This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: fSoXZIVmvQhQyhNAF1j64NhbEF4Ig9mXR2bvWki5eNI= Subject key identifier: 9E:54:B1:DE:F9:DE:18:E7:60:B7:DD:4C:B5:57:E3:EF:8D:99:2B:6B Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 29C0316E88462C7CE61CFFD066A6999E220785DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0285 Signing time: Fri 05 Dec 2025 05:30:43 +0000 Manifest this update: Fri 05 Dec 2025 05:25:43 +0000 Manifest next update: Mon 08 Dec 2025 15:27:43 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: XDQn35jqYZ9wi+T+7lwXZCldYwZlIFqerN4Cu2ZNUws=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:31:6e:88:46:2c:7c:e6:1c:ff:d0:66:a6:99:9e:22:07:85:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Dec 5 05:25:43 2025 GMT Not After : Dec 8 15:27:43 2025 GMT Subject: CN=9E54B1DEF9DE18E760B7DD4CB557E3EF8D992B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:d6:a4:c5:78:82:d8:ab:3f:c2:b2:48:97: e2:aa:40:df:33:4e:77:6e:31:e3:18:ef:f0:89:b0: e1:50:b0:dd:ac:b4:83:0b:7e:1d:82:55:92:6c:16: 3d:55:d0:cf:fc:d7:df:9e:59:f7:b3:15:1c:b8:56: 64:d9:52:a9:d5:5e:77:91:7d:fe:c2:d7:32:d8:ee: 20:9f:b4:2c:4e:65:d7:84:08:0f:55:ef:0e:3b:47: 03:98:31:00:10:c8:52:4c:31:32:55:50:42:8a:47: 38:8a:e4:29:3b:2e:fa:ba:05:81:6e:cc:9c:1b:9e: fd:52:45:e9:75:5b:12:96:1b:b2:81:64:dc:5c:14: d2:6e:df:92:f1:9a:70:d0:df:44:f5:3e:1f:a5:dd: b6:20:e4:75:ac:0e:cd:b9:57:d2:25:55:de:e0:6d: eb:31:de:fb:b1:aa:4e:d0:fd:39:da:f9:f3:64:bb: da:64:50:d9:a9:db:0f:52:a7:1b:9a:13:30:9f:03: 8b:43:d9:e5:82:bf:7e:4c:3a:e4:ab:6e:05:34:e6: 91:3a:75:6f:60:8b:63:f6:6b:02:33:4f:68:82:d2: 86:60:3d:bd:51:2e:e9:ef:f7:2d:1d:d3:7c:29:e8: 3d:dc:14:0f:50:4a:a1:be:34:70:36:e1:07:ae:12: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:54:B1:DE:F9:DE:18:E7:60:B7:DD:4C:B5:57:E3:EF:8D:99:2B:6B X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9c:ce:ac:79:30:71:35:6d:56:3a:2f:52:3a:12:b5:a9:96: 00:4f:c0:85:26:84:3f:40:63:19:3d:c8:f9:91:f3:d4:1e:23: 2c:e9:27:8a:8f:55:a5:e0:27:a1:27:52:83:39:2a:54:c5:bb: d5:56:3b:02:c1:1c:6a:3c:88:8a:44:ff:e6:c7:24:08:e4:07: d2:98:70:5e:f3:de:a1:c9:12:2d:7e:52:5f:a3:93:bc:7f:9c: 48:24:33:1d:87:1d:ac:23:a6:43:7a:24:92:b5:84:49:50:62: a9:1a:3b:cd:9c:e0:3f:df:eb:9c:a0:30:d5:7e:ea:0d:1b:45: 11:83:e2:eb:5b:a0:10:cc:f7:27:c1:61:b8:51:4f:cc:fe:97: 7a:be:d1:e0:93:7c:c7:e1:c2:41:87:db:00:5a:37:12:40:af: 07:7d:a2:b6:e2:3b:b0:ca:e9:d0:8a:ab:31:71:10:f5:73:7d: cb:ff:eb:7b:ee:d3:6d:ce:c1:ea:36:5f:1e:11:9f:19:df:ca: 99:86:32:98:d7:44:4a:e7:f1:7f:de:4a:e6:9d:70:2d:34:bc: 09:67:99:77:7b:e7:b1:75:7a:0c:e2:10:02:94:7d:ed:43:5f: 6b:e9:6e:55:30:c4:3c:28:90:1f:9e:4d:89:cf:56:2b:62:e9: 73:15:0c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcAxbohGLHzmHP/QZqaZniIHhd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTEyMDUwNTI1NDNaFw0yNTEyMDgxNTI3NDNaMDMxMTAvBgNV BAMTKDlFNTRCMURFRjlERTE4RTc2MEI3REQ0Q0I1NTdFM0VGOEQ5OTJCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/NakxXiC2Ks/wrJIl+KqQN8z TnduMeMY7/CJsOFQsN2stIMLfh2CVZJsFj1V0M/819+eWfezFRy4VmTZUqnVXneR ff7C1zLY7iCftCxOZdeECA9V7w47RwOYMQAQyFJMMTJVUEKKRziK5Ck7Lvq6BYFu zJwbnv1SRel1WxKWG7KBZNxcFNJu35LxmnDQ30T1Ph+l3bYg5HWsDs25V9IlVd7g besx3vuxqk7Q/Tna+fNku9pkUNmp2w9SpxuaEzCfA4tD2eWCv35MOuSrbgU05pE6 dW9gi2P2awIzT2iC0oZgPb1RLunv9y0d03wp6D3cFA9QSqG+NHA24QeuEia9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlSx3vneGOdgt91MtVfj742ZK2swHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaczqx5MHE1bVY6L1I6ErWplgBPwIUmhD9A Yxk9yPmR89QeIyzpJ4qPVaXgJ6EnUoM5KlTFu9VWOwLBHGo8iIpE/+bHJAjkB9KY cF7z3qHJEi1+Ul+jk7x/nEgkMx2HHawjpkN6JJK1hElQYqkaO82c4D/f65ygMNV+ 6g0bRRGD4utboBDM9yfBYbhRT8z+l3q+0eCTfMfhwkGH2wBaNxJArwd9orbiO7DK 6dCKqzFxEPVzfcv/63vu023Oweo2Xx4RnxnfypmGMpjXRErn8X/eSuadcC00vAln mXd757F1egziEAKUfe1DX2vpblUwxDwokB+eTYnPViti6XMVDGg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:11 2025 by rpki-client