This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: cvRtZzqmjiBwHNu8UfU8YOnfONFU+snTXonO47MwU54= Subject key identifier: 32:E8:E1:28:92:22:DD:32:23:9E:D2:35:46:1E:E7:B2:8C:B1:F6:1F Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 1B13069A8AFF24A4CBF4B7C3778A22C773DCDE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 0277 Signing time: Sat 24 Jan 2026 20:12:18 +0000 Manifest this update: Sat 24 Jan 2026 20:07:18 +0000 Manifest next update: Wed 28 Jan 2026 02:04:18 +0000 Files and hashes: 1: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: QZ3G3/otO4LmLDsozGVr1FYUqLRmZOVsE7483iTBE8k=) 2: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg=) 4: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:13:06:9a:8a:ff:24:a4:cb:f4:b7:c3:77:8a:22:c7:73:dc:de:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Jan 24 20:07:18 2026 GMT Not After : Jan 28 02:04:18 2026 GMT Subject: CN=32E8E1289222DD32239ED235461EE7B28CB1F61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:7b:2d:be:34:ed:f9:69:7b:e2:c8:8f:54: 15:92:fa:d8:d6:98:b9:8a:c5:6b:25:6b:9a:bc:54: 99:96:18:0e:dc:2d:ee:c1:4b:5c:9a:4b:4c:48:81: bb:c6:a1:2e:b0:ca:b3:24:f0:e3:6d:80:c6:81:61: 56:90:3f:82:22:4a:9e:04:b4:3f:7d:9b:a3:d9:e8: 37:c0:ef:d9:98:db:3d:30:6c:63:f0:c2:26:6b:19: 54:98:c5:62:be:c5:c3:e1:5c:4e:89:1a:4c:a6:c0: 75:02:8d:f5:d2:82:15:ac:5c:c7:2c:93:57:ab:fa: 9b:99:61:c9:fc:51:35:18:8c:9d:a6:47:e3:93:80: 4f:6d:84:9e:14:7e:32:2a:30:3f:07:a9:43:0d:02: ff:62:6a:7b:35:f1:b5:a9:71:69:07:3c:82:7c:71: a0:04:77:5d:fe:d0:f2:98:24:f6:27:69:62:6c:d8: e0:4e:af:50:40:bb:3e:c6:68:ad:2e:98:a5:2a:27: 02:4c:4e:0a:82:15:2e:fc:92:46:40:e7:43:02:cb: 6b:10:27:2e:23:f3:81:a4:0a:1e:cc:a9:68:19:0d: e5:51:08:3f:0e:ef:97:22:12:84:9e:e3:43:71:a2: cd:b4:f3:c1:a1:d2:ea:e7:a9:81:9a:db:bf:58:59: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:E1:28:92:22:DD:32:23:9E:D2:35:46:1E:E7:B2:8C:B1:F6:1F X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:52:69:c8:dd:b1:85:db:94:25:22:6c:ea:15:69:c4:e1:f3: 93:ff:9e:45:f2:70:74:58:d2:8a:fe:f7:27:41:6c:83:69:01: f9:d8:f8:93:02:ad:3f:e1:97:33:b3:51:21:28:8c:3e:f6:27: f1:e3:70:12:21:22:1c:b6:18:49:d1:20:f1:78:85:e7:7e:48: 85:59:de:9f:09:cd:4f:e8:e2:cf:f6:b9:8a:ed:df:c6:cc:14: 39:bc:89:1c:8a:5a:84:2b:63:85:28:01:64:53:99:c3:a3:d2: 6a:c2:a7:cd:d0:d7:6d:b2:d3:45:02:84:9a:74:a3:63:ee:e1: 60:ed:db:bf:fa:57:bf:f3:ed:ac:bf:e7:57:76:a4:02:e6:df: 80:60:12:71:14:7b:8c:01:82:c8:81:55:6a:5d:28:a0:b7:d5: 34:c7:e0:a6:d7:25:80:10:84:37:0c:4c:b4:cb:9f:8c:22:7a: a6:fa:4c:0c:60:53:5a:5a:5a:28:cf:9c:d7:cd:91:e7:fd:26: 3f:e0:73:fc:2c:8f:29:4b:de:d4:7c:ef:de:b5:2e:37:01:2a: c6:9d:c9:69:1a:4e:fb:bc:0e:51:31:11:d7:a8:45:b2:17:d5: 5f:8f:2a:29:87:c7:f7:ea:d3:52:c5:20:cb:f4:e8:61:a7:3d: ec:50:1a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxMGmor/JKTL9LfDd4oix3Pc3lgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNjAxMjQyMDA3MThaFw0yNjAxMjgwMjA0MThaMDMxMTAvBgNV BAMTKDMyRThFMTI4OTIyMkREMzIyMzlFRDIzNTQ2MUVFN0IyOENCMUY2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVC3stvjTt+Wl74siPVBWS+tjW mLmKxWsla5q8VJmWGA7cLe7BS1yaS0xIgbvGoS6wyrMk8ONtgMaBYVaQP4IiSp4E tD99m6PZ6DfA79mY2z0wbGPwwiZrGVSYxWK+xcPhXE6JGkymwHUCjfXSghWsXMcs k1er+puZYcn8UTUYjJ2mR+OTgE9thJ4UfjIqMD8HqUMNAv9ians18bWpcWkHPIJ8 caAEd13+0PKYJPYnaWJs2OBOr1BAuz7GaK0umKUqJwJMTgqCFS78kkZA50MCy2sQ Jy4j84GkCh7MqWgZDeVRCD8O75ciEoSe40Nxos2088Gh0urnqYGa279YWXoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMujhKJIi3TIjntI1Rh7nsoyx9h8wHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlSacjdsYXblCUibOoVacTh85P/nkXycHRY 0or+9ydBbINpAfnY+JMCrT/hlzOzUSEojD72J/HjcBIhIhy2GEnRIPF4hed+SIVZ 3p8JzU/o4s/2uYrt38bMFDm8iRyKWoQrY4UoAWRTmcOj0mrCp83Q122y00UChJp0 o2Pu4WDt27/6V7/z7ay/51d2pALm34BgEnEUe4wBgsiBVWpdKKC31TTH4KbXJYAQ hDcMTLTLn4wieqb6TAxgU1paWijPnNfNkef9Jj/gc/wsjylL3tR87961LjcBKsad yWkaTvu8DlExEdeoRbIX1V+PKimHx/fq01LFIMv06GGnPexQGmw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:14 2026 by rpki-client