This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: 19sKN72lL22LyK787CXAukwKFoxNC4xqlr+PzZHAuQU= Subject key identifier: 00:DC:DF:BD:B1:ED:EF:64:EC:54:24:52:66:8C:56:C3:78:0D:05:00 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 5BAB539CFDCD92BAAD4DEB9F25C030C3953B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01D8 Signing time: Sat 24 Jan 2026 00:22:20 +0000 Manifest this update: Sat 24 Jan 2026 00:17:20 +0000 Manifest next update: Tue 27 Jan 2026 02:15:20 +0000 Files and hashes: 1: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=) 2: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU=) 3: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: 9+Mv4cEtMbH5KopkzgQCoNSpTRV8G99XXR57cTSgvOU=) 4: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: IcD2ll+N/JY1JeOkpfTJnRgCd62/MsHt8166Aiuzsx8=) 5: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: 3VX7SmRrNhkZ2gYSECqjxxiOqtU2CUq75Ny0SNZjNIo=) 6: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ab:53:9c:fd:cd:92:ba:ad:4d:eb:9f:25:c0:30:c3:95:3b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Jan 24 00:17:20 2026 GMT Not After : Jan 27 02:15:20 2026 GMT Subject: CN=00DCDFBDB1EDEF64EC542452668C56C3780D0500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:ee:15:b6:c6:0d:ea:d4:5b:a1:1d:23:52: 15:b0:23:c3:78:a2:3a:1f:93:c1:bb:cc:35:93:51: f6:52:fb:fe:e6:18:c5:94:bc:cd:da:57:ef:f4:a3: da:9f:14:2b:b9:b5:8d:f1:78:c2:46:16:00:ae:a3: 47:58:2c:f4:ee:2a:1b:26:ab:2d:39:e8:2e:4b:d2: 18:c6:55:48:4e:be:9f:bc:49:6b:7f:0b:7e:7d:46: d6:9a:b0:99:18:c4:79:61:ad:a3:75:31:fb:e1:e8: 06:58:25:a1:bb:9a:3f:bc:66:93:d5:0e:a2:29:da: 99:f7:eb:db:2a:ac:47:64:7b:29:45:b3:91:d4:9c: cc:4b:0a:ff:5b:4a:17:3c:d1:d6:47:34:bb:be:2b: 93:64:2e:c4:03:03:f2:df:38:6b:26:2a:8d:7d:fe: 61:f4:5b:14:72:ba:84:4c:89:5d:ec:56:f8:44:1c: b1:c3:f5:07:18:9c:40:58:12:31:d9:0e:4d:81:fd: 19:39:c1:3a:d7:11:48:ad:3e:42:f2:85:5d:a3:39: ac:c1:0c:ce:a1:cb:68:b6:3a:ac:7b:33:ec:4b:2f: 85:62:57:7b:17:4e:61:91:4d:27:d4:fd:c6:7e:b5: cd:46:49:23:f8:06:2a:bc:e8:c6:e1:79:a1:f3:46: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DC:DF:BD:B1:ED:EF:64:EC:54:24:52:66:8C:56:C3:78:0D:05:00 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f0:47:8a:a9:23:f0:9a:6a:01:21:ba:8b:ce:8e:2b:8c:41: 00:43:43:e4:e9:de:9d:2d:2e:b0:87:49:92:33:11:9f:df:ad: 0f:f9:0f:29:4c:00:c0:d8:44:f9:d1:7d:69:93:f6:5a:a6:81: dd:55:fb:a3:c3:06:ad:df:c9:59:24:e7:6c:76:e1:9e:39:c3: 70:a7:4a:15:6d:2f:c7:1e:28:d9:6a:3f:90:f4:a5:9c:cd:12: 1d:62:c3:84:ac:77:c7:bb:01:7c:b5:e2:a9:3f:85:eb:03:85: c0:7f:be:2e:bd:f3:53:5d:f6:23:91:50:c5:67:30:3c:59:e6: 39:5b:ee:d4:63:52:e1:29:3b:b5:3a:50:b1:38:76:0e:06:fa: 8a:0a:e1:e6:c5:ba:53:90:f4:27:0c:09:52:9d:b2:55:6e:df: 2f:68:24:9a:63:a8:c5:b5:b1:1b:66:38:7a:26:73:7a:38:2f: fb:3c:f9:66:97:d9:1f:1c:13:87:55:31:89:da:51:8d:6b:68: d3:d4:34:70:15:20:43:7b:01:06:f1:ee:10:4f:67:70:26:8b: 09:00:b8:42:a3:40:8a:93:f5:49:31:a5:16:60:8b:ee:5e:22: 0d:4e:55:1c:28:f3:9a:77:89:6e:b8:2a:39:ca:5c:47:67:6c: 06:17:fc:ea -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITW6tTnP3NkrqtTeufJcAww5U7ZDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzNTM2OUFDNjg1MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3 NUJFMzBBMB4XDTI2MDEyNDAwMTcyMFoXDTI2MDEyNzAyMTUyMFowMzExMC8GA1UE AxMoMDBEQ0RGQkRCMUVERUY2NEVDNTQyNDUyNjY4QzU2QzM3ODBEMDUwMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALch7hW2xg3q1FuhHSNSFbAjw3ii Oh+TwbvMNZNR9lL7/uYYxZS8zdpX7/Sj2p8UK7m1jfF4wkYWAK6jR1gs9O4qGyar LTnoLkvSGMZVSE6+n7xJa38Lfn1G1pqwmRjEeWGto3Ux++HoBlglobuaP7xmk9UO oinamffr2yqsR2R7KUWzkdSczEsK/1tKFzzR1kc0u74rk2QuxAMD8t84ayYqjX3+ YfRbFHK6hEyJXexW+EQcscP1BxicQFgSMdkOTYH9GTnBOtcRSK0+QvKFXaM5rMEM zqHLaLY6rHsz7EsvhWJXexdOYZFNJ9T9xn61zUZJI/gGKrzoxuF5ofNG+58CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQA3N+9se3vZOxUJFJmjFbDeA0FADAfBgNVHSME GDAWgBQ1NprGhSAVCFQRl/hqj9rCN1vjCjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdl NGFjYTNjLTYzZGMtNGMxYi1hN2U4LWFjYmFlODIxY2RlNS8wLzM1MzY5QUM2ODUy MDE1MDg1NDExOTdGODZBOEZEQUMyMzc1QkUzMEEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zNTM2OUFDNjg1MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJF MzBBLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83ZTRhY2EzYy02M2RjLTRjMWItYTdl OC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1MjAxNTA4NTQxMTk3Rjg2QThGREFD MjM3NUJFMzBBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAHvBHiqkj8JpqASG6i86OK4xBAEND5OnenS0u sIdJkjMRn9+tD/kPKUwAwNhE+dF9aZP2WqaB3VX7o8MGrd/JWSTnbHbhnjnDcKdK FW0vxx4o2Wo/kPSlnM0SHWLDhKx3x7sBfLXiqT+F6wOFwH++Lr3zU132I5FQxWcw PFnmOVvu1GNS4Sk7tTpQsTh2Dgb6igrh5sW6U5D0JwwJUp2yVW7fL2gkmmOoxbWx G2Y4eiZzejgv+zz5ZpfZHxwTh1UxidpRjWto09Q0cBUgQ3sBBvHuEE9ncCaLCQC4 QqNAipP1STGlFmCL7l4iDU5VHCjzmneJbrgqOcpcR2dsBhf86g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:10 2026 by rpki-client