This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json) Hash identifier: XoEEElUCIajtKnznkNGEGRHkRnLtch9f1XfgDE7tgsA= Subject key identifier: 33:33:BE:5A:B9:E1:76:09:4B:FB:06:F6:E1:04:E8:90:D4:E0:6A:4A Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Certificate serial: 358DB7DBA796789F1FEA82C5771B2C6D011F9881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft Manifest number: 0382 Signing time: Tue 02 Dec 2025 05:01:37 +0000 Manifest this update: Tue 02 Dec 2025 04:56:37 +0000 Manifest next update: Fri 05 Dec 2025 14:49:37 +0000 Files and hashes: 1: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: XIli98cQ5DslYaylLZi+5Ts9pki82Z8fAKzqEWLUjbk=) 2: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: CU8Xt+YPOJ6jWdvF8HR4JBdXLlruDWYSAgGJEJa3yy4=) 3: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: mdAnNzPQX1fBQRxqx/liQc+y8HoOIQ1ZRmWeSXm/9lE=) 4: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: OqgAqdXTkd1D2NhPAZ/UZhCfurgUG69NUxmVZKteHcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8d:b7:db:a7:96:78:9f:1f:ea:82:c5:77:1b:2c:6d:01:1f:98:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Validity Not Before: Dec 2 04:56:37 2025 GMT Not After : Dec 5 14:49:37 2025 GMT Subject: CN=3333BE5AB9E176094BFB06F6E104E890D4E06A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:f3:69:26:39:38:45:d6:7c:72:6e:18:fa: 53:ec:ff:d2:e2:eb:a9:2c:1a:63:d6:56:7a:82:94: 94:89:ef:fe:78:c3:ed:33:6a:6e:65:cb:c5:b5:b4: 55:b1:24:48:24:d2:66:ea:06:42:da:8a:7f:c0:95: 92:21:1b:98:14:b8:c4:15:b6:e0:6b:61:d4:1a:e6: fd:eb:9f:56:e9:1a:48:49:d7:83:18:b4:ba:3c:d0: 3e:5e:14:b8:46:49:7a:09:75:b5:9c:dc:df:cf:b7: 63:71:c4:8b:82:13:d7:b1:48:ff:3e:2a:8f:eb:29: 94:1b:6c:32:59:2b:b0:58:56:39:4d:07:d5:87:e6: 9d:d3:c1:a7:4c:38:29:27:15:fe:c5:52:72:8a:d8: 54:5d:4d:f9:e0:92:da:2e:50:3a:4b:b9:a0:8d:18: 73:42:db:b6:42:a8:c7:d7:fb:6e:5d:58:64:e2:22: 23:aa:03:33:30:77:61:ac:71:03:1c:9d:bc:0b:56: 67:3c:9a:84:81:23:ac:64:a7:63:28:98:aa:ac:ad: cd:ab:9f:02:7b:a7:9a:aa:99:fe:9d:85:e8:2e:ad: de:9a:98:31:f9:d1:8d:79:11:25:60:14:b7:f8:84: b4:86:e4:7e:43:c9:bf:d3:9d:dc:f4:d6:70:7f:46: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:BE:5A:B9:E1:76:09:4B:FB:06:F6:E1:04:E8:90:D4:E0:6A:4A X509v3 Authority Key Identifier: keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a2:52:e9:98:3a:c3:22:bd:a8:d6:17:3a:72:20:08:68:01: 7d:be:72:c1:b0:48:dd:b6:d3:cb:ff:3b:23:3f:7e:fc:c5:ee: fa:ad:b1:a5:5a:1c:47:16:0d:79:ed:c0:b5:f1:c3:90:0f:97: c6:71:ad:7e:dd:20:69:a1:00:09:57:e4:b3:0b:86:06:93:f7: ad:50:3b:83:dc:81:fb:18:2e:35:15:ad:26:16:08:47:d7:14: ae:90:52:11:0f:1c:79:b0:c9:84:5f:ad:b7:0b:5f:aa:98:37: 6d:2d:f9:fb:0e:a5:76:1a:73:2b:91:9e:72:42:84:95:c4:e8: 42:5a:f3:4a:8a:24:31:83:f4:ba:75:64:f9:0d:eb:4f:22:37: 21:13:7c:dd:c6:a7:77:4d:22:f6:b9:52:8f:10:b6:fc:6a:9d: e2:6d:b5:85:10:b9:83:4e:32:35:38:8a:5d:d1:fc:fd:15:45: 28:6b:4a:a3:d9:ac:da:7d:2b:1a:8e:50:38:91:92:28:72:75: c7:1b:31:4f:cd:08:06:38:8c:da:35:fa:6e:dd:f8:78:7b:fa: 02:4b:7e:9e:a1:a2:70:a2:e8:d1:49:83:88:5b:7a:29:69:52: c3:11:5e:05:8e:4d:3d:86:17:e9:b8:95:71:1f:ba:df:13:f7: 38:96:82:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNY2326eWeJ8f6oLFdxssbQEfmIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF NDlFOEExNzAeFw0yNTEyMDIwNDU2MzdaFw0yNTEyMDUxNDQ5MzdaMDMxMTAvBgNV BAMTKDMzMzNCRTVBQjlFMTc2MDk0QkZCMDZGNkUxMDRFODkwRDRFMDZBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ePNpJjk4RdZ8cm4Y+lPs/9Li 66ksGmPWVnqClJSJ7/54w+0zam5ly8W1tFWxJEgk0mbqBkLain/AlZIhG5gUuMQV tuBrYdQa5v3rn1bpGkhJ14MYtLo80D5eFLhGSXoJdbWc3N/Pt2NxxIuCE9exSP8+ Ko/rKZQbbDJZK7BYVjlNB9WH5p3TwadMOCknFf7FUnKK2FRdTfngktouUDpLuaCN GHNC27ZCqMfX+25dWGTiIiOqAzMwd2GscQMcnbwLVmc8moSBI6xkp2MomKqsrc2r nwJ7p5qqmf6dhegurd6amDH50Y15ESVgFLf4hLSG5H5Dyb/Tndz01nB/Rl1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzO+WrnhdglL+wb24QTokNTgakowHwYDVR0j BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2 NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2 N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaiUumYOsMivajWFzpyIAhoAX2+csGwSN22 08v/OyM/fvzF7vqtsaVaHEcWDXntwLXxw5APl8ZxrX7dIGmhAAlX5LMLhgaT961Q O4PcgfsYLjUVrSYWCEfXFK6QUhEPHHmwyYRfrbcLX6qYN20t+fsOpXYacyuRnnJC hJXE6EJa80qKJDGD9Lp1ZPkN608iNyETfN3Gp3dNIva5Uo8QtvxqneJttYUQuYNO MjU4il3R/P0VRShrSqPZrNp9KxqOUDiRkihydccbMU/NCAY4jNo1+m7d+Hh7+gJL fp6honCi6NFJg4hbeilpUsMRXgWOTT2GF+m4lXEfut8T9ziWgsI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:23 2025 by rpki-client