This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: Kl5RiZmy+LysRnYrLvgP7786aaqSh+hMe88j5J/05dY= Subject key identifier: 9C:32:61:A1:CC:86:DF:A5:CE:A0:08:8A:44:83:39:34:81:89:92:2D Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 3FDC6C9A782BBDBEA6094EB584EBD23BB6076163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 04F4 Signing time: Wed 24 Dec 2025 11:32:24 +0000 Manifest this update: Wed 24 Dec 2025 11:27:24 +0000 Manifest next update: Sat 27 Dec 2025 21:11:24 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 2: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: b/D5usDpu1WmXeZMLYwKkU1QX7r8SoFZlQBxlMFcvaQ=) 3: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: 9AwLYbWK6KWwIboQ7EFHPbMUDIfxQTg43TwmX106/HI=) 4: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dc:6c:9a:78:2b:bd:be:a6:09:4e:b5:84:eb:d2:3b:b6:07:61:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Dec 24 11:27:24 2025 GMT Not After : Dec 27 21:11:24 2025 GMT Subject: CN=9C3261A1CC86DFA5CEA0088A448339348189922D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:26:6c:57:1c:07:7d:2a:fa:29:e4:7e:88: 01:37:36:1e:93:c9:5e:86:f5:91:3f:f8:d1:16:b5: ac:56:9a:c7:be:5e:de:ba:94:84:95:c0:9e:21:54: d2:b6:27:3b:55:e2:88:f8:77:11:5f:c5:da:82:85: 87:71:89:77:3c:d6:5d:b9:21:87:0e:bf:46:35:92: af:bd:05:54:b1:bb:c1:31:0e:73:7d:40:50:85:0d: 86:ad:7f:01:13:ae:c2:d2:3e:d0:2a:94:e1:d7:cc: 49:85:17:64:92:9d:9c:72:41:37:eb:ca:80:b8:ba: 95:61:27:a4:97:a7:82:b7:c1:1e:b0:2e:28:1b:bd: 6a:f2:a6:5c:bc:c8:7d:cf:84:e1:2e:62:5a:5e:f6: 96:f1:d0:c8:c9:45:f6:c4:8e:e9:a9:ea:47:f5:02: 0c:6a:6a:34:a3:24:f1:23:87:2d:79:ea:22:2c:b7: db:27:65:7b:55:f4:5d:fc:ba:a5:29:5b:da:8e:fb: 5b:d7:c2:76:a2:dd:44:71:4b:b8:fb:94:48:44:a9: 83:0c:87:0a:5c:4e:e2:d2:8a:3d:dc:d7:61:12:5c: 97:68:8c:ec:6a:70:32:8d:1f:cc:22:69:c8:11:4e: 9f:28:e2:ba:6f:8a:42:09:82:8a:15:fe:2f:ef:cf: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:61:A1:CC:86:DF:A5:CE:A0:08:8A:44:83:39:34:81:89:92:2D X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b2:42:7b:45:35:d4:04:73:8e:44:79:1a:1e:26:e8:7d:2d: 21:70:49:a2:34:d5:8c:1a:b6:b4:32:ed:13:73:76:37:30:59: f3:1c:8a:05:5b:e4:79:d9:2d:84:1c:98:ca:6c:1a:59:34:d5: 62:9c:6a:00:bd:48:48:17:32:17:c6:df:48:d9:87:4e:a5:51: 86:93:4c:76:28:14:cb:f1:3d:41:a9:92:0c:8a:c6:ab:52:ca: 0e:67:1c:c1:a4:32:dc:08:db:de:2d:a0:aa:cd:3b:56:8a:1a: ee:5e:94:4e:a4:98:76:67:58:49:09:f0:de:3f:cd:8e:60:0c: 58:bf:12:27:f4:01:e5:3e:83:de:d1:e7:c3:8c:d5:b9:73:29: 44:8c:a7:b6:4d:a9:b8:b6:82:3d:48:0a:9c:0d:70:79:b4:e2: a8:8e:0e:14:b1:a2:8c:80:3b:f5:d7:22:f4:7d:68:61:3b:85: 53:bb:97:5c:fa:3b:aa:ad:61:05:e5:60:59:5b:ad:0a:e7:c5: a2:29:0f:dc:64:54:69:42:81:c3:70:21:4d:80:f6:0f:fc:d7: 1a:7e:31:9a:05:37:3c:73:32:4e:49:81:e9:e7:4a:ba:9b:f4: 85:f2:c1:6b:dc:72:e6:82:58:81:73:26:5d:f9:c4:f8:c8:9e: 49:85:47:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9xsmngrvb6mCU61hOvSO7YHYWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTEyMjQxMTI3MjRaFw0yNTEyMjcyMTExMjRaMDMxMTAvBgNV BAMTKDlDMzI2MUExQ0M4NkRGQTVDRUEwMDg4QTQ0ODMzOTM0ODE4OTkyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WSZsVxwHfSr6KeR+iAE3Nh6T yV6G9ZE/+NEWtaxWmse+Xt66lISVwJ4hVNK2JztV4oj4dxFfxdqChYdxiXc81l25 IYcOv0Y1kq+9BVSxu8ExDnN9QFCFDYatfwETrsLSPtAqlOHXzEmFF2SSnZxyQTfr yoC4upVhJ6SXp4K3wR6wLigbvWryply8yH3PhOEuYlpe9pbx0MjJRfbEjump6kf1 AgxqajSjJPEjhy156iIst9snZXtV9F38uqUpW9qO+1vXwnai3URxS7j7lEhEqYMM hwpcTuLSij3c12ESXJdojOxqcDKNH8wiacgRTp8o4rpvikIJgooV/i/vz5mrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnDJhocyG36XOoAiKRIM5NIGJki0wHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqyQntFNdQEc45EeRoeJuh9LSFwSaI01Ywa trQy7RNzdjcwWfMcigVb5HnZLYQcmMpsGlk01WKcagC9SEgXMhfG30jZh06lUYaT THYoFMvxPUGpkgyKxqtSyg5nHMGkMtwI294toKrNO1aKGu5elE6kmHZnWEkJ8N4/ zY5gDFi/Eif0AeU+g97R58OM1blzKUSMp7ZNqbi2gj1ICpwNcHm04qiODhSxooyA O/XXIvR9aGE7hVO7l1z6O6qtYQXlYFlbrQrnxaIpD9xkVGlCgcNwIU2A9g/81xp+ MZoFNzxzMk5JgennSrqb9IXywWvccuaCWIFzJl35xPjInkmFR94= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:17 2025 by rpki-client