This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: fW4HsA0U72ltATQTuqEIGi4CSboKkGTBn2DZzuePIgo= Subject key identifier: FD:C1:5F:5B:41:19:75:1D:99:3E:EC:1C:FC:71:A4:36:00:40:F3:B1 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 531D996BCE8F24F601DABE60151209A5B3B1CA75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 029C Signing time: Sun 25 Jan 2026 06:50:43 +0000 Manifest this update: Sun 25 Jan 2026 06:45:43 +0000 Manifest next update: Wed 28 Jan 2026 14:22:43 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: R7pj3kHaikWjVRu+u/dwVC0vtpw75t41mi2lG4wbrac=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1d:99:6b:ce:8f:24:f6:01:da:be:60:15:12:09:a5:b3:b1:ca:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Jan 25 06:45:43 2026 GMT Not After : Jan 28 14:22:43 2026 GMT Subject: CN=FDC15F5B4119751D993EEC1CFC71A4360040F3B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:a0:ef:da:6c:41:3b:4a:b0:17:3a:17:ef: 65:b4:f5:37:03:d5:6f:7c:33:1c:a6:91:6a:14:8e: 26:ad:35:37:f4:5b:1f:2d:d6:b2:fa:4b:db:a0:2c: 72:0e:47:f5:3c:03:db:bd:f8:61:27:f3:31:51:87: c0:79:c4:35:bf:14:7c:a0:18:70:49:71:56:ed:67: fa:2c:8b:43:be:d4:1f:ea:c1:81:60:54:2c:3a:28: f7:55:3d:d6:7a:ad:c1:5d:b7:c6:80:17:f3:10:38: 6e:75:b9:76:1d:67:f9:07:e7:d8:92:e1:06:9f:a3: 0f:34:8e:64:6c:78:37:f6:b4:cd:3e:92:7d:8f:ae: f4:ae:36:0c:b0:a1:d9:7f:ed:44:2a:26:b4:73:92: fe:29:38:30:56:ed:44:79:63:91:c5:6a:a1:0a:aa: 07:87:f3:23:fc:7c:fe:1c:d6:34:b0:c5:27:ee:9f: 89:90:c1:f8:58:12:e5:eb:eb:fd:f4:cf:bf:b4:5a: 98:15:56:3d:01:92:bd:15:fc:f8:b1:a7:0c:06:76: 0e:b1:82:c3:b8:5a:04:b8:79:ef:a1:ba:9d:30:9e: 88:1d:d6:f0:c8:55:2f:03:37:b7:0d:f3:61:75:54: 81:03:3e:d5:b3:6f:91:1d:ce:91:94:98:d8:ee:b4: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C1:5F:5B:41:19:75:1D:99:3E:EC:1C:FC:71:A4:36:00:40:F3:B1 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d2:7c:58:09:aa:4d:e4:c3:e0:c0:c5:86:5b:73:13:47:c6: 4f:e8:b4:43:fd:ff:88:9e:a3:f7:fc:29:e1:68:da:52:0c:60: f8:94:a7:21:28:5f:ee:d9:e6:71:87:fe:53:73:74:21:7c:71: 97:27:ee:0e:02:a9:ef:f6:c2:b8:a7:3f:19:1d:81:6f:e5:37: 86:81:be:a3:10:29:55:e7:a0:80:af:09:ed:45:54:59:6a:78: c0:8a:f6:6f:83:02:2a:4c:7e:6e:6f:c3:14:43:84:0d:66:a9: 37:93:20:e7:9b:c7:3f:02:bc:30:09:1e:2c:82:16:68:90:c9: 42:54:b6:34:5c:66:72:1b:ef:5a:f6:5a:a5:90:22:3f:cc:cc: 4d:d8:f4:a2:05:20:da:29:60:18:ef:23:e9:f0:dd:29:92:ca: 9b:dd:b3:ce:37:f0:48:b6:82:10:72:6b:0e:a6:96:15:fe:0e: 13:22:a1:51:56:0a:85:78:79:7c:db:08:c3:4d:f4:ee:50:ad: fb:41:cc:41:a5:2d:b8:ff:ea:d3:ae:38:4b:33:33:20:07:95: 3b:62:e5:03:8d:b7:17:67:99:5e:b6:b2:20:bb:7c:7b:66:e7: 45:fd:d9:66:d7:45:0c:3b:2a:2f:3a:e8:2a:0f:96:12:5b:d3: 56:bd:7d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUx2Za86PJPYB2r5gFRIJpbOxynUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNjAxMjUwNjQ1NDNaFw0yNjAxMjgxNDIyNDNaMDMxMTAvBgNV BAMTKEZEQzE1RjVCNDExOTc1MUQ5OTNFRUMxQ0ZDNzFBNDM2MDA0MEYzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/qDv2mxBO0qwFzoX72W09TcD 1W98MxymkWoUjiatNTf0Wx8t1rL6S9ugLHIOR/U8A9u9+GEn8zFRh8B5xDW/FHyg GHBJcVbtZ/osi0O+1B/qwYFgVCw6KPdVPdZ6rcFdt8aAF/MQOG51uXYdZ/kH59iS 4Qafow80jmRseDf2tM0+kn2PrvSuNgywodl/7UQqJrRzkv4pODBW7UR5Y5HFaqEK qgeH8yP8fP4c1jSwxSfun4mQwfhYEuXr6/30z7+0WpgVVj0Bkr0V/PixpwwGdg6x gsO4WgS4ee+hup0wnogd1vDIVS8DN7cN82F1VIEDPtWzb5EdzpGUmNjutL9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cFfW0EZdR2ZPuwc/HGkNgBA87EwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPSfFgJqk3kw+DAxYZbcxNHxk/otEP9/4ie o/f8KeFo2lIMYPiUpyEoX+7Z5nGH/lNzdCF8cZcn7g4Cqe/2wrinPxkdgW/lN4aB vqMQKVXnoICvCe1FVFlqeMCK9m+DAipMfm5vwxRDhA1mqTeTIOebxz8CvDAJHiyC FmiQyUJUtjRcZnIb71r2WqWQIj/MzE3Y9KIFINopYBjvI+nw3SmSypvds8438Ei2 ghByaw6mlhX+DhMioVFWCoV4eXzbCMNN9O5QrftBzEGlLbj/6tOuOEszMyAHlTti 5QONtxdnmV62siC7fHtm50X92WbXRQw7Ki866CoPlhJb01a9fQk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:17 2026 by rpki-client