This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: E6hLmn3lfzOsYVxHAzgnmy7boB8R0jYRdg8wmvQ5e8o= Subject key identifier: 91:74:4F:63:01:AA:65:A0:33:25:79:BE:85:6D:FD:07:06:76:88:82 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 40B54AC26E8A0A6DC70569E4F9BEE589AFE81119 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 01A3 Signing time: Wed 17 Dec 2025 10:02:08 +0000 Manifest this update: Wed 17 Dec 2025 09:57:08 +0000 Manifest next update: Sat 20 Dec 2025 18:19:08 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: uVsNxHHpQUXKSc3rwAGSZN6IEYoj16zOX3//QeJfjnE=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b5:4a:c2:6e:8a:0a:6d:c7:05:69:e4:f9:be:e5:89:af:e8:11:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Dec 17 09:57:08 2025 GMT Not After : Dec 20 18:19:08 2025 GMT Subject: CN=91744F6301AA65A0332579BE856DFD0706768882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:09:85:22:98:51:f4:e3:08:07:54:e8:3b: 6a:28:e3:b0:bc:ec:dd:96:59:93:9f:17:b7:b8:07: 06:25:c3:a2:26:aa:3b:48:a8:cc:75:fa:88:99:c8: 79:2a:3f:52:c0:5d:e8:be:40:25:79:46:4d:52:91: f7:40:ff:0f:09:45:88:73:e5:69:de:42:b0:74:24: 3a:7d:9f:c4:b8:83:2c:ae:a7:a1:be:a8:e1:ee:ef: 92:3b:a0:c6:f1:5f:7b:fa:70:60:81:04:db:10:de: 70:51:4f:4d:27:bf:b9:00:42:6b:bc:66:aa:d5:79: 97:74:66:b5:db:c4:38:12:6d:96:0a:05:75:55:ae: 37:92:eb:a7:72:ef:3e:af:7c:1f:ee:e1:ba:3c:93: a0:f8:d4:23:ae:eb:7a:19:e2:05:ef:40:43:1b:92: ca:54:e6:71:f5:db:f2:45:0c:3b:a6:c8:53:d7:13: 66:0c:1b:58:6c:f6:38:84:c2:62:a5:2d:9e:9f:08: 88:c7:3d:12:f8:ca:9f:38:89:a8:a0:d9:37:e2:7c: ed:4e:5c:0f:49:94:0f:0d:22:83:88:85:c5:00:8c: 09:ce:49:53:90:a4:1c:a5:b5:b5:85:fa:8e:cc:a3: ba:e7:b0:f8:4b:c8:bb:69:35:5c:a4:ad:f3:82:45: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:74:4F:63:01:AA:65:A0:33:25:79:BE:85:6D:FD:07:06:76:88:82 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bf:ba:3b:27:a8:80:14:7e:75:5f:52:d8:02:6d:c4:55:fe: 71:03:7f:7a:24:99:de:cb:43:cf:1a:c9:1f:53:16:97:3e:9e: 4b:11:d3:f5:cf:ff:83:a0:57:ae:18:84:bd:84:e8:c9:03:69: 3d:d5:34:44:90:d2:8c:ba:f2:52:6d:f0:a7:9b:6d:5a:54:2d: e8:36:45:47:d8:ba:d9:90:74:02:97:f2:bb:13:19:0a:a2:e6: c1:5b:b3:01:87:37:27:e5:8a:fd:ae:f4:c4:f0:71:04:d7:d5: 2f:fe:f3:b9:c6:9d:43:0b:33:cc:2e:f7:89:49:94:15:78:bc: 18:b0:7a:b7:86:7f:d5:9c:4f:4f:68:34:e6:80:ce:2d:9a:d4: 5b:45:75:dc:29:85:59:58:1f:8a:f5:7e:3f:ef:6a:81:fa:30: 59:ac:df:58:a5:66:cf:1f:f6:2e:5f:c5:0b:10:e4:3a:6e:7c: 86:74:22:51:cc:0a:f7:b1:6e:e7:e9:a4:f2:cf:89:0f:32:b5: cf:37:9e:e6:ca:be:0a:7b:ad:20:1b:d7:2b:50:e3:b2:4e:61: 38:40:33:b6:42:76:52:37:4b:ff:cd:43:f4:e9:91:fc:11:f6: 60:74:91:0c:b2:d3:e5:e8:98:20:b0:cb:47:ad:bd:7d:63:37: a3:a0:27:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLVKwm6KCm3HBWnk+b7lia/oERkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTEyMTcwOTU3MDhaFw0yNTEyMjAxODE5MDhaMDMxMTAvBgNV BAMTKDkxNzQ0RjYzMDFBQTY1QTAzMzI1NzlCRTg1NkRGRDA3MDY3Njg4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVAmFIphR9OMIB1ToO2oo47C8 7N2WWZOfF7e4BwYlw6ImqjtIqMx1+oiZyHkqP1LAXei+QCV5Rk1SkfdA/w8JRYhz 5WneQrB0JDp9n8S4gyyup6G+qOHu75I7oMbxX3v6cGCBBNsQ3nBRT00nv7kAQmu8 ZqrVeZd0ZrXbxDgSbZYKBXVVrjeS66dy7z6vfB/u4bo8k6D41COu63oZ4gXvQEMb kspU5nH12/JFDDumyFPXE2YMG1hs9jiEwmKlLZ6fCIjHPRL4yp84iaig2TfifO1O XA9JlA8NIoOIhcUAjAnOSVOQpByltbWF+o7Mo7rnsPhLyLtpNVykrfOCRaA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXRPYwGqZaAzJXm+hW39BwZ2iIIwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe/ujsnqIAUfnVfUtgCbcRV/nEDf3okmd7L Q88ayR9TFpc+nksR0/XP/4OgV64YhL2E6MkDaT3VNESQ0oy68lJt8KebbVpULeg2 RUfYutmQdAKX8rsTGQqi5sFbswGHNyfliv2u9MTwcQTX1S/+87nGnUMLM8wu94lJ lBV4vBiwereGf9WcT09oNOaAzi2a1FtFddwphVlYH4r1fj/vaoH6MFms31ilZs8f 9i5fxQsQ5DpufIZ0IlHMCvexbufppPLPiQ8ytc83nubKvgp7rSAb1ytQ47JOYThA M7ZCdlI3S//NQ/TpkfwR9mB0kQyy0+XomCCwy0etvX1jN6OgJ+c= -----END CERTIFICATE-----Generated at Fri Dec 19 21:14:09 2025 by rpki-client