This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft File: 85735A4922D529215199E6F4D6829DF68512E117.mft (raw, json) Hash identifier: 3goxyTTaKW47lu3j+pjMQQg1ZYLLaf86LAnwZfZFXLo= Subject key identifier: 4D:BC:C1:AF:A7:8C:FA:41:4B:40:48:CC:B9:18:0F:DE:FF:30:F9:4B Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 21307758479C01ABDF5EB43E5D353FF6DCF149BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft Manifest number: 010D Signing time: Fri 19 Dec 2025 12:13:39 +0000 Manifest this update: Fri 19 Dec 2025 12:08:39 +0000 Manifest next update: Mon 22 Dec 2025 20:52:39 +0000 Files and hashes: 1: 85735A4922D529215199E6F4D6829DF68512E117.crl (hash: On/dxNB4fqS7+IXOq6wlRuN8/sXmk0BX0ailt9FbQ3E=) 2: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: ZYRFgg3YsM3yKUn62KsbkyrpaJzgLMKU6Z815DCOnrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:30:77:58:47:9c:01:ab:df:5e:b4:3e:5d:35:3f:f6:dc:f1:49:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Dec 19 12:08:39 2025 GMT Not After : Dec 22 20:52:39 2025 GMT Subject: CN=4DBCC1AFA78CFA414B4048CCB9180FDEFF30F94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:50:3a:23:86:7f:26:70:90:8a:ac:46:81: c9:7a:ca:22:01:84:a3:10:77:ba:2a:67:1d:9b:19: 6c:0f:7d:fc:9a:fb:df:4a:e2:8f:91:8b:60:a7:8d: 51:c8:e8:1b:dd:b2:9f:ce:b1:a1:8f:77:dc:2c:68: af:52:43:8e:3f:74:15:25:dd:c0:f9:64:52:b2:20: aa:bb:55:d1:38:f5:34:08:ad:4f:da:33:1f:b4:fc: a1:50:8e:1e:b8:96:4d:ee:d4:ae:44:53:56:0c:4d: c2:d0:fc:ea:9a:27:bd:de:a0:37:fc:e8:bb:b6:25: 1a:5f:b5:2c:a8:7a:5e:e8:7c:98:79:0e:be:8b:c8: 01:ef:41:00:bf:fd:c1:f1:72:4f:a7:8a:f7:54:70: a3:f9:f4:38:9a:7e:c3:df:83:4d:be:73:75:49:b5: 2e:3b:35:da:49:dc:17:32:ef:42:9c:cd:d3:f4:62: be:0d:b6:ab:b9:b4:ae:f5:21:0c:3c:bd:65:23:a5: 57:10:9d:5e:10:40:07:99:8c:b1:20:e4:97:a7:e5: b1:c6:b5:f0:ce:a8:e3:04:8e:09:33:f4:9a:51:de: 9f:eb:3f:dc:bc:24:d0:62:ea:4c:29:ee:97:59:02: 4b:23:d0:f0:07:3d:2b:2a:8b:b4:66:0d:a4:86:54: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BC:C1:AF:A7:8C:FA:41:4B:40:48:CC:B9:18:0F:DE:FF:30:F9:4B X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dd:19:51:34:33:a3:3a:93:5d:68:47:29:99:00:3b:ef:c3: 19:ff:97:e2:50:77:4d:06:f1:b8:36:47:ae:ff:7d:53:3d:fb: 07:fd:c5:a1:95:01:54:6b:4c:75:54:b2:94:30:1e:d8:ae:0d: 19:10:5b:17:8b:5d:c7:31:53:70:4b:b7:87:c2:1f:5a:cd:56: 84:3f:9d:7a:b0:ff:1a:59:4b:b6:ac:bd:47:78:e8:f5:84:ac: b9:f7:02:6a:8e:23:de:fc:de:e6:60:af:49:ae:de:01:01:a3: ab:05:7c:04:ae:72:bd:f8:4e:b9:0b:eb:e8:46:9b:ad:29:dc: a6:09:03:c6:b7:04:66:65:7d:f5:67:2f:ca:19:60:1c:21:7e: 3f:8f:66:22:25:13:19:73:c1:a2:1e:0a:9c:28:11:24:cc:e6: 9c:56:e9:6f:c3:75:15:44:64:d7:6a:d1:89:61:a3:1a:85:f3: 64:84:98:32:9a:84:5b:a4:93:0f:d0:e4:65:c4:89:84:ee:91: 6d:41:ab:03:15:21:ae:c4:89:af:59:a9:f7:72:4e:b8:c1:0e: 22:19:0c:63:e2:78:53:c3:e2:fa:5f:c3:a9:26:d8:ae:d0:cf: f5:a1:99:17:96:5a:e1:c5:30:e0:cc:61:e9:8d:1d:2f:a5:db: 2f:fd:18:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITB3WEecAavfXrQ+XTU/9tzxSb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNTEyMTkxMjA4MzlaFw0yNTEyMjIyMDUyMzlaMDMxMTAvBgNV BAMTKDREQkNDMUFGQTc4Q0ZBNDE0QjQwNDhDQ0I5MTgwRkRFRkYzMEY5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hFA6I4Z/JnCQiqxGgcl6yiIB hKMQd7oqZx2bGWwPffya+99K4o+Ri2CnjVHI6Bvdsp/OsaGPd9wsaK9SQ44/dBUl 3cD5ZFKyIKq7VdE49TQIrU/aMx+0/KFQjh64lk3u1K5EU1YMTcLQ/OqaJ73eoDf8 6Lu2JRpftSyoel7ofJh5Dr6LyAHvQQC//cHxck+nivdUcKP59DiafsPfg02+c3VJ tS47NdpJ3Bcy70KczdP0Yr4Ntqu5tK71IQw8vWUjpVcQnV4QQAeZjLEg5Jen5bHG tfDOqOMEjgkz9JpR3p/rP9y8JNBi6kwp7pdZAksj0PAHPSsqi7RmDaSGVP55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbzBr6eM+kFLQEjMuRgP3v8w+UswHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlE RjY4NTEyRTExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXdGVE0M6M6k11oRymZADvvwxn/l+JQd00G 8bg2R67/fVM9+wf9xaGVAVRrTHVUspQwHtiuDRkQWxeLXccxU3BLt4fCH1rNVoQ/ nXqw/xpZS7asvUd46PWErLn3AmqOI9783uZgr0mu3gEBo6sFfASucr34TrkL6+hG m60p3KYJA8a3BGZlffVnL8oZYBwhfj+PZiIlExlzwaIeCpwoESTM5pxW6W/DdRVE ZNdq0YlhoxqF82SEmDKahFukkw/Q5GXEiYTukW1BqwMVIa7Eia9ZqfdyTrjBDiIZ DGPieFPD4vpfw6km2K7Qz/WhmReWWuHFMODMYemNHS+l2y/9GLQ= -----END CERTIFICATE-----Generated at Sat Dec 20 11:08:56 2025 by rpki-client