This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: QYB2k6NBTsoLGNT8QzzBUqJdHKqr8+ilrWxlLm0ZWTk= Subject key identifier: 90:8A:41:45:13:42:A1:05:74:B6:91:6F:6D:CE:F9:77:A8:47:8F:E4 Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 1018889A98A7308E8C59D79712A83111302FFF6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 4F Signing time: Wed 03 Dec 2025 03:42:25 +0000 Manifest this update: Wed 03 Dec 2025 03:37:25 +0000 Manifest next update: Sat 06 Dec 2025 04:03:25 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: m5Mazx8AfWAk9/67REFtYOIcuhtNNat1kDIl0nKafGw=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:18:88:9a:98:a7:30:8e:8c:59:d7:97:12:a8:31:11:30:2f:ff:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Dec 3 03:37:25 2025 GMT Not After : Dec 6 04:03:25 2025 GMT Subject: CN=908A41451342A10574B6916F6DCEF977A8478FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:ff:96:4d:8e:c1:71:c3:c5:43:32:84:f3: 88:08:78:e7:bb:e8:75:ed:32:8c:02:76:f1:c0:63: fc:d4:7d:e3:14:d6:24:6a:b3:1b:23:8d:3e:d5:82: 43:91:60:0f:c8:6f:21:8d:98:f2:7f:a1:e1:ca:3b: cf:78:62:04:46:e7:47:a2:72:9c:15:0d:93:1f:56: 4a:5d:44:2e:a7:48:ad:03:bc:03:4b:f8:f2:f7:6d: 19:41:20:15:06:03:7a:e1:4c:4d:43:07:9a:0e:63: 74:54:bb:4e:42:53:31:67:cb:0b:03:7d:83:0c:5f: 4d:08:69:f0:01:51:4f:03:eb:50:47:20:68:cf:be: c9:2c:09:ec:a8:3d:59:a9:9b:77:e0:84:63:03:fb: 6d:38:04:7e:7a:5f:d6:6d:18:81:b3:09:10:15:e8: c2:a6:78:c2:e7:dd:4d:07:bd:52:fe:1d:78:83:81: 1a:29:9d:1a:20:d9:f0:2e:35:d4:8c:92:62:ea:f1: ee:ab:cd:ed:e2:1b:7b:a9:a8:75:cb:87:20:27:e2: ac:0c:2d:34:ff:f3:57:26:ef:ab:fc:f8:98:74:37: 4a:80:c7:ef:ca:af:2b:d2:04:7e:f4:76:ad:dd:91: 8a:97:24:ad:9d:c3:6e:ee:a1:7a:41:f2:84:b4:0a: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8A:41:45:13:42:A1:05:74:B6:91:6F:6D:CE:F9:77:A8:47:8F:E4 X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a9:37:46:99:09:33:b7:63:5f:d1:51:87:b1:46:2d:08:17: ea:2b:43:6c:c6:f0:07:68:8b:18:36:50:36:e5:89:14:67:24: d2:d6:63:51:f9:83:52:db:db:82:6d:14:1c:b4:b2:54:82:9a: b7:9a:61:a9:1f:c0:b8:b9:2d:3c:39:0e:ac:3a:12:79:20:17: 82:0d:70:df:e0:4b:3f:08:39:b5:5e:29:0b:3b:90:e5:69:8a: ed:4f:c5:89:49:5a:de:a3:1b:42:37:27:0f:1d:d7:d8:33:7d: f9:4a:59:23:0f:6e:29:01:d1:1a:59:5a:f7:2a:3f:bc:80:0f: c6:66:33:56:fc:c1:ec:05:9a:60:9d:ad:1c:32:c6:5e:8a:69: 21:cc:cb:e5:45:3a:56:cb:68:3c:ff:36:7d:c2:ce:0b:07:2d: 29:ae:62:87:30:4f:72:9f:67:c8:d2:11:30:8c:32:81:53:fb: 9b:90:73:d4:50:ac:50:21:12:57:87:c1:95:ec:9c:18:d4:78: 60:28:b7:18:07:8a:a0:d4:24:82:61:87:2e:99:33:64:ab:da: b6:cd:16:b5:8c:7d:90:2e:93:f0:c7:a7:f1:e7:4a:65:41:5f: 28:f2:37:9f:9e:50:08:87:64:a8:b5:75:88:61:a9:78:f4:b2: 4b:56:c9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBiImpinMI6MWdeXEqgxETAv/24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTEyMDMwMzM3MjVaFw0yNTEyMDYwNDAzMjVaMDMxMTAvBgNV BAMTKDkwOEE0MTQ1MTM0MkExMDU3NEI2OTE2RjZEQ0VGOTc3QTg0NzhGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntv+WTY7BccPFQzKE84gIeOe7 6HXtMowCdvHAY/zUfeMU1iRqsxsjjT7VgkORYA/IbyGNmPJ/oeHKO894YgRG50ei cpwVDZMfVkpdRC6nSK0DvANL+PL3bRlBIBUGA3rhTE1DB5oOY3RUu05CUzFnywsD fYMMX00IafABUU8D61BHIGjPvsksCeyoPVmpm3fghGMD+204BH56X9ZtGIGzCRAV 6MKmeMLn3U0HvVL+HXiDgRopnRog2fAuNdSMkmLq8e6rze3iG3upqHXLhyAn4qwM LTT/81cm76v8+Jh0N0qAx+/KryvSBH70dq3dkYqXJK2dw27uoXpB8oS0CtqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIpBRRNCoQV0tpFvbc75d6hHj+QwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWpN0aZCTO3Y1/RUYexRi0IF+orQ2zG8Ado ixg2UDbliRRnJNLWY1H5g1Lb24JtFBy0slSCmreaYakfwLi5LTw5Dqw6EnkgF4IN cN/gSz8IObVeKQs7kOVpiu1PxYlJWt6jG0I3Jw8d19gzfflKWSMPbikB0RpZWvcq P7yAD8ZmM1b8wewFmmCdrRwyxl6KaSHMy+VFOlbLaDz/Nn3CzgsHLSmuYocwT3Kf Z8jSETCMMoFT+5uQc9RQrFAhEleHwZXsnBjUeGAotxgHiqDUJIJhhy6ZM2Sr2rbN FrWMfZAuk/DHp/HnSmVBXyjyN5+eUAiHZKi1dYhhqXj0sktWyeA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:30 2025 by rpki-client