This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: MYi7lGM+8UUE1NhHmdi2QB/Bd32+5osPsHj4QTNB2AQ= Subject key identifier: AA:F9:5F:E5:1E:B9:A5:08:79:78:E4:AC:3B:23:03:4E:72:40:C3:D8 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 352D3B81CDE34AEBA776A681B551A890A9B98421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 01DE Signing time: Mon 01 Dec 2025 14:51:03 +0000 Manifest this update: Mon 01 Dec 2025 14:46:02 +0000 Manifest next update: Fri 05 Dec 2025 00:08:02 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: pPDJQHBhfcZSckvk5CdCCpT2r2LXYlUEYAcWXfxfI6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2d:3b:81:cd:e3:4a:eb:a7:76:a6:81:b5:51:a8:90:a9:b9:84:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Dec 1 14:46:02 2025 GMT Not After : Dec 5 00:08:02 2025 GMT Subject: CN=AAF95FE51EB9A5087978E4AC3B23034E7240C3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:3d:85:98:38:06:fa:8f:43:3a:f7:d3:ed: e1:ed:a6:d8:b0:2b:a1:dc:aa:9c:46:49:00:2f:e5: b6:48:18:32:97:ec:85:9b:c6:eb:c1:e2:55:b6:fe: 71:83:52:d7:4d:35:1b:aa:36:b9:14:e6:42:65:72: 75:34:db:4c:cb:d3:04:55:08:7c:8d:4b:4d:9d:36: c7:57:10:88:39:8a:3b:96:c2:64:07:b1:40:ad:1a: 9e:4a:5e:9c:ca:81:ea:99:64:ca:0d:44:b8:3f:06: c6:a4:28:ec:3d:6b:ce:ad:f5:f2:57:e4:7c:f8:33: 1b:5b:79:11:aa:5c:b2:3a:df:31:9b:97:2b:23:29: a3:fd:d4:74:a1:7c:61:45:a5:0e:ec:b8:e6:1e:31: 41:f3:4f:f7:db:73:78:1a:69:d2:58:cb:5b:b3:9b: af:bd:c6:07:68:ea:eb:fb:e2:ac:c9:a8:9b:23:ae: a0:de:dc:e1:56:03:49:db:8b:71:5b:74:be:19:8f: 5b:eb:35:8b:3c:10:36:8d:90:c6:ba:4e:70:c1:f7: aa:92:ac:5b:67:c3:f5:28:f7:d6:b7:dc:6e:2e:d8: 56:f0:6a:ca:dc:aa:12:f5:01:3a:bd:c6:ac:81:3f: 68:d4:3c:83:e9:6e:62:bb:d1:4d:9c:51:ff:17:1d: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F9:5F:E5:1E:B9:A5:08:79:78:E4:AC:3B:23:03:4E:72:40:C3:D8 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:e6:c7:bf:67:2f:a0:bf:ba:d0:46:06:7b:5d:d9:2d:f2: 36:02:54:c6:87:d3:aa:c5:dd:90:d1:91:6e:85:39:f2:12:bf: 97:aa:ae:5c:de:23:1e:65:d7:b4:b3:5f:78:16:19:a8:e6:c6: 0f:dd:b9:06:08:3c:04:4c:d8:46:ae:89:e5:e3:cc:89:38:d1: d3:e6:03:75:c5:19:54:a8:75:b8:38:6b:54:dd:fc:c1:a7:9d: 9a:7c:88:41:5d:04:07:aa:85:a3:e8:7f:74:9c:83:17:c8:c5: 42:43:be:39:e0:0f:29:aa:1c:0e:b7:cc:d7:37:7e:fb:e8:b9: 09:47:1e:9a:08:7e:5a:3f:fd:21:18:d1:bc:0d:ea:ff:60:6b: e9:e5:92:48:41:45:ae:64:d2:75:c0:59:c1:d4:b2:ef:b6:2b: d0:d6:e6:8f:b7:1b:2e:61:60:5b:06:da:67:92:82:11:63:9d: 9f:a4:f3:c3:9d:4e:ab:ea:ac:99:e2:e6:97:1d:eb:e4:d9:03: 64:ec:a9:3b:e0:2d:2a:bd:3e:70:cd:a9:d6:1e:e4:00:fc:5f: a6:98:c0:7f:61:8e:bd:a7:c9:5a:58:23:cd:65:0b:03:f7:92: b1:99:6b:a2:e8:e7:15:6d:72:72:32:c0:1f:e3:a3:03:17:99: 9a:43:2f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNS07gc3jSuundqaBtVGokKm5hCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTEyMDExNDQ2MDJaFw0yNTEyMDUwMDA4MDJaMDMxMTAvBgNV BAMTKEFBRjk1RkU1MUVCOUE1MDg3OTc4RTRBQzNCMjMwMzRFNzI0MEMzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+z2FmDgG+o9DOvfT7eHtptiw K6HcqpxGSQAv5bZIGDKX7IWbxuvB4lW2/nGDUtdNNRuqNrkU5kJlcnU020zL0wRV CHyNS02dNsdXEIg5ijuWwmQHsUCtGp5KXpzKgeqZZMoNRLg/BsakKOw9a86t9fJX 5Hz4MxtbeRGqXLI63zGblysjKaP91HShfGFFpQ7suOYeMUHzT/fbc3gaadJYy1uz m6+9xgdo6uv74qzJqJsjrqDe3OFWA0nbi3FbdL4Zj1vrNYs8EDaNkMa6TnDB96qS rFtnw/Uo99a33G4u2FbwasrcqhL1ATq9xqyBP2jUPIPpbmK70U2cUf8XHT8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvlf5R65pQh5eOSsOyMDTnJAw9gwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq55se/Zy+gv7rQRgZ7Xdkt8jYCVMaH06rF 3ZDRkW6FOfISv5eqrlzeIx5l17SzX3gWGajmxg/duQYIPARM2EauieXjzIk40dPm A3XFGVSodbg4a1Td/MGnnZp8iEFdBAeqhaPof3ScgxfIxUJDvjngDymqHA63zNc3 fvvouQlHHpoIflo//SEY0bwN6v9ga+nlkkhBRa5k0nXAWcHUsu+2K9DW5o+3Gy5h YFsG2meSghFjnZ+k88OdTqvqrJni5pcd6+TZA2TsqTvgLSq9PnDNqdYe5AD8X6aY wH9hjr2nyVpYI81lCwP3krGZa6Lo5xVtcnIywB/jowMXmZpDLwg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:05:20 2025 by rpki-client