sat 06 Dec 2025 02:46:13 +0000
Manifest next update: Tue 09 Dec 2025 12:32:13 +0000
Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: jrlc4y1UecJWjWunaH3ogK/kpmmW518AEEuqb6SZ3HQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl
rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 12:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:03:0c:ba:40:e5:15:03:be:b9:80:b6:a9:b4:15:74:b5:d9:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
Validity
Not Before: Dec 6 02:46:13 2025 GMT
Not After : Dec 9 12:32:13 2025 GMT
Subject: CN=AD43E040317DF50D670E4180393291014D8B83D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:ee:1d:70:c0:00:88:9f:14:de:90:e7:30:
96:b8:64:2b:7d:17:a7:de:eb:77:55:bc:f9:56:00:
94:0d:31:18:ef:e3:1d:37:60:07:dd:4d:dc:d8:c2:
ea:ff:a7:ae:1e:a5:3b:82:a7:45:30:90:d8:b5:c5:
af:5b:78:de:d5:72:ba:0f:22:6c:bb:d7:28:10:50:
3c:9a:4f:15:f5:b4:03:07:3d:e0:2d:07:68:8c:e6:
05:f9:80:38:14:25:9d:14:a7:0f:d3:e6:8f:75:4d:
e6:74:20:a4:40:67:28:cc:5a:41:89:49:b3:47:5b:
cc:55:b5:35:75:8e:39:dd:d0:de:93:26:35:88:b3:
4f:f7:b0:20:c8:cc:b2:4a:63:2f:30:2e:04:1b:f3:
c3:e6:b8:15:2f:6a:3f:ee:8c:54:02:ea:41:94:3b:
76:aa:59:c6:7e:7a:c6:9f:70:e2:9f:7a:29:05:4e:
e2:f1:2f:48:04:ef:4a:9c:d6:ce:b7:29:05:93:3f:
71:c4:d2:9d:00:cb:20:71:d3:9c:e3:32:77:6a:5e:
9a:44:81:68:33:ef:8d:08:bf:d9:ed:55:81:95:c0:
f9:67:9c:b3:be:05:bf:e0:b5:d6:7c:ab:d2:27:cc:
07:2d:32:03:3c:0a:57:ac:df:8a:f8:f6:62:5e:15:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:E0:40:31:7D:F5:0D:67:0E:41:80:39:32:91:01:4D:8B:83:D2
X509v3 Authority Key Identifier:
keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:d6:87:1f:15:21:d7:83:fe:9b:4b:aa:6f:69:31:ae:18:
b4:e0:81:a5:46:3a:e3:6b:03:e0:90:a1:5a:19:fd:79:f0:ec:
c0:e7:26:62:f3:99:2c:fd:4c:59:d2:f5:cf:1b:b9:90:7a:4a:
03:eb:de:15:49:78:19:57:69:6f:5d:cd:f2:a7:71:48:63:c0:
b1:7e:7b:5f:b1:29:1f:d0:b6:61:04:18:79:6a:52:fb:23:57:
49:fd:de:d1:a4:ac:9e:2c:15:23:49:a8:1b:ae:b9:49:cb:ba:
20:fc:d7:2f:4a:3c:02:5f:ef:2f:90:9b:5f:8b:b2:22:4d:5c:
39:a9:4d:47:f1:89:68:e7:dd:1c:65:d1:f4:77:d2:5f:8b:61:
51:d5:57:a4:fd:3f:ad:f0:c7:47:26:27:6f:ae:5a:3c:d8:d3:
0a:5a:55:b7:75:e2:7f:ee:bf:c9:80:b7:07:80:4e:21:4e:5d:
d5:f6:2e:07:68:69:ea:55:82:e4:cd:05:30:e7:53:eb:08:ec:
aa:a1:50:53:28:1e:99:9e:cf:17:87:60:6c:ff:66:40:f8:3c:
9a:cb:c0:bf:bb:7b:de:75:8b:2b:e8:16:0f:96:49:45:62:a6:
44:2d:2c:73:8c:d7:cc:41:e3:6b:f4:74:86:35:28:d8:4a:3c:
35:28:ed:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOAMMukDlFQO+uYC2qbQVdLXZ2gUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3
NEZCNzYwNTAeFw0yNTEyMDYwMjQ2MTNaFw0yNTEyMDkxMjMyMTNaMDMxMTAvBgNV
BAMTKEFENDNFMDQwMzE3REY1MEQ2NzBFNDE4MDM5MzI5MTAxNEQ4QjgzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8me4dcMAAiJ8U3pDnMJa4ZCt9
F6fe63dVvPlWAJQNMRjv4x03YAfdTdzYwur/p64epTuCp0UwkNi1xa9beN7VcroP
Imy71ygQUDyaTxX1tAMHPeAtB2iM5gX5gDgUJZ0Upw/T5o91TeZ0IKRAZyjMWkGJ
SbNHW8xVtTV1jjnd0N6TJjWIs0/3sCDIzLJKYy8wLgQb88PmuBUvaj/ujFQC6kGU
O3aqWcZ+esafcOKfeikFTuLxL0gE70qc1s63KQWTP3HE0p0AyyBx05zjMndqXppE
gWgz740Iv9ntVYGVwPlnnLO+Bb/gtdZ8q9InzActMgM8Cles34r49mJeFXNfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrUPgQDF99Q1nDkGAOTKRAU2Lg9IwHwYDVR0j
BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF
NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC
NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw
NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3
QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHxE1ocfFSHXg/6bS6pvaTGuGLTggaVGOuNr
A+CQoVoZ/Xnw7MDnJmLzmSz9TFnS9c8buZB6SgPr3hVJeBlXaW9dzfKncUhjwLF+
e1+xKR/QtmEEGHlqUvsjV0n93tGkrJ4sFSNJqBuuuUnLuiD81y9KPAJf7y+Qm1+L
siJNXDmpTUfxiWjn3Rxl0fR30l+LYVHVV6T9P63wx0cmJ2+uWjzY0wpaVbd14n/u
v8mAtweATiFOXdX2LgdoaepVguTNBTDnU+sI7KqhUFMoHpmezxeHYGz/ZkD4PJrL
wL+7e951iyvoFg+WSUVipkQtLHOM18xB42v0dIY1KNhKPDUo7U4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:41:30 2025 by rpki-client