This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: 2ZiDz2wd3w6MWGZLJbpV1yxiIBaW7FuCc5ViSfi/HTM= Subject key identifier: 70:60:CA:D6:F5:C3:3F:AC:87:1A:47:21:3B:2C:71:6C:48:54:92:E8 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 3CE3E302957DA3052F0BFE3F28B4680F274ED28E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 012D Signing time: Fri 19 Dec 2025 03:22:29 +0000 Manifest this update: Fri 19 Dec 2025 03:17:29 +0000 Manifest next update: Mon 22 Dec 2025 08:25:29 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 4: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: RJD82zJj+9GZKEt/v36VQs9x9ErpDevN6q0GWN5C2p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 08:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:e3:02:95:7d:a3:05:2f:0b:fe:3f:28:b4:68:0f:27:4e:d2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Dec 19 03:17:29 2025 GMT Not After : Dec 22 08:25:29 2025 GMT Subject: CN=7060CAD6F5C33FAC871A47213B2C716C485492E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:e3:a9:d5:65:4e:f4:52:96:a2:11:fa:fd: e5:36:2c:49:73:ee:38:b2:1b:cc:04:7c:a4:bb:7e: 30:54:1d:4c:29:3d:a3:70:c4:2c:cd:b7:55:9f:64: 21:12:11:e7:ea:52:96:fb:f8:c8:fe:36:09:d2:5f: 00:cd:b8:9f:41:c0:5c:cb:21:83:2b:13:4b:37:5f: dc:2c:65:1f:03:84:e6:1b:f0:06:84:7a:b8:bf:a4: 09:17:a8:42:d1:34:fc:08:3a:9d:02:de:19:44:36: 4b:e8:cf:9b:90:cf:67:97:b6:4c:68:6b:a8:22:8b: 04:00:d3:e6:f9:8a:9d:3f:99:fc:0d:ee:a1:70:f8: 48:4d:91:87:3e:04:07:53:59:62:96:44:d2:7a:a2: c3:3d:81:a7:dd:fd:95:39:66:42:9a:e3:3f:8b:44: a3:ab:3d:66:cd:3b:f8:ce:fb:a9:13:28:4a:0d:3c: 88:cd:72:70:65:bc:06:4a:a9:41:22:34:46:56:c5: e9:50:10:31:9c:92:6b:1c:d6:c3:eb:f8:c9:06:13: 84:7e:f7:26:cd:bd:29:7e:93:68:c0:3a:20:23:94: 82:4f:a1:60:6a:ea:95:2a:7b:97:6a:bd:f5:58:04: af:50:24:7a:f6:e9:82:59:7e:67:46:0a:88:48:5d: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:60:CA:D6:F5:C3:3F:AC:87:1A:47:21:3B:2C:71:6C:48:54:92:E8 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:66:b7:d2:d1:c8:9f:af:31:c2:b0:9a:d7:87:c2:0a:94:57: f6:7f:df:16:39:e5:e6:d6:ae:93:1d:ed:0a:3f:6e:70:fd:73: e3:32:5d:67:63:7e:dc:5b:5f:0c:3c:6a:e5:9c:dd:97:4e:9c: f5:65:d9:3b:99:df:bf:5d:71:5b:2e:35:a9:21:60:aa:d4:dd: e0:80:5e:09:a9:58:00:9b:e2:29:86:d9:3b:d0:09:3e:5b:52: e4:f2:e1:74:c1:2c:f4:bd:16:c5:6c:fe:4e:1a:92:2a:99:e9: d7:8b:00:66:c4:0d:14:ad:9d:11:08:1e:00:43:60:dd:0a:d7: ee:5d:03:c0:5c:3b:11:13:37:14:44:bf:7c:2d:54:27:de:4f: 24:66:71:fb:40:5e:62:96:8d:5b:48:9e:ba:25:28:c7:ed:0e: 00:c7:af:bf:d8:55:31:88:6b:4b:c2:e2:30:e1:cd:9b:29:52: 8b:1d:9b:d0:b9:61:b5:4a:ee:e8:cb:c2:f6:01:f9:8e:a1:91: bb:0e:9b:a5:16:ae:13:62:82:22:0c:94:71:c9:d1:b5:83:e7: 70:8e:0d:70:33:72:ff:56:f8:52:0d:fe:71:a5:39:7a:21:80: c7:72:07:6f:9f:54:8d:e6:06:df:1a:48:95:3c:7a:e0:27:7e: c5:8a:77:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOPjApV9owUvC/4/KLRoDydO0o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTEyMTkwMzE3MjlaFw0yNTEyMjIwODI1MjlaMDMxMTAvBgNV BAMTKDcwNjBDQUQ2RjVDMzNGQUM4NzFBNDcyMTNCMkM3MTZDNDg1NDkyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2eOp1WVO9FKWohH6/eU2LElz 7jiyG8wEfKS7fjBUHUwpPaNwxCzNt1WfZCESEefqUpb7+Mj+NgnSXwDNuJ9BwFzL IYMrE0s3X9wsZR8DhOYb8AaEeri/pAkXqELRNPwIOp0C3hlENkvoz5uQz2eXtkxo a6giiwQA0+b5ip0/mfwN7qFw+EhNkYc+BAdTWWKWRNJ6osM9gafd/ZU5ZkKa4z+L RKOrPWbNO/jO+6kTKEoNPIjNcnBlvAZKqUEiNEZWxelQEDGckmsc1sPr+MkGE4R+ 9ybNvSl+k2jAOiAjlIJPoWBq6pUqe5dqvfVYBK9QJHr26YJZfmdGCohIXeqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGDK1vXDP6yHGkchOyxxbEhUkugwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZmt9LRyJ+vMcKwmteHwgqUV/Z/3xY55ebW rpMd7Qo/bnD9c+MyXWdjftxbXww8auWc3ZdOnPVl2TuZ379dcVsuNakhYKrU3eCA XgmpWACb4imG2TvQCT5bUuTy4XTBLPS9FsVs/k4akiqZ6deLAGbEDRStnREIHgBD YN0K1+5dA8BcOxETNxREv3wtVCfeTyRmcftAXmKWjVtInrolKMftDgDHr7/YVTGI a0vC4jDhzZspUosdm9C5YbVK7ujLwvYB+Y6hkbsOm6UWrhNigiIMlHHJ0bWD53CO DXAzcv9W+FIN/nGlOXohgMdyB2+fVI3mBt8aSJU8euAnfsWKd2k= -----END CERTIFICATE-----Generated at Mon Dec 22 00:04:17 2025 by rpki-client