This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: +64/B3VQXuPiqX9s+jbzEYbWEiDDYS5dwL4wHWC942I= Subject key identifier: D6:5D:54:0F:94:C9:48:A9:0B:20:A3:45:0F:B8:30:69:10:B4:06:5B Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 34C1E8B238BA9C98E9349CA228FFFFBDC602EC0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0137 Signing time: Tue 23 Dec 2025 02:12:45 +0000 Manifest this update: Tue 23 Dec 2025 02:07:45 +0000 Manifest next update: Fri 26 Dec 2025 06:52:45 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: KResKGw3SzqE1yLNmhbTEfGQy3DZaY54dHYEaKWHSRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c1:e8:b2:38:ba:9c:98:e9:34:9c:a2:28:ff:ff:bd:c6:02:ec:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Dec 23 02:07:45 2025 GMT Not After : Dec 26 06:52:45 2025 GMT Subject: CN=D65D540F94C948A90B20A3450FB8306910B4065B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:07:29:7b:2f:c0:be:c8:0d:af:6f:aa:61: bf:4e:14:7f:ba:26:3b:9f:6d:11:ef:81:f4:9a:ec: 61:db:49:67:bf:31:1a:6b:4e:fa:14:a3:41:bc:6b: 45:6e:77:af:65:49:dd:e2:f2:e2:2d:a1:f2:11:3b: 57:94:c6:74:8b:79:2b:5c:bf:55:17:e2:3b:2b:ae: 0b:c4:39:1d:66:0d:08:2d:f8:45:a9:c0:47:5a:8e: 12:93:33:fe:b7:90:08:f1:10:7c:7a:76:c6:88:b0: 1a:2b:f3:c2:ca:ae:59:44:52:5f:94:bb:3b:b0:37: c5:0e:3d:8e:d6:bb:42:d3:10:dd:3f:8b:b8:88:50: 01:2d:57:62:82:2e:8c:10:87:b3:39:df:70:2c:eb: e9:72:8a:e7:84:02:56:92:88:e0:94:be:3e:83:35: 72:59:85:e1:9c:06:40:c0:18:e2:f3:b3:4a:af:c1: fa:d1:92:49:2c:c2:2d:91:75:61:f4:8d:70:0e:c2: 8f:27:56:5a:d0:47:bc:bc:d2:e4:f8:eb:64:d6:89: cb:d3:84:0f:0a:32:d0:5c:71:8f:14:28:8c:2e:25: e4:5d:c7:88:21:36:02:f6:d9:44:fe:bd:9b:cb:bb: d0:9f:b2:2f:eb:1c:c7:37:47:ac:b2:e6:e5:37:c6: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:54:0F:94:C9:48:A9:0B:20:A3:45:0F:B8:30:69:10:B4:06:5B X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:89:98:57:a6:fb:0c:b7:3d:49:a4:38:40:5c:6f:20:f9:93: 5a:3b:e6:ca:80:82:e9:dd:27:91:40:14:33:4b:16:a0:1e:46: 1b:4b:60:63:ef:d5:08:d2:40:ca:e8:ae:76:58:70:c1:91:e2: 67:36:bc:0c:38:cb:da:95:5f:3f:b7:f4:8f:3e:e1:f4:32:aa: ee:6e:fb:0c:52:b6:2d:93:a8:74:ee:ff:81:7d:5c:90:db:fe: c7:81:c0:4d:6a:eb:49:26:fb:49:e7:a7:15:51:4c:34:08:72: 65:cb:65:98:6b:da:7c:c5:4f:9d:ff:32:b3:c3:e6:06:87:fa: f4:e0:89:b0:d6:aa:22:36:83:e9:65:f0:87:11:45:70:39:76: 93:9d:ab:34:89:96:33:49:28:c7:2f:21:f3:ba:b7:b1:13:8f: c6:fa:e3:f5:64:a7:6d:ac:5c:4f:c8:d0:8e:fa:ed:2b:8f:03: 5f:80:b4:a9:2b:3e:e1:b9:d4:04:08:2b:0d:db:d5:13:0f:bc: 3b:b7:a7:6a:1a:22:99:75:e2:62:af:12:58:d9:8b:ca:9a:10: 2c:f1:53:7d:e8:8a:ee:b9:1a:8e:a4:5d:29:55:45:92:b4:8c: df:ad:b7:30:b7:f6:33:ab:17:a8:5d:e3:6f:58:f3:97:db:3a: b9:b3:65:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMHosji6nJjpNJyiKP//vcYC7A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTEyMjMwMjA3NDVaFw0yNTEyMjYwNjUyNDVaMDMxMTAvBgNV BAMTKEQ2NUQ1NDBGOTRDOTQ4QTkwQjIwQTM0NTBGQjgzMDY5MTBCNDA2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXQcpey/AvsgNr2+qYb9OFH+6 JjufbRHvgfSa7GHbSWe/MRprTvoUo0G8a0Vud69lSd3i8uItofIRO1eUxnSLeStc v1UX4jsrrgvEOR1mDQgt+EWpwEdajhKTM/63kAjxEHx6dsaIsBor88LKrllEUl+U uzuwN8UOPY7Wu0LTEN0/i7iIUAEtV2KCLowQh7M533As6+lyiueEAlaSiOCUvj6D NXJZheGcBkDAGOLzs0qvwfrRkkkswi2RdWH0jXAOwo8nVlrQR7y80uT462TWicvT hA8KMtBccY8UKIwuJeRdx4ghNgL22UT+vZvLu9Cfsi/rHMc3R6yy5uU3xugXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1l1UD5TJSKkLIKNFD7gwaRC0BlswHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeJmFem+wy3PUmkOEBcbyD5k1o75sqAgund J5FAFDNLFqAeRhtLYGPv1QjSQMrornZYcMGR4mc2vAw4y9qVXz+39I8+4fQyqu5u +wxSti2TqHTu/4F9XJDb/seBwE1q60km+0nnpxVRTDQIcmXLZZhr2nzFT53/MrPD 5gaH+vTgibDWqiI2g+ll8IcRRXA5dpOdqzSJljNJKMcvIfO6t7ETj8b64/Vkp22s XE/I0I767SuPA1+AtKkrPuG51AQIKw3b1RMPvDu3p2oaIpl14mKvEljZi8qaECzx U33oiu65Go6kXSlVRZK0jN+ttzC39jOrF6hd429Y85fbOrmzZYI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:55 2025 by rpki-client