This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: vuJgQpl2s13+Nff3mKrh3lpkvxDChazBuDQwVW/B7I8= Subject key identifier: 0B:42:30:16:39:05:76:B2:DB:43:93:E9:F2:AE:F3:D3:38:1F:77:94 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 391C35FBCCBCB175C852A6D1C3034BE125CFDDEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 055B Signing time: Wed 17 Dec 2025 16:21:50 +0000 Manifest this update: Wed 17 Dec 2025 16:16:50 +0000 Manifest next update: Sat 20 Dec 2025 21:03:50 +0000 Files and hashes: 1: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=) 2: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) 3: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 4: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: x4Ft9pNOIARe1Gqy5w+wWOglth/NVzsxtwvWLAxCoD8=) 5: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) 6: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 7: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 8: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=) 9: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 10: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 11: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 12: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 13: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 14: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 15: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 16: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=) 17: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 18: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 19: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) 20: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) 21: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 22: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1c:35:fb:cc:bc:b1:75:c8:52:a6:d1:c3:03:4b:e1:25:cf:dd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Dec 17 16:16:50 2025 GMT Not After : Dec 20 21:03:50 2025 GMT Subject: CN=0B423016390576B2DB4393E9F2AEF3D3381F7794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:bd:ea:37:52:0e:01:e8:be:41:da:7d:73: 7e:3c:6b:f7:c7:84:4b:38:08:cc:25:e8:57:06:8c: 38:3c:a2:be:62:2f:d3:d5:d0:f0:47:4d:68:75:7f: 87:da:66:28:04:a5:d6:5c:e6:67:88:8b:87:aa:50: b7:2b:1d:a2:95:2e:9d:d9:dc:d6:18:c6:d2:fa:b9: 11:98:b8:cf:84:9c:6c:9c:32:f7:84:92:08:bd:73: a1:21:9c:cd:0d:7b:83:36:a0:bb:5d:f8:92:c2:67: 99:02:f5:f1:0d:53:7e:8d:a2:e0:ad:73:0c:47:51: 40:e8:2f:8e:e8:ba:3d:d2:55:fb:1f:55:fe:b8:b9: f2:af:fe:9e:50:54:bf:f0:8d:d4:bc:d7:b1:95:88: 54:4b:36:e6:ec:c7:ac:b5:74:34:50:92:d1:76:5f: 1b:e8:3f:b7:9f:0d:ec:5d:c8:4a:0f:c2:4f:65:33: 58:8a:2b:c9:25:44:64:55:1c:72:18:30:fc:d6:d6: 20:1d:ad:31:d4:01:8a:64:ff:95:cf:a0:a5:8c:ca: c4:b5:44:90:2d:4d:b1:27:c2:e6:93:56:6b:4d:a0: 0f:75:83:7a:f2:fb:ff:30:e6:87:75:82:75:96:e2: ce:ea:ec:bb:71:47:6d:6d:c3:ee:2c:de:1c:fd:0c: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:30:16:39:05:76:B2:DB:43:93:E9:F2:AE:F3:D3:38:1F:77:94 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f7:67:9d:d4:16:04:c8:25:af:51:d6:ba:da:8a:9a:48:cb: 88:eb:61:bc:6a:d6:f3:4d:ae:c7:02:de:79:da:cf:81:3b:2c: b2:24:93:0d:06:a8:7a:df:20:31:81:17:54:5c:14:17:8a:47: c7:6e:4e:70:4a:69:c1:c0:7d:03:dc:8b:d1:24:1f:38:a1:34: d7:83:60:04:24:33:c9:82:a8:e0:ed:0f:65:9d:d9:ef:61:b1: 2c:d0:d6:2b:93:c6:f8:4b:c0:26:29:0e:7f:4f:ca:d4:f3:7a: 6f:ea:e4:f1:92:18:4a:ee:f9:ea:64:66:e7:ee:c1:c0:bd:b5: 46:dd:99:e4:f0:9d:33:70:1d:e3:39:23:bd:88:03:c6:39:9e: 57:fb:3f:94:9b:0d:dd:50:28:41:1d:29:30:c6:34:d6:c8:cf: 41:ba:cd:5f:33:7a:b2:99:3f:85:5b:2f:4f:e1:8a:1c:54:e5: df:3e:d4:b7:06:3a:2d:25:f0:bc:b9:44:98:75:c5:c5:da:b0: 01:2e:7e:3d:2e:80:4a:b2:1a:c7:e2:9f:95:4d:8f:d9:7e:1e: 3f:fb:94:cc:af:ca:d6:9c:39:86:eb:1c:e6:3c:53:24:73:4e: 4d:70:5c:bf:60:02:a0:45:4b:83:b2:21:7e:3b:cf:0c:1d:a1: bc:de:94:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORw1+8y8sXXIUqbRwwNL4SXP3e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTEyMTcxNjE2NTBaFw0yNTEyMjAyMTAzNTBaMDMxMTAvBgNV BAMTKDBCNDIzMDE2MzkwNTc2QjJEQjQzOTNFOUYyQUVGM0QzMzgxRjc3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowL3qN1IOAei+Qdp9c348a/fH hEs4CMwl6FcGjDg8or5iL9PV0PBHTWh1f4faZigEpdZc5meIi4eqULcrHaKVLp3Z 3NYYxtL6uRGYuM+EnGycMveEkgi9c6EhnM0Ne4M2oLtd+JLCZ5kC9fENU36NouCt cwxHUUDoL47ouj3SVfsfVf64ufKv/p5QVL/wjdS817GViFRLNubsx6y1dDRQktF2 XxvoP7efDexdyEoPwk9lM1iKK8klRGRVHHIYMPzW1iAdrTHUAYpk/5XPoKWMysS1 RJAtTbEnwuaTVmtNoA91g3ry+/8w5od1gnWW4s7q7LtxR21tw+4s3hz9DGLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0IwFjkFdrLbQ5Pp8q7z0zgfd5QwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA33Z53UFgTIJa9R1rraippIy4jrYbxq1vNN rscC3nnaz4E7LLIkkw0GqHrfIDGBF1RcFBeKR8duTnBKacHAfQPci9EkHzihNNeD YAQkM8mCqODtD2Wd2e9hsSzQ1iuTxvhLwCYpDn9PytTzem/q5PGSGEru+epkZufu wcC9tUbdmeTwnTNwHeM5I72IA8Y5nlf7P5SbDd1QKEEdKTDGNNbIz0G6zV8zerKZ P4VbL0/hihxU5d8+1LcGOi0l8Ly5RJh1xcXasAEufj0ugEqyGsfin5VNj9l+Hj/7 lMyvytacOYbrHOY8UyRzTk1wXL9gAqBFS4OyIX47zwwdobzelC0= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:14 2025 by rpki-client