This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json) Hash identifier: SJmMGrN9J8J+TT1qMlrUvHPdKyfcGhxnQfoM3HBEaKU= Subject key identifier: 71:43:59:36:62:A5:E7:10:B6:96:DF:A8:00:0F:37:B2:43:7D:A9:4E Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Certificate serial: 0E8A80A9BD8A6F8D3C5794481BF959C4262D80A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft Manifest number: 01F4 Signing time: Sun 21 Dec 2025 22:51:53 +0000 Manifest this update: Sun 21 Dec 2025 22:46:53 +0000 Manifest next update: Thu 25 Dec 2025 03:29:53 +0000 Files and hashes: 1: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=) 2: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: 4dzmRhc3Z/IQgUlvGX+aZ+kKs4NTRAPdZk3Lvaa1nlc=) 3: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=) 4: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8a:80:a9:bd:8a:6f:8d:3c:57:94:48:1b:f9:59:c4:26:2d:80:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Validity Not Before: Dec 21 22:46:53 2025 GMT Not After : Dec 25 03:29:53 2025 GMT Subject: CN=7143593662A5E710B696DFA8000F37B2437DA94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:a6:92:71:b0:5e:57:02:f7:15:94:80:9f: ed:4f:d4:5a:d0:eb:71:50:53:67:e7:6f:a6:ce:05: d2:ea:42:9f:bb:01:ea:e1:3e:5b:a9:2b:de:1b:c1: f0:61:37:67:3a:4a:03:08:4b:7d:08:e1:32:b9:a4: 8e:92:52:ad:3c:03:82:b8:0b:bf:36:26:0d:f8:75: 4b:f4:22:5c:d9:d3:fd:69:80:03:63:32:ac:2b:aa: c4:04:e3:87:cc:19:51:55:ba:81:61:10:46:72:71: 3c:03:2a:67:92:6d:7d:51:35:7d:cb:6f:b6:b8:09: 2d:82:b6:68:0b:57:31:a1:8a:29:60:27:0f:f3:ad: f9:10:aa:04:aa:65:94:3e:8d:68:0d:e8:14:37:bf: af:b8:85:ba:13:8b:b8:95:b6:44:38:48:94:26:38: 55:e8:15:7a:ee:5e:8e:a2:ee:3d:f5:85:de:14:d7: e6:a9:93:eb:c8:b3:70:6b:f3:34:6e:16:af:81:7c: 9c:65:bc:9c:97:37:55:48:48:4c:30:4e:c1:60:26: df:53:4b:c7:e3:fb:bb:e0:ba:0a:68:3a:5d:8c:e7: 1f:17:3e:d1:f2:09:bc:af:45:2c:61:75:7d:7a:7a: 4f:01:d9:6b:91:1f:e4:e9:d1:16:2a:1d:ac:08:29: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:59:36:62:A5:E7:10:B6:96:DF:A8:00:0F:37:B2:43:7D:A9:4E X509v3 Authority Key Identifier: keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e6:7e:ac:a8:91:ce:6e:72:61:f1:fb:29:4f:af:8b:d4:d7: 1a:f5:3e:fa:7a:9e:f5:84:74:97:db:6b:08:24:84:86:ff:af: d1:92:b1:0f:32:7d:0c:15:15:32:3c:3e:f0:e2:8c:8b:2e:10: fb:48:32:3c:61:19:85:aa:e8:60:fa:97:b9:40:53:23:22:07: 90:0b:ee:6c:2d:42:6d:15:0d:d2:85:89:bf:4b:75:cc:88:97: 9b:ba:99:14:ec:fe:e7:23:d4:29:e6:83:e6:b3:64:bf:81:96: 45:65:0b:b9:bf:03:1e:2f:1c:62:50:f2:58:9c:f4:43:c9:60: 94:d7:4e:3a:46:a6:91:38:42:7b:97:ad:64:65:07:7c:8c:20: a1:de:f2:60:34:8f:df:35:a4:27:44:a0:41:44:b8:33:f2:41: 8e:29:d3:7f:35:97:25:00:e5:98:06:be:f8:ad:3d:09:52:82: 79:66:23:4c:1c:24:da:52:d0:bb:b6:96:1a:87:6d:ec:64:44: 26:d8:30:55:b7:7d:68:bd:9d:e2:ff:8c:1f:91:0d:5b:c0:2c: ef:b1:2e:c7:6a:61:1c:ca:eb:f1:f8:42:91:21:b8:a4:2a:b9: 55:20:0a:51:1f:10:00:39:08:4c:b4:53:9f:c4:90:52:b9:c4: 8d:17:30:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoqAqb2Kb408V5RIG/lZxCYtgKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw ODM2NjZDNjAeFw0yNTEyMjEyMjQ2NTNaFw0yNTEyMjUwMzI5NTNaMDMxMTAvBgNV BAMTKDcxNDM1OTM2NjJBNUU3MTBCNjk2REZBODAwMEYzN0IyNDM3REE5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRKaScbBeVwL3FZSAn+1P1FrQ 63FQU2fnb6bOBdLqQp+7AerhPlupK94bwfBhN2c6SgMIS30I4TK5pI6SUq08A4K4 C782Jg34dUv0IlzZ0/1pgANjMqwrqsQE44fMGVFVuoFhEEZycTwDKmeSbX1RNX3L b7a4CS2CtmgLVzGhiilgJw/zrfkQqgSqZZQ+jWgN6BQ3v6+4hboTi7iVtkQ4SJQm OFXoFXruXo6i7j31hd4U1+apk+vIs3Br8zRuFq+BfJxlvJyXN1VISEwwTsFgJt9T S8fj+7vgugpoOl2M5x8XPtHyCbyvRSxhdX16ek8B2WuRH+Tp0RYqHawIKZ6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUNZNmKl5xC2lt+oAA83skN9qU4wHwYDVR0j BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2 NjZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAwNzMxNjQtODAwOC00OWM2LWIx ODYtM2M3ZmU5YjgwYTE3LzAvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1 MTkwODM2NjZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDmfqyokc5ucmHx+ylPr4vU1xr1Pvp6nvWE dJfbawgkhIb/r9GSsQ8yfQwVFTI8PvDijIsuEPtIMjxhGYWq6GD6l7lAUyMiB5AL 7mwtQm0VDdKFib9LdcyIl5u6mRTs/ucj1Cnmg+azZL+BlkVlC7m/Ax4vHGJQ8lic 9EPJYJTXTjpGppE4QnuXrWRlB3yMIKHe8mA0j981pCdEoEFEuDPyQY4p0381lyUA 5ZgGvvitPQlSgnlmI0wcJNpS0Lu2lhqHbexkRCbYMFW3fWi9neL/jB+RDVvALO+x LsdqYRzK6/H4QpEhuKQquVUgClEfEAA5CEy0U5/EkFK5xI0XMDQ= -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:47 2025 by rpki-client