This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: Zw6ec0amJT3l7RN+B874PDmM/JoF3zh1K8DpF9qy9sk= Subject key identifier: C9:81:95:97:43:93:5A:1B:C5:BE:CE:61:5B:D7:A2:C6:A1:9D:4B:6F Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 17918D783C13C44258D9978E24683161366DF1D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 028E Signing time: Sat 06 Dec 2025 00:11:14 +0000 Manifest this update: Sat 06 Dec 2025 00:06:14 +0000 Manifest next update: Tue 09 Dec 2025 05:28:14 +0000 Files and hashes: 1: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: cgRSqQSgtfQQo0EZGZoxh9ZyIjAeZuK9GFApNU9FlFw=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=) 3: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: T9YXzECK/+yPsc0MjXlDkJh+Di90dnJO766syYdRfEY=) 4: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: MmuXAKKjfDSx5uMJ92RoI47O3gaQ+ApBdube+8uCMpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:91:8d:78:3c:13:c4:42:58:d9:97:8e:24:68:31:61:36:6d:f1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Dec 6 00:06:14 2025 GMT Not After : Dec 9 05:28:14 2025 GMT Subject: CN=C981959743935A1BC5BECE615BD7A2C6A19D4B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:f7:05:21:39:cb:36:48:e7:0f:2b:58:67: d8:c3:09:40:f3:26:b3:40:ec:b1:02:8e:76:6d:82: 6c:53:82:b3:1d:c4:18:14:43:28:fd:49:15:dc:96: 45:48:c2:4c:fb:d8:49:a3:1a:7f:69:ca:5e:af:18: 22:5d:96:69:92:02:f7:44:6c:9c:48:b7:ce:b3:49: 53:f1:d7:6c:fb:86:de:95:74:65:f4:60:9a:56:e2: 5f:81:f7:5f:70:eb:1b:85:5e:45:d6:9e:84:6e:5a: b5:4a:5c:e6:89:f8:a6:0f:ad:fe:f1:d6:56:af:43: ae:ee:ec:19:31:34:97:ac:00:99:fd:25:14:88:dd: 13:7f:cd:7f:c7:52:de:16:6c:82:a8:63:e8:3d:4e: 60:ca:a2:f8:74:29:8d:ee:75:3f:9f:5e:a3:bd:55: a7:de:7a:98:58:fe:cb:9b:15:60:37:00:02:d8:9b: 3c:22:44:4d:cb:41:6d:d8:6d:a9:ba:ff:7a:0e:8e: 00:04:95:b5:2b:6d:3d:92:44:3a:8f:70:3a:67:18: f8:4b:48:4c:f3:46:e8:06:87:29:46:02:38:47:c7: fe:51:af:11:40:b5:4b:4f:f8:39:b5:48:68:76:66: a2:7b:51:45:88:e7:59:7e:1d:32:08:65:8d:39:67: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:81:95:97:43:93:5A:1B:C5:BE:CE:61:5B:D7:A2:C6:A1:9D:4B:6F X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9d:de:5d:39:e9:8d:8c:f5:75:ff:38:81:d5:87:cc:e3:fc: e9:1f:91:af:83:98:e6:5d:1d:e8:61:e1:1b:b2:c1:88:55:73: 56:91:7b:4b:0d:97:20:58:50:99:4e:af:98:06:3c:20:cd:ac: 3a:89:89:d6:e6:9b:95:c4:58:0d:9b:7d:62:91:20:46:7f:87: 46:35:76:99:dc:7a:27:04:49:0f:ea:b2:11:ea:a3:7c:0e:41: 7a:7d:5f:9a:6d:48:48:42:06:a9:58:cb:e0:c4:53:ca:eb:a2: 1e:7d:5d:42:38:0e:7b:d0:98:4d:31:b2:3a:41:26:6d:21:6d: ed:dc:81:31:8d:a1:ea:9e:bc:37:39:c1:5c:c7:d9:a6:fd:c3: 89:d9:2f:13:60:71:03:52:75:c9:5f:e9:54:83:88:ed:13:49: c0:ed:91:fa:0f:ce:c4:c9:48:b9:78:92:31:fe:59:e5:3d:98: 83:43:f0:71:67:06:de:63:7c:15:f7:45:3b:67:21:8b:52:85: 33:90:4f:27:34:42:50:f1:3e:5d:15:e9:87:93:61:7a:79:1c: e5:d2:7d:8a:48:fc:cd:bd:b2:83:6c:bd:c9:7a:c9:65:cc:53: 03:dc:92:dd:d3:ed:cb:3e:1f:a2:44:1c:a7:11:a1:ed:ed:0a: 05:a6:4d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5GNeDwTxEJY2ZeOJGgxYTZt8dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNTEyMDYwMDA2MTRaFw0yNTEyMDkwNTI4MTRaMDMxMTAvBgNV BAMTKEM5ODE5NTk3NDM5MzVBMUJDNUJFQ0U2MTVCRDdBMkM2QTE5RDRCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMfcFITnLNkjnDytYZ9jDCUDz JrNA7LECjnZtgmxTgrMdxBgUQyj9SRXclkVIwkz72EmjGn9pyl6vGCJdlmmSAvdE bJxIt86zSVPx12z7ht6VdGX0YJpW4l+B919w6xuFXkXWnoRuWrVKXOaJ+KYPrf7x 1lavQ67u7BkxNJesAJn9JRSI3RN/zX/HUt4WbIKoY+g9TmDKovh0KY3udT+fXqO9 VafeephY/subFWA3AALYmzwiRE3LQW3Ybam6/3oOjgAElbUrbT2SRDqPcDpnGPhL SEzzRugGhylGAjhHx/5RrxFAtUtP+Dm1SGh2ZqJ7UUWI51l+HTIIZY05Z4InAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYGVl0OTWhvFvs5hW9eixqGdS28wHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqd3l056Y2M9XX/OIHVh8zj/Okfka+DmOZd Hehh4RuywYhVc1aRe0sNlyBYUJlOr5gGPCDNrDqJidbmm5XEWA2bfWKRIEZ/h0Y1 dpnceicESQ/qshHqo3wOQXp9X5ptSEhCBqlYy+DEU8rroh59XUI4DnvQmE0xsjpB Jm0hbe3cgTGNoeqevDc5wVzH2ab9w4nZLxNgcQNSdclf6VSDiO0TScDtkfoPzsTJ SLl4kjH+WeU9mIND8HFnBt5jfBX3RTtnIYtShTOQTyc0QlDxPl0V6YeTYXp5HOXS fYpI/M29soNsvcl6yWXMUwPckt3T7cs+H6JEHKcRoe3tCgWmTfs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:12 2025 by rpki-client