This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: bIrJ7RY+HR+Wl3mn3hBlpTZawOz/vj1Kn60QzW56VZg= Subject key identifier: CD:91:40:9B:E5:80:5D:B5:0B:8B:A1:F7:12:1F:06:94:D8:90:18:08 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 3295E1077A8E9C2F432B5C6371D3F759B80E4790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0251 Signing time: Sat 06 Dec 2025 03:51:16 +0000 Manifest this update: Sat 06 Dec 2025 03:46:16 +0000 Manifest next update: Tue 09 Dec 2025 07:08:16 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: xhN+mA6VJ9b5NARQxmryTKAwqgGTAl+QdFEUbW7KEr8=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:95:e1:07:7a:8e:9c:2f:43:2b:5c:63:71:d3:f7:59:b8:0e:47:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Dec 6 03:46:16 2025 GMT Not After : Dec 9 07:08:16 2025 GMT Subject: CN=CD91409BE5805DB50B8BA1F7121F0694D8901808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:8a:63:03:5a:88:cb:3a:79:73:19:7b:08: 4e:4d:66:11:a1:c2:7b:07:b3:34:89:d4:f1:f6:cd: 9f:3d:c5:26:ac:8d:3c:c0:52:fe:c2:10:04:39:66: 21:8d:67:26:3d:24:92:1e:86:2b:6f:63:d7:1a:fb: ac:6d:4f:e3:70:f7:e1:59:4d:e2:30:30:06:c8:bc: 68:e2:30:33:3d:55:40:b4:91:48:20:bd:8b:a4:65: e1:1a:49:b1:19:a8:cd:f4:de:26:8f:fe:d2:f9:26: a4:98:44:9c:e7:db:ee:b1:e7:18:cd:ee:04:ee:7c: 4a:5b:56:76:c9:e4:e0:15:86:82:d9:53:06:16:19: 4c:79:2c:ea:08:8d:c5:7b:07:a0:f1:92:60:96:ad: 62:59:38:49:52:f5:ca:3f:a9:11:32:ed:e1:15:05: d5:37:0b:08:a8:47:da:c9:27:1b:50:7a:fa:ed:ff: 80:9b:db:54:4e:9e:d8:1e:21:32:f9:b5:f1:a5:1b: df:6e:6c:d2:58:4b:26:b5:32:66:b7:e8:e5:a3:c3: b4:00:4a:fa:78:12:f3:69:e4:e6:ed:49:99:d3:fa: 93:c8:55:d3:c0:5a:8f:23:bf:3b:6a:af:a8:a2:74: b7:90:57:e1:77:5f:0f:e3:dc:e5:a6:6b:eb:ab:22: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:40:9B:E5:80:5D:B5:0B:8B:A1:F7:12:1F:06:94:D8:90:18:08 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:15:c2:5f:93:e6:6e:aa:bd:21:b5:f1:ae:81:5e:15:db:69: 78:84:38:4e:fc:0a:59:2e:f6:b1:81:79:75:1e:d1:bf:67:61: 72:16:de:5f:42:66:b6:0a:ba:27:49:13:d6:4d:eb:49:19:fb: 79:f9:9d:25:bb:ef:a8:bb:9e:b5:53:0c:c0:85:c7:33:ac:a5: e5:5f:da:ae:db:9c:52:01:cc:f0:1a:b6:f2:5a:2e:d0:60:4b: 26:a2:d1:1e:9c:db:6e:6b:1c:13:7b:b9:99:df:72:fd:f4:94: 93:7a:b2:d9:a5:ab:77:89:93:3a:dd:ff:db:83:2d:5e:c4:fa: f3:da:80:b1:1d:98:d2:a9:ef:a1:bf:9f:e7:ad:e7:6d:d2:3e: 8e:85:35:d8:88:e1:77:31:bf:d1:90:61:06:1a:91:0b:61:f7: 96:83:7b:d0:31:68:5d:dd:84:96:81:8f:67:db:40:ce:b6:c7: 8b:56:e1:50:95:b3:74:b7:d0:79:bf:12:8a:54:17:e1:aa:19: dc:28:ed:51:51:e6:9e:15:4b:54:96:fd:91:88:4c:b4:8f:1d: af:e9:ee:69:69:30:e1:77:39:f6:6e:7c:2f:ca:09:4e:96:54: 12:48:63:db:40:f0:97:52:92:2e:f3:97:47:6c:23:b8:4d:4e: 60:eb:2d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpXhB3qOnC9DK1xjcdP3WbgOR5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEyMDYwMzQ2MTZaFw0yNTEyMDkwNzA4MTZaMDMxMTAvBgNV BAMTKENEOTE0MDlCRTU4MDVEQjUwQjhCQTFGNzEyMUYwNjk0RDg5MDE4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrTIpjA1qIyzp5cxl7CE5NZhGh wnsHszSJ1PH2zZ89xSasjTzAUv7CEAQ5ZiGNZyY9JJIehitvY9ca+6xtT+Nw9+FZ TeIwMAbIvGjiMDM9VUC0kUggvYukZeEaSbEZqM303iaP/tL5JqSYRJzn2+6x5xjN 7gTufEpbVnbJ5OAVhoLZUwYWGUx5LOoIjcV7B6DxkmCWrWJZOElS9co/qREy7eEV BdU3CwioR9rJJxtQevrt/4Cb21ROntgeITL5tfGlG99ubNJYSya1Mma36OWjw7QA Svp4EvNp5ObtSZnT+pPIVdPAWo8jvztqr6iidLeQV+F3Xw/j3OWma+urIj0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZFAm+WAXbULi6H3Eh8GlNiQGAgwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsVwl+T5m6qvSG18a6BXhXbaXiEOE78Clku 9rGBeXUe0b9nYXIW3l9CZrYKuidJE9ZN60kZ+3n5nSW776i7nrVTDMCFxzOspeVf 2q7bnFIBzPAatvJaLtBgSyai0R6c225rHBN7uZnfcv30lJN6stmlq3eJkzrd/9uD LV7E+vPagLEdmNKp76G/n+et523SPo6FNdiI4Xcxv9GQYQYakQth95aDe9AxaF3d hJaBj2fbQM62x4tW4VCVs3S30Hm/EopUF+GqGdwo7VFR5p4VS1SW/ZGITLSPHa/p 7mlpMOF3OfZufC/KCU6WVBJIY9tA8JdSki7zl0dsI7hNTmDrLcw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:36 2025 by rpki-client