This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: 04ckAg7gtToUQn2IignlsZIvCzWJtRAgWc0yWVB64HQ= Subject key identifier: B8:E8:86:DD:B6:35:33:B3:F6:96:56:2A:97:30:14:AB:70:6C:A7:01 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 056522CF9F69E84BF5DB68B9566658A6A8B2EFA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 0535 Signing time: Tue 23 Dec 2025 09:52:18 +0000 Manifest this update: Tue 23 Dec 2025 09:47:18 +0000 Manifest next update: Fri 26 Dec 2025 20:41:18 +0000 Files and hashes: 1: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: sVSVd7ryI8cYbpVV0reygFMsXpVsBXGexbdBidXjP4Q=) 2: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 4: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=) 5: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:65:22:cf:9f:69:e8:4b:f5:db:68:b9:56:66:58:a6:a8:b2:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Dec 23 09:47:18 2025 GMT Not After : Dec 26 20:41:18 2025 GMT Subject: CN=B8E886DDB63533B3F696562A973014AB706CA701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:3f:f5:d7:81:b7:b2:82:f4:16:5c:71:31: 8a:26:be:82:09:3b:11:af:e4:19:05:cc:79:e9:db: d1:1e:b2:d8:2d:50:0c:39:4e:09:bd:04:3a:c4:f3: ae:7d:0b:e3:6f:c3:d1:8c:b3:4e:a9:b7:17:98:fd: 2d:ed:cb:95:29:b7:e5:54:d5:b2:22:45:27:cc:32: d4:62:32:23:ed:b4:cb:3f:13:54:1f:f6:84:99:74: e9:3e:ab:3e:c8:1f:3e:59:1d:3e:38:da:dd:7b:e3: 79:3d:13:59:b4:77:17:b9:65:7f:87:3e:b9:32:e2: 94:1e:ae:72:bc:1d:d4:20:60:88:d7:14:5c:a6:cb: 36:e9:91:85:dd:13:da:02:43:20:43:ba:4d:ed:5e: 02:8e:d3:cf:19:d2:76:c6:ec:99:44:f0:ae:4f:1f: e2:31:51:9e:81:47:21:9c:44:58:bd:17:95:74:f9: 89:43:83:d2:f2:cf:e3:31:9f:a8:83:4a:56:e0:74: 16:8f:95:8c:ca:d6:4b:a1:1a:a5:8d:ef:d4:0d:7a: 59:b5:8a:c3:1e:e6:f2:ac:79:2e:f2:a6:34:24:4f: fd:d1:90:1e:98:b9:a1:09:2b:02:2a:28:dd:ef:91: 21:b3:a8:1d:8f:c0:a9:46:21:4a:f2:28:b6:34:5a: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E8:86:DD:B6:35:33:B3:F6:96:56:2A:97:30:14:AB:70:6C:A7:01 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:57:8e:e8:c7:78:70:bb:8b:27:76:d0:7c:b8:b8:a1:8c:47: cf:29:50:0d:34:df:70:1c:5a:dc:eb:41:ca:33:bd:af:98:82: 96:44:74:42:ac:47:a0:b2:a8:a5:1b:86:90:4c:d4:ac:d5:3d: 33:41:7f:06:90:33:15:4e:7e:ae:1e:09:55:f6:9b:ee:ed:6f: 8a:2e:08:9d:e4:64:c8:98:c7:7e:e6:88:32:87:22:b7:50:4c: bf:0c:7b:d9:12:01:bf:92:d2:60:a5:17:75:c8:45:42:7b:35: f9:0e:52:d0:35:2f:05:74:93:bc:d6:46:6a:0c:23:91:da:32: 19:e3:48:8b:0d:98:a4:1e:44:03:c8:91:a9:2c:ee:51:9a:2b: 73:72:8a:e2:a7:d5:14:11:65:24:38:5e:3c:20:84:a2:44:48: 16:e3:1f:dd:98:d2:91:95:7b:1c:a7:e5:4c:be:de:66:3d:b8: 6f:ed:88:90:33:48:4b:c9:13:54:4b:80:36:26:b0:07:4d:c1: f6:78:9d:23:6e:c0:28:73:b1:d0:86:96:9d:6a:cf:ef:4e:85: 89:f7:a9:b7:c6:ab:0a:3a:f3:86:02:d1:5f:c6:9a:7b:c6:ba: 81:45:87:a5:20:5d:28:89:31:6f:64:00:9c:49:6c:27:64:69: a6:4f:b3:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWUiz59p6Ev122i5VmZYpqiy76AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTEyMjMwOTQ3MThaFw0yNTEyMjYyMDQxMThaMDMxMTAvBgNV BAMTKEI4RTg4NkREQjYzNTMzQjNGNjk2NTYyQTk3MzAxNEFCNzA2Q0E3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nT/114G3soL0FlxxMYomvoIJ OxGv5BkFzHnp29EestgtUAw5Tgm9BDrE8659C+Nvw9GMs06ptxeY/S3ty5Upt+VU 1bIiRSfMMtRiMiPttMs/E1Qf9oSZdOk+qz7IHz5ZHT442t1743k9E1m0dxe5ZX+H Prky4pQernK8HdQgYIjXFFymyzbpkYXdE9oCQyBDuk3tXgKO088Z0nbG7JlE8K5P H+IxUZ6BRyGcRFi9F5V0+YlDg9Lyz+Mxn6iDSlbgdBaPlYzK1kuhGqWN79QNelm1 isMe5vKseS7ypjQkT/3RkB6YuaEJKwIqKN3vkSGzqB2PwKlGIUryKLY0WnShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOiG3bY1M7P2llYqlzAUq3BspwEwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZXjujHeHC7iyd20Hy4uKGMR88pUA0033Ac WtzrQcozva+YgpZEdEKsR6CyqKUbhpBM1KzVPTNBfwaQMxVOfq4eCVX2m+7tb4ou CJ3kZMiYx37miDKHIrdQTL8Me9kSAb+S0mClF3XIRUJ7NfkOUtA1LwV0k7zWRmoM I5HaMhnjSIsNmKQeRAPIkaks7lGaK3NyiuKn1RQRZSQ4XjwghKJESBbjH92Y0pGV exyn5Uy+3mY9uG/tiJAzSEvJE1RLgDYmsAdNwfZ4nSNuwChzsdCGlp1qz+9OhYn3 qbfGqwo684YC0V/GmnvGuoFFh6UgXSiJMW9kAJxJbCdkaaZPs/M= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:52 2025 by rpki-client