This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json)
Hash identifier: hqGen1PaNiKcafQQtSIBSM+DzfJUXIPPxxuadCCaB+w=
Subject key identifier: DA:74:0D:4F:62:66:0A:55:F7:D4:D6:C7:A9:CD:35:52:3A:C0:EE:6A
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial: 6C8B90FCC7AE42E94F8A3BF8DFAA6472C0DC0E06
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
Manifest number: 011B
Signing time: Fri 23 Jan 2026 20:41:34 +0000
Manifest this update: Fri 23 Jan 2026 20:36:34 +0000
Manifest next update: Tue 27 Jan 2026 04:27:34 +0000
Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: x3CiHvmnk7w1IwGlruZUINVPxbYIo/QC8cyiXiCwRkA=)
2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 04:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8b:90:fc:c7:ae:42:e9:4f:8a:3b:f8:df:aa:64:72:c0:dc:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
Validity
Not Before: Jan 23 20:36:34 2026 GMT
Not After : Jan 27 04:27:34 2026 GMT
Subject: CN=DA740D4F62660A55F7D4D6C7A9CD35523AC0EE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:1c:dc:50:66:55:28:51:17:69:63:f5:c3:
0d:70:99:38:0c:06:c1:78:05:cd:52:bc:42:0a:ad:
28:9d:29:28:1d:ab:4f:7a:ba:d6:60:5a:75:19:91:
7f:f3:23:a6:38:6a:92:8b:7e:fc:2a:a1:c8:d6:23:
80:13:85:d7:14:57:85:59:fd:92:97:c3:9e:82:a0:
31:bc:87:53:0c:84:d1:53:45:99:3d:c7:86:f6:6e:
50:d0:cf:ad:5c:92:bd:9e:03:ff:89:ad:5f:d6:06:
5a:08:0b:63:80:aa:38:99:bb:ad:90:74:65:49:d1:
c1:7f:26:89:59:b7:fd:e8:84:e8:14:c2:ff:e5:17:
8d:2a:a9:3d:ec:5f:ac:3c:31:0e:23:d4:f4:b0:73:
88:5e:94:95:1e:05:ec:0a:09:76:ff:b1:7b:22:83:
23:01:36:4b:05:06:1a:2b:e9:7b:54:27:75:ea:6d:
09:90:1f:f6:30:90:d8:51:bb:80:6f:09:e9:fe:76:
2e:ef:e5:1e:83:e4:95:95:8c:1b:f4:f7:f7:10:a3:
a9:67:47:00:4e:a6:96:ea:63:66:27:a0:1e:06:28:
14:85:76:ef:90:64:af:0b:ac:a7:da:57:ae:6e:c6:
e4:80:51:5a:a2:45:97:f8:4f:87:1a:78:d2:6d:d3:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:0D:4F:62:66:0A:55:F7:D4:D6:C7:A9:CD:35:52:3A:C0:EE:6A
X509v3 Authority Key Identifier:
keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4d:2f:39:ab:e3:3c:b9:15:ee:25:45:11:f8:8e:db:35:10:
4e:2d:05:02:4a:32:66:13:06:e0:4f:7d:09:c4:68:5e:a0:33:
7b:04:cc:0a:26:69:24:3e:49:3f:46:4f:74:d1:35:27:06:aa:
02:42:1b:a8:1a:03:c6:20:33:1a:bf:d6:1f:eb:59:5f:79:b2:
48:ee:6c:13:02:0c:bf:34:7b:8b:c5:1a:77:74:58:18:c3:a6:
c5:a8:72:f9:b8:a5:41:1f:58:4f:84:23:8d:72:92:65:3a:2b:
c3:f1:a8:cc:65:3d:6f:b7:15:94:d7:c1:57:30:66:55:58:43:
1e:6e:39:2f:ed:72:ab:49:ed:27:d2:52:83:de:ce:b6:a2:d1:
c1:b3:23:70:63:bf:2e:9a:3c:5e:46:61:21:ab:14:47:6c:c4:
77:50:9a:18:f6:7e:50:ad:07:cd:04:76:9b:43:fc:cc:3b:0b:
41:e0:3e:a4:0d:e4:2b:04:ef:a5:9a:1c:69:0a:a2:4f:2a:91:
ba:a4:e2:f1:ac:ec:fe:93:da:3e:4a:54:9e:98:c7:e1:37:c3:
29:9a:3d:eb:27:24:54:90:60:7a:68:46:2d:4b:5a:7f:c7:8e:
09:b0:d9:0f:b0:e4:ed:94:18:e8:ca:04:ea:cb:20:f7:cf:f5:
2c:5a:4d:70
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbIuQ/MeuQulPijv436pkcsDcDgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3
NjRFMDc3MTAeFw0yNjAxMjMyMDM2MzRaFw0yNjAxMjcwNDI3MzRaMDMxMTAvBgNV
BAMTKERBNzQwRDRGNjI2NjBBNTVGN0Q0RDZDN0E5Q0QzNTUyM0FDMEVFNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6hzcUGZVKFEXaWP1ww1wmTgM
BsF4Bc1SvEIKrSidKSgdq096utZgWnUZkX/zI6Y4apKLfvwqocjWI4AThdcUV4VZ
/ZKXw56CoDG8h1MMhNFTRZk9x4b2blDQz61ckr2eA/+JrV/WBloIC2OAqjiZu62Q
dGVJ0cF/JolZt/3ohOgUwv/lF40qqT3sX6w8MQ4j1PSwc4helJUeBewKCXb/sXsi
gyMBNksFBhor6XtUJ3XqbQmQH/YwkNhRu4BvCen+di7v5R6D5JWVjBv09/cQo6ln
RwBOppbqY2YnoB4GKBSFdu+QZK8LrKfaV65uxuSAUVqiRZf4T4caeNJt0+/7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2nQNT2JmClX31NbHqc01UjrA7mowHwYDVR0j
BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5
QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF
MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1
YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC
NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACBNLzmr4zy5Fe4lRRH4jts1EE4tBQJKMmYT
BuBPfQnEaF6gM3sEzAomaSQ+ST9GT3TRNScGqgJCG6gaA8YgMxq/1h/rWV95skju
bBMCDL80e4vFGnd0WBjDpsWocvm4pUEfWE+EI41ykmU6K8PxqMxlPW+3FZTXwVcw
ZlVYQx5uOS/tcqtJ7SfSUoPezrai0cGzI3Bjvy6aPF5GYSGrFEdsxHdQmhj2flCt
B80EdptD/Mw7C0HgPqQN5CsE76WaHGkKok8qkbqk4vGs7P6T2j5KVJ6Yx+E3wyma
PesnJFSQYHpoRi1LWn/Hjgmw2Q+w5O2UGOjKBOrLIPfP9SxaTXA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:40 2026 by rpki-client