This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: I4161Pvnv6IvsM7Xq+vjWX3XhlOJCnLnZwzj+1uCQcU= Subject key identifier: C4:08:A3:5D:93:36:3C:39:37:25:B9:0B:B2:90:C5:3D:00:7E:47:85 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 3BEAB450C2FD15B5ADF76616C5F9131392CD32E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01C2 Signing time: Sat 06 Dec 2025 01:52:19 +0000 Manifest this update: Sat 06 Dec 2025 01:47:19 +0000 Manifest next update: Tue 09 Dec 2025 06:45:19 +0000 Files and hashes: 1: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: j0QZKxLh+6Px3w/4116111Zi33SReV/cqgR/DDZi8NM=) 2: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 3: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) 4: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 5: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 6: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ea:b4:50:c2:fd:15:b5:ad:f7:66:16:c5:f9:13:13:92:cd:32:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Dec 6 01:47:19 2025 GMT Not After : Dec 9 06:45:19 2025 GMT Subject: CN=C408A35D93363C393725B90BB290C53D007E4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:f2:52:f7:86:56:ce:0b:08:20:d1:8e:d1: 66:ba:e5:71:80:7b:cc:ee:69:42:93:47:f5:9e:23: 94:77:34:71:cf:96:69:97:0e:a7:c3:04:c1:35:bd: be:52:f2:eb:b6:0a:af:30:e6:9f:1a:d0:e3:88:f4: 34:39:44:8e:a4:8c:5d:d7:2d:6c:f9:bb:66:11:39: 78:b3:0e:e1:67:c9:bb:c0:96:2b:5e:53:ab:e2:21: 54:10:89:1e:16:bb:70:81:b7:36:94:5b:83:90:04: 66:59:4f:94:15:48:67:6f:b6:f4:a6:f5:6a:75:50: 94:c2:18:20:79:e6:58:07:09:0f:c0:28:9b:ee:d7: 1d:8b:f9:e1:db:d9:6d:52:0d:6e:17:56:6d:13:2e: 8b:85:0e:58:a0:d1:c6:6f:18:0a:05:e8:b1:f1:e1: 5d:af:41:5f:30:b6:54:9c:23:b3:68:f2:47:a1:f1: 1e:b5:8f:0c:ba:fe:4b:76:aa:47:ba:78:76:d0:68: f0:80:72:97:8a:54:8a:eb:f4:d8:d3:c1:dc:9d:3c: 57:09:62:ec:b8:01:a1:c0:24:87:24:fb:97:3f:ee: d1:93:f2:08:9a:a7:e0:85:ac:d9:ee:f9:4c:03:f9: 6f:72:d2:c0:29:d9:db:9d:c1:b1:97:04:0d:71:82: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:A3:5D:93:36:3C:39:37:25:B9:0B:B2:90:C5:3D:00:7E:47:85 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:22:85:2a:e5:16:38:bf:99:7a:4c:3d:96:98:ff:4d:f8:08: 19:14:51:fa:16:85:47:96:59:ef:72:07:ec:64:e6:76:1f:55: 68:ee:d4:ac:9d:4f:22:70:e4:de:95:22:41:64:9d:c0:6b:9b: 73:d4:b8:ba:00:58:90:36:0a:61:19:79:d1:7e:4b:a3:f5:58: 14:62:d6:7f:43:8c:88:67:1a:21:3e:a0:32:b8:e2:03:02:0f: ae:3a:c9:29:53:ae:84:5a:e2:48:d8:4f:dd:5a:62:aa:59:38: 71:51:4f:8f:fe:79:be:fb:10:a0:9e:36:6d:48:ad:0b:47:f9: 24:28:c0:89:62:49:df:df:aa:11:2e:44:69:2c:b2:c1:79:19: 13:6c:d0:60:ac:4d:9d:b2:e4:2f:a0:fa:99:3a:f8:21:1d:0d: d7:0a:87:7c:cd:e5:07:2f:c5:b8:5b:76:df:5a:20:c5:b2:1c: 37:1c:a9:f6:95:fb:fa:20:4d:05:4f:a7:3f:3a:52:e6:92:a4: d6:a7:b6:9e:a8:e7:25:45:fa:59:2a:68:24:02:aa:88:2b:e6: 38:13:95:d1:a0:40:3d:98:6d:c3:a4:fc:d0:12:f6:78:3f:a2: 66:45:34:eb:56:a1:90:ce:f4:9d:b0:0a:cb:45:87:01:9a:95: ab:1a:16:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+q0UML9FbWt92YWxfkTE5LNMuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTEyMDYwMTQ3MTlaFw0yNTEyMDkwNjQ1MTlaMDMxMTAvBgNV BAMTKEM0MDhBMzVEOTMzNjNDMzkzNzI1QjkwQkIyOTBDNTNEMDA3RTQ3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dPJS94ZWzgsIINGO0Wa65XGA e8zuaUKTR/WeI5R3NHHPlmmXDqfDBME1vb5S8uu2Cq8w5p8a0OOI9DQ5RI6kjF3X LWz5u2YROXizDuFnybvAliteU6viIVQQiR4Wu3CBtzaUW4OQBGZZT5QVSGdvtvSm 9Wp1UJTCGCB55lgHCQ/AKJvu1x2L+eHb2W1SDW4XVm0TLouFDlig0cZvGAoF6LHx 4V2vQV8wtlScI7No8keh8R61jwy6/kt2qke6eHbQaPCAcpeKVIrr9NjTwdydPFcJ Yuy4AaHAJIck+5c/7tGT8giap+CFrNnu+UwD+W9y0sAp2dudwbGXBA1xgq4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxAijXZM2PDk3JbkLspDFPQB+R4UwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQihSrlFji/mXpMPZaY/034CBkUUfoWhUeW We9yB+xk5nYfVWju1KydTyJw5N6VIkFkncBrm3PUuLoAWJA2CmEZedF+S6P1WBRi 1n9DjIhnGiE+oDK44gMCD646ySlTroRa4kjYT91aYqpZOHFRT4/+eb77EKCeNm1I rQtH+SQowIliSd/fqhEuRGksssF5GRNs0GCsTZ2y5C+g+pk6+CEdDdcKh3zN5Qcv xbhbdt9aIMWyHDccqfaV+/ogTQVPpz86UuaSpNantp6o5yVF+lkqaCQCqogr5jgT ldGgQD2YbcOk/NAS9ng/omZFNOtWoZDO9J2wCstFhwGalasaFl0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:49:23 2025 by rpki-client