This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: 9lSUJVRkTiyvn2CFljFyb8JXu7L58p5zYj+LH+/LqTY= Subject key identifier: 54:87:A0:96:4A:01:C2:47:B5:DC:4F:41:FA:54:CD:DD:49:45:B4:55 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 6674456D6F8CBAC89C2BD343BBE0BC310CE6E3E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 0261 Signing time: Sat 06 Dec 2025 04:22:10 +0000 Manifest this update: Sat 06 Dec 2025 04:17:10 +0000 Manifest next update: Tue 09 Dec 2025 15:17:10 +0000 Files and hashes: 1: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw=) 3: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0=) 4: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: SC+zKBrGEHkFsCx7YB6xeqScTBjI3Oc1r7EMpHlD1qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:74:45:6d:6f:8c:ba:c8:9c:2b:d3:43:bb:e0:bc:31:0c:e6:e3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Dec 6 04:17:10 2025 GMT Not After : Dec 9 15:17:10 2025 GMT Subject: CN=5487A0964A01C247B5DC4F41FA54CDDD4945B455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:19:55:40:ed:08:08:64:9d:07:f5:23:8a: 5b:19:0a:9d:1c:44:db:4a:b0:89:a4:30:94:47:2d: cb:92:a8:c9:ce:fb:bb:2c:e3:97:1c:8c:65:57:16: e6:cd:42:0a:6e:aa:13:e2:d9:23:ae:62:9a:ad:2b: 9f:0c:c8:72:31:a8:f9:b3:c8:85:b0:18:53:9d:62: 61:c5:13:25:9a:9a:a6:2a:fb:a2:47:e1:74:d4:ef: 2d:38:0e:42:fe:94:3b:f1:5d:b5:bd:a5:ab:21:b6: a6:9b:b0:9c:09:a2:a4:90:7f:6a:a4:c5:f4:26:11: bd:50:ec:97:91:1b:92:a6:ec:39:39:9f:58:97:97: 95:c2:34:d5:4c:d1:5c:c1:eb:4c:c3:d0:81:08:e2: b3:06:92:ed:43:c2:34:7c:7a:a4:1d:1f:cb:8a:cf: c9:f4:5d:2c:58:13:bf:96:e5:41:82:34:f5:5a:25: 2d:6e:a8:01:58:ce:b8:bc:66:5b:12:a5:6b:f8:2f: 00:ed:92:fb:c5:4f:26:61:91:e2:6f:03:0c:5c:7f: 5e:e2:7b:e3:6c:d4:25:fa:af:68:2a:0e:a8:b0:35: a0:dd:59:89:8e:f7:9a:d9:14:99:2f:f3:78:1e:1e: 68:d9:91:f9:5b:59:01:97:dd:10:60:5f:f0:0f:c0: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:87:A0:96:4A:01:C2:47:B5:DC:4F:41:FA:54:CD:DD:49:45:B4:55 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e1:be:09:de:03:27:63:14:3e:b9:2a:58:28:a4:b8:a9:fb: e0:52:af:b2:a0:da:d7:b4:c7:f5:83:e8:c6:07:ad:9b:a4:07: c3:1c:be:c7:89:b8:68:35:98:93:24:9a:61:ac:66:9c:ae:aa: 28:f1:a3:8c:5d:21:99:f8:1c:04:39:14:be:6a:c9:aa:be:cb: d0:64:f9:13:a4:34:b8:f1:1b:74:6b:a5:15:e3:11:bb:f3:8d: 41:d2:a2:c7:7c:42:41:b7:8d:52:ee:61:8f:2f:ae:b8:36:60: 2c:0f:62:55:d8:9e:7b:c7:fb:d1:f0:cd:db:9d:c8:e3:fa:4c: 3f:11:da:d2:0c:d2:93:b3:b6:d0:a3:0c:54:fe:53:e9:37:b0: b0:c1:21:f2:d7:e6:03:d2:39:83:a6:06:ae:85:a5:d5:78:3a: e3:8e:a3:82:f9:c9:b9:7d:92:1d:de:26:b2:59:3c:a9:59:82: ae:20:75:db:d5:76:74:aa:ae:52:25:da:22:68:00:f4:9c:45: 58:c1:d2:21:54:c3:aa:37:3a:2c:bd:0d:a9:e4:f5:ca:22:04: 7e:42:2e:9b:3e:bc:79:0c:da:0e:24:3e:15:48:d9:c2:2b:f6: 6b:3d:08:2f:d2:bd:6e:c4:38:63:f0:f0:ab:00:6b:9b:23:91: c6:24:a0:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnRFbW+MusicK9NDu+C8MQzm4+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTEyMDYwNDE3MTBaFw0yNTEyMDkxNTE3MTBaMDMxMTAvBgNV BAMTKDU0ODdBMDk2NEEwMUMyNDdCNURDNEY0MUZBNTRDRERENDk0NUI0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/BlVQO0ICGSdB/UjilsZCp0c RNtKsImkMJRHLcuSqMnO+7ss45ccjGVXFubNQgpuqhPi2SOuYpqtK58MyHIxqPmz yIWwGFOdYmHFEyWamqYq+6JH4XTU7y04DkL+lDvxXbW9pashtqabsJwJoqSQf2qk xfQmEb1Q7JeRG5Km7Dk5n1iXl5XCNNVM0VzB60zD0IEI4rMGku1DwjR8eqQdH8uK z8n0XSxYE7+W5UGCNPVaJS1uqAFYzri8ZlsSpWv4LwDtkvvFTyZhkeJvAwxcf17i e+Ns1CX6r2gqDqiwNaDdWYmO95rZFJkv83geHmjZkflbWQGX3RBgX/APwIIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVIeglkoBwke13E9B+lTN3UlFtFUwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/hvgneAydjFD65KlgopLip++BSr7Kg2te0 x/WD6MYHrZukB8McvseJuGg1mJMkmmGsZpyuqijxo4xdIZn4HAQ5FL5qyaq+y9Bk +ROkNLjxG3RrpRXjEbvzjUHSosd8QkG3jVLuYY8vrrg2YCwPYlXYnnvH+9Hwzdud yOP6TD8R2tIM0pOzttCjDFT+U+k3sLDBIfLX5gPSOYOmBq6FpdV4OuOOo4L5ybl9 kh3eJrJZPKlZgq4gddvVdnSqrlIl2iJoAPScRVjB0iFUw6o3Oiy9Dank9coiBH5C Lps+vHkM2g4kPhVI2cIr9ms9CC/SvW7EOGPw8KsAa5sjkcYkoII= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:01 2025 by rpki-client