This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: E12iKvrOWqzZrc/Y/p2Ew6KE+nsNh6p4M2D6h+uMRws= Subject key identifier: 4A:06:52:E7:60:BB:D7:2B:86:C1:05:F1:F2:40:0A:87:5B:6B:A1:92 Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 3680C8B23D541E97F694958B2C8B5DC0EA4E47B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 02:51:21 +0000 Manifest this update: Tue 02 Dec 2025 02:46:21 +0000 Manifest next update: Fri 05 Dec 2025 03:13:21 +0000 Files and hashes: 1: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: GyTvAyiqDcz4HqvEtyjLwFP+vqa6W3Rz6dNaGJkDvBQ=) 2: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: fga/hPw84p0zVdeBjQ5Gdg5QDdbdLLpdvgh00a+HnVo=) 3: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: NswJoPlTbkW1QbykJdu3UOhV7IqDYlomNhuRwW/poHY=) 4: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Xkph31LntzUaI1/CJr8Ltj+zXZ7Nq1uWNrqZKmCZlP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:80:c8:b2:3d:54:1e:97:f6:94:95:8b:2c:8b:5d:c0:ea:4e:47:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: Dec 2 02:46:21 2025 GMT Not After : Dec 5 03:13:21 2025 GMT Subject: CN=4A0652E760BBD72B86C105F1F2400A875B6BA192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:6a:ae:32:7e:61:7c:17:7c:ca:a5:af:f7: 22:6b:31:08:2e:a2:95:88:09:73:0c:cf:88:27:4b: c3:9c:08:66:26:3c:ab:2d:60:91:fe:a5:fd:f4:2e: 9c:dc:d3:b4:64:ae:68:e1:c1:77:58:97:bf:e6:ea: 70:0e:9f:8e:78:e9:90:ba:67:3d:01:bf:ea:71:34: 8e:b0:70:f7:da:56:74:be:65:a6:70:62:91:a2:3f: 2f:e0:45:6b:d9:4f:4e:f2:c5:d5:ae:c3:e6:ce:cb: f2:dc:60:ed:d4:7b:12:22:77:d3:ea:ef:5c:aa:07: f3:ba:38:a1:6b:d2:8d:77:a1:a1:b0:c3:cb:22:0d: d0:e0:6e:28:7d:e6:96:9a:b2:30:8c:ed:01:3e:a5: 5f:d8:73:c7:eb:1e:3d:9d:c8:6c:ad:bd:af:f3:e4: ed:22:6a:d8:bd:dc:91:82:0a:77:68:d2:a5:c0:b3: cd:d9:66:fe:40:10:09:c6:6a:e3:ad:76:9a:39:04: 64:42:f1:35:97:45:b3:9b:5e:cb:93:6b:ec:1e:86: 5c:06:ee:15:ce:ce:24:8e:86:06:93:d0:5e:f8:45: 89:27:de:2c:ec:60:a1:57:6c:39:73:65:cc:92:52: 97:4b:36:1e:d8:ad:eb:00:e1:01:12:84:43:a1:ed: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:52:E7:60:BB:D7:2B:86:C1:05:F1:F2:40:0A:87:5B:6B:A1:92 X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:a1:24:a0:a1:33:64:56:29:63:12:8e:98:b7:3a:d4:7c:8e: 95:5a:02:bf:8d:4a:30:32:d7:79:6f:2d:f0:f0:d3:b7:bb:1f: 8b:10:41:55:da:ef:c1:09:f3:7c:ac:5d:e0:9b:3d:7e:13:5e: f3:7f:76:43:7c:4d:a8:cf:ab:77:95:a4:aa:22:9d:d0:50:dd: 1a:8f:84:aa:b4:7f:e2:7d:73:bd:87:98:20:57:9b:52:b5:7d: d6:e9:fc:23:63:b1:33:22:90:2d:a7:8e:af:6c:eb:9e:e4:32: dc:40:0b:65:82:47:e1:da:38:9a:0d:fe:37:a9:0e:2b:15:33: 42:f1:a0:36:f4:1f:de:f7:43:a1:b9:0a:0a:7f:53:d9:8b:9e: 10:81:42:e7:91:d2:94:d1:b5:b3:5a:b8:ee:7f:1d:7d:91:18: 8b:fb:24:33:8b:0c:43:1d:a9:a9:46:01:72:d0:11:0a:2c:6d: 1e:29:9a:12:f0:45:30:85:3f:b6:30:31:0b:a2:d9:41:76:4b: 7e:f0:c9:70:38:90:3b:20:79:d0:22:e2:75:48:11:a5:57:eb: ed:35:25:97:00:5a:4a:c4:26:1c:6f:f4:3b:cd:c6:92:ca:ec: dd:7d:a3:ed:31:28:ad:04:6b:d5:87:81:6b:65:c9:71:67:4a: f9:53:77:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoDIsj1UHpf2lJWLLItdwOpOR7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNTEyMDIwMjQ2MjFaFw0yNTEyMDUwMzEzMjFaMDMxMTAvBgNV BAMTKDRBMDY1MkU3NjBCQkQ3MkI4NkMxMDVGMUYyNDAwQTg3NUI2QkExOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfWquMn5hfBd8yqWv9yJrMQgu opWICXMMz4gnS8OcCGYmPKstYJH+pf30Lpzc07RkrmjhwXdYl7/m6nAOn4546ZC6 Zz0Bv+pxNI6wcPfaVnS+ZaZwYpGiPy/gRWvZT07yxdWuw+bOy/LcYO3UexIid9Pq 71yqB/O6OKFr0o13oaGww8siDdDgbih95paasjCM7QE+pV/Yc8frHj2dyGytva/z 5O0iati93JGCCndo0qXAs83ZZv5AEAnGauOtdpo5BGRC8TWXRbObXsuTa+wehlwG 7hXOziSOhgaT0F74RYkn3izsYKFXbDlzZcySUpdLNh7YresA4QEShEOh7WoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgZS52C71yuGwQXx8kAKh1troZIwHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqhJKChM2RWKWMSjpi3OtR8jpVaAr+NSjAy 13lvLfDw07e7H4sQQVXa78EJ83ysXeCbPX4TXvN/dkN8TajPq3eVpKoindBQ3RqP hKq0f+J9c72HmCBXm1K1fdbp/CNjsTMikC2njq9s657kMtxAC2WCR+HaOJoN/jep DisVM0LxoDb0H973Q6G5Cgp/U9mLnhCBQueR0pTRtbNauO5/HX2RGIv7JDOLDEMd qalGAXLQEQosbR4pmhLwRTCFP7YwMQui2UF2S37wyXA4kDsgedAi4nVIEaVX6+01 JZcAWkrEJhxv9DvNxpLK7N19o+0xKK0Ea9WHgWtlyXFnSvlTd9I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:33 2025 by rpki-client