This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: L/r32YXxoYTT1YYIuJOWC0HNHC1fsECFNvDCPb/TlYo= Subject key identifier: E5:A7:17:57:2F:EE:91:72:D8:9E:E8:97:37:9C:CC:2A:F8:28:DC:FE Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 69C8D6FE6E3122BBFB96D1E872B84816A1D1334C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 0127 Signing time: Fri 05 Dec 2025 13:01:54 +0000 Manifest this update: Fri 05 Dec 2025 12:56:54 +0000 Manifest next update: Mon 08 Dec 2025 13:21:54 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 2: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: WhEJjXt5RYAF5rlxCWVs4EuRazVxmhKmmt4wq+rnWg4=) 3: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:d6:fe:6e:31:22:bb:fb:96:d1:e8:72:b8:48:16:a1:d1:33:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Dec 5 12:56:54 2025 GMT Not After : Dec 8 13:21:54 2025 GMT Subject: CN=E5A717572FEE9172D89EE897379CCC2AF828DCFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:8d:ad:48:52:be:7c:9e:69:06:e9:82:04: 41:49:41:f9:fd:a9:22:74:74:e1:0a:b1:87:f8:3d: 9b:71:16:d7:02:da:41:93:6d:dc:97:8d:94:81:76: 1f:fe:58:41:88:b1:76:7e:a6:e4:bb:a6:ac:6b:54: b7:e3:50:8e:7c:7a:f9:39:c6:f5:30:b6:1b:d2:31: 39:35:4b:86:c5:8a:a2:20:30:72:de:f2:82:13:89: 7e:81:f5:2a:b1:3f:6c:b8:6a:fd:64:85:7a:57:f8: 62:d9:c4:31:91:ec:dc:89:e0:85:dd:2d:18:a5:6a: e1:5b:14:d5:47:e0:e6:97:0a:22:88:64:6c:fe:fb: 7d:e5:c9:56:18:8b:cd:d7:8c:3b:4b:c3:8a:36:9e: b5:19:17:a2:d6:62:7f:45:b3:6e:6f:1e:98:79:a1: 70:fd:e4:c2:07:fa:0d:d3:b3:da:7a:d7:9e:dd:ab: 0a:6d:d3:81:6d:25:bb:e6:df:fa:0b:e9:5c:28:61: 0d:50:00:0c:81:06:3d:a0:21:33:1e:72:f1:d1:25: 2a:62:c7:41:5d:52:f9:91:71:be:13:cf:b3:bf:fa: e9:75:d8:1c:53:39:e5:c2:bb:14:37:32:fa:b4:cc: 7c:c3:16:2c:5a:bd:00:b4:56:c1:85:a3:29:52:c5: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A7:17:57:2F:EE:91:72:D8:9E:E8:97:37:9C:CC:2A:F8:28:DC:FE X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:88:17:b1:88:65:a0:ca:06:d8:01:6f:f9:b1:9d:bc:02: 73:b2:3d:08:8a:ea:a9:23:10:31:a9:3d:11:20:55:3a:e7:84: 2d:86:71:f5:6c:e3:67:e3:5d:c9:b8:d9:0b:ea:6f:f6:d8:5f: 5b:5f:5f:67:fe:69:d7:1b:39:b2:62:78:31:c8:a7:1d:13:85: 95:f4:ff:d4:15:5a:73:82:d7:74:af:55:36:5c:0c:19:00:98: 4e:e8:b6:53:be:18:f8:e0:d4:6e:73:5b:30:33:84:55:c8:bf: 0f:fd:af:ad:8a:e8:d5:0f:26:f2:da:a5:d8:5a:ac:71:eb:23: ad:db:d4:26:84:e0:c3:55:c1:a8:d2:77:20:78:5a:e3:1c:41: 0d:67:46:48:79:2a:4e:0d:7f:08:9b:5a:f8:8a:a8:4c:a9:2f: e8:66:05:c2:3e:1f:ab:15:7b:1d:9f:ae:ed:1d:7f:a6:15:a3: 0e:d7:80:cb:9d:c2:b2:86:5e:46:ef:ed:ef:31:63:88:8e:a6: 41:45:ff:bc:f0:73:67:70:c0:9c:f7:31:3a:6e:2a:2e:09:36: 6c:86:c7:c5:1f:03:07:44:5e:76:7e:53:31:69:66:1f:c6:1a: 67:84:db:05:a5:a4:6d:86:24:cc:5c:2e:ed:6f:2c:96:18:7b: e2:f0:3a:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacjW/m4xIrv7ltHocrhIFqHRM0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTEyMDUxMjU2NTRaFw0yNTEyMDgxMzIxNTRaMDMxMTAvBgNV BAMTKEU1QTcxNzU3MkZFRTkxNzJEODlFRTg5NzM3OUNDQzJBRjgyOERDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCY2tSFK+fJ5pBumCBEFJQfn9 qSJ0dOEKsYf4PZtxFtcC2kGTbdyXjZSBdh/+WEGIsXZ+puS7pqxrVLfjUI58evk5 xvUwthvSMTk1S4bFiqIgMHLe8oITiX6B9SqxP2y4av1khXpX+GLZxDGR7NyJ4IXd LRilauFbFNVH4OaXCiKIZGz++33lyVYYi83XjDtLw4o2nrUZF6LWYn9Fs25vHph5 oXD95MIH+g3Ts9p6157dqwpt04FtJbvm3/oL6VwoYQ1QAAyBBj2gITMecvHRJSpi x0FdUvmRcb4Tz7O/+ul12BxTOeXCuxQ3Mvq0zHzDFixavQC0VsGFoylSxTiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5acXVy/ukXLYnuiXN5zMKvgo3P4wHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx8iBexiGWgygbYAW/5sZ28AnOyPQiK6qkj EDGpPREgVTrnhC2GcfVs42fjXcm42Qvqb/bYX1tfX2f+adcbObJieDHIpx0ThZX0 /9QVWnOC13SvVTZcDBkAmE7otlO+GPjg1G5zWzAzhFXIvw/9r62K6NUPJvLapdha rHHrI63b1CaE4MNVwajSdyB4WuMcQQ1nRkh5Kk4NfwibWviKqEypL+hmBcI+H6sV ex2fru0df6YVow7XgMudwrKGXkbv7e8xY4iOpkFF/7zwc2dwwJz3MTpuKi4JNmyG x8UfAwdEXnZ+UzFpZh/GGmeE2wWlpG2GJMxcLu1vLJYYe+LwOsk= -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:52 2025 by rpki-client