This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: NbPTJM5ePDncp3xzlEiOkodMXbeKXcn+XliWBY0JhdI= Subject key identifier: 1A:8D:35:C3:D3:66:E5:19:3F:06:76:C5:D2:69:20:96:7E:C2:53:B2 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 22851A020CC951A280469B676792171BB80E7230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0500 Signing time: Sat 31 Jan 2026 15:21:12 +0000 Manifest this update: Sat 31 Jan 2026 15:16:12 +0000 Manifest next update: Tue 03 Feb 2026 16:10:12 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: g8ovV2AZpcyx1iym85+qnx938ZsQ62itc/LiuNHSu2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:85:1a:02:0c:c9:51:a2:80:46:9b:67:67:92:17:1b:b8:0e:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Jan 31 15:16:12 2026 GMT Not After : Feb 3 16:10:12 2026 GMT Subject: CN=1A8D35C3D366E5193F0676C5D26920967EC253B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:36:15:2e:74:01:b0:1a:d6:77:a0:d8:c7: 3c:87:1d:33:23:94:6d:58:dc:2a:89:10:11:5f:b5: b1:f4:78:91:5a:db:00:bf:aa:09:ce:62:55:29:23: f8:91:9f:e8:99:4a:b7:80:03:39:d3:28:33:fe:78: 68:b4:4b:64:a5:35:c2:a9:90:cc:3f:37:57:b7:94: f5:03:38:c5:ef:2b:d0:e8:e7:d4:3f:25:4a:cc:34: b9:01:ea:79:98:ad:59:63:21:02:e3:78:24:75:a4: 94:84:54:2f:b2:fe:0d:a7:a7:5f:c5:97:9a:93:83: 51:58:98:0a:05:87:5c:e0:26:7c:85:9d:97:f3:a1: d6:31:19:17:d7:c2:fe:8b:0d:bd:16:99:b5:d5:e3: 94:a9:fe:fa:63:0e:69:cc:2d:2b:f0:b4:7b:86:19: 7b:4a:5b:65:18:86:3a:1c:09:18:e0:28:2f:b9:5e: 15:ec:9a:4a:6a:13:8e:78:34:11:60:93:9f:b9:63: 59:de:59:5d:da:6f:bc:d9:2b:d6:30:dc:6e:5e:da: 67:11:65:30:19:26:4c:1c:9e:a6:78:99:0b:46:e2: d0:60:e8:00:6d:29:e0:5d:7b:68:3f:5f:68:f9:dc: 07:9f:66:2d:5c:83:24:3b:8c:4f:09:ef:ec:3e:a4: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8D:35:C3:D3:66:E5:19:3F:06:76:C5:D2:69:20:96:7E:C2:53:B2 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ff:76:8d:28:60:e4:1a:7b:08:83:64:2c:13:f3:c0:25:2c: 67:c1:52:8a:62:8a:92:5d:bc:aa:d7:f7:34:ff:7e:e2:85:6d: af:b0:75:01:bd:f5:92:cb:f7:15:90:d1:37:d2:2f:53:9c:b6: e8:8d:4d:44:bc:13:cd:ed:4d:5c:91:f5:ed:9c:8a:24:91:c6: 36:94:f1:7e:29:87:ce:b7:69:21:43:df:f7:ba:04:b7:0b:ce: 18:11:37:9f:12:6a:bb:10:6e:24:f6:32:00:44:96:fb:81:32: 71:bc:55:1e:c7:48:f7:a5:d1:c0:ce:32:53:90:a0:53:54:7e: dd:02:34:20:db:6b:51:fc:d2:c4:4a:d2:3a:b4:79:c2:51:6b: 16:ae:28:92:1b:2a:8a:74:47:aa:03:fd:c1:7c:0a:fb:8e:af: 21:f8:f8:a1:05:4c:1d:5e:d9:8a:8c:f5:60:1f:02:0b:5c:55: 13:ab:96:f1:e0:79:d8:63:ee:69:80:60:40:3b:c5:cc:8c:14: a0:b6:15:2c:c1:8c:1f:c6:7d:b8:96:b8:79:08:a2:dc:7c:b0: 65:cf:79:48:af:40:45:a7:4f:c3:10:5c:68:98:83:d3:d9:ef: a6:0a:86:c4:84:86:d7:8d:41:c3:f1:a9:e6:7e:67:1e:4a:28: b7:0b:bb:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoUaAgzJUaKARptnZ5IXG7gOcjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNjAxMzExNTE2MTJaFw0yNjAyMDMxNjEwMTJaMDMxMTAvBgNV BAMTKDFBOEQzNUMzRDM2NkU1MTkzRjA2NzZDNUQyNjkyMDk2N0VDMjUzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0DYVLnQBsBrWd6DYxzyHHTMj lG1Y3CqJEBFftbH0eJFa2wC/qgnOYlUpI/iRn+iZSreAAznTKDP+eGi0S2SlNcKp kMw/N1e3lPUDOMXvK9Do59Q/JUrMNLkB6nmYrVljIQLjeCR1pJSEVC+y/g2np1/F l5qTg1FYmAoFh1zgJnyFnZfzodYxGRfXwv6LDb0WmbXV45Sp/vpjDmnMLSvwtHuG GXtKW2UYhjocCRjgKC+5XhXsmkpqE454NBFgk5+5Y1neWV3ab7zZK9Yw3G5e2mcR ZTAZJkwcnqZ4mQtG4tBg6ABtKeBde2g/X2j53AefZi1cgyQ7jE8J7+w+pFkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGo01w9Nm5Rk/BnbF0mkgln7CU7IwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT/do0oYOQaewiDZCwT88AlLGfBUopiipJd vKrX9zT/fuKFba+wdQG99ZLL9xWQ0TfSL1OctuiNTUS8E83tTVyR9e2ciiSRxjaU 8X4ph863aSFD3/e6BLcLzhgRN58SarsQbiT2MgBElvuBMnG8VR7HSPel0cDOMlOQ oFNUft0CNCDba1H80sRK0jq0ecJRaxauKJIbKop0R6oD/cF8CvuOryH4+KEFTB1e 2YqM9WAfAgtcVROrlvHgedhj7mmAYEA7xcyMFKC2FSzBjB/GfbiWuHkIotx8sGXP eUivQEWnT8MQXGiYg9PZ76YKhsSEhteNQcPxqeZ+Zx5KKLcLu4M= -----END CERTIFICATE-----Generated at Mon Feb 2 12:55:50 2026 by rpki-client