This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: F8xML4G2mUWuOLdAemUSdTfTGsMJyZBAJT5F+vU92Es= Subject key identifier: A8:62:A1:12:39:19:1D:42:1B:47:4C:F5:9C:DC:7E:66:80:F3:07:CE Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 42E716DD8D5EF643C2BA1D1E1895645F186E44C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 0293 Signing time: Wed 17 Dec 2025 03:11:14 +0000 Manifest this update: Wed 17 Dec 2025 03:06:14 +0000 Manifest next update: Sat 20 Dec 2025 05:34:14 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: MmuXAKKjfDSx5uMJ92RoI47O3gaQ+ApBdube+8uCMpY=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=) 3: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: 1O9rZ1/0Bg6fk4iYpGmE/bcBxG0/jBHzqP2ZYiI4Zu0=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: T9YXzECK/+yPsc0MjXlDkJh+Di90dnJO766syYdRfEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e7:16:dd:8d:5e:f6:43:c2:ba:1d:1e:18:95:64:5f:18:6e:44:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Dec 17 03:06:14 2025 GMT Not After : Dec 20 05:34:14 2025 GMT Subject: CN=A862A11239191D421B474CF59CDC7E6680F307CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:dd:53:f8:87:2d:35:fe:43:c3:ce:fd:30: da:15:ca:1e:c0:b4:8a:5f:00:4f:2d:29:bf:17:b4: 7a:78:0c:a1:5c:33:ff:e9:46:a0:8e:ad:09:4e:f6: 55:02:2e:eb:2e:05:50:82:3d:e9:28:75:6d:14:15: ae:c5:05:56:cf:b2:93:46:88:3a:fe:67:ca:92:28: 86:9b:ef:23:23:a2:29:01:4f:b7:42:14:be:ec:61: f3:61:8c:8b:42:4f:72:e2:73:76:55:67:c4:3e:70: 54:62:ff:fb:72:bc:f4:73:e1:e6:95:fe:5d:22:ba: 8f:6e:e8:18:fd:16:5f:68:5a:37:74:26:89:28:30: 72:14:b2:b3:f5:9d:6c:5e:d6:fb:f5:1f:73:45:3e: 12:4a:ff:bb:35:db:86:04:b8:60:e9:a9:da:a7:22: bc:72:7c:a9:fd:40:a9:40:fe:bd:5b:e6:59:42:a3: 8f:ba:a9:ac:70:46:95:a5:09:b0:0b:4b:d9:b8:81: 04:a9:c1:a4:45:16:3a:57:e2:d6:37:91:b6:d2:1e: 3e:b7:25:d3:1a:94:5a:7c:e0:3a:5b:8c:2c:61:55: 92:77:ce:ee:f8:39:38:78:cb:43:3a:4f:d9:91:26: 9a:3a:5b:ea:36:7f:98:f4:d3:e6:f4:cb:e4:f2:0a: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:A1:12:39:19:1D:42:1B:47:4C:F5:9C:DC:7E:66:80:F3:07:CE X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:71:47:a0:20:ed:25:b4:fe:f8:ba:67:c3:9a:7a:c2:f4:35: 82:e3:57:4b:f2:eb:3b:f1:0b:6a:27:4b:a5:a5:8a:0a:b0:cd: 6d:09:b7:66:06:30:24:2a:b6:f6:24:80:6c:65:92:36:4e:18: 74:41:f3:0d:82:4a:a1:66:bc:05:da:89:c6:1e:e7:b7:fd:67: eb:1e:83:07:90:23:17:78:64:d0:b2:51:e4:63:e3:17:fa:54: 9a:50:88:8b:7b:1a:84:72:ce:c1:3d:ce:a3:5b:0c:a5:d5:c0: 7b:c1:0b:0e:f0:b0:dc:4d:ca:5d:81:21:4e:50:60:58:10:75: 4c:9d:ec:63:b5:7a:73:44:e5:31:c3:6d:c8:a9:6b:aa:a3:d9: 34:39:8f:49:92:41:aa:1a:87:e8:74:26:ff:12:da:dc:8a:48: 43:de:9a:b8:73:8d:0f:d3:4f:b7:63:2b:d6:c1:6b:b0:c9:36: 6b:75:75:f2:93:f5:a9:31:b2:9b:14:34:fb:e0:49:91:92:8b: 01:33:61:95:a6:42:a1:18:4a:52:32:70:77:8e:d7:d6:72:bc: 3d:3b:38:cf:a6:6f:30:e3:7a:ff:4c:e4:04:40:87:51:36:71: 93:fc:c8:98:5e:33:db:4d:c0:5c:50:48:e4:9d:b6:1d:50:2a: ff:53:0b:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQucW3Y1e9kPCuh0eGJVkXxhuRMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNTEyMTcwMzA2MTRaFw0yNTEyMjAwNTM0MTRaMDMxMTAvBgNV BAMTKEE4NjJBMTEyMzkxOTFENDIxQjQ3NENGNTlDREM3RTY2ODBGMzA3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJ91T+IctNf5Dw879MNoVyh7A tIpfAE8tKb8XtHp4DKFcM//pRqCOrQlO9lUCLusuBVCCPekodW0UFa7FBVbPspNG iDr+Z8qSKIab7yMjoikBT7dCFL7sYfNhjItCT3Lic3ZVZ8Q+cFRi//tyvPRz4eaV /l0iuo9u6Bj9Fl9oWjd0JokoMHIUsrP1nWxe1vv1H3NFPhJK/7s124YEuGDpqdqn IrxyfKn9QKlA/r1b5llCo4+6qaxwRpWlCbALS9m4gQSpwaRFFjpX4tY3kbbSHj63 JdMalFp84DpbjCxhVZJ3zu74OTh4y0M6T9mRJpo6W+o2f5j00+b0y+TyCic/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGKhEjkZHUIbR0z1nNx+ZoDzB84wHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlxR6Ag7SW0/vi6Z8OaesL0NYLjV0vy6zvx C2onS6WligqwzW0Jt2YGMCQqtvYkgGxlkjZOGHRB8w2CSqFmvAXaicYe57f9Z+se gweQIxd4ZNCyUeRj4xf6VJpQiIt7GoRyzsE9zqNbDKXVwHvBCw7wsNxNyl2BIU5Q YFgQdUyd7GO1enNE5THDbcipa6qj2TQ5j0mSQaoah+h0Jv8S2tyKSEPemrhzjQ/T T7djK9bBa7DJNmt1dfKT9akxspsUNPvgSZGSiwEzYZWmQqEYSlIycHeO19ZyvD07 OM+mbzDjev9M5ARAh1E2cZP8yJheM9tNwFxQSOSdth1QKv9TC/M= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:04 2025 by rpki-client