This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: 0BKJLsBzwRRgpH7Jnl4y4we1sgmNNvKD4Ibz9BlCICM= Subject key identifier: B2:E4:23:BD:54:E6:2E:65:67:E3:50:9C:0C:B6:99:C9:4B:BA:1D:EB Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 7350AA0FE8C245922ED733D21B29FD8011A8C468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 56 Signing time: Fri 19 Dec 2025 02:15:47 +0000 Manifest this update: Fri 19 Dec 2025 02:10:47 +0000 Manifest next update: Mon 22 Dec 2025 05:03:47 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: JcD6Aa3Db6UppcGrK05mRwFbSDjdITp4jqBBkNL8Dy8=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:50:aa:0f:e8:c2:45:92:2e:d7:33:d2:1b:29:fd:80:11:a8:c4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Dec 19 02:10:47 2025 GMT Not After : Dec 22 05:03:47 2025 GMT Subject: CN=B2E423BD54E62E6567E3509C0CB699C94BBA1DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:c4:a7:70:b9:ec:08:0d:69:f6:bf:c1:16: 9a:54:a9:5e:e7:ab:83:94:bc:4b:00:93:2e:28:9a: 0d:da:9c:09:9e:fb:ba:6c:48:9d:2a:46:1d:c0:7c: 56:36:68:55:0a:50:87:07:0e:fc:fb:a4:8d:b8:c0: 0d:2b:bf:21:96:7e:c6:60:b8:b4:c1:1e:1f:ec:ed: 13:24:d4:69:21:00:b1:f2:a6:dc:64:34:f2:ff:ec: fb:7f:75:38:6a:50:77:0c:5f:62:d1:e9:13:1b:cc: 78:68:29:43:92:25:bd:62:51:db:ed:b9:6a:c4:58: a6:98:65:75:eb:7f:d3:eb:75:e7:f6:dd:45:fd:ff: dd:ed:8b:d6:1e:5c:dc:89:ba:2c:b6:88:d2:82:f6: ed:5f:2b:cb:d5:e3:af:a8:cb:3b:da:05:68:ab:1a: 5e:42:eb:3f:79:16:37:72:c3:39:88:98:92:80:b4: e7:1f:f1:2c:4d:a3:55:e8:38:7a:21:e1:d9:7a:6b: 5e:a2:a4:36:cd:e5:3d:28:25:f0:95:e1:3d:66:25: f2:94:b1:89:b9:35:20:7a:09:2f:8f:fd:88:be:43: 8b:85:d2:19:8c:f9:ff:33:52:02:c5:74:f8:0e:ea: 3a:33:21:9e:c6:d0:e2:97:d1:a2:85:5f:03:da:4b: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:23:BD:54:E6:2E:65:67:E3:50:9C:0C:B6:99:C9:4B:BA:1D:EB X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:90:67:64:9b:2f:18:34:55:de:ae:0f:47:24:d0:b0:4d:43: db:eb:5e:41:5e:f5:be:96:9a:fe:32:e7:33:61:94:d6:81:3a: 5e:42:c1:ca:6f:94:4e:f4:61:cc:0a:18:a1:67:e5:4b:d1:57: f5:fa:7e:ff:45:1e:7e:c5:b6:68:9a:5c:82:91:a1:0d:b4:80: aa:ff:18:c9:aa:c5:38:d7:cb:48:ed:73:a1:32:cf:fa:e4:2e: de:43:1e:8d:83:e8:fd:86:cd:05:27:65:4d:b0:0d:79:41:02: 6f:90:f6:c5:53:cf:7b:7d:4d:b8:fb:7f:18:40:d3:e4:06:71: c9:0b:d2:3b:55:28:e7:22:9e:82:c4:1b:c0:5e:c2:0b:cc:61: 99:9b:17:b5:1f:a5:89:11:63:57:02:c8:e0:51:b0:f1:d5:af: f0:b5:d3:e2:70:a5:74:e9:a2:c3:22:93:63:49:a0:7e:73:e4: 1e:08:f4:1c:fa:58:37:93:ca:d4:b4:05:81:ef:6c:db:80:bc: 1e:d1:0f:bb:d1:0e:53:56:98:9e:3c:ce:8f:aa:a2:9b:7d:48: 37:0c:eb:b3:ac:2c:73:65:75:c3:bd:29:d8:47:4e:bf:a1:a8: 81:ee:8a:48:c3:42:45:ed:33:9a:52:4f:a6:b5:89:4d:c1:d8: 14:2d:5e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1CqD+jCRZIu1zPSGyn9gBGoxGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTEyMTkwMjEwNDdaFw0yNTEyMjIwNTAzNDdaMDMxMTAvBgNV BAMTKEIyRTQyM0JENTRFNjJFNjU2N0UzNTA5QzBDQjY5OUM5NEJCQTFERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ScSncLnsCA1p9r/BFppUqV7n q4OUvEsAky4omg3anAme+7psSJ0qRh3AfFY2aFUKUIcHDvz7pI24wA0rvyGWfsZg uLTBHh/s7RMk1GkhALHyptxkNPL/7Pt/dThqUHcMX2LR6RMbzHhoKUOSJb1iUdvt uWrEWKaYZXXrf9Prdef23UX9/93ti9YeXNyJuiy2iNKC9u1fK8vV46+oyzvaBWir Gl5C6z95FjdywzmImJKAtOcf8SxNo1XoOHoh4dl6a16ipDbN5T0oJfCV4T1mJfKU sYm5NSB6CS+P/Yi+Q4uF0hmM+f8zUgLFdPgO6jozIZ7G0OKX0aKFXwPaS/nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsuQjvVTmLmVn41CcDLaZyUu6HeswHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaQZ2SbLxg0Vd6uD0ck0LBNQ9vrXkFe9b6W mv4y5zNhlNaBOl5CwcpvlE70YcwKGKFn5UvRV/X6fv9FHn7FtmiaXIKRoQ20gKr/ GMmqxTjXy0jtc6Eyz/rkLt5DHo2D6P2GzQUnZU2wDXlBAm+Q9sVTz3t9Tbj7fxhA 0+QGcckL0jtVKOcinoLEG8BewgvMYZmbF7UfpYkRY1cCyOBRsPHVr/C10+JwpXTp osMik2NJoH5z5B4I9Bz6WDeTytS0BYHvbNuAvB7RD7vRDlNWmJ48zo+qopt9SDcM 67OsLHNldcO9KdhHTr+hqIHuikjDQkXtM5pST6a1iU3B2BQtXuo= -----END CERTIFICATE-----Generated at Sat Dec 20 22:34:42 2025 by rpki-client