This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: DnOdfGjLO8/m9ScpVzrsVwPsKhPjhPGfOB0iTvbFwig= Subject key identifier: 55:F5:C1:40:6C:A8:E5:3B:24:21:CD:7C:D4:29:E0:66:15:FA:A6:2D Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 19B7A44C5256ECB6F601C58D5AD9373161AE9C37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: C0 Signing time: Sun 21 Dec 2025 17:51:15 +0000 Manifest this update: Sun 21 Dec 2025 17:46:15 +0000 Manifest next update: Wed 24 Dec 2025 22:15:15 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: ZsTK1FMv6lwZAJHXfUaxKmCGCownyPKaYAh6FRacNS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b7:a4:4c:52:56:ec:b6:f6:01:c5:8d:5a:d9:37:31:61:ae:9c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Dec 21 17:46:15 2025 GMT Not After : Dec 24 22:15:15 2025 GMT Subject: CN=55F5C1406CA8E53B2421CD7CD429E06615FAA62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:5b:f6:50:8f:86:6d:fd:5d:0d:85:2c:7c: 36:cc:c0:a8:05:eb:71:08:99:b7:b0:26:82:8f:1f: 85:5f:a9:32:81:c4:7b:68:33:9a:78:8d:93:d9:c2: 23:b6:f5:be:83:19:d1:bb:70:29:3c:ed:8a:6d:07: 63:4c:3b:42:64:ed:63:05:08:12:4c:9b:cb:fe:ca: 3a:f5:ab:b9:e3:36:dd:ec:75:5c:9d:0f:cf:6f:8a: 02:a3:66:95:1f:3f:63:fe:63:cf:fe:75:4b:f5:b5: 1f:ab:a4:4d:08:f0:c2:24:36:60:b4:e8:e8:a8:b4: 72:8b:17:41:66:2c:4e:63:5b:de:40:9c:4d:56:90: 89:eb:7d:9f:8d:6b:ba:de:c2:0a:be:a1:e8:9b:ef: b3:04:1a:30:ef:28:82:c3:de:3a:d4:3c:41:5a:a6: bb:76:16:ee:16:ef:d0:bf:9e:94:2d:aa:e2:e0:25: 1b:88:77:ef:69:9b:ad:34:fd:99:fe:ec:da:b1:bd: 8a:04:92:39:d9:7f:64:36:58:fd:61:ed:a8:4a:7c: 6e:bc:e9:6f:d0:f2:eb:fa:16:68:38:85:59:6c:46: 69:d4:b8:48:1f:e2:91:e0:03:05:5c:31:e4:ed:33: ed:f9:5c:a1:13:6c:c1:46:ea:91:d2:a3:7d:c2:9a: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:C1:40:6C:A8:E5:3B:24:21:CD:7C:D4:29:E0:66:15:FA:A6:2D X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bb:ea:bb:f4:19:d8:a5:82:db:c7:77:67:63:a5:b1:cd:9e: c2:65:12:c4:ca:1c:2b:fa:cc:65:23:95:b7:0c:a3:c0:8c:76: ce:45:2d:f3:7d:95:60:0b:f2:36:a3:37:7f:65:e6:f2:07:54: b9:44:06:4b:1f:f7:0a:85:1f:89:80:ba:e6:d7:73:84:19:7f: 5b:94:8a:5e:8a:e1:bd:dd:9e:18:61:5f:27:7a:3d:af:69:14: 6c:94:ed:e3:34:55:d0:69:71:7f:3f:72:e6:d2:5f:06:d8:d3: 51:51:03:85:fa:c3:bc:7d:4a:e9:c2:82:46:19:04:38:b8:bb: 3a:73:ca:d8:3d:ec:29:14:0d:7c:4c:6f:34:e3:b7:38:b0:07: 22:f5:e1:20:90:28:b7:2d:b3:df:78:5b:68:e3:84:6c:6d:79: e5:48:84:6b:74:d4:8c:e9:42:80:34:49:90:0f:93:1b:da:2a: ee:49:11:20:fb:22:85:73:f4:06:60:47:41:16:a5:0d:f4:ff: 18:76:b9:ac:e3:19:73:d8:62:01:9b:95:fd:25:ca:8b:a4:24: 6d:bd:7e:d7:9a:9a:8c:70:cd:9d:67:55:96:73:08:3c:2b:18: c0:1e:d9:cf:0b:e6:88:52:13:0d:1b:17:bf:bc:b7:c5:60:a3: ed:6d:d8:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbekTFJW7Lb2AcWNWtk3MWGunDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNTEyMjExNzQ2MTVaFw0yNTEyMjQyMjE1MTVaMDMxMTAvBgNV BAMTKDU1RjVDMTQwNkNBOEU1M0IyNDIxQ0Q3Q0Q0MjlFMDY2MTVGQUE2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6Fv2UI+Gbf1dDYUsfDbMwKgF 63EImbewJoKPH4VfqTKBxHtoM5p4jZPZwiO29b6DGdG7cCk87YptB2NMO0Jk7WMF CBJMm8v+yjr1q7njNt3sdVydD89vigKjZpUfP2P+Y8/+dUv1tR+rpE0I8MIkNmC0 6OiotHKLF0FmLE5jW95AnE1WkInrfZ+Na7rewgq+oeib77MEGjDvKILD3jrUPEFa prt2Fu4W79C/npQtquLgJRuId+9pm600/Zn+7NqxvYoEkjnZf2Q2WP1h7ahKfG68 6W/Q8uv6Fmg4hVlsRmnUuEgf4pHgAwVcMeTtM+35XKETbMFG6pHSo33Cms+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfXBQGyo5TskIc181CngZhX6pi0wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALC76rv0GdilgtvHd2djpbHNnsJlEsTKHCv6 zGUjlbcMo8CMds5FLfN9lWAL8jajN39l5vIHVLlEBksf9wqFH4mAuubXc4QZf1uU il6K4b3dnhhhXyd6Pa9pFGyU7eM0VdBpcX8/cubSXwbY01FRA4X6w7x9SunCgkYZ BDi4uzpzytg97CkUDXxMbzTjtziwByL14SCQKLcts994W2jjhGxteeVIhGt01Izp QoA0SZAPkxvaKu5JESD7IoVz9AZgR0EWpQ30/xh2uazjGXPYYgGblf0lyoukJG29 fteamoxwzZ1nVZZzCDwrGMAe2c8L5ohSEw0bF7+8t8Vgo+1t2P8= -----END CERTIFICATE-----Generated at Tue Dec 23 03:20:00 2025 by rpki-client