This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: clsNWZkbwVxsMNmBxw1MjUjU5zaMx0GtgC/yR2bflbA= Subject key identifier: 31:91:75:24:55:8E:13:4A:FC:10:BD:75:83:E9:5E:24:55:52:1D:5E Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 10F52D234C4B05B804FBC39EAA61EA6E28D5426D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: 0103 Signing time: Tue 02 Dec 2025 00:01:34 +0000 Manifest this update: Mon 01 Dec 2025 23:56:33 +0000 Manifest next update: Fri 05 Dec 2025 02:44:33 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) 2: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: Fpsk0VrECS5Z1typdOF4CT4ES0ZV5mZalm5/oQKOR+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f5:2d:23:4c:4b:05:b8:04:fb:c3:9e:aa:61:ea:6e:28:d5:42:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Dec 1 23:56:33 2025 GMT Not After : Dec 5 02:44:33 2025 GMT Subject: CN=31917524558E134AFC10BD7583E95E2455521D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:fb:9f:18:69:bf:ee:aa:ef:8e:9a:57:60: 2b:61:c6:8d:fe:57:1c:bd:2d:f2:92:5f:ba:1b:aa: b6:0f:93:21:01:12:38:cc:32:6a:fb:43:20:e3:80: 0e:17:f4:f9:cb:01:98:01:78:b1:79:89:53:93:e3: 4b:97:55:8b:70:aa:19:42:f8:fc:90:84:56:46:39: 2d:69:e0:43:ac:1e:9b:e8:f9:b5:7f:3c:80:19:2b: 9d:da:13:ba:d7:70:21:8b:cd:54:16:f4:1c:a4:0d: 86:90:2c:2f:97:6f:dc:ec:bb:1a:ce:9e:16:9a:52: 65:a5:14:dd:bc:4c:cf:73:95:7d:45:42:50:fb:a9: 4a:97:1f:56:d6:08:4d:33:8d:78:1c:2e:f9:0b:72: 29:a4:32:2a:61:00:4e:fd:67:17:25:1c:66:17:31: b9:0d:a4:f0:b1:0f:a5:53:aa:4a:51:b6:45:35:a4: cb:5d:7a:e5:14:b5:67:22:ea:c6:e2:99:3c:09:0a: c7:28:82:ff:ef:6e:45:c6:c9:d5:34:28:e3:44:fb: 70:83:b4:dc:ba:df:41:de:04:27:f6:49:94:af:e4: 2b:fd:e5:5c:fe:47:7a:b7:a0:2b:2a:75:11:b6:04: 4e:a4:42:9c:93:7f:23:a7:b7:66:d3:e0:94:3e:70: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:91:75:24:55:8E:13:4A:FC:10:BD:75:83:E9:5E:24:55:52:1D:5E X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:49:e3:22:98:d8:bc:26:e1:2a:44:c3:ee:5c:6f:24:6a:f6: cd:4a:63:80:d4:b6:a8:51:06:29:a6:60:e2:97:b6:71:3d:fc: 6d:22:a1:c2:f8:ed:02:dc:da:97:92:60:31:e4:bd:79:29:0f: 75:03:a0:49:75:d6:eb:a5:42:90:ec:69:bd:09:62:f9:b7:6d: a8:ea:0e:c1:43:0f:a8:88:22:d6:57:c2:44:a5:0e:b3:8e:c5: a8:13:a2:d9:32:88:92:51:a9:02:f5:95:75:70:09:15:35:51: 6f:22:55:4a:51:dc:ef:27:0e:0b:05:0b:59:81:c4:05:40:70: fa:75:e1:1c:19:d9:c4:4b:a6:37:6a:b3:95:f1:2f:1d:32:0b: 52:f2:ad:6b:74:d4:48:68:7f:36:da:d0:4b:b2:6c:e6:32:8c: c7:a1:2d:2f:95:e2:0b:55:d9:f3:c7:8d:6d:f9:3d:1b:0a:44: f4:dd:4c:b0:72:eb:88:11:91:0c:3f:91:50:f8:04:15:be:75: f2:63:d2:3a:7b:6e:44:05:40:e1:f5:b4:b6:6a:6c:00:9b:d8: a8:55:f0:fe:85:22:f3:ad:aa:a1:44:b0:57:9c:fc:0c:c4:2a: ed:ea:ca:ad:75:f7:97:ce:68:e4:1b:29:3c:ea:aa:af:fa:aa: 5d:30:11:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPUtI0xLBbgE+8OeqmHqbijVQm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNTEyMDEyMzU2MzNaFw0yNTEyMDUwMjQ0MzNaMDMxMTAvBgNV BAMTKDMxOTE3NTI0NTU4RTEzNEFGQzEwQkQ3NTgzRTk1RTI0NTU1MjFENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WvufGGm/7qrvjppXYCthxo3+ Vxy9LfKSX7obqrYPkyEBEjjMMmr7QyDjgA4X9PnLAZgBeLF5iVOT40uXVYtwqhlC +PyQhFZGOS1p4EOsHpvo+bV/PIAZK53aE7rXcCGLzVQW9BykDYaQLC+Xb9zsuxrO nhaaUmWlFN28TM9zlX1FQlD7qUqXH1bWCE0zjXgcLvkLcimkMiphAE79ZxclHGYX MbkNpPCxD6VTqkpRtkU1pMtdeuUUtWci6sbimTwJCscogv/vbkXGydU0KONE+3CD tNy630HeBCf2SZSv5Cv95Vz+R3q3oCsqdRG2BE6kQpyTfyOnt2bT4JQ+cFq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZF1JFWOE0r8EL11g+leJFVSHV4wHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtJ4yKY2Lwm4SpEw+5cbyRq9s1KY4DUtqhR BimmYOKXtnE9/G0iocL47QLc2peSYDHkvXkpD3UDoEl11uulQpDsab0JYvm3bajq DsFDD6iIItZXwkSlDrOOxagTotkyiJJRqQL1lXVwCRU1UW8iVUpR3O8nDgsFC1mB xAVAcPp14RwZ2cRLpjdqs5XxLx0yC1LyrWt01Ehofzba0EuybOYyjMehLS+V4gtV 2fPHjW35PRsKRPTdTLBy64gRkQw/kVD4BBW+dfJj0jp7bkQFQOH1tLZqbACb2KhV 8P6FIvOtqqFEsFec/AzEKu3qyq1195fOaOQbKTzqqq/6ql0wER4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:23 2025 by rpki-client