This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: yYwQa8ie6xkfNhMOh1ztTIJiElS+TLeljCbvYQIvpGw= Subject key identifier: F6:C4:24:2E:7F:9F:F2:C1:07:6B:3C:28:3C:E9:55:73:BD:96:6C:8E Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 1879AC7AE2CD5048B575586CE4BC703BE0F5FE49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 0309 Signing time: Mon 01 Dec 2025 22:00:04 +0000 Manifest this update: Mon 01 Dec 2025 21:55:04 +0000 Manifest next update: Fri 05 Dec 2025 09:19:04 +0000 Files and hashes: 1: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: J4aoAyppj9lqb8A7TDg4cuuqA4YobNZmppFKRY4xAbM=) 2: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 3: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) 4: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:79:ac:7a:e2:cd:50:48:b5:75:58:6c:e4:bc:70:3b:e0:f5:fe:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Dec 1 21:55:04 2025 GMT Not After : Dec 5 09:19:04 2025 GMT Subject: CN=F6C4242E7F9FF2C1076B3C283CE95573BD966C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:ab:3a:31:79:c2:ca:af:ae:91:fd:ae:ca: 43:0e:22:7c:9b:46:7c:7c:c8:a4:c7:39:66:c7:97: ec:92:af:42:86:65:f7:b5:18:41:e9:01:b7:36:c3: d7:c4:db:2b:cf:ea:8d:75:ac:22:11:9a:33:7b:1d: 24:4e:e3:43:67:e8:47:f9:aa:42:b8:90:5e:2d:e2: b4:f1:4a:33:71:f1:9f:46:55:e4:b7:88:68:80:5e: 77:96:c1:f3:27:1d:25:ed:4e:f7:cb:e5:ed:68:81: 9e:bd:5f:60:97:87:c3:0c:14:96:28:96:50:d4:86: d3:24:1e:eb:07:ac:24:2a:db:23:24:87:b5:b6:32: 3c:1f:db:24:70:79:95:29:d5:78:1f:73:f5:6c:6e: e7:9b:6e:d0:1e:79:cc:1d:11:6a:eb:a2:d6:a2:dc: 22:c2:b3:09:74:99:df:22:59:2d:62:97:a5:dc:dc: 7a:98:18:41:83:ff:36:0c:ef:d2:44:b2:71:db:f2: b0:ab:57:a4:b2:f5:07:e3:8b:c1:fa:73:26:de:81: 12:99:17:4c:2e:0a:21:e5:b0:ef:d5:e6:7a:8d:75: 79:9f:27:ba:97:b3:d3:85:d8:14:26:1c:ad:82:67: a4:a9:b3:f9:fe:27:50:14:81:d7:98:02:2d:6c:ec: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C4:24:2E:7F:9F:F2:C1:07:6B:3C:28:3C:E9:55:73:BD:96:6C:8E X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5b:e1:d8:2e:c6:4d:b4:cd:ba:96:43:11:22:c1:b1:fd:10: b3:95:e0:3e:8c:96:e5:33:6b:e5:8d:06:9d:e8:4c:26:57:71: c6:66:0d:a1:e4:f1:85:ce:16:e3:28:a3:d8:09:3b:38:d0:e5: f2:39:e0:0c:6d:a3:98:43:54:ef:4a:f1:c7:6b:13:d0:62:4b: f7:b4:9e:db:5a:df:25:9e:79:1a:4a:0f:f3:cf:17:15:59:03: 83:5e:15:6e:a3:01:c1:24:3c:f7:79:73:22:b6:db:bc:56:2f: 07:84:c6:8d:e8:8c:8d:b3:39:e4:cf:10:ca:64:90:87:60:45: 58:85:91:cb:34:a4:e1:75:f2:2f:45:a0:85:68:d9:a6:10:44: c2:78:43:8a:d6:1c:a0:80:b1:4f:ec:b0:3b:7e:06:7c:9b:27: dc:33:7a:ed:4d:e3:1d:7d:50:40:2a:3a:3a:00:76:b9:54:12: ac:3e:87:c6:4e:8c:cf:b7:82:83:9a:fd:8a:9d:90:06:e0:e1: f5:52:94:67:57:7c:3c:d3:bd:6b:a8:c0:85:ac:f2:b3:40:8b: 4f:53:aa:35:89:52:ed:7d:d8:a5:82:eb:36:d9:5c:75:a2:cc: b2:3b:a8:ef:07:c0:e7:99:da:ff:3c:d5:be:cf:14:5a:cd:90: fd:06:1f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHmseuLNUEi1dVhs5LxwO+D1/kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTEyMDEyMTU1MDRaFw0yNTEyMDUwOTE5MDRaMDMxMTAvBgNV BAMTKEY2QzQyNDJFN0Y5RkYyQzEwNzZCM0MyODNDRTk1NTczQkQ5NjZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Yas6MXnCyq+ukf2uykMOInyb Rnx8yKTHOWbHl+ySr0KGZfe1GEHpAbc2w9fE2yvP6o11rCIRmjN7HSRO40Nn6Ef5 qkK4kF4t4rTxSjNx8Z9GVeS3iGiAXneWwfMnHSXtTvfL5e1ogZ69X2CXh8MMFJYo llDUhtMkHusHrCQq2yMkh7W2Mjwf2yRweZUp1Xgfc/VsbuebbtAeecwdEWrrotai 3CLCswl0md8iWS1il6Xc3HqYGEGD/zYM79JEsnHb8rCrV6Sy9Qfji8H6cybegRKZ F0wuCiHlsO/V5nqNdXmfJ7qXs9OF2BQmHK2CZ6Sps/n+J1AUgdeYAi1s7G5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sQkLn+f8sEHazwoPOlVc72WbI4wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpb4dguxk20zbqWQxEiwbH9ELOV4D6MluUz a+WNBp3oTCZXccZmDaHk8YXOFuMoo9gJOzjQ5fI54Axto5hDVO9K8cdrE9BiS/e0 ntta3yWeeRpKD/PPFxVZA4NeFW6jAcEkPPd5cyK227xWLweExo3ojI2zOeTPEMpk kIdgRViFkcs0pOF18i9FoIVo2aYQRMJ4Q4rWHKCAsU/ssDt+BnybJ9wzeu1N4x19 UEAqOjoAdrlUEqw+h8ZOjM+3goOa/YqdkAbg4fVSlGdXfDzTvWuowIWs8rNAi09T qjWJUu192KWC6zbZXHWizLI7qO8HwOeZ2v881b7PFFrNkP0GHx4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:19 2025 by rpki-client