This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: SmGd8ot7kHlqgEwkLEMQlEiIDEpY5e5VjJ29wYmjohc= Subject key identifier: A0:2A:D1:B1:40:CF:DA:D3:51:84:67:C6:70:17:C5:B7:45:7E:A1:A8 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 748381AD842612D4BC4F2658932ABD870DA9D499 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 0364 Signing time: Sat 06 Dec 2025 00:30:58 +0000 Manifest this update: Sat 06 Dec 2025 00:25:58 +0000 Manifest next update: Tue 09 Dec 2025 03:10:58 +0000 Files and hashes: 1: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: PAQ+ITnDdXjDxO4HGZAWiMmYp7ZYlFpSut93NhfBkzY=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:83:81:ad:84:26:12:d4:bc:4f:26:58:93:2a:bd:87:0d:a9:d4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Dec 6 00:25:58 2025 GMT Not After : Dec 9 03:10:58 2025 GMT Subject: CN=A02AD1B140CFDAD3518467C67017C5B7457EA1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:68:7c:36:a7:62:74:d5:f0:8c:e0:a4:a6: 67:17:22:78:cd:5e:b8:fc:40:bd:c2:5d:d9:fa:6f: b5:1c:5b:93:6c:ee:c9:d6:bd:3b:e4:44:bd:75:d6: d5:1f:51:f0:de:e1:45:d8:13:f9:68:1e:46:1c:1d: 45:9e:a6:fa:e2:44:08:67:2d:5d:92:6b:e9:ad:72: 53:c0:e8:76:6a:9c:9f:a9:6c:34:98:48:c4:30:fc: e0:1c:b0:37:0d:0e:ef:8d:dd:a2:1c:92:f1:54:92: bd:11:fd:14:83:f4:5d:47:70:14:8f:47:37:c3:32: f4:6c:63:0c:be:dd:eb:dc:08:43:d5:72:69:3e:b7: 6d:23:b0:68:4e:be:11:dc:04:17:54:04:2d:8c:a5: d7:a0:34:aa:0e:3f:ae:0c:dd:86:cb:d1:2a:ae:9f: d0:cd:bf:77:5b:20:39:44:20:9d:12:ca:86:45:e1: 5d:3f:71:0c:8b:ed:e7:e3:f5:c3:e9:cd:a8:79:15: 3c:c4:f3:b1:4e:97:a0:95:30:9b:62:e7:6d:04:af: b3:ef:e8:0b:28:c3:b9:a0:15:0b:ca:08:92:27:93: f2:58:d1:85:21:f6:d7:7f:d5:07:cb:b5:37:28:19: 22:79:15:43:24:cc:6b:79:0f:9c:01:c6:87:14:21: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2A:D1:B1:40:CF:DA:D3:51:84:67:C6:70:17:C5:B7:45:7E:A1:A8 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:76:9b:6e:34:9d:26:ea:6e:c6:92:48:ed:3c:b0:ba:11:ef: f4:f8:ef:ee:b7:4c:8a:4b:44:34:6e:50:3d:04:bd:94:00:bd: fa:ca:ac:4e:e4:d5:fb:ee:1a:c6:70:3a:61:1d:fe:ea:c7:a3: 27:ba:87:8a:b9:1c:c0:db:82:a9:ea:b4:f1:d3:73:ea:82:fb: c6:1b:6d:ef:70:07:9f:a4:7e:f6:44:99:6f:3a:57:d5:3e:00: 24:25:d3:00:fc:de:89:ae:36:85:26:7a:5b:37:18:03:04:85: 73:f1:12:3c:c7:f5:df:cc:d2:0d:bc:55:0c:25:c6:db:28:3a: ec:7c:89:08:1e:ba:0f:fe:c3:eb:2a:b6:7c:5f:33:42:3c:b5: a6:a7:a3:dc:da:0a:68:8d:85:b3:f5:64:ba:16:c3:73:5a:99: 6e:15:52:e0:3f:81:a3:db:2c:00:b7:60:ec:12:62:ae:20:7d: 71:d5:bb:68:93:de:bd:63:7b:54:60:9a:ce:28:2a:16:1b:86: 0b:91:b0:dd:b8:48:b9:b4:62:09:3e:30:fb:bb:68:f9:3d:2d: 17:02:a8:cb:15:44:01:dc:df:3e:fc:1b:81:83:4d:0c:a8:17: 4c:6e:19:c8:f9:aa:16:31:37:a9:5c:f8:c1:d1:f0:08:78:21: 2c:42:2c:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIOBrYQmEtS8TyZYkyq9hw2p1JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTEyMDYwMDI1NThaFw0yNTEyMDkwMzEwNThaMDMxMTAvBgNV BAMTKEEwMkFEMUIxNDBDRkRBRDM1MTg0NjdDNjcwMTdDNUI3NDU3RUExQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CGh8NqdidNXwjOCkpmcXInjN Xrj8QL3CXdn6b7UcW5Ns7snWvTvkRL111tUfUfDe4UXYE/loHkYcHUWepvriRAhn LV2Sa+mtclPA6HZqnJ+pbDSYSMQw/OAcsDcNDu+N3aIckvFUkr0R/RSD9F1HcBSP RzfDMvRsYwy+3evcCEPVcmk+t20jsGhOvhHcBBdUBC2MpdegNKoOP64M3YbL0Squ n9DNv3dbIDlEIJ0SyoZF4V0/cQyL7efj9cPpzah5FTzE87FOl6CVMJti520Er7Pv 6Asow7mgFQvKCJInk/JY0YUh9td/1QfLtTcoGSJ5FUMkzGt5D5wBxocUIUlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCrRsUDP2tNRhGfGcBfFt0V+oagwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt2m240nSbqbsaSSO08sLoR7/T47+63TIpL RDRuUD0EvZQAvfrKrE7k1fvuGsZwOmEd/urHoye6h4q5HMDbgqnqtPHTc+qC+8Yb be9wB5+kfvZEmW86V9U+ACQl0wD83omuNoUmels3GAMEhXPxEjzH9d/M0g28VQwl xtsoOux8iQgeug/+w+sqtnxfM0I8taano9zaCmiNhbP1ZLoWw3NamW4VUuA/gaPb LAC3YOwSYq4gfXHVu2iT3r1je1Rgms4oKhYbhguRsN24SLm0Ygk+MPu7aPk9LRcC qMsVRAHc3z78G4GDTQyoF0xuGcj5qhYxN6lc+MHR8Ah4ISxCLHk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:47 2025 by rpki-client