This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: GodB+kGEQXljKK9JjmYkr1wGVySTprPEh8fBfUzNRwc= Subject key identifier: 41:7B:D5:72:78:E7:A3:22:CD:E5:75:20:C2:ED:44:0F:13:D2:58:25 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 51F122C5C877F2CCBD4B57B79C57BEFED759E437 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: B9 Signing time: Sat 06 Dec 2025 07:21:14 +0000 Manifest this update: Sat 06 Dec 2025 07:16:14 +0000 Manifest next update: Tue 09 Dec 2025 08:30:14 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: pMbYi5ZGmSaWUlbmj3T8PTUDF0aKCTxZD+Zo1mlHD1w=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f1:22:c5:c8:77:f2:cc:bd:4b:57:b7:9c:57:be:fe:d7:59:e4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Dec 6 07:16:14 2025 GMT Not After : Dec 9 08:30:14 2025 GMT Subject: CN=417BD57278E7A322CDE57520C2ED440F13D25825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:5b:ce:00:71:05:c2:07:41:4d:76:ca:01: 12:fc:dc:dc:74:1b:7c:4a:0c:18:89:39:e0:b1:7a: 23:70:a9:21:71:92:c9:e7:4a:c0:39:e7:9f:66:18: 74:9d:5c:e5:e0:91:6a:8d:26:bf:7f:26:d3:c0:e5: 69:ce:69:6c:ff:9f:a2:f1:a4:b8:8c:aa:4b:5f:8c: bd:7c:23:ac:71:ec:04:43:f4:49:ad:26:2d:3a:6b: 81:40:81:05:c9:c5:70:9e:41:16:0c:6e:5b:ca:e8: 9c:18:08:b3:fd:6a:03:9e:63:4d:6e:c9:30:80:0b: c5:8b:10:2c:2c:34:e1:e8:ac:9c:c9:9f:85:92:54: d4:13:19:5a:eb:64:e8:cb:11:60:a9:cf:81:4a:b7: 6c:69:f7:98:e8:67:5b:4c:8c:67:a5:59:fa:3f:fd: e7:15:d2:f5:a7:49:da:78:27:52:c6:8a:f5:5d:d2: 47:36:14:38:7c:4f:a9:4a:b2:6b:cf:99:6e:88:07: 35:7d:3a:c9:1b:a8:b5:78:35:19:ae:87:2e:92:fc: 70:1e:8b:62:df:c3:d8:60:80:bd:b5:b7:84:d6:9e: a9:d8:5b:4a:12:03:c5:bb:9a:49:e3:a5:e8:cc:2d: 11:e6:18:32:d4:bc:8b:41:57:c1:54:4d:17:81:35: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:D5:72:78:E7:A3:22:CD:E5:75:20:C2:ED:44:0F:13:D2:58:25 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:91:23:28:5e:2f:76:86:6b:3b:13:f7:d3:6a:96:60:87:92: cc:26:5f:57:9d:b0:4c:fb:ee:71:18:e9:26:1d:2a:38:37:1f: 05:bb:56:4f:89:50:b3:43:9c:ec:9f:fe:c5:83:de:33:49:a9: 23:ee:3e:9f:ce:b2:8e:3e:18:a8:49:8f:89:24:5b:94:fa:1d: 86:8d:5c:d7:5c:52:a2:8b:19:0d:f1:b3:bd:90:a6:22:17:c9: 45:fb:ae:2e:2f:7e:87:35:d0:f5:cc:6f:95:c9:52:c8:46:98: ae:7b:3e:8e:14:58:78:cf:c0:55:3b:c3:cb:4d:94:86:f0:ef: e9:75:e9:cb:59:42:ac:66:3c:6d:1a:03:1e:89:93:24:d7:4c: 39:f2:3f:e8:22:be:03:a1:e5:37:b2:d2:a3:95:51:7b:ab:70: fa:84:44:7e:36:14:64:ad:b8:b3:ee:16:e6:61:18:db:de:23: 24:4f:d9:60:c0:68:16:22:4c:20:67:80:d7:98:d5:57:ff:9d: d8:71:55:22:cc:12:7a:b2:c7:2a:75:ac:d6:8a:f7:a7:8c:27: 2a:69:ad:be:c7:62:37:2c:21:08:ca:c9:e9:4d:bf:0c:ed:63: 57:fb:12:a3:48:f0:08:c4:44:81:57:ab:cf:a6:11:9e:01:d0: 1f:e2:eb:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfEixch38sy9S1e3nFe+/tdZ5DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTEyMDYwNzE2MTRaFw0yNTEyMDkwODMwMTRaMDMxMTAvBgNV BAMTKDQxN0JENTcyNzhFN0EzMjJDREU1NzUyMEMyRUQ0NDBGMTNEMjU4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcClvOAHEFwgdBTXbKARL83Nx0 G3xKDBiJOeCxeiNwqSFxksnnSsA5559mGHSdXOXgkWqNJr9/JtPA5WnOaWz/n6Lx pLiMqktfjL18I6xx7ARD9EmtJi06a4FAgQXJxXCeQRYMblvK6JwYCLP9agOeY01u yTCAC8WLECwsNOHorJzJn4WSVNQTGVrrZOjLEWCpz4FKt2xp95joZ1tMjGelWfo/ /ecV0vWnSdp4J1LGivVd0kc2FDh8T6lKsmvPmW6IBzV9OskbqLV4NRmuhy6S/HAe i2Lfw9hggL21t4TWnqnYW0oSA8W7mknjpejMLRHmGDLUvItBV8FUTReBNUkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQXvVcnjnoyLN5XUgwu1EDxPSWCUwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuRIyheL3aGazsT99NqlmCHkswmX1edsEz7 7nEY6SYdKjg3HwW7Vk+JULNDnOyf/sWD3jNJqSPuPp/Oso4+GKhJj4kkW5T6HYaN XNdcUqKLGQ3xs72QpiIXyUX7ri4vfoc10PXMb5XJUshGmK57Po4UWHjPwFU7w8tN lIbw7+l16ctZQqxmPG0aAx6JkyTXTDnyP+givgOh5Tey0qOVUXurcPqERH42FGSt uLPuFuZhGNveIyRP2WDAaBYiTCBngNeY1Vf/ndhxVSLMEnqyxyp1rNaK96eMJypp rb7HYjcsIQjKyelNvwztY1f7EqNI8AjERIFXq8+mEZ4B0B/i624= -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:08 2025 by rpki-client