This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json)
Hash identifier: spiNz8A7iEgmrWi5VzgEHuQH8MhFMINgdpxruM73uN8=
Subject key identifier: 2F:06:38:5C:8B:65:19:01:63:9E:A5:15:6E:21:34:20:19:F5:1F:63
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial: 66CF52340DF02314C75B8A39D1693D637B18F0CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
Manifest number: 011F
Signing time: Mon 02 Feb 2026 04:51:32 +0000
Manifest this update: Mon 02 Feb 2026 04:46:32 +0000
Manifest next update: Thu 05 Feb 2026 07:11:32 +0000
Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=)
2: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: 3FVnw8QXirJKDP4YLZ0evRLb3HyhaKgHBDMTzO6fTWQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cf:52:34:0d:f0:23:14:c7:5b:8a:39:d1:69:3d:63:7b:18:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
Validity
Not Before: Feb 2 04:46:32 2026 GMT
Not After : Feb 5 07:11:32 2026 GMT
Subject: CN=2F06385C8B651901639EA5156E21342019F51F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:8e:8b:d7:41:98:b3:1a:b7:57:19:0f:2a:
e0:69:f1:db:3f:2c:3d:5d:af:6a:99:b3:49:d7:11:
9a:df:9f:30:73:89:03:30:cd:de:ab:e4:99:6b:11:
8c:54:af:6e:7c:fb:71:56:d0:52:27:69:d8:80:af:
e8:c4:1f:ca:a0:ee:2d:35:84:fa:85:9f:cc:b9:6d:
e5:ef:a9:82:99:f8:e7:25:cf:e0:83:62:d2:0f:92:
8e:31:62:92:ea:6d:93:a3:e2:ae:1c:1c:aa:7f:1a:
1c:47:da:46:4b:5b:fc:f9:c8:bf:44:67:88:96:0a:
1d:e6:f1:3e:c2:85:4b:8d:a3:1f:e2:97:3a:a1:8a:
2b:bd:84:4d:1e:ba:4b:66:74:42:38:1c:29:65:0f:
a7:08:f3:ba:0e:d7:13:3a:7e:cd:27:f0:7b:16:b7:
0d:6f:1c:97:c6:fe:85:3c:c4:81:0f:43:ca:79:b7:
c7:e3:b8:e0:52:60:98:57:32:51:40:5d:5b:8a:8e:
b5:14:4e:09:88:f8:a8:be:61:c2:34:65:b0:2a:94:
d0:53:84:29:f9:96:98:63:ef:6a:9d:64:7d:ae:b7:
f5:ce:ad:50:a4:46:35:56:f8:82:35:de:c7:a1:8a:
40:0d:40:5f:90:f0:3e:14:f3:a5:56:54:2c:09:8c:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:38:5C:8B:65:19:01:63:9E:A5:15:6E:21:34:20:19:F5:1F:63
X509v3 Authority Key Identifier:
keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:a5:54:9b:62:a1:ca:e7:8b:1f:0a:ae:ba:e7:4e:8c:2d:
cb:90:e4:4d:72:f8:99:1e:d3:cf:1b:68:0f:72:f2:e9:09:8a:
85:a2:57:b6:f6:d9:bd:25:13:b4:da:3a:2b:7a:3f:04:06:bb:
fb:fa:79:73:11:2e:8f:5b:18:c2:0c:19:1f:44:42:62:dd:a2:
89:fc:01:6e:03:c3:a7:b8:cf:c5:63:ac:44:77:cd:40:50:bf:
a5:b3:9e:1c:92:e0:b9:10:63:73:c8:3f:8e:87:a9:f4:47:81:
d7:b6:c1:4b:a1:4b:d2:44:ab:52:fd:62:fb:d4:e5:85:3c:26:
fd:5b:39:16:1c:c4:72:a9:03:c9:eb:87:92:1c:f4:b5:9b:ed:
20:b7:85:0d:06:f8:22:7f:0d:bc:23:aa:65:d8:2c:5b:06:10:
e5:39:24:1f:14:9c:c4:58:8f:e2:32:5d:6a:c3:13:80:e8:1f:
88:73:0a:b3:07:3c:d8:65:68:3c:a4:45:d6:d0:6d:ae:43:df:
72:0d:a1:bb:13:2b:55:88:81:44:77:1b:b0:34:f7:50:c6:e4:
9c:ab:f0:55:13:6e:50:69:de:a4:a1:9f:34:20:bc:49:9f:ba:
cd:9e:e0:5b:8b:46:2c:88:f8:83:67:d7:91:89:d8:53:d8:04:
98:f7:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:26 2026 by rpki-client