This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: 3p/y/m98tHHlFHrCrRunYAg3g9CvfL+PLYFyY3HtTp0= Subject key identifier: 9F:86:AE:35:A2:C4:50:76:EF:4C:27:21:5E:B2:9A:8E:89:D2:01:0F Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 7BEE88D9593A6C6A9A4E1B96314BDC7A45CDB4BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 036C Signing time: Tue 23 Dec 2025 21:11:01 +0000 Manifest this update: Tue 23 Dec 2025 21:06:01 +0000 Manifest next update: Sat 27 Dec 2025 03:30:01 +0000 Files and hashes: 1: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: P1cOWf2jq5bBUgwoZIaRIlz9dHxWVYLgstznn77+SSo=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) 3: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ee:88:d9:59:3a:6c:6a:9a:4e:1b:96:31:4b:dc:7a:45:cd:b4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Dec 23 21:06:01 2025 GMT Not After : Dec 27 03:30:01 2025 GMT Subject: CN=9F86AE35A2C45076EF4C27215EB29A8E89D2010F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:09:3a:c7:0c:27:30:40:c8:be:de:83:d6: e1:0c:9b:be:18:8d:e3:d7:9c:72:79:4d:46:ae:00: b6:c0:9e:96:83:b2:90:8d:1c:c1:6f:a6:1d:8a:e7: 75:cf:a8:be:ec:c8:77:2f:2d:df:b2:f9:69:c4:0f: 7d:87:35:e8:6c:92:4b:67:20:22:56:b5:f7:9b:e6: ff:3b:b0:aa:01:93:2a:8a:61:1e:0f:8f:12:51:24: c1:49:5d:54:38:74:3d:27:16:b5:71:6c:64:17:d8: 2f:50:e2:80:cc:96:8a:e5:45:a9:d0:cb:f4:c5:cf: dd:01:26:ac:dc:8e:72:13:8d:61:96:8e:e5:08:d2: b9:9e:c6:b9:72:4a:c1:d9:41:9d:10:6a:41:48:d4: 89:dc:35:ef:3d:c6:7c:6b:ff:3c:0b:e4:7c:1c:b3: 73:cc:44:b3:6b:e5:bb:46:e3:32:1f:7e:3e:3a:63: 96:da:4c:50:3f:8e:37:58:42:16:e5:88:e0:33:7d: 82:4e:fe:34:ea:f9:7e:b6:0b:ab:25:75:07:7a:d4: 39:82:52:3d:56:61:6d:87:29:4d:9d:23:ef:d1:fd: bf:11:74:65:8e:e8:f8:29:73:c6:90:c8:47:f3:e3: 19:bb:1c:18:4e:5a:bc:5d:f2:49:8e:a9:9c:6f:32: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:AE:35:A2:C4:50:76:EF:4C:27:21:5E:B2:9A:8E:89:D2:01:0F X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:f3:0e:00:c2:80:1d:97:a8:e9:a0:50:01:64:4f:1c:3d:c6: 72:1b:df:af:5f:a5:bc:e6:08:af:2e:77:52:04:e0:5b:78:a6: 00:c7:9b:15:95:e2:e5:a2:52:a0:cd:87:25:1f:c8:33:17:31: 14:15:e6:61:2f:47:11:c6:a5:cb:d7:59:0e:42:8c:e7:9d:b4: d2:33:4b:58:46:82:09:9e:26:54:87:32:f7:a7:84:b2:bd:06: 09:31:e2:fb:66:41:02:92:18:3b:b0:96:5e:b9:c0:24:ae:ad: cc:f1:75:52:38:cb:bb:b9:30:c9:34:7c:83:9f:a5:bd:3c:db: f8:a1:bc:98:83:10:01:67:88:d5:6b:11:ad:8b:9d:0e:b1:47: b1:b3:d2:c8:ac:89:d3:ff:58:3a:95:64:3c:41:f9:4d:e6:71: 03:1f:4a:7f:d8:5b:22:6b:ab:fb:b3:05:b1:e5:a8:14:7d:ab: 66:14:b2:7c:3e:82:78:63:c3:76:cd:75:6e:99:27:20:2f:2a: 49:69:11:ce:21:37:20:7b:86:34:3f:0e:74:d2:84:ba:7a:a5: 72:a9:bb:3b:51:6c:b7:de:11:ae:fc:d0:72:fd:17:1c:23:46: 62:15:03:79:1e:01:e0:fe:b0:3f:dd:1d:e9:90:fb:42:10:70: ad:2a:16:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+6I2Vk6bGqaThuWMUvcekXNtLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTEyMjMyMTA2MDFaFw0yNTEyMjcwMzMwMDFaMDMxMTAvBgNV BAMTKDlGODZBRTM1QTJDNDUwNzZFRjRDMjcyMTVFQjI5QThFODlEMjAxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuAk6xwwnMEDIvt6D1uEMm74Y jePXnHJ5TUauALbAnpaDspCNHMFvph2K53XPqL7syHcvLd+y+WnED32HNehskktn ICJWtfeb5v87sKoBkyqKYR4PjxJRJMFJXVQ4dD0nFrVxbGQX2C9Q4oDMlorlRanQ y/TFz90BJqzcjnITjWGWjuUI0rmexrlySsHZQZ0QakFI1IncNe89xnxr/zwL5Hwc s3PMRLNr5btG4zIffj46Y5baTFA/jjdYQhbliOAzfYJO/jTq+X62C6sldQd61DmC Uj1WYW2HKU2dI+/R/b8RdGWO6Pgpc8aQyEfz4xm7HBhOWrxd8kmOqZxvMgmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn4auNaLEUHbvTCchXrKajonSAQ8wHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHzDgDCgB2XqOmgUAFkTxw9xnIb369fpbzm CK8ud1IE4Ft4pgDHmxWV4uWiUqDNhyUfyDMXMRQV5mEvRxHGpcvXWQ5CjOedtNIz S1hGggmeJlSHMvenhLK9Bgkx4vtmQQKSGDuwll65wCSurczxdVI4y7u5MMk0fIOf pb082/ihvJiDEAFniNVrEa2LnQ6xR7Gz0sisidP/WDqVZDxB+U3mcQMfSn/YWyJr q/uzBbHlqBR9q2YUsnw+gnhjw3bNdW6ZJyAvKklpEc4hNyB7hjQ/DnTShLp6pXKp uztRbLfeEa780HL9FxwjRmIVA3keAeD+sD/dHemQ+0IQcK0qFnA= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:33 2025 by rpki-client