This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: AyVo8U/13S1rq5sjTRfQR4vaMcNUxZL47QsJ89r2SrU= Subject key identifier: D5:0E:09:71:0E:0F:03:53:11:1A:2D:2D:86:A3:45:F5:CE:CA:37:AF Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 20DFBD214EDEA87AB74596974E7FC9BD72374651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 030B Signing time: Sat 06 Dec 2025 11:00:04 +0000 Manifest this update: Sat 06 Dec 2025 10:55:04 +0000 Manifest next update: Tue 09 Dec 2025 19:06:04 +0000 Files and hashes: 1: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: /+2ZwhGTr5F9QQkart9mVwUUBPGXxJrnjcPVO+OujsU=) 2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) 3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 4: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:bd:21:4e:de:a8:7a:b7:45:96:97:4e:7f:c9:bd:72:37:46:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Dec 6 10:55:04 2025 GMT Not After : Dec 9 19:06:04 2025 GMT Subject: CN=D50E09710E0F0353111A2D2D86A345F5CECA37AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:14:1a:d2:b8:99:d2:5f:67:1e:99:46:48: 52:6f:ea:f7:de:4c:86:a6:03:ae:bc:06:d7:13:96: 4f:0c:1a:02:58:8f:07:e5:3c:ad:94:d0:92:03:bf: ac:ae:8c:eb:bc:6a:bb:19:58:52:33:e6:20:f3:20: 71:8c:de:9b:3f:a9:4d:aa:c1:ac:20:fa:97:35:52: 32:b1:89:77:7a:72:18:d3:00:75:5b:a9:ce:7a:9f: 67:fb:99:33:09:18:bb:66:5c:b8:cb:94:a4:97:44: a8:81:cb:68:4c:17:a8:20:0b:f5:eb:79:c8:39:7a: 6f:73:9f:02:e8:50:a9:10:d6:47:92:81:21:8a:2f: bb:d3:8f:15:f5:e4:d3:d6:ff:b7:91:c0:81:07:57: 22:b8:6d:0d:6c:7d:e7:94:39:a8:22:5e:29:e2:58: bb:4d:d6:2c:11:e7:75:36:88:29:4b:1f:d1:87:ca: 29:76:28:af:de:03:44:52:86:ad:b7:f8:f8:8b:1a: 55:23:7e:f7:39:3b:80:a0:fb:9b:78:8d:ee:cd:77: 79:28:a6:33:77:a0:9b:3d:3a:4d:34:a9:f9:ec:a4: f1:cc:2d:3e:69:2d:7c:1d:85:10:4f:82:dc:a6:35: 54:e7:6b:30:41:d5:a0:d2:c7:12:a0:12:90:67:9c: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:09:71:0E:0F:03:53:11:1A:2D:2D:86:A3:45:F5:CE:CA:37:AF X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:be:8e:73:c7:f0:5e:3c:d2:70:13:82:b7:be:2d:33:1d:41: f2:99:9a:10:16:79:b9:08:e6:78:6f:5f:8a:7c:f0:35:33:0d: 18:96:5f:33:58:0d:25:49:3e:79:2a:58:52:1b:80:f8:65:09: 8c:98:b6:86:98:72:9a:66:17:41:fb:40:4f:3d:e6:53:c9:15: 5a:6a:31:6b:a4:5b:8e:ba:5f:96:7c:04:eb:65:c8:e8:71:1f: ee:bb:01:87:67:72:52:8c:90:8f:88:3d:06:b8:79:90:0f:2b: e9:e6:10:ef:cc:91:c7:ea:ea:0f:01:ca:2f:ee:56:d9:96:b4: 15:21:be:6f:f5:20:0a:9e:6c:c1:64:2b:8b:f6:ca:d1:cb:2d: c3:af:ee:ed:19:7b:89:d5:bf:a1:a5:32:a3:55:33:be:ef:57: 59:b6:68:08:b2:f3:7b:67:1b:ac:25:9a:ed:0d:c6:7a:22:27: 3f:b6:a6:db:ff:7d:42:75:8a:e7:b7:45:82:ac:95:91:e3:d4: c0:75:6f:ef:d8:3b:44:94:08:cb:bc:76:06:80:9a:d3:91:87: b5:9a:c7:9d:cd:80:2c:89:6c:2d:49:b5:e5:a2:b8:df:82:23: 94:bb:5a:6a:6f:26:04:e7:e3:98:09:a8:32:5d:47:ff:1f:a3: e1:87:28:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN+9IU7eqHq3RZaXTn/JvXI3RlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTEyMDYxMDU1MDRaFw0yNTEyMDkxOTA2MDRaMDMxMTAvBgNV BAMTKEQ1MEUwOTcxMEUwRjAzNTMxMTFBMkQyRDg2QTM0NUY1Q0VDQTM3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxxQa0riZ0l9nHplGSFJv6vfe TIamA668BtcTlk8MGgJYjwflPK2U0JIDv6yujOu8arsZWFIz5iDzIHGM3ps/qU2q wawg+pc1UjKxiXd6chjTAHVbqc56n2f7mTMJGLtmXLjLlKSXRKiBy2hMF6ggC/Xr ecg5em9znwLoUKkQ1keSgSGKL7vTjxX15NPW/7eRwIEHVyK4bQ1sfeeUOagiXini WLtN1iwR53U2iClLH9GHyil2KK/eA0RShq23+PiLGlUjfvc5O4Cg+5t4je7Nd3ko pjN3oJs9Ok00qfnspPHMLT5pLXwdhRBPgtymNVTnazBB1aDSxxKgEpBnnNfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Q4JcQ4PA1MRGi0thqNF9c7KN68wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALq+jnPH8F480nATgre+LTMdQfKZmhAWebkI 5nhvX4p88DUzDRiWXzNYDSVJPnkqWFIbgPhlCYyYtoaYcppmF0H7QE895lPJFVpq MWukW466X5Z8BOtlyOhxH+67AYdnclKMkI+IPQa4eZAPK+nmEO/Mkcfq6g8Byi/u VtmWtBUhvm/1IAqebMFkK4v2ytHLLcOv7u0Ze4nVv6GlMqNVM77vV1m2aAiy83tn G6wlmu0NxnoiJz+2ptv/fUJ1iue3RYKslZHj1MB1b+/YO0SUCMu8dgaAmtORh7Wa x53NgCyJbC1JteWiuN+CI5S7WmpvJgTn45gJqDJdR/8fo+GHKCE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:14 2025 by rpki-client