This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: s2ojGlvlvPQwmsT6wuyIIWvB45DSGdldJ3GEilPpU2o= Subject key identifier: E4:41:B0:85:56:BE:90:1E:3B:19:67:BF:8A:BD:62:82:CF:E5:F6:7C Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 1337483ED18477D5EF7AE6D08093FCDFBB876FED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 04EC Signing time: Wed 17 Dec 2025 15:21:15 +0000 Manifest this update: Wed 17 Dec 2025 15:16:15 +0000 Manifest next update: Sat 20 Dec 2025 20:47:15 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: SEzgjQTTMyrUUb04/3Sw+YT/ghJNB2OjaYlCAI9DiRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:37:48:3e:d1:84:77:d5:ef:7a:e6:d0:80:93:fc:df:bb:87:6f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Dec 17 15:16:15 2025 GMT Not After : Dec 20 20:47:15 2025 GMT Subject: CN=E441B08556BE901E3B1967BF8ABD6282CFE5F67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:c1:22:ab:0a:9c:39:59:a6:42:78:56:a2: e1:fb:c9:96:e2:55:11:ce:22:96:43:11:d1:f4:c0: 76:66:5b:44:97:12:86:71:24:7f:53:9c:da:70:ea: c7:2b:05:f6:22:12:a1:8a:af:6f:66:8d:12:be:e9: 42:81:26:c8:31:80:cb:2b:f5:89:e7:51:55:bd:24: c3:60:fe:c9:31:4b:81:ad:5b:90:7d:12:f7:6c:dd: 0f:a4:72:d8:f3:2f:61:b8:1c:45:eb:6e:65:97:81: 2a:a9:6e:51:f0:35:e7:5e:16:09:7c:b3:c0:e2:74: 59:02:dd:df:af:64:a2:b8:96:2e:6a:64:7d:7a:03: ed:b2:90:38:1b:fb:4d:76:9c:75:d4:15:95:bf:aa: 9d:ea:02:a9:36:56:b9:47:cd:ff:f4:c9:be:b5:f9: 55:fa:aa:83:20:c1:21:81:36:f0:58:33:a0:8a:60: bd:0b:46:ca:e2:7f:b8:9a:79:f3:6e:38:d1:07:86: df:6a:a0:9e:79:4b:48:d6:32:92:a1:88:d6:54:d5: e8:13:1c:fe:9e:fa:66:69:f4:f3:a2:e2:75:4c:78: 92:b9:6a:0c:91:60:fe:e8:2d:db:27:82:b4:20:a5: 59:4a:72:a0:f4:df:8a:09:41:86:be:79:e1:bf:27: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:41:B0:85:56:BE:90:1E:3B:19:67:BF:8A:BD:62:82:CF:E5:F6:7C X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3d:25:66:04:5f:8c:96:5a:03:71:51:2f:16:c8:7c:66:82: 46:40:03:79:e6:51:62:3d:86:fe:28:83:f3:4f:37:8c:de:7f: db:9d:51:e9:cd:2f:88:7a:c2:af:e2:8c:71:8b:d5:96:a5:8b: c9:73:78:ba:df:be:52:31:76:21:53:64:f3:e9:d8:e4:6a:b8: e4:69:75:8f:17:8f:ec:9d:f1:6c:05:74:98:11:41:b2:b9:03: ab:71:85:78:44:0e:e4:b4:11:79:3b:be:30:2a:cf:8b:e9:17: 58:9b:7a:88:42:9d:af:aa:f0:cd:60:fd:03:cd:3d:c3:98:4f: 18:04:ef:42:29:51:55:8d:7e:fd:b2:91:c5:3a:dd:fd:42:b2: b8:c3:59:a0:25:90:24:a0:d4:53:ae:fa:f2:0d:2a:e9:c6:6e: d7:28:e5:2d:a2:5f:51:1d:b8:a4:a3:1f:cb:3c:4d:b3:6b:2e: 20:b5:1f:87:24:ca:c4:e2:40:24:8f:e2:97:a0:ab:a9:96:41: b5:24:1c:9e:15:00:0f:f3:e2:53:8c:e3:af:e5:57:a8:c7:a7: 30:9f:cf:b4:e7:1f:63:08:4e:94:c1:04:3f:86:9e:72:65:a4: 80:7d:46:8d:a3:eb:b9:12:d7:7a:b4:f2:51:87:f9:ec:75:d8: a2:69:a7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzdIPtGEd9XveubQgJP837uHb+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTEyMTcxNTE2MTVaFw0yNTEyMjAyMDQ3MTVaMDMxMTAvBgNV BAMTKEU0NDFCMDg1NTZCRTkwMUUzQjE5NjdCRjhBQkQ2MjgyQ0ZFNUY2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/cEiqwqcOVmmQnhWouH7yZbi VRHOIpZDEdH0wHZmW0SXEoZxJH9TnNpw6scrBfYiEqGKr29mjRK+6UKBJsgxgMsr 9YnnUVW9JMNg/skxS4GtW5B9Evds3Q+kctjzL2G4HEXrbmWXgSqpblHwNedeFgl8 s8DidFkC3d+vZKK4li5qZH16A+2ykDgb+012nHXUFZW/qp3qAqk2VrlHzf/0yb61 +VX6qoMgwSGBNvBYM6CKYL0LRsrif7iaefNuONEHht9qoJ55S0jWMpKhiNZU1egT HP6e+mZp9POi4nVMeJK5agyRYP7oLdsngrQgpVlKcqD034oJQYa+eeG/J8CtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5EGwhVa+kB47GWe/ir1igs/l9nwwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE9JWYEX4yWWgNxUS8WyHxmgkZAA3nmUWI9 hv4og/NPN4zef9udUenNL4h6wq/ijHGL1Zali8lzeLrfvlIxdiFTZPPp2ORquORp dY8Xj+yd8WwFdJgRQbK5A6txhXhEDuS0EXk7vjAqz4vpF1ibeohCna+q8M1g/QPN PcOYTxgE70IpUVWNfv2ykcU63f1CsrjDWaAlkCSg1FOu+vINKunGbtco5S2iX1Ed uKSjH8s8TbNrLiC1H4ckysTiQCSP4pegq6mWQbUkHJ4VAA/z4lOM46/lV6jHpzCf z7TnH2MITpTBBD+GnnJlpIB9Ro2j67kS13q08lGH+ex12KJpp0Y= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:38 2025 by rpki-client