This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: 4SYw2Pq477Fzbcp1AYvfLNUAxaT2AjMyh+kMh4EN19I= Subject key identifier: 01:0A:2C:89:2B:48:3C:DD:44:1A:A9:36:A4:2C:3E:20:70:83:AF:02 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 7E325FDF35AD4A0AA1F5AFD55756DDC615859AC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01B6 Signing time: Sat 06 Dec 2025 19:31:46 +0000 Manifest this update: Sat 06 Dec 2025 19:26:46 +0000 Manifest next update: Tue 09 Dec 2025 23:11:46 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) 4: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: NX/6hQA9GroYUk3PaSuTZkCWTvv96zFTEZJcyjA5GHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:32:5f:df:35:ad:4a:0a:a1:f5:af:d5:57:56:dd:c6:15:85:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Dec 6 19:26:46 2025 GMT Not After : Dec 9 23:11:46 2025 GMT Subject: CN=010A2C892B483CDD441AA936A42C3E207083AF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:b4:12:eb:d7:0d:24:09:c1:5f:b7:36:79: d7:2e:27:f9:97:62:4c:c7:bd:64:46:cc:46:ca:d4: e1:b0:8e:ce:8b:c9:d2:df:26:52:fc:87:2f:68:30: 90:85:ae:81:ad:4e:2e:34:c5:7e:65:ff:f1:5e:22: 27:60:18:f9:c0:28:01:73:ff:e3:b5:d8:00:ca:42: 17:80:f3:a4:91:7b:fe:af:6d:7e:f9:a1:01:b5:ad: 38:3e:a6:58:92:e3:85:d2:41:2e:29:48:ef:30:eb: c3:4e:36:66:b4:59:04:26:3a:5e:bf:ae:d0:bc:10: ba:06:86:92:70:25:57:32:58:fc:59:1b:bd:b5:51: 75:1e:3d:73:70:1b:ab:04:d4:ec:54:ad:c6:06:86: 77:35:09:d2:2a:d9:5b:5d:fa:89:ef:bd:fb:cc:c7: 1a:96:55:35:94:cf:10:f9:92:4e:f2:18:6c:f8:57: db:eb:1a:2d:09:d7:62:42:45:ec:fa:1a:85:fa:47: 6f:2f:3d:f3:09:aa:a2:4a:e5:c4:fe:f9:6a:48:10: 23:b8:81:f6:cf:0a:8e:de:ac:e6:98:d6:f5:b2:fc: 14:50:8c:0e:34:db:50:6d:4b:06:64:2f:64:d0:b5: 36:dc:a7:d4:38:b5:67:39:ff:20:5d:ca:9b:3f:42: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:2C:89:2B:48:3C:DD:44:1A:A9:36:A4:2C:3E:20:70:83:AF:02 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ca:db:f5:59:61:68:c0:99:8b:df:a1:84:8f:cd:18:ae:2d: 72:8c:64:35:8c:58:6c:2b:87:05:52:b3:75:c2:a4:3f:e5:28: 77:f5:a4:cd:63:f7:5d:6f:42:2c:36:d3:ed:fb:5f:49:40:f3: 5c:cd:88:57:dc:a1:d7:6b:75:a4:0a:12:b5:be:3a:74:2c:67: 83:5f:7d:19:14:7e:99:a3:2b:99:7a:5e:f5:53:84:56:10:09: 85:61:71:c9:5b:35:11:19:94:ec:37:0e:c7:93:e5:91:1a:8a: 8f:e7:eb:af:cf:0c:8b:9f:69:41:b3:75:55:ea:d4:85:93:51: 08:40:ba:6d:bd:d0:00:7b:86:ad:d4:4d:a5:93:d0:4e:c5:99: ca:31:34:b9:46:0d:93:96:30:48:53:c2:d4:c3:31:ec:55:b5: 1c:a3:16:f5:49:7c:a6:fa:f5:66:37:91:f1:b7:09:46:8c:39: 26:df:c8:08:28:f5:c1:48:6f:b9:e0:73:5b:c0:5f:8d:5d:e1: 97:33:c5:31:27:3c:79:96:92:ea:94:2e:bf:0c:d6:99:1c:7d: 63:fd:d0:81:5e:d5:71:a9:c5:81:7c:49:10:3c:73:fd:a0:b6: 6b:59:38:4c:4f:a7:d6:b3:11:9b:ce:20:65:c0:d5:6e:32:44: ff:e9:a5:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjJf3zWtSgqh9a/VV1bdxhWFmsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTEyMDYxOTI2NDZaFw0yNTEyMDkyMzExNDZaMDMxMTAvBgNV BAMTKDAxMEEyQzg5MkI0ODNDREQ0NDFBQTkzNkE0MkMzRTIwNzA4M0FGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+77QS69cNJAnBX7c2edcuJ/mX YkzHvWRGzEbK1OGwjs6LydLfJlL8hy9oMJCFroGtTi40xX5l//FeIidgGPnAKAFz /+O12ADKQheA86SRe/6vbX75oQG1rTg+pliS44XSQS4pSO8w68NONma0WQQmOl6/ rtC8ELoGhpJwJVcyWPxZG721UXUePXNwG6sE1OxUrcYGhnc1CdIq2Vtd+onvvfvM xxqWVTWUzxD5kk7yGGz4V9vrGi0J12JCRez6GoX6R28vPfMJqqJK5cT++WpIECO4 gfbPCo7erOaY1vWy/BRQjA4021BtSwZkL2TQtTbcp9Q4tWc5/yBdyps/Qgy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQosiStIPN1EGqk2pCw+IHCDrwIwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfK2/VZYWjAmYvfoYSPzRiuLXKMZDWMWGwr hwVSs3XCpD/lKHf1pM1j911vQiw20+37X0lA81zNiFfcoddrdaQKErW+OnQsZ4Nf fRkUfpmjK5l6XvVThFYQCYVhcclbNREZlOw3DseT5ZEaio/n66/PDIufaUGzdVXq 1IWTUQhAum290AB7hq3UTaWT0E7FmcoxNLlGDZOWMEhTwtTDMexVtRyjFvVJfKb6 9WY3kfG3CUaMOSbfyAgo9cFIb7ngc1vAX41d4ZczxTEnPHmWkuqULr8M1pkcfWP9 0IFe1XGpxYF8SRA8c/2gtmtZOExPp9azEZvOIGXA1W4yRP/ppdM= -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:11 2025 by rpki-client