This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: vaBh9Sqllxf4QrzfhgC0pFV+tbUOEzUXQpXuaS7GGnE= Subject key identifier: C1:35:3F:1B:CC:5B:61:DF:14:EF:AF:E4:ED:1C:CF:1C:B6:89:C9:1F Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 04ECAC6E3A8633691E4FE73411E4295BEB67AC86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 019C Signing time: Mon 01 Dec 2025 10:42:12 +0000 Manifest this update: Mon 01 Dec 2025 10:37:12 +0000 Manifest next update: Thu 04 Dec 2025 21:07:12 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: decFZDah3sJXxj5j1cqcZtDCvirOc2ofeuc+NbIby1U=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ec:ac:6e:3a:86:33:69:1e:4f:e7:34:11:e4:29:5b:eb:67:ac:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Dec 1 10:37:12 2025 GMT Not After : Dec 4 21:07:12 2025 GMT Subject: CN=C1353F1BCC5B61DF14EFAFE4ED1CCF1CB689C91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:3d:03:31:68:f6:f4:a1:4f:c1:20:f4:82: 5a:7e:d4:d4:ea:47:1b:5f:72:db:64:29:eb:7a:25: c9:b0:a9:79:87:23:cb:71:df:23:9f:54:42:c2:d2: f9:c6:02:3f:7b:5a:f7:54:9d:43:cb:93:45:eb:b4: 83:11:59:6c:2d:be:d6:df:84:74:df:0c:2e:53:b3: 09:f8:d9:0f:38:10:4a:eb:d4:c9:24:5b:80:4d:73: 39:d4:34:8e:cf:a1:0a:ca:35:97:60:5b:ec:d2:76: f9:e0:d3:32:1a:7a:b2:a5:9d:c7:cc:25:b5:2b:16: fb:f6:4c:7c:c7:5e:db:44:27:6d:57:51:31:b5:cb: 6e:a9:fa:f8:e5:87:ff:16:78:a4:91:e6:0e:d7:16: cf:65:26:e8:0e:0e:09:28:8a:04:80:0e:dd:c6:3e: 2c:2a:05:ae:d2:ac:cd:4a:9c:16:6c:92:c0:e4:ad: 90:2d:ee:52:d9:65:15:07:51:f8:24:11:83:da:f3: 65:0c:ca:fe:f2:e0:48:0c:7b:09:ae:3e:f1:84:3f: 21:62:fb:28:0c:51:93:c1:34:88:f1:21:d2:7c:38: 33:52:e4:67:12:e6:29:11:c9:3a:99:1f:6f:dc:f7: 59:05:69:94:33:a6:6e:ba:3b:46:79:ec:46:fd:37: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:3F:1B:CC:5B:61:DF:14:EF:AF:E4:ED:1C:CF:1C:B6:89:C9:1F X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bd:5d:85:dc:3d:27:68:aa:9d:94:68:9c:df:8a:a3:cf:52: 2a:52:80:e5:9c:30:d7:5e:37:e9:24:e3:37:3c:2f:85:70:94: 31:ea:76:f5:d3:6a:c1:df:64:b9:7c:6b:2e:91:19:d6:8c:8c: ef:6e:bc:09:6b:48:f7:72:7c:f1:ab:fb:b7:79:94:45:70:49: 83:b7:e7:cd:31:70:fc:7f:fe:0b:e2:d7:9b:29:69:26:b2:b0: f4:d4:ae:14:e3:da:3c:d3:1d:ea:87:07:51:f2:83:e6:96:69: 28:c4:ef:d4:a7:3a:b2:88:c2:a2:89:8f:be:41:4a:76:be:f4: e6:fc:e3:83:55:38:c6:a4:49:a4:2f:d9:ee:61:cf:d6:ab:98: d2:be:d8:42:91:55:c5:c9:e7:aa:f0:7c:c3:23:95:ca:f1:a5: 06:16:ab:5e:cd:ff:c8:f9:d6:26:6b:61:5b:ab:a0:a3:f1:ff: 2f:7c:6b:5d:33:2e:82:1f:e1:88:d4:c1:3e:d2:1c:62:e2:c7: 83:48:49:41:eb:7e:df:99:92:9b:84:30:ed:b6:69:29:72:d8: d7:0d:e7:5b:ca:c7:52:76:ac:72:30:a9:25:b1:23:11:58:eb: 93:c3:04:a3:96:4d:3e:47:7a:43:d4:c4:3f:b9:f5:3f:98:b2: 0a:d7:fa:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOysbjqGM2keT+c0EeQpW+tnrIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNTEyMDExMDM3MTJaFw0yNTEyMDQyMTA3MTJaMDMxMTAvBgNV BAMTKEMxMzUzRjFCQ0M1QjYxREYxNEVGQUZFNEVEMUNDRjFDQjY4OUM5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kj0DMWj29KFPwSD0glp+1NTq RxtfcttkKet6JcmwqXmHI8tx3yOfVELC0vnGAj97WvdUnUPLk0XrtIMRWWwtvtbf hHTfDC5Tswn42Q84EErr1MkkW4BNcznUNI7PoQrKNZdgW+zSdvng0zIaerKlncfM JbUrFvv2THzHXttEJ21XUTG1y26p+vjlh/8WeKSR5g7XFs9lJugODgkoigSADt3G PiwqBa7SrM1KnBZsksDkrZAt7lLZZRUHUfgkEYPa82UMyv7y4EgMewmuPvGEPyFi +ygMUZPBNIjxIdJ8ODNS5GcS5ikRyTqZH2/c91kFaZQzpm66O0Z57Eb9N34tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTU/G8xbYd8U76/k7RzPHLaJyR8wHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA69XYXcPSdoqp2UaJzfiqPPUipSgOWcMNde N+kk4zc8L4VwlDHqdvXTasHfZLl8ay6RGdaMjO9uvAlrSPdyfPGr+7d5lEVwSYO3 580xcPx//gvi15spaSaysPTUrhTj2jzTHeqHB1Hyg+aWaSjE79SnOrKIwqKJj75B Sna+9Ob844NVOMakSaQv2e5hz9armNK+2EKRVcXJ56rwfMMjlcrxpQYWq17N/8j5 1iZrYVuroKPx/y98a10zLoIf4YjUwT7SHGLix4NISUHrft+ZkpuEMO22aSly2NcN 51vKx1J2rHIwqSWxIxFY65PDBKOWTT5HekPUxD+59T+YsgrX+kU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client