This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json)
Hash identifier: +QDxB5n7ZvcYQlP4VLHldjS41r64mh1a/oaAoKx4fnM=
Subject key identifier: AD:53:95:6B:DF:85:10:78:66:66:0B:F3:44:67:3B:0D:A9:2E:C3:61
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial: 01FD330E2283C5AC869745299CAEC8A202FDF925
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
Manifest number: 0105
Signing time: Sat 06 Dec 2025 08:01:35 +0000
Manifest this update: Sat 06 Dec 2025 07:56:35 +0000
Manifest next update: Tue 09 Dec 2025 18:51:35 +0000
Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: GNV8ylfIjqZkjvmmfCVI4BhCGKl+URjOEYO4RkIDhRc=)
2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fd:33:0e:22:83:c5:ac:86:97:45:29:9c:ae:c8:a2:02:fd:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
Validity
Not Before: Dec 6 07:56:35 2025 GMT
Not After : Dec 9 18:51:35 2025 GMT
Subject: CN=AD53956BDF85107866660BF344673B0DA92EC361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:66:8d:0b:e3:9a:b8:c7:a4:8a:13:8c:bf:
30:ff:f4:8e:14:ea:6a:cf:d8:6e:cb:36:fc:c1:5e:
2c:38:45:2d:c9:30:d0:05:f0:2a:3d:4a:7c:70:0b:
38:2d:0b:13:14:a5:98:79:d3:eb:08:54:84:2c:fd:
f6:53:73:57:7e:3a:80:ae:84:d7:91:ff:9f:ac:55:
6e:a2:f8:f3:e1:03:95:3b:65:51:e1:dc:68:8c:a7:
49:3c:4f:b6:e8:53:3f:30:95:6a:06:80:1a:e4:a4:
fa:44:65:80:73:99:cd:f4:69:26:72:15:54:21:40:
61:1e:af:ed:4a:2d:e4:8b:01:1c:0e:e8:7f:f1:f3:
e6:d6:93:a1:ed:c5:0b:ae:39:60:4d:66:fa:ab:71:
1b:cf:0e:b9:ad:60:22:00:a0:ab:35:5a:ee:e9:7f:
0a:96:94:f7:d3:f1:1a:ac:66:07:5d:6a:06:b6:d5:
18:90:d6:b7:ae:2c:28:36:9e:d9:e5:f7:66:e7:24:
f4:1e:6f:89:e2:01:4e:24:ac:13:70:22:bc:99:f0:
74:42:18:d7:fe:d9:a5:52:f1:b5:3d:a9:04:00:78:
02:66:de:db:98:1f:55:97:c0:91:c3:b7:e0:9d:98:
c9:56:da:f7:c6:5d:b0:bb:25:1c:a6:4f:b0:2c:67:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:95:6B:DF:85:10:78:66:66:0B:F3:44:67:3B:0D:A9:2E:C3:61
X509v3 Authority Key Identifier:
keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:71:d6:6b:cf:41:5b:96:b7:84:e6:ae:0b:c9:d9:7c:89:35:
91:6e:27:d5:5a:d0:2a:06:1e:2b:55:2a:bf:fa:ab:6f:cf:8e:
1a:50:39:38:18:cb:91:97:99:e2:85:ae:0a:31:b5:a8:f9:93:
bb:ea:33:93:ab:c8:44:21:22:41:72:1a:4a:2d:88:1b:c7:56:
f2:59:a2:85:1e:ae:39:37:83:24:e8:e1:07:6b:81:88:37:23:
9e:42:5a:2b:1d:48:73:9f:37:a1:1b:13:89:33:dd:2e:c1:b2:
b8:a2:94:b6:f3:0f:e9:1e:31:8f:94:7e:55:e3:d3:48:5b:44:
77:8a:82:4a:87:38:30:2a:e1:19:d6:93:2a:44:a7:75:88:31:
ef:5e:9f:47:fe:db:23:cf:a1:dd:87:b9:bd:23:b5:32:70:cc:
af:5f:12:7a:cc:7c:b8:a5:4c:f7:fb:48:ad:d9:1e:ee:a9:2f:
d3:9e:ce:8c:6d:db:da:bc:bc:58:99:b9:b4:e0:00:c4:d9:2f:
1e:db:bf:6d:f6:2f:f6:c8:18:a4:54:38:00:7e:73:1f:bc:55:
b8:c0:4e:dc:09:6e:b6:2d:5a:e7:5f:5d:b7:37:5d:27:ba:22:
54:64:9d:7d:d9:77:9f:93:87:ec:fe:76:26:4e:e2:eb:0a:05:
ad:6d:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:50 2025 by rpki-client