This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json) Hash identifier: CCAV+4FqnLAsZykXNrSNngWbVZEQ4nBXjgCzIxKMEHg= Subject key identifier: F3:4B:C8:2F:2E:E7:44:CB:DA:6A:20:8A:44:48:40:6F:91:AD:FE:69 Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Certificate serial: 5E37F3819B47BF920BA20DEBC2ADFF64698EBA96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft Manifest number: 039B Signing time: Tue 02 Dec 2025 02:04:34 +0000 Manifest this update: Tue 02 Dec 2025 01:59:34 +0000 Manifest next update: Fri 05 Dec 2025 06:33:34 +0000 Files and hashes: 1: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: werzeCB/qWiTaclRKUWPuEu8c7aUPrvrABtbGOAHYIA=) 2: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:37:f3:81:9b:47:bf:92:0b:a2:0d:eb:c2:ad:ff:64:69:8e:ba:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Validity Not Before: Dec 2 01:59:34 2025 GMT Not After : Dec 5 06:33:34 2025 GMT Subject: CN=F34BC82F2EE744CBDA6A208A4448406F91ADFE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:f6:3f:23:a9:0d:86:b6:4c:5e:ff:47:24: 63:ce:7a:c7:76:49:c2:91:95:5e:9b:66:09:e1:8a: 02:78:eb:cd:9f:83:57:41:05:35:5d:0e:b5:15:b3: f3:f4:8c:e1:79:34:e6:d3:a1:49:b4:ee:8c:a0:01: 8f:f8:b2:ac:51:aa:90:42:a0:14:7c:ca:d7:a4:17: 44:48:f5:49:28:1b:42:f3:c4:bd:4b:26:6c:4d:5e: ae:4f:b5:8f:5a:96:fc:1b:a0:6b:c2:11:a3:58:3f: 09:ed:58:7b:d0:8f:ee:f5:d3:85:0c:a1:8c:1d:71: d8:e7:e0:6a:75:7f:12:37:a4:72:b3:1a:5d:95:70: bc:4b:26:59:a9:e3:c5:04:48:8b:77:14:8e:7e:d3: 7f:f4:b1:b2:76:39:e1:34:33:14:4d:eb:03:49:b5: 01:0d:13:d0:00:65:78:76:b2:51:c6:48:80:70:18: 4f:0a:2f:a1:c9:7a:ea:70:bf:7c:57:f4:33:67:63: a8:42:cd:81:4a:3b:05:74:36:e3:1a:aa:d0:a6:12: 5a:cd:de:11:87:16:01:58:25:55:96:ef:ed:bd:fb: c1:35:b9:10:6a:ea:87:3c:90:b3:1e:8f:e9:89:af: d0:5b:2f:7e:c6:a3:41:b0:de:6b:13:0d:2e:20:86: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:C8:2F:2E:E7:44:CB:DA:6A:20:8A:44:48:40:6F:91:AD:FE:69 X509v3 Authority Key Identifier: keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b5:0e:48:34:48:11:66:b8:c4:6b:41:2f:4a:52:7e:b7:b5: 84:0b:07:87:da:44:e8:c3:3c:b1:ea:32:45:8c:d3:23:94:1f: 1b:e7:4b:f5:6e:7d:23:f9:5e:bc:71:d9:8c:27:84:b9:ff:18: df:8e:39:8b:d7:c7:04:07:f8:16:e4:4a:5d:28:dd:2f:6e:18: 5c:72:f6:68:a7:bf:bd:82:d0:c4:f3:f9:d0:08:ba:27:43:91: bd:ff:37:a2:44:6b:b2:fc:ae:d1:c6:9c:bb:98:33:0a:19:ac: 72:09:51:fc:cf:60:62:ed:18:1f:47:b0:d1:d4:b1:77:78:40: a7:8b:a7:e4:a4:85:36:b0:11:e6:5c:d2:90:05:6f:88:a8:eb: 1b:71:df:56:96:fa:55:5f:f1:7d:a9:9b:98:9e:21:b1:44:31: 37:44:d0:68:48:07:2c:63:63:cf:1c:78:c7:bb:03:89:9e:28: 19:40:1d:1b:b9:53:c8:a0:60:b0:a8:3c:92:db:3c:a1:3e:ca: 06:a0:77:22:f4:76:dc:da:37:99:ec:a1:3e:6b:be:af:18:b7: d1:7d:06:fd:76:09:a2:5a:66:5c:fb:27:29:f6:77:33:ec:02: 5a:9e:c6:fc:e3:01:b7:99:c0:b1:27:c4:01:96:f6:2a:78:22: 2d:c8:cf:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjfzgZtHv5ILog3rwq3/ZGmOupYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JC QzNDNUUzNjAeFw0yNTEyMDIwMTU5MzRaFw0yNTEyMDUwNjMzMzRaMDMxMTAvBgNV BAMTKEYzNEJDODJGMkVFNzQ0Q0JEQTZBMjA4QTQ0NDg0MDZGOTFBREZFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5vY/I6kNhrZMXv9HJGPOesd2 ScKRlV6bZgnhigJ4682fg1dBBTVdDrUVs/P0jOF5NObToUm07oygAY/4sqxRqpBC oBR8ytekF0RI9UkoG0LzxL1LJmxNXq5PtY9alvwboGvCEaNYPwntWHvQj+7104UM oYwdcdjn4Gp1fxI3pHKzGl2VcLxLJlmp48UESIt3FI5+03/0sbJ2OeE0MxRN6wNJ tQENE9AAZXh2slHGSIBwGE8KL6HJeupwv3xX9DNnY6hCzYFKOwV0NuMaqtCmElrN 3hGHFgFYJVWW7+29+8E1uRBq6oc8kLMej+mJr9BbL37Go0Gw3msTDS4ghsf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU80vILy7nRMvaaiCKREhAb5Gt/mkwHwYDVR0j BBgwFoAUVjaf27zeaFtEQEKaIreWe7w8XjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjIxYWQ2Ny1kMzVjLTQ1NTktOWE3My03Yzc0ZjUwZGNmZmEvMC81NjM2OUZEQkJD REU2ODVCNDQ0MDQyOUEyMkI3OTY3QkJDM0M1RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JCQzND NUUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2 N0JCQzNDNUUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq1Dkg0SBFmuMRrQS9KUn63tYQLB4faROjD PLHqMkWM0yOUHxvnS/VufSP5Xrxx2YwnhLn/GN+OOYvXxwQH+BbkSl0o3S9uGFxy 9minv72C0MTz+dAIuidDkb3/N6JEa7L8rtHGnLuYMwoZrHIJUfzPYGLtGB9HsNHU sXd4QKeLp+SkhTawEeZc0pAFb4io6xtx31aW+lVf8X2pm5ieIbFEMTdE0GhIByxj Y88ceMe7A4meKBlAHRu5U8igYLCoPJLbPKE+ygagdyL0dtzaN5nsoT5rvq8Yt9F9 Bv12CaJaZlz7Jyn2dzPsAlqexvzjAbeZwLEnxAGW9ip4Ii3Izxc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:30 2025 by rpki-client