This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft File: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft (raw, json) Hash identifier: Bc5NJ09K5eAb6fsaGEGlRzxvGuoLLSHeSVgK7HKygSQ= Subject key identifier: C8:51:A9:7A:CC:74:BA:DF:47:43:A2:BD:58:02:38:42:A6:52:CD:3E Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 652BFBF34B26E4E39746D489E752923217753E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 06:00:02 +0000 Manifest this update: Sat 06 Dec 2025 05:55:02 +0000 Manifest next update: Tue 09 Dec 2025 07:16:02 +0000 Files and hashes: 1: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: U4UUkKKZClt7l44vl6IV8Car6jHu/yDvEc7xgr9Pgrc=) 3: 361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl (hash: gp7N97DCgzZc4g7awbGa29QHT7osf8wysUxUT7gOSsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2b:fb:f3:4b:26:e4:e3:97:46:d4:89:e7:52:92:32:17:75:3e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Dec 6 05:55:02 2025 GMT Not After : Dec 9 07:16:02 2025 GMT Subject: CN=C851A97ACC74BADF4743A2BD58023842A652CD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:f5:31:64:1d:fa:86:3a:8f:3f:ba:45:8d: 3d:5d:0f:66:7e:64:cd:db:5a:bb:c7:5b:6b:69:dd: 76:d3:5d:f1:36:05:f6:c7:81:ea:b7:be:0c:12:9e: 9d:f3:6f:9b:96:b3:c8:6c:a5:04:2c:34:3a:96:01: a6:03:a9:ba:82:8f:81:99:97:15:43:b3:03:44:17: 1b:9b:ad:75:30:36:25:78:77:da:12:62:9d:38:21: 75:f5:03:bf:09:40:42:90:c6:a1:e1:c6:8d:c0:63: 7b:d7:39:dc:9d:76:af:83:0e:1c:0c:57:04:e2:5b: 03:11:f0:d1:fe:49:5e:0e:71:5b:12:b9:37:9a:89: 8b:ff:f8:02:1d:db:23:08:49:a8:86:6f:18:4c:f6: 5e:d0:f6:4c:e1:79:97:b3:7f:31:29:49:fc:2f:ba: 16:8c:8b:e0:76:6c:dc:b9:20:47:4c:e7:a7:84:95: 16:b7:17:c0:dc:f4:74:f6:ee:34:18:92:26:a7:f9: fb:eb:5b:b6:9e:93:76:33:8e:47:a6:d1:93:e2:14: 1e:c2:28:6b:80:bd:94:db:f9:03:e7:cc:bf:29:65: eb:98:39:6a:79:10:b9:c1:77:64:e6:d8:ba:f2:95: 85:14:73:67:db:e6:f7:ac:b5:17:2e:5e:8b:f5:49: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:A9:7A:CC:74:BA:DF:47:43:A2:BD:58:02:38:42:A6:52:CD:3E X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:ee:8f:2c:6a:8a:6e:fa:79:fe:40:ff:61:94:1b:d5:0d: 7e:f3:cf:3e:83:28:1b:7f:8c:a8:5f:8e:c3:fc:0a:b4:a5:dd: a3:64:37:3c:bf:ba:04:8a:26:19:40:58:c3:76:be:58:40:b5: 3e:08:b5:e0:d1:1c:6c:af:3b:0b:bb:2d:39:ba:c4:d6:97:92: b8:25:ee:9b:99:5d:b3:4c:dd:6a:aa:e8:db:91:ab:94:e2:f1: b6:33:1b:a0:ad:f8:8e:22:1f:61:54:46:f6:dd:2a:b3:96:ac: ad:33:ae:1f:2a:1f:30:e9:a9:af:8a:f0:89:d0:b0:14:7e:03: 7c:56:9f:42:02:c9:be:86:0f:e1:de:f0:87:e8:26:67:c0:52: 62:88:09:ff:d8:71:6e:81:77:82:2d:e6:3d:d4:4a:d9:e2:6b: c5:f5:ee:17:30:43:e7:34:8a:de:58:32:7b:69:ed:c9:84:a5: bf:27:73:c2:a4:07:e9:9e:ce:fc:6f:fa:ce:ed:3f:72:7b:fe: 09:86:73:5c:e8:3e:0b:05:a3:5d:48:ad:48:cb:3c:22:5c:a5: 82:3a:88:de:1d:ce:25:e7:ba:6c:86:4b:e0:d8:26:9d:65:e0: 3b:c1:e6:48:4b:a7:84:96:98:3f:70:88:12:40:78:c9:4d:76: 82:00:a4:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSv780sm5OOXRtSJ51KSMhd1Pl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTEyMDYwNTU1MDJaFw0yNTEyMDkwNzE2MDJaMDMxMTAvBgNV BAMTKEM4NTFBOTdBQ0M3NEJBREY0NzQzQTJCRDU4MDIzODQyQTY1MkNEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdPUxZB36hjqPP7pFjT1dD2Z+ ZM3bWrvHW2tp3XbTXfE2BfbHgeq3vgwSnp3zb5uWs8hspQQsNDqWAaYDqbqCj4GZ lxVDswNEFxubrXUwNiV4d9oSYp04IXX1A78JQEKQxqHhxo3AY3vXOdyddq+DDhwM VwTiWwMR8NH+SV4OcVsSuTeaiYv/+AId2yMISaiGbxhM9l7Q9kzheZezfzEpSfwv uhaMi+B2bNy5IEdM56eElRa3F8Dc9HT27jQYkian+fvrW7aek3Yzjkem0ZPiFB7C KGuAvZTb+QPnzL8pZeuYOWp5ELnBd2Tm2LrylYUUc2fb5vestRcuXov1SWVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFGpesx0ut9HQ6K9WAI4QqZSzT4wHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIy QTkwN0VFODY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD637o8saopu+nn+QP9hlBvVDX7zzz6DKBt/ jKhfjsP8CrSl3aNkNzy/ugSKJhlAWMN2vlhAtT4IteDRHGyvOwu7LTm6xNaXkrgl 7puZXbNM3Wqq6NuRq5Ti8bYzG6Ct+I4iH2FURvbdKrOWrK0zrh8qHzDpqa+K8InQ sBR+A3xWn0ICyb6GD+He8IfoJmfAUmKICf/YcW6Bd4It5j3UStnia8X17hcwQ+c0 it5YMntp7cmEpb8nc8KkB+mezvxv+s7tP3J7/gmGc1zoPgsFo11IrUjLPCJcpYI6 iN4dziXnumyGS+DYJp1l4DvB5khLp4SWmD9wiBJAeMlNdoIApE4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:45 2025 by rpki-client