This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: R2rW1gdAPvwWZtrc1+pigkwf+Htv3m8jSCXLFGnNVig= Subject key identifier: 4B:C8:2A:CE:CF:9C:EB:AA:6A:4D:73:4C:C6:E1:7F:60:C7:70:89:F6 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 4EF8E4B372E3F38A255BA5B60AE776C52431F8F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 030F Signing time: Mon 15 Dec 2025 17:30:04 +0000 Manifest this update: Mon 15 Dec 2025 17:25:04 +0000 Manifest next update: Thu 18 Dec 2025 23:29:04 +0000 Files and hashes: 1: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: 5qwamiK7avc6LN3AiqHsCRQUzYMygqpL6yledJ2I5n0=) 2: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:e4:b3:72:e3:f3:8a:25:5b:a5:b6:0a:e7:76:c5:24:31:f8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Dec 15 17:25:04 2025 GMT Not After : Dec 18 23:29:04 2025 GMT Subject: CN=4BC82ACECF9CEBAA6A4D734CC6E17F60C77089F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:9f:87:38:cd:6d:6c:f2:a2:88:45:88:fd: c0:e1:e3:32:21:8a:e0:a5:e9:59:2a:f0:7c:a0:fc: 0d:1a:71:7d:82:3b:af:74:40:52:61:fc:0b:bb:ab: f1:33:ed:eb:59:1c:28:07:84:77:ac:d8:18:8d:32: ae:00:7c:0b:c6:dd:ac:bc:57:28:35:9c:e2:df:70: 3f:e5:3a:b2:86:23:f9:82:3c:83:ca:6d:90:fc:8d: b9:f2:6c:42:ca:2c:fe:b9:f4:7d:93:70:d8:94:69: ed:ad:34:97:b0:f1:65:4f:83:cd:6a:ec:b7:b0:e1: cd:cd:4f:e3:4c:df:ad:a0:11:78:35:06:42:db:bd: b9:06:43:f3:23:12:a1:6d:38:73:e6:71:1e:f0:30: c7:c6:52:86:bf:24:22:12:11:6a:01:8c:2c:cd:9e: 03:a4:f2:66:fd:34:7e:4f:4e:6f:ae:37:ac:74:35: 1e:90:3b:2a:c6:ac:ca:ee:95:93:7f:20:dc:9a:45: 5b:9d:b4:9e:06:3a:01:f6:59:71:43:8d:cc:f0:8b: ae:3f:35:32:3e:47:46:0c:98:a2:1b:73:2e:29:66: fd:05:06:43:74:3e:77:d3:e8:06:a5:ef:ff:56:3a: 75:84:16:a6:0c:25:96:2c:b6:8e:f4:3b:52:b0:2f: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C8:2A:CE:CF:9C:EB:AA:6A:4D:73:4C:C6:E1:7F:60:C7:70:89:F6 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3d:50:4d:ac:1e:02:8d:53:7e:09:a4:1b:c4:7f:e6:62:b7: 0c:3a:d1:1a:c9:c7:80:dc:ab:08:c8:08:74:82:09:42:01:48: 2b:97:74:e3:b4:24:8e:ca:4f:e5:2e:28:57:f4:0d:bd:75:d2: 92:0f:09:62:1e:e3:cf:3a:df:f3:cc:65:12:ee:a6:74:ff:38: 28:49:ed:5c:f0:77:93:c7:31:f9:18:8c:cb:a9:e6:44:a9:c6: 56:10:2d:07:a1:c0:08:b7:aa:71:9a:97:1c:f0:c5:1f:00:9b: 73:00:60:a1:d1:41:a5:19:ab:c2:12:fe:48:86:95:03:50:f7: 55:f0:71:fa:53:19:4d:5a:60:cf:32:ed:91:99:bc:cc:a5:a5: 28:be:49:bf:21:df:91:4c:c4:f2:7b:54:92:14:94:6d:aa:84: 1c:12:96:21:2a:12:a4:54:54:82:7c:85:30:35:c4:3f:41:13: cd:a3:7d:32:cc:1a:12:a0:9c:18:33:c1:70:ac:2e:04:b6:99: 14:f4:7b:84:9f:b1:27:c1:05:37:f6:66:dd:f3:bb:1f:7c:20: 9b:fa:91:b2:1b:8d:c9:d7:9c:d3:54:01:ca:fd:82:a4:ec:67: 65:53:09:3c:7d:4a:f6:45:3d:33:16:b6:ee:e9:0f:56:59:52: c3:1c:f2:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvjks3Lj84olW6W2Cud2xSQx+PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTEyMTUxNzI1MDRaFw0yNTEyMTgyMzI5MDRaMDMxMTAvBgNV BAMTKDRCQzgyQUNFQ0Y5Q0VCQUE2QTRENzM0Q0M2RTE3RjYwQzc3MDg5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiZ+HOM1tbPKiiEWI/cDh4zIh iuCl6Vkq8Hyg/A0acX2CO690QFJh/Au7q/Ez7etZHCgHhHes2BiNMq4AfAvG3ay8 Vyg1nOLfcD/lOrKGI/mCPIPKbZD8jbnybELKLP659H2TcNiUae2tNJew8WVPg81q 7Lew4c3NT+NM362gEXg1BkLbvbkGQ/MjEqFtOHPmcR7wMMfGUoa/JCISEWoBjCzN ngOk8mb9NH5PTm+uN6x0NR6QOyrGrMrulZN/INyaRVudtJ4GOgH2WXFDjczwi64/ NTI+R0YMmKIbcy4pZv0FBkN0PnfT6Aal7/9WOnWEFqYMJZYsto70O1KwL7W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8gqzs+c66pqTXNMxuF/YMdwifYwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII9UE2sHgKNU34JpBvEf+Zitww60RrJx4Dc qwjICHSCCUIBSCuXdOO0JI7KT+UuKFf0Db110pIPCWIe48863/PMZRLupnT/OChJ 7Vzwd5PHMfkYjMup5kSpxlYQLQehwAi3qnGalxzwxR8Am3MAYKHRQaUZq8IS/kiG lQNQ91XwcfpTGU1aYM8y7ZGZvMylpSi+Sb8h35FMxPJ7VJIUlG2qhBwSliEqEqRU VIJ8hTA1xD9BE82jfTLMGhKgnBgzwXCsLgS2mRT0e4SfsSfBBTf2Zt3zux98IJv6 kbIbjcnXnNNUAcr9gqTsZ2VTCTx9SvZFPTMWtu7pD1ZZUsMc8hg= -----END CERTIFICATE-----Generated at Tue Dec 16 23:22:48 2025 by rpki-client