This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: RtwqBCQn3sDSaK0wIw0VNvNw0LV5j/t+m7tQLIvRWjo= Subject key identifier: 1E:F6:4A:8F:4B:15:3D:5B:A7:87:5F:93:D5:48:20:42:39:B3:AF:40 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 766221F6F363FF75F4A882BD48EAF0694400584B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 028C Signing time: Sat 20 Dec 2025 22:30:57 +0000 Manifest this update: Sat 20 Dec 2025 22:25:57 +0000 Manifest next update: Wed 24 Dec 2025 00:59:57 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: vlOnr8yZpCsMUe20PD6S0pdRtz5W9aq4m8Ik5fs/GE0=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:21:f6:f3:63:ff:75:f4:a8:82:bd:48:ea:f0:69:44:00:58:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Dec 20 22:25:57 2025 GMT Not After : Dec 24 00:59:57 2025 GMT Subject: CN=1EF64A8F4B153D5BA7875F93D548204239B3AF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:29:69:65:19:8f:86:20:4d:66:87:6d:4b: 8f:3f:00:1a:14:17:1d:f2:52:f8:3b:a2:5b:2d:a5: 6c:ee:bd:6c:3a:df:0c:9f:6a:52:12:ee:db:37:2c: 5d:bf:81:18:a3:a7:90:09:60:7d:29:58:b3:d0:26: ae:c1:d9:9f:ce:e1:98:b9:2c:97:e6:d3:1a:2d:63: 6f:67:a0:24:b9:c9:5e:fa:5d:72:20:9f:97:e6:55: 52:87:d5:4f:7b:20:4a:9a:ec:e1:65:8e:22:02:53: 86:a0:fe:2a:d8:d7:e3:1a:7f:21:4f:3b:4d:5f:12: 7e:98:fe:f0:65:cc:e1:f9:2f:a2:de:1b:c4:ec:67: bb:ff:68:3a:3e:99:04:aa:59:dd:18:b8:b9:ca:9f: 72:37:d1:d3:01:33:dd:cb:a9:9a:9f:e3:3a:ab:80: 1a:a8:fa:fa:fb:d5:be:18:c3:58:5b:bb:e7:db:36: 46:29:6c:15:2a:f4:00:7e:1c:30:d1:70:8c:db:dd: e6:4a:32:94:4b:69:38:8f:e2:0f:f8:b6:c8:a6:04: 2d:61:44:bd:4c:ed:eb:d9:be:e2:65:7a:03:17:7b: 7d:70:fc:1c:91:c5:5c:47:ad:1e:1d:c2:bd:c3:a5: 06:a8:4f:96:d7:d7:60:cc:fc:3f:35:b6:ad:f6:69: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F6:4A:8F:4B:15:3D:5B:A7:87:5F:93:D5:48:20:42:39:B3:AF:40 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:59:c6:10:67:60:c5:53:bf:b2:11:45:48:84:f2:7b:c3:fc: 87:04:a5:f4:bc:f1:b9:97:01:90:39:9e:4e:45:5a:c8:f1:38: 94:82:02:61:2a:9e:17:17:1d:46:06:68:25:6e:df:1f:9c:9d: c7:26:ad:f4:dd:05:df:4a:34:e4:42:ea:21:ff:61:3d:e1:eb: 20:3a:18:40:91:22:28:6d:fe:2c:30:df:0f:6e:8b:90:7e:1e: d8:d1:71:bd:bb:2e:f8:8e:cc:07:95:14:c6:1f:2a:86:d6:d1: af:2e:b0:15:a7:fb:45:74:77:f0:24:35:9f:0d:c1:7d:ff:45: 3e:35:34:db:de:ab:d0:75:6a:d2:e0:8f:cc:57:62:9d:5a:49: 3c:e2:e5:5e:01:3d:a0:85:f4:25:09:fd:ce:ac:d0:8e:c8:df: 6d:6f:a6:bd:35:b3:06:d1:d9:28:66:07:67:7d:05:bd:b1:94: 68:bb:25:80:a8:48:e6:5e:52:45:35:fc:66:f0:8e:ab:be:76: 57:d9:5b:9f:cd:d7:42:d3:49:37:11:12:b9:16:74:26:dc:b9: 9b:94:ed:0a:43:3e:6b:ad:fb:64:f5:ee:6a:20:7b:c7:21:47: c9:c9:07:97:39:25:46:c3:b5:f7:c6:42:88:d0:2c:78:22:56: 66:f4:a5:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmIh9vNj/3X0qIK9SOrwaUQAWEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTEyMjAyMjI1NTdaFw0yNTEyMjQwMDU5NTdaMDMxMTAvBgNV BAMTKDFFRjY0QThGNEIxNTNENUJBNzg3NUY5M0Q1NDgyMDQyMzlCM0FGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhSlpZRmPhiBNZodtS48/ABoU Fx3yUvg7olstpWzuvWw63wyfalIS7ts3LF2/gRijp5AJYH0pWLPQJq7B2Z/O4Zi5 LJfm0xotY29noCS5yV76XXIgn5fmVVKH1U97IEqa7OFljiICU4ag/irY1+MafyFP O01fEn6Y/vBlzOH5L6LeG8TsZ7v/aDo+mQSqWd0YuLnKn3I30dMBM93LqZqf4zqr gBqo+vr71b4Yw1hbu+fbNkYpbBUq9AB+HDDRcIzb3eZKMpRLaTiP4g/4tsimBC1h RL1M7evZvuJlegMXe31w/ByRxVxHrR4dwr3DpQaoT5bX12DM/D81tq32aUajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvZKj0sVPVunh1+T1UggQjmzr0AwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhZxhBnYMVTv7IRRUiE8nvD/IcEpfS88bmX AZA5nk5FWsjxOJSCAmEqnhcXHUYGaCVu3x+cnccmrfTdBd9KNORC6iH/YT3h6yA6 GECRIiht/iww3w9ui5B+HtjRcb27LviOzAeVFMYfKobW0a8usBWn+0V0d/AkNZ8N wX3/RT41NNveq9B1atLgj8xXYp1aSTzi5V4BPaCF9CUJ/c6s0I7I321vpr01swbR 2ShmB2d9Bb2xlGi7JYCoSOZeUkU1/Gbwjqu+dlfZW5/N10LTSTcRErkWdCbcuZuU 7QpDPmut+2T17moge8chR8nJB5c5JUbDtffGQojQLHgiVmb0pRE= -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:59 2025 by rpki-client