This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: xsrAjmUPX1TzzW2vJeEXWEoWkYEFasZlNSZWQhsqtFU= Subject key identifier: 16:39:22:C3:8C:E2:10:BD:79:4E:9C:BB:58:56:89:03:09:AA:68:A3 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 737B957B7D65913DCE2B3D50BD073D5ED6C115BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 014A Signing time: Mon 01 Dec 2025 22:40:55 +0000 Manifest this update: Mon 01 Dec 2025 22:35:55 +0000 Manifest next update: Thu 04 Dec 2025 23:05:55 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: J/gHOz/vwAYWFMPLyDrCfSRkd2sK4tM1pi/ujgD1FqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7b:95:7b:7d:65:91:3d:ce:2b:3d:50:bd:07:3d:5e:d6:c1:15:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Dec 1 22:35:55 2025 GMT Not After : Dec 4 23:05:55 2025 GMT Subject: CN=163922C38CE210BD794E9CBB5856890309AA68A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:98:4f:97:e4:b0:51:b3:b3:50:94:86:fe: 28:54:0e:97:c8:df:4b:e8:46:88:11:82:20:f4:81: bd:d2:29:a4:92:89:5d:dd:9c:93:a6:1b:72:76:7e: cc:1c:61:c6:e0:49:a9:0b:69:5a:13:f6:f4:ca:89: fb:9f:bf:b7:1a:24:5e:c4:a0:97:ad:5a:37:0b:33: 28:37:60:9b:0d:97:97:9b:3b:bf:36:b4:29:f6:4b: a5:45:ec:50:d5:77:94:aa:40:d8:65:e6:a6:a7:7d: c8:92:bf:b2:e9:58:9c:82:70:a0:6a:f7:74:1c:15: b7:0a:0f:d4:ac:d5:4b:f6:29:f7:5a:41:b9:1e:e7: d9:29:01:40:26:63:05:22:0c:27:0f:d5:7a:24:5f: c7:98:ff:f6:1b:87:77:f5:5a:cb:3e:8a:95:3a:48: 41:91:c3:a7:d2:9d:4b:83:23:b6:ac:35:7c:13:33: 24:69:b5:8c:b2:2e:97:a3:4e:9c:fd:99:1d:11:3f: 5c:e4:b4:dc:db:39:13:4a:90:be:34:9a:cd:54:91: f5:2a:e8:81:de:02:05:91:30:1b:6b:a2:03:3c:bb: 7b:9f:a3:02:4f:bd:0c:06:e4:94:31:df:b9:25:0e: 4d:9d:53:f5:fb:b2:75:fb:42:10:3a:c7:2a:dd:3a: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:39:22:C3:8C:E2:10:BD:79:4E:9C:BB:58:56:89:03:09:AA:68:A3 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:dc:2d:ec:fb:21:a0:31:d2:96:59:cd:9c:2b:cb:77:7a:e2: b2:9c:0f:3d:dc:3d:00:9d:e3:70:66:b2:b6:db:c3:9f:c7:86: 99:71:09:7f:65:6b:8b:f6:a7:a5:76:d1:e1:15:95:ec:b7:ef: d2:f3:6a:a9:c9:c1:ff:7f:4e:eb:72:5d:de:a8:32:a5:9e:99: 02:33:88:c0:64:44:58:e9:0a:21:a9:c3:03:4e:e4:cf:b6:97: e4:9e:f6:1b:a9:1d:19:34:b4:85:8f:0e:2b:c8:5d:70:c7:ef: 7b:63:59:44:2f:95:8a:6f:c0:0a:0e:ed:96:2b:52:f6:a7:fc: b0:ff:14:7c:c1:08:90:de:45:70:69:57:65:5c:d9:c8:3d:b7: 5b:7d:1e:14:f0:58:fc:14:53:26:5b:08:53:0a:5d:6a:04:54: 24:31:9b:3d:22:b5:42:91:94:fb:d5:ed:51:bc:e3:aa:bc:9c: 4b:94:c5:7b:3c:64:f0:8a:4d:62:21:ef:a9:bb:42:51:fb:3c: c2:89:2c:2d:b3:7f:32:3c:b7:8b:e5:9b:e9:07:90:e9:bd:34: db:97:b0:22:7a:10:65:12:07:ae:03:86:54:12:3e:15:e9:fa: 14:34:4c:7d:e7:f0:78:6f:1f:db:f2:66:d7:6d:ed:1b:60:1e: 48:3a:65:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3uVe31lkT3OKz1QvQc9XtbBFbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTEyMDEyMjM1NTVaFw0yNTEyMDQyMzA1NTVaMDMxMTAvBgNV BAMTKDE2MzkyMkMzOENFMjEwQkQ3OTRFOUNCQjU4NTY4OTAzMDlBQTY4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3JhPl+SwUbOzUJSG/ihUDpfI 30voRogRgiD0gb3SKaSSiV3dnJOmG3J2fswcYcbgSakLaVoT9vTKifufv7caJF7E oJetWjcLMyg3YJsNl5ebO782tCn2S6VF7FDVd5SqQNhl5qanfciSv7LpWJyCcKBq 93QcFbcKD9Ss1Uv2KfdaQbke59kpAUAmYwUiDCcP1XokX8eY//Ybh3f1Wss+ipU6 SEGRw6fSnUuDI7asNXwTMyRptYyyLpejTpz9mR0RP1zktNzbORNKkL40ms1UkfUq 6IHeAgWRMBtrogM8u3ufowJPvQwG5JQx37klDk2dU/X7snX7QhA6xyrdOoqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjkiw4ziEL15Tpy7WFaJAwmqaKMwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXcLez7IaAx0pZZzZwry3d64rKcDz3cPQCd 43Bmsrbbw5/HhplxCX9la4v2p6V20eEVley379LzaqnJwf9/TutyXd6oMqWemQIz iMBkRFjpCiGpwwNO5M+2l+Se9hupHRk0tIWPDivIXXDH73tjWUQvlYpvwAoO7ZYr Uvan/LD/FHzBCJDeRXBpV2Vc2cg9t1t9HhTwWPwUUyZbCFMKXWoEVCQxmz0itUKR lPvV7VG846q8nEuUxXs8ZPCKTWIh76m7QlH7PMKJLC2zfzI8t4vlm+kHkOm9NNuX sCJ6EGUSB64DhlQSPhXp+hQ0TH3n8HhvH9vyZtdt7RtgHkg6ZWs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:33 2025 by rpki-client