This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: 1MrUvxHOkl2+d+PKwUijBskdKX67Bf8B6gA2f1CTruA= Subject key identifier: B3:C9:D0:DB:95:9B:D2:28:18:F9:3E:91:3B:8A:22:92:27:03:26:3D Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 73A871F29836D6CB484B7ABA4E2D84EDC764D48C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0258 Signing time: Mon 22 Dec 2025 09:21:17 +0000 Manifest this update: Mon 22 Dec 2025 09:16:17 +0000 Manifest next update: Thu 25 Dec 2025 13:54:17 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: nffhv20Kkbhttl/uKehIy9n/Xw5kcGoe0+n1tvWWL6Y=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a8:71:f2:98:36:d6:cb:48:4b:7a:ba:4e:2d:84:ed:c7:64:d4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Dec 22 09:16:17 2025 GMT Not After : Dec 25 13:54:17 2025 GMT Subject: CN=B3C9D0DB959BD22818F93E913B8A22922703263D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:82:48:f5:e4:a6:36:ef:b4:e4:c5:45:07: a5:fa:f6:0a:b3:1e:06:ea:bf:20:6e:c6:41:b8:97: c8:43:89:14:82:f2:d2:bd:0e:f3:c9:c6:05:06:4b: b1:c0:e6:86:8b:bf:20:3b:70:d4:7c:61:5f:6b:4a: 95:70:6a:07:60:fb:51:b7:5e:82:a4:0a:b7:2b:e0: 60:e8:0b:fe:8e:a8:87:11:24:68:b0:63:ec:6b:1b: 5a:cc:de:96:46:3a:89:1a:55:2e:c7:16:e1:51:c0: ce:84:19:93:f8:cf:07:ba:2e:55:c6:40:23:85:70: ee:30:69:15:2a:4d:89:77:b2:8c:cc:8e:97:1a:c2: 0f:03:2f:06:82:93:99:79:07:ba:39:5e:99:dd:51: 17:8d:d5:fb:87:ef:2d:b5:79:09:ab:1b:19:c9:58: 0c:a2:17:96:3e:46:3d:e6:ea:ee:a9:43:73:99:38: cd:dd:0d:63:9a:3f:95:53:02:9c:b2:3f:de:46:a4: 96:5f:71:9b:14:20:bf:0b:0d:0a:f7:da:be:55:c5: c2:cb:0b:93:cf:33:f1:1f:da:00:50:ad:13:54:3e: 12:e7:89:4d:5c:e5:14:79:33:93:b6:28:29:05:27: 4e:3d:3d:fa:38:04:17:84:76:ec:d2:64:26:db:69: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:D0:DB:95:9B:D2:28:18:F9:3E:91:3B:8A:22:92:27:03:26:3D X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:64:c2:bb:c2:7d:2b:51:4a:85:fd:1b:60:76:4b:96:94:23: 95:02:9c:96:e8:a5:31:26:2b:da:d1:d2:d7:f5:67:73:42:81: 06:68:0d:2d:c5:37:49:c1:a3:77:8a:84:6b:91:c4:99:12:46: fd:7c:74:81:19:66:0c:dd:1c:41:78:ff:04:0b:1c:b4:df:dd: 05:aa:d1:95:e4:40:b9:96:94:18:a2:d4:46:84:9b:ba:a6:7d: c9:04:30:9a:05:48:bd:13:5a:f1:57:83:97:b8:16:3c:31:a5: fc:48:ba:97:62:bf:45:bf:f8:15:78:09:5d:91:74:0a:57:f1: 75:b1:61:18:3d:fd:5d:ac:1b:35:3e:5b:61:44:f7:0f:d2:a0: 0a:cc:c8:5b:96:b1:05:45:8e:b3:de:fe:07:ca:d2:37:e7:47: a1:01:58:ef:8f:ee:df:fa:06:5a:d4:79:c8:27:61:e5:1c:a0: 0d:1a:60:33:75:30:24:ac:46:3f:1d:99:4d:bb:35:64:78:24: de:b9:b4:60:19:72:94:ed:65:05:f9:00:df:d9:b4:13:7d:de: d9:be:ad:61:b7:b6:f6:5c:92:d2:30:88:cb:57:13:8b:5a:a5: c7:50:fa:76:78:a2:8e:1b:c7:a8:aa:e7:91:df:c7:a9:f8:e1: 29:44:0a:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6hx8pg21stIS3q6Ti2E7cdk1IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEyMjIwOTE2MTdaFw0yNTEyMjUxMzU0MTdaMDMxMTAvBgNV BAMTKEIzQzlEMERCOTU5QkQyMjgxOEY5M0U5MTNCOEEyMjkyMjcwMzI2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqoJI9eSmNu+05MVFB6X69gqz HgbqvyBuxkG4l8hDiRSC8tK9DvPJxgUGS7HA5oaLvyA7cNR8YV9rSpVwagdg+1G3 XoKkCrcr4GDoC/6OqIcRJGiwY+xrG1rM3pZGOokaVS7HFuFRwM6EGZP4zwe6LlXG QCOFcO4waRUqTYl3sozMjpcawg8DLwaCk5l5B7o5XpndUReN1fuH7y21eQmrGxnJ WAyiF5Y+Rj3m6u6pQ3OZOM3dDWOaP5VTApyyP95GpJZfcZsUIL8LDQr32r5VxcLL C5PPM/Ef2gBQrRNUPhLniU1c5RR5M5O2KCkFJ049Pfo4BBeEduzSZCbbadf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs8nQ25Wb0igY+T6RO4oikicDJj0wHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlkwrvCfStRSoX9G2B2S5aUI5UCnJbopTEm K9rR0tf1Z3NCgQZoDS3FN0nBo3eKhGuRxJkSRv18dIEZZgzdHEF4/wQLHLTf3QWq 0ZXkQLmWlBii1EaEm7qmfckEMJoFSL0TWvFXg5e4FjwxpfxIupdiv0W/+BV4CV2R dApX8XWxYRg9/V2sGzU+W2FE9w/SoArMyFuWsQVFjrPe/gfK0jfnR6EBWO+P7t/6 BlrUecgnYeUcoA0aYDN1MCSsRj8dmU27NWR4JN65tGAZcpTtZQX5AN/ZtBN93tm+ rWG3tvZcktIwiMtXE4tapcdQ+nZ4oo4bx6iq55Hfx6n44SlEClw= -----END CERTIFICATE-----Generated at Wed Dec 24 03:02:40 2025 by rpki-client