This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: rIwctzxyhGMv7CcO/mapKRw7LJAom1Gxc3ABq/wMY60= Subject key identifier: 71:BC:B8:14:41:A9:8A:CA:46:72:0D:33:08:CC:AC:A4:43:8C:61:E2 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 6430B3F0E8BAD1A96A25F489A6B8F8688BF5B585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0256 Signing time: Wed 17 Dec 2025 18:01:14 +0000 Manifest this update: Wed 17 Dec 2025 17:56:14 +0000 Manifest next update: Sun 21 Dec 2025 02:09:14 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) 3: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: vRuoGCYoL5dbu+za20IDWwqSMumKrLYwJrHrHQmvnTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:30:b3:f0:e8:ba:d1:a9:6a:25:f4:89:a6:b8:f8:68:8b:f5:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Dec 17 17:56:14 2025 GMT Not After : Dec 21 02:09:14 2025 GMT Subject: CN=71BCB81441A98ACA46720D3308CCACA4438C61E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:2f:d6:fe:02:e0:2a:92:d3:b4:1a:49:c8: 93:9c:4e:3a:8e:84:f3:bd:64:ff:7c:35:ec:0c:58: 61:ef:d3:ff:dc:3e:a7:1b:98:ba:c1:23:0a:43:ea: d3:18:88:3c:6a:69:67:ef:a4:82:6a:17:95:53:80: 4a:56:4c:2b:64:d8:e8:c8:25:1d:a4:4f:28:1b:ea: 8d:c4:82:c1:5f:22:81:59:e0:02:1a:94:dc:55:d5: 3d:1b:fa:3d:76:f6:05:e4:a2:93:43:74:25:dc:7b: 5a:0a:f0:3b:d3:89:e9:d1:9d:70:91:05:9f:47:02: 0d:35:f6:2d:ba:5a:ce:63:99:c9:f3:22:b1:ff:b8: 8e:13:d1:0e:2e:12:6f:4c:94:35:fc:3b:dc:5e:f0: 89:c4:0e:5d:9a:87:22:8f:e8:ce:5e:ff:c1:8f:e4: 15:0c:d9:21:e5:e9:ec:ef:42:c5:85:9e:76:3e:bc: 88:81:aa:46:71:90:66:d1:51:eb:f2:4a:7c:0c:17: 85:fa:4f:65:5e:a1:e0:90:d3:d3:15:65:3e:72:cf: f5:87:3e:ff:9f:cf:c0:10:10:ab:dc:cc:7f:68:cc: b8:9b:b9:b6:60:5c:ae:75:3d:ae:b4:9e:ab:40:17: 64:aa:f7:55:35:bc:34:9d:6e:ea:33:8e:05:e5:c5: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:B8:14:41:A9:8A:CA:46:72:0D:33:08:CC:AC:A4:43:8C:61:E2 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:39:e8:9e:38:b1:05:02:6b:c2:0c:23:6a:49:31:5e:23:b5: a5:14:3d:0f:a6:ec:6a:09:59:89:60:9a:6c:e9:74:54:a1:55: a5:ba:af:e5:06:5a:56:af:b5:44:56:60:58:39:67:d4:6d:00: 7d:eb:b7:60:f7:68:7d:2b:80:dd:30:62:85:15:96:38:0c:19: 8b:a6:b3:f4:fd:6b:f6:93:20:5e:b1:f6:68:c5:c1:46:ef:b8: 4d:b2:0a:f0:4a:ea:df:f4:18:e8:c3:00:ea:8b:bc:f9:33:f8: f9:44:ef:b9:16:2f:82:ec:47:96:77:76:a7:f0:bb:30:42:e5: 2d:61:55:8e:d3:80:48:2c:f2:23:cc:c8:6f:ee:d0:70:d7:d9: 90:e0:6d:1d:ef:e1:00:bf:52:b2:bd:3f:c1:a6:33:92:a2:98: 1d:1c:00:38:81:33:bb:45:fc:4e:2f:9b:42:e0:b6:73:ef:54: 8b:a7:17:26:42:83:43:f8:9d:16:2c:54:34:10:4f:00:89:2e: 0a:f8:20:ac:eb:38:d0:74:4f:ab:4a:b6:12:76:fe:85:91:0e: 89:b6:09:39:98:37:1d:90:15:6a:b5:3d:42:93:d6:40:c7:a0: 1c:00:51:f2:ca:00:5b:69:51:f9:d7:9e:b6:fd:27:0b:a1:9e: 07:16:bb:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDCz8Oi60alqJfSJprj4aIv1tYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEyMTcxNzU2MTRaFw0yNTEyMjEwMjA5MTRaMDMxMTAvBgNV BAMTKDcxQkNCODE0NDFBOThBQ0E0NjcyMEQzMzA4Q0NBQ0E0NDM4QzYxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSS/W/gLgKpLTtBpJyJOcTjqO hPO9ZP98NewMWGHv0//cPqcbmLrBIwpD6tMYiDxqaWfvpIJqF5VTgEpWTCtk2OjI JR2kTygb6o3EgsFfIoFZ4AIalNxV1T0b+j129gXkopNDdCXce1oK8DvTienRnXCR BZ9HAg019i26Ws5jmcnzIrH/uI4T0Q4uEm9MlDX8O9xe8InEDl2ahyKP6M5e/8GP 5BUM2SHl6ezvQsWFnnY+vIiBqkZxkGbRUevySnwMF4X6T2VeoeCQ09MVZT5yz/WH Pv+fz8AQEKvczH9ozLibubZgXK51Pa60nqtAF2Sq91U1vDSdbuozjgXlxVF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcby4FEGpispGcg0zCMyspEOMYeIwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk56J44sQUCa8IMI2pJMV4jtaUUPQ+m7GoJ WYlgmmzpdFShVaW6r+UGWlavtURWYFg5Z9RtAH3rt2D3aH0rgN0wYoUVljgMGYum s/T9a/aTIF6x9mjFwUbvuE2yCvBK6t/0GOjDAOqLvPkz+PlE77kWL4LsR5Z3dqfw uzBC5S1hVY7TgEgs8iPMyG/u0HDX2ZDgbR3v4QC/UrK9P8GmM5KimB0cADiBM7tF /E4vm0LgtnPvVIunFyZCg0P4nRYsVDQQTwCJLgr4IKzrONB0T6tKthJ2/oWRDom2 CTmYNx2QFWq1PUKT1kDHoBwAUfLKAFtpUfnXnrb9JwuhngcWuxc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:37 2025 by rpki-client