This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json) Hash identifier: 4aARMcJu31IT8x6aSAlNQTzcpbnxcUYiMuOo6VjEgHs= Subject key identifier: 27:04:EB:AA:B1:70:9C:0A:AA:3A:61:F9:F0:67:B9:37:10:56:46:DB Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Certificate serial: 47FC683D00E0722F1E6F92ED276F7C90425AE9EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft Manifest number: 01ED Signing time: Sat 06 Dec 2025 00:41:48 +0000 Manifest this update: Sat 06 Dec 2025 00:36:48 +0000 Manifest next update: Tue 09 Dec 2025 12:02:48 +0000 Files and hashes: 1: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: t5wGLHegRmW++wQpzSmyfRJK3G95m4es9JVto6EJaMk=) 2: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=) 3: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=) 4: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fc:68:3d:00:e0:72:2f:1e:6f:92:ed:27:6f:7c:90:42:5a:e9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Validity Not Before: Dec 6 00:36:48 2025 GMT Not After : Dec 9 12:02:48 2025 GMT Subject: CN=2704EBAAB1709C0AAA3A61F9F067B937105646DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:2d:0d:c5:51:97:ac:36:c0:2c:58:d1:cd: 23:e1:ec:28:8d:b2:52:73:53:7a:f7:94:44:3b:49: d8:e1:cd:6a:5d:af:b5:16:eb:c7:5e:74:f9:c7:fc: 58:49:63:a9:5a:8d:58:48:0a:8f:7e:39:e9:7b:d3: 3f:b5:b2:df:7e:55:fd:52:10:f2:dc:3e:f5:89:fe: a6:31:2e:8d:d6:2f:9d:b6:01:3b:c9:be:11:81:28: 5f:c8:f5:8a:0b:21:ff:8e:a0:2a:0c:89:46:bd:9e: 7b:00:35:9d:65:13:95:ec:88:fe:e0:dd:4f:da:67: 44:ac:25:b4:e8:35:6a:bb:b7:13:ea:9b:47:47:dd: 76:1a:17:af:55:06:a2:db:54:06:b2:f2:42:f8:22: 61:66:07:dc:35:cd:ae:3e:76:ea:5c:df:4a:97:fb: 4c:8d:78:5f:4e:d1:50:92:13:9a:dd:38:af:b4:ac: 16:01:06:ab:ac:5f:ba:7d:ea:a9:d3:79:e8:86:7b: b0:42:87:95:48:82:2a:6d:9e:70:b2:48:e9:63:54: 78:db:c2:62:39:22:d2:33:a6:84:eb:a4:af:0e:da: 48:54:95:5a:b5:b3:09:c5:7d:ae:6e:16:a3:18:af: 8e:32:17:7c:63:b2:55:41:0c:12:55:f0:d0:cc:03: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:EB:AA:B1:70:9C:0A:AA:3A:61:F9:F0:67:B9:37:10:56:46:DB X509v3 Authority Key Identifier: keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:17:57:44:e6:ba:3c:4f:e0:c6:9d:8e:01:c9:71:0f:bf:a8: 64:d6:05:82:22:d8:da:55:db:7f:bb:40:4b:22:9e:a9:03:68: 7a:16:18:f7:47:11:1b:a3:65:94:52:6c:1f:0f:4b:5e:81:42: 64:e1:eb:3d:56:f1:7a:48:85:13:02:95:4b:b0:51:85:fc:8e: 20:c4:42:c2:97:cf:90:81:1c:b4:00:82:20:2c:cc:9f:39:ef: 94:5b:2a:85:62:7b:12:31:d6:6c:bc:a9:8a:ed:16:a8:28:a1: 51:f9:1e:92:64:34:d6:21:81:d0:27:b2:18:d6:4c:c1:54:be: 52:ec:83:2e:b9:03:7a:80:14:31:ef:93:1c:63:18:9e:cb:f2: 4b:81:4c:e2:ea:7a:df:bf:7f:40:d6:ab:fd:40:1f:d0:fc:8c: d9:46:bf:51:2f:d5:5e:21:88:1b:4e:f6:dc:c1:d1:0d:88:9b: c6:94:27:4b:8f:8d:28:16:15:3a:5e:ee:ba:31:46:fd:80:0b: e1:ab:01:2f:be:00:8c:71:48:99:d7:01:85:48:81:75:9c:6f: 61:ca:0a:b8:53:51:9e:09:a3:34:95:79:7e:88:dd:66:46:a0: c3:60:0c:65:1a:bd:02:18:9f:1b:63:c3:c0:ee:b0:c2:76:a0: 99:19:bf:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/xoPQDgci8eb5LtJ298kEJa6e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw ODM2NjZDNjAeFw0yNTEyMDYwMDM2NDhaFw0yNTEyMDkxMjAyNDhaMDMxMTAvBgNV BAMTKDI3MDRFQkFBQjE3MDlDMEFBQTNBNjFGOUYwNjdCOTM3MTA1NjQ2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49C0NxVGXrDbALFjRzSPh7CiN slJzU3r3lEQ7SdjhzWpdr7UW68dedPnH/FhJY6lajVhICo9+Oel70z+1st9+Vf1S EPLcPvWJ/qYxLo3WL522ATvJvhGBKF/I9YoLIf+OoCoMiUa9nnsANZ1lE5XsiP7g 3U/aZ0SsJbToNWq7txPqm0dH3XYaF69VBqLbVAay8kL4ImFmB9w1za4+dupc30qX +0yNeF9O0VCSE5rdOK+0rBYBBqusX7p96qnTeeiGe7BCh5VIgiptnnCySOljVHjb wmI5ItIzpoTrpK8O2khUlVq1swnFfa5uFqMYr44yF3xjslVBDBJV8NDMAxd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwTrqrFwnAqqOmH58Ge5NxBWRtswHwYDVR0j BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2 NjZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAwNzMxNjQtODAwOC00OWM2LWIx ODYtM2M3ZmU5YjgwYTE3LzAvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1 MTkwODM2NjZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUXV0TmujxP4MadjgHJcQ+/qGTWBYIi2NpV 23+7QEsinqkDaHoWGPdHERujZZRSbB8PS16BQmTh6z1W8XpIhRMClUuwUYX8jiDE QsKXz5CBHLQAgiAszJ8575RbKoViexIx1my8qYrtFqgooVH5HpJkNNYhgdAnshjW TMFUvlLsgy65A3qAFDHvkxxjGJ7L8kuBTOLqet+/f0DWq/1AH9D8jNlGv1Ev1V4h iBtO9tzB0Q2Im8aUJ0uPjSgWFTpe7roxRv2AC+GrAS++AIxxSJnXAYVIgXWcb2HK CrhTUZ4JozSVeX6I3WZGoMNgDGUavQIYnxtjw8DusMJ2oJkZvxc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:27 2025 by rpki-client