This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: /1hNzDcLsmGaUZpIutc8G3Bc7v7Q7yhjzDExubz1KO4= Subject key identifier: A5:54:66:1A:D0:5B:77:86:6B:3C:EB:38:CE:6D:C1:B0:67:0A:F4:5F Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 15CBE39450EFD560CE6768B1833D70F080B416F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: C5 Signing time: Fri 02 Jan 2026 01:21:15 +0000 Manifest this update: Fri 02 Jan 2026 01:16:15 +0000 Manifest next update: Mon 05 Jan 2026 10:46:15 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: KJ3XF7GdFtIkUBoPh5Ark26KR4iK16xffz4QFd2LHzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:e3:94:50:ef:d5:60:ce:67:68:b1:83:3d:70:f0:80:b4:16:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Jan 2 01:16:15 2026 GMT Not After : Jan 5 10:46:15 2026 GMT Subject: CN=A554661AD05B77866B3CEB38CE6DC1B0670AF45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:1b:cc:09:b8:1c:57:df:d5:c2:6f:a3:8b: e7:2c:fe:c9:d0:d5:01:c5:2a:84:72:dc:1f:2f:6c: 64:f0:33:dd:96:3d:f7:82:ff:bc:cf:27:c8:fe:6b: a1:06:55:e4:d9:6b:96:2b:3a:f8:12:e8:42:3b:a5: 4a:6b:9b:3a:20:af:eb:3b:31:34:b9:9b:18:0e:4b: 30:af:66:4d:ad:46:f1:cf:d7:3e:cb:7a:cf:12:7a: 04:91:87:98:9b:55:45:76:1e:70:20:8d:97:ca:bb: 29:f0:33:ce:c9:50:62:b6:18:9a:31:33:66:54:b5: 65:70:fb:22:62:f7:b2:e3:95:03:2a:06:2b:b7:a9: 61:db:77:c3:75:f4:fc:f8:dd:74:76:d7:06:69:d4: 54:0b:64:d4:ef:07:26:e8:77:34:56:e4:78:ba:eb: 53:1f:27:83:f5:8e:49:38:a7:82:1e:1a:dc:91:a1: 49:5f:31:63:ea:cc:c4:ed:96:e9:aa:1e:f0:52:38: d7:7c:f3:1f:02:1d:0f:f5:d3:44:5c:01:9d:d3:97: 2c:78:d4:19:7b:88:44:87:2a:6a:e4:56:c4:e8:38: 9d:92:a0:0f:7e:cf:0b:8c:ba:91:fc:f0:68:d1:c6: 72:2f:85:b2:c5:18:ea:fe:ce:2e:1e:ed:74:58:00: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:54:66:1A:D0:5B:77:86:6B:3C:EB:38:CE:6D:C1:B0:67:0A:F4:5F X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:19:8b:e1:72:66:e7:dd:36:09:d2:5f:d0:22:ff:a5:34:f3: 3c:74:d6:1d:35:dd:ef:19:57:5f:ab:1a:f0:ce:cf:ec:cc:3f: 94:7f:e4:e3:29:f1:d1:b1:9e:de:82:fc:04:82:07:71:c3:df: 65:b0:2e:d0:65:49:05:91:04:89:da:d7:7d:93:1c:03:ca:21: 23:b5:8b:54:5b:8c:03:a6:ee:d6:7b:02:f1:0e:d3:2b:1d:88: fc:1c:82:d2:7a:17:d6:ee:fa:a3:ed:f8:a3:45:09:39:ad:cc: b5:3b:7e:02:ad:85:da:11:e0:04:bf:0e:28:41:1a:2b:13:9a: 6a:9b:0d:13:d9:f8:c7:a4:49:78:5d:b4:69:51:72:3e:32:f1: 01:ad:a2:0a:73:8f:21:5f:1a:60:44:e6:74:27:3b:23:7d:07: d5:e3:04:32:46:69:cb:7d:f8:e2:ba:87:3d:a2:df:c1:9b:a0: 45:a9:2e:ef:f6:80:52:e2:41:ff:02:fa:48:b0:44:3d:d6:12: 7e:ac:19:03:61:e8:2a:d5:c7:46:f4:ff:ed:b7:96:48:a8:92: 4a:62:16:6e:e9:84:71:0f:c5:43:3d:8c:b9:41:b8:df:2e:8c: 15:1f:13:91:13:6a:01:66:9b:6b:be:fb:f9:d1:38:7c:ba:ea: 85:1f:75:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcvjlFDv1WDOZ2ixgz1w8IC0FvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNjAxMDIwMTE2MTVaFw0yNjAxMDUxMDQ2MTVaMDMxMTAvBgNV BAMTKEE1NTQ2NjFBRDA1Qjc3ODY2QjNDRUIzOENFNkRDMUIwNjcwQUY0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1hvMCbgcV9/Vwm+ji+cs/snQ 1QHFKoRy3B8vbGTwM92WPfeC/7zPJ8j+a6EGVeTZa5YrOvgS6EI7pUprmzogr+s7 MTS5mxgOSzCvZk2tRvHP1z7Les8SegSRh5ibVUV2HnAgjZfKuynwM87JUGK2GJox M2ZUtWVw+yJi97LjlQMqBiu3qWHbd8N19Pz43XR21wZp1FQLZNTvBybodzRW5Hi6 61MfJ4P1jkk4p4IeGtyRoUlfMWPqzMTtlumqHvBSONd88x8CHQ/100RcAZ3Tlyx4 1Bl7iESHKmrkVsToOJ2SoA9+zwuMupH88GjRxnIvhbLFGOr+zi4e7XRYAB+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpVRmGtBbd4ZrPOs4zm3BsGcK9F8wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANAZi+FyZufdNgnSX9Ai/6U08zx01h013e8Z V1+rGvDOz+zMP5R/5OMp8dGxnt6C/ASCB3HD32WwLtBlSQWRBIna132THAPKISO1 i1RbjAOm7tZ7AvEO0ysdiPwcgtJ6F9bu+qPt+KNFCTmtzLU7fgKthdoR4AS/DihB GisTmmqbDRPZ+MekSXhdtGlRcj4y8QGtogpzjyFfGmBE5nQnOyN9B9XjBDJGact9 +OK6hz2i38GboEWpLu/2gFLiQf8C+kiwRD3WEn6sGQNh6CrVx0b0/+23lkiokkpi Fm7phHEPxUM9jLlBuN8ujBUfE5ETagFmm2u++/nROHy66oUfdXs= -----END CERTIFICATE-----Generated at Fri Jan 2 18:39:23 2026 by rpki-client