This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: OQ9UzNYfiMK03msuPMcyia+by09oGTDlYUPIfbhjpDc= Subject key identifier: 1C:07:13:C5:09:19:FB:F2:D2:2A:7B:46:42:C7:0A:8A:E3:AC:42:9C Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 6D6BBE132B9B23A2BF7890781ACAA69A0906007C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 13:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:56:43 +0000 Manifest next update: Wed 10 Dec 2025 00:49:43 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 4: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 5: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: sqBQmqs7pRuI8hqOCxaatOUivzo56pob7F54sPR4eps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:be:13:2b:9b:23:a2:bf:78:90:78:1a:ca:a6:9a:09:06:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Dec 6 12:56:43 2025 GMT Not After : Dec 10 00:49:43 2025 GMT Subject: CN=1C0713C50919FBF2D22A7B4642C70A8AE3AC429C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:75:bf:bf:52:90:f7:4e:d3:23:31:85:fd: 42:1c:26:95:a2:16:b0:fa:d2:44:bc:fb:4d:bb:b4: b0:f8:d9:e5:ad:9f:9b:17:97:b9:4b:64:d8:6e:9e: b9:d6:4d:59:ba:0b:c9:50:20:b7:af:af:3e:ab:fb: 35:e4:bc:59:59:27:a3:b6:9c:33:ec:19:11:6f:11: 0a:94:87:f4:14:55:1e:8a:a5:ae:c9:42:cb:e7:87: bb:1b:b4:55:09:21:08:e1:f3:75:d3:53:82:02:ef: 64:f8:c5:87:8b:5f:29:f7:40:c5:6c:5e:2c:59:bd: 20:2c:57:10:44:13:11:1e:5b:9b:a7:d9:0a:12:25: ca:36:b3:18:7f:21:00:6f:a4:0b:ff:75:29:f5:c7: 9c:9e:24:20:82:71:78:10:53:af:58:b1:4d:e7:13: 42:16:25:67:b3:94:fc:ea:c0:71:33:dd:46:58:b7: f6:8d:d3:99:3b:e0:5e:e4:f7:24:cb:fc:0d:f0:74: 91:4d:f7:1a:16:57:fb:e0:cf:5e:bd:37:af:3f:1c: 5d:81:80:f5:af:86:96:8a:f9:2b:f8:06:79:6e:f3: 36:86:71:07:70:10:3c:71:ba:1b:e4:68:5a:cb:ef: e3:5c:44:a5:2a:5f:1f:e9:c9:93:45:9f:2e:b1:7a: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:13:C5:09:19:FB:F2:D2:2A:7B:46:42:C7:0A:8A:E3:AC:42:9C X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:f0:d9:c0:65:e9:63:7b:ac:b9:b1:6e:c2:27:c8:e5:e7: 1f:0b:a6:a0:19:ac:cd:59:bc:6f:71:67:1e:3b:16:4f:3b:1d: 7e:39:02:fa:d3:6a:89:f6:db:aa:0f:e5:56:bb:f4:e7:20:40: ec:6b:d3:82:aa:ad:a1:e2:89:64:42:70:6c:4f:0c:b3:63:46: 40:d0:95:87:3e:ab:a6:9d:80:81:fd:0a:bc:4b:d0:19:12:63: 47:d3:3b:ac:57:36:65:1b:aa:9a:6a:90:70:0e:ca:12:42:f4: f9:e5:4e:67:78:2e:6d:a3:3d:8d:ce:a4:93:03:3f:53:79:6c: 40:ba:53:97:51:e0:4c:d4:7a:4f:60:e8:54:36:0f:73:b5:76: 9f:de:c6:f7:9c:23:7d:4f:02:c3:d1:6a:5b:da:97:dd:43:a3: 35:b7:d1:d1:7a:0a:a5:a9:6b:58:1d:52:c1:af:08:0b:08:99: 5a:66:7d:6e:e9:8d:c1:82:1f:3a:df:e3:35:98:b5:e3:06:ab: 8a:26:dc:8a:6c:c7:e4:dc:2c:03:a2:15:28:1d:5a:04:59:48: 47:1f:c1:85:09:92:12:eb:ef:69:9e:cb:f3:4d:64:e7:93:22: a0:be:10:d0:0a:91:fd:51:6a:d7:90:68:4f:fa:9a:05:a9:b4: d9:3a:7e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWu+EyubI6K/eJB4GsqmmgkGAHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTEyMDYxMjU2NDNaFw0yNTEyMTAwMDQ5NDNaMDMxMTAvBgNV BAMTKDFDMDcxM0M1MDkxOUZCRjJEMjJBN0I0NjQyQzcwQThBRTNBQzQyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGXW/v1KQ907TIzGF/UIcJpWi FrD60kS8+027tLD42eWtn5sXl7lLZNhunrnWTVm6C8lQILevrz6r+zXkvFlZJ6O2 nDPsGRFvEQqUh/QUVR6Kpa7JQsvnh7sbtFUJIQjh83XTU4IC72T4xYeLXyn3QMVs XixZvSAsVxBEExEeW5un2QoSJco2sxh/IQBvpAv/dSn1x5yeJCCCcXgQU69YsU3n E0IWJWezlPzqwHEz3UZYt/aN05k74F7k9yTL/A3wdJFN9xoWV/vgz169N68/HF2B gPWvhpaK+Sv4Bnlu8zaGcQdwEDxxuhvkaFrL7+NcRKUqXx/pyZNFny6xehrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAcTxQkZ+/LSKntGQscKiuOsQpwwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/a8NnAZelje6y5sW7CJ8jl5x8LpqAZrM1Z vG9xZx47Fk87HX45AvrTaon226oP5Va79OcgQOxr04KqraHiiWRCcGxPDLNjRkDQ lYc+q6adgIH9CrxL0BkSY0fTO6xXNmUbqppqkHAOyhJC9PnlTmd4Lm2jPY3OpJMD P1N5bEC6U5dR4EzUek9g6FQ2D3O1dp/exvecI31PAsPRalval91DozW30dF6CqWp a1gdUsGvCAsImVpmfW7pjcGCHzrf4zWYteMGq4om3Ipsx+TcLAOiFSgdWgRZSEcf wYUJkhLr72mey/NNZOeTIqC+ENAKkf1RateQaE/6mgWptNk6fuI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:21 2025 by rpki-client