This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: H4Km3mT+R2j+HOhJyI3XLJk5o+gLoldYEZ+RirO6w6Y= Subject key identifier: 83:94:65:83:0C:D5:5D:FC:95:49:34:C0:BD:D3:C7:06:75:72:A4:0F Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 63D45587F15EBEB0A0FA733340B2E002FA64AC2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: 010D Signing time: Tue 23 Dec 2025 16:52:41 +0000 Manifest this update: Tue 23 Dec 2025 16:47:41 +0000 Manifest next update: Sat 27 Dec 2025 02:23:41 +0000 Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: X/c/xMfNCm7aJCe0YhyB6q+mJrBMJI87A6H0Qgp3334=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d4:55:87:f1:5e:be:b0:a0:fa:73:33:40:b2:e0:02:fa:64:ac:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Dec 23 16:47:41 2025 GMT Not After : Dec 27 02:23:41 2025 GMT Subject: CN=839465830CD55DFC954934C0BDD3C7067572A40F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:95:3b:cf:0c:cb:d6:b6:94:96:fc:e3:5a: e9:6d:d5:75:58:ca:7c:77:dd:5f:a7:47:50:94:b0: 07:41:02:d6:54:bf:53:b3:7a:be:81:31:b3:9d:94: 62:10:ea:b1:f9:d9:20:3e:81:7d:1a:85:f6:59:7a: 12:48:b6:25:81:61:75:21:31:46:f9:32:5d:17:66: 5c:2a:6a:2b:49:d3:23:01:d8:22:4b:86:d8:d0:50: ad:11:a4:34:2a:f8:a1:c6:54:d7:99:79:6a:8c:44: 62:2c:37:15:9c:29:ed:e9:23:29:80:25:74:7e:41: d6:cb:55:17:2d:89:8e:d1:98:fe:ff:44:7b:29:14: b7:03:bb:42:68:52:9f:ae:db:16:df:6e:44:7f:15: b7:c3:99:23:3b:5f:2b:6d:97:97:b5:12:85:86:95: 81:6a:44:b2:e8:42:5c:54:df:3a:ca:43:3c:4c:a8: 3b:63:a7:b2:8f:e6:fe:67:a0:64:81:4b:cf:79:0f: 01:3f:62:02:18:c2:34:4e:de:c3:a4:ea:33:f8:54: ca:21:c6:15:c0:c9:39:d6:a1:16:94:ec:5a:88:6a: 41:17:89:22:79:0b:6e:45:4c:f8:ce:e4:4d:6d:bd: 2c:14:42:f1:eb:57:43:6d:f8:a6:bd:6f:ef:71:fc: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:94:65:83:0C:D5:5D:FC:95:49:34:C0:BD:D3:C7:06:75:72:A4:0F X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1a:8a:f9:fd:a6:dc:70:b2:c4:89:aa:c7:81:f9:06:51:3b: f0:01:a8:74:b6:e1:17:ee:f2:2d:e9:1c:2b:e3:6d:5e:3f:06: 25:0f:8a:10:bd:ed:c3:4b:ae:8e:7b:69:b2:9a:18:f9:d4:56: 13:02:eb:8b:b8:19:00:be:c4:16:88:86:93:e7:8c:16:98:a0: 2b:45:a1:5e:79:7c:dc:53:53:52:44:0d:d6:25:1f:86:a9:b7: 6d:c9:3d:28:cb:78:ce:13:bb:c7:45:54:b3:7f:3d:e6:22:ee: 5f:b3:88:5b:d0:4d:4e:df:4f:91:10:83:9a:2c:24:08:00:31: fe:f2:46:de:5d:7c:c8:37:f4:6b:75:e3:59:d1:ce:c8:0e:e5: bb:fc:d9:7a:5d:9b:3b:aa:04:23:9c:ea:a7:96:80:e0:19:6c: c1:f8:84:51:5e:e0:64:4c:54:1c:40:b1:04:5a:bb:a6:d5:ff: b4:13:e9:4c:b7:f5:df:5b:b7:0a:1c:4d:a5:0e:a0:89:c0:b7: b5:74:05:3d:f0:fe:4e:db:f4:ee:2a:d1:e5:86:c9:13:f4:d9: 02:8f:38:19:82:55:0d:91:07:9b:0e:cf:7f:7e:c0:d0:50:91: 5b:95:b0:23:98:a8:0c:9c:06:63:6a:85:0c:74:e7:06:cf:e2: b4:3e:58:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9RVh/FevrCg+nMzQLLgAvpkrC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTEyMjMxNjQ3NDFaFw0yNTEyMjcwMjIzNDFaMDMxMTAvBgNV BAMTKDgzOTQ2NTgzMENENTVERkM5NTQ5MzRDMEJERDNDNzA2NzU3MkE0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeM5U7zwzL1raUlvzjWult1XVY ynx33V+nR1CUsAdBAtZUv1Ozer6BMbOdlGIQ6rH52SA+gX0ahfZZehJItiWBYXUh MUb5Ml0XZlwqaitJ0yMB2CJLhtjQUK0RpDQq+KHGVNeZeWqMRGIsNxWcKe3pIymA JXR+QdbLVRctiY7RmP7/RHspFLcDu0JoUp+u2xbfbkR/FbfDmSM7Xyttl5e1EoWG lYFqRLLoQlxU3zrKQzxMqDtjp7KP5v5noGSBS895DwE/YgIYwjRO3sOk6jP4VMoh xhXAyTnWoRaU7FqIakEXiSJ5C25FTPjO5E1tvSwUQvHrV0Nt+Ka9b+9x/EkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5RlgwzVXfyVSTTAvdPHBnVypA8wHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0aivn9ptxwssSJqseB+QZRO/ABqHS24Rfu 8i3pHCvjbV4/BiUPihC97cNLro57abKaGPnUVhMC64u4GQC+xBaIhpPnjBaYoCtF oV55fNxTU1JEDdYlH4apt23JPSjLeM4Tu8dFVLN/PeYi7l+ziFvQTU7fT5EQg5os JAgAMf7yRt5dfMg39Gt141nRzsgO5bv82XpdmzuqBCOc6qeWgOAZbMH4hFFe4GRM VBxAsQRau6bV/7QT6Uy39d9btwocTaUOoInAt7V0BT3w/k7b9O4q0eWGyRP02QKP OBmCVQ2RB5sOz39+wNBQkVuVsCOYqAycBmNqhQx05wbP4rQ+WPg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:55 2025 by rpki-client