This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: ZSn9qZJAu5Q9nt4GXwWMtDljWszEHH8FxIIbQLsMSUM= Subject key identifier: 01:AE:23:92:AC:73:C4:43:14:3E:0E:8E:62:CD:03:9A:F7:42:D8:2E Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 32E3F1C9D295416BBDC0C70BE34F360B5FEB7457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 0139 Signing time: Fri 19 Dec 2025 07:42:50 +0000 Manifest this update: Fri 19 Dec 2025 07:37:50 +0000 Manifest next update: Mon 22 Dec 2025 14:21:50 +0000 Files and hashes: 1: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: OIcARodz41rVVeku5ergMewbkwK8cjixaSVwwZ9+9NA=) 2: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 14:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:f1:c9:d2:95:41:6b:bd:c0:c7:0b:e3:4f:36:0b:5f:eb:74:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Dec 19 07:37:50 2025 GMT Not After : Dec 22 14:21:50 2025 GMT Subject: CN=01AE2392AC73C443143E0E8E62CD039AF742D82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:9c:d9:2f:43:6c:24:8d:c7:68:1f:2a:b7: 15:fc:9a:81:fa:ef:17:0f:41:7c:52:86:2c:be:8e: 12:51:3e:8a:49:82:41:92:02:41:45:57:47:14:7c: 00:9f:05:4d:1b:29:0d:86:31:c8:3d:6e:9b:10:ab: 51:ea:5e:b7:7e:5d:87:86:fb:e3:94:56:4b:ca:cb: 77:6b:19:84:fd:6d:6f:3c:84:0f:64:59:30:b5:36: 51:cf:75:d6:5f:f0:68:22:9c:b2:8f:f1:9d:72:c9: e9:25:63:84:de:28:cb:c1:fb:08:17:01:65:58:7e: b9:e7:a5:48:4b:02:f7:7e:7c:f1:00:ee:b4:ea:52: 82:4a:83:20:86:49:ad:82:41:ac:30:ae:ce:e8:0a: c1:c1:93:a9:e4:91:e8:47:c2:de:8c:2b:d1:db:82: 59:43:d8:c9:65:dd:4b:4b:d4:ba:b5:75:45:43:a8: 4d:90:e7:5a:42:a2:03:fb:5e:e6:74:88:17:76:ff: 36:d4:a9:50:e0:d6:44:45:50:7a:48:f0:3f:69:7c: 50:a2:fd:3b:b7:a4:69:2e:20:74:d0:70:aa:08:6d: f3:35:98:cd:b9:53:3a:7b:86:84:5c:b4:c2:53:60: 40:57:ff:dd:19:ff:35:8e:3a:56:af:91:97:c1:99: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AE:23:92:AC:73:C4:43:14:3E:0E:8E:62:CD:03:9A:F7:42:D8:2E X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a9:0c:ac:78:cf:f1:cd:68:97:c1:f7:25:f9:84:e9:34:a9: bc:8d:35:a9:3d:6b:4e:09:41:81:d0:ed:db:0c:b1:c6:0d:88: 9e:32:50:80:b2:0d:b2:66:3e:37:38:f9:f7:65:19:6a:92:60: 50:58:37:cd:91:77:27:ef:4d:32:cd:c9:dc:34:17:15:b8:af: 3a:7c:12:5d:60:6e:aa:cb:17:2c:64:97:a8:4e:12:f5:51:13: d0:e5:7a:d0:f6:97:f2:1b:b1:1f:e7:4a:97:77:43:72:82:94: 23:97:04:db:1b:fc:47:30:59:f0:85:3c:a7:ab:c1:13:0c:e8: 94:4d:fd:3e:75:5a:a1:48:9b:01:44:2d:9d:30:63:c9:c3:41: 98:95:18:56:46:60:4a:5c:e6:54:12:5e:69:d8:9f:40:73:1d: 1c:49:53:e4:39:ba:9e:89:99:af:a6:85:ab:89:4b:01:3b:46: 6d:f3:e9:60:b9:a3:66:b4:af:7e:cd:44:48:26:d9:14:3d:00: 79:6c:15:0d:45:d1:d0:d6:f3:cf:5b:f2:55:f4:47:bf:cd:7f: fd:db:b3:f9:5f:d0:d3:47:fd:05:5e:d8:3f:0e:9b:24:c0:51: a3:a3:4e:f9:49:25:2d:7a:6a:b8:f8:4e:81:01:e2:41:7d:43: d0:2f:0b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuPxydKVQWu9wMcL4082C1/rdFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTEyMTkwNzM3NTBaFw0yNTEyMjIxNDIxNTBaMDMxMTAvBgNV BAMTKDAxQUUyMzkyQUM3M0M0NDMxNDNFMEU4RTYyQ0QwMzlBRjc0MkQ4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIZzZL0NsJI3HaB8qtxX8moH6 7xcPQXxShiy+jhJRPopJgkGSAkFFV0cUfACfBU0bKQ2GMcg9bpsQq1HqXrd+XYeG ++OUVkvKy3drGYT9bW88hA9kWTC1NlHPddZf8GginLKP8Z1yyeklY4TeKMvB+wgX AWVYfrnnpUhLAvd+fPEA7rTqUoJKgyCGSa2CQawwrs7oCsHBk6nkkehHwt6MK9Hb gllD2Mll3UtL1Lq1dUVDqE2Q51pCogP7XuZ0iBd2/zbUqVDg1kRFUHpI8D9pfFCi /Tu3pGkuIHTQcKoIbfM1mM25Uzp7hoRctMJTYEBX/90Z/zWOOlavkZfBmSMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAa4jkqxzxEMUPg6OYs0DmvdC2C4wHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEupDKx4z/HNaJfB9yX5hOk0qbyNNak9a04J QYHQ7dsMscYNiJ4yUICyDbJmPjc4+fdlGWqSYFBYN82RdyfvTTLNydw0FxW4rzp8 El1gbqrLFyxkl6hOEvVRE9DletD2l/IbsR/nSpd3Q3KClCOXBNsb/EcwWfCFPKer wRMM6JRN/T51WqFImwFELZ0wY8nDQZiVGFZGYEpc5lQSXmnYn0BzHRxJU+Q5up6J ma+mhauJSwE7Rm3z6WC5o2a0r37NREgm2RQ9AHlsFQ1F0dDW889b8lX0R7/Nf/3b s/lf0NNH/QVe2D8OmyTAUaOjTvlJJS16arj4ToEB4kF9Q9AvC3Y= -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:02 2025 by rpki-client