This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: LhBDTXTvQGCT9RlfOkbEIQwkd9nHV8gmWNPJniwzhi8= Subject key identifier: C9:38:F9:BF:43:32:15:7C:1E:BF:00:5B:5C:23:3A:0B:D8:6F:99:DA Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 73477DFE17DE1D247D2FD504163CA625B0465DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 0284 Signing time: Wed 03 Dec 2025 01:20:44 +0000 Manifest this update: Wed 03 Dec 2025 01:15:44 +0000 Manifest next update: Sat 06 Dec 2025 05:28:44 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: 1W9wj0Rg0px94jPU9eZZeRGNvs8JBXYxsh0gIlmElNI=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:47:7d:fe:17:de:1d:24:7d:2f:d5:04:16:3c:a6:25:b0:46:5d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Dec 3 01:15:44 2025 GMT Not After : Dec 6 05:28:44 2025 GMT Subject: CN=C938F9BF4332157C1EBF005B5C233A0BD86F99DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:10:1d:66:15:e5:67:44:ea:9e:6e:9f:8e: 59:7c:6d:29:25:24:0e:5c:d4:d7:fb:d5:56:b9:35: 90:80:4d:c2:31:3d:5c:73:85:31:bd:c2:a9:cc:8e: 3b:9f:06:6d:66:73:e1:91:f1:e2:c1:65:d5:67:7f: e2:1f:b1:bd:b1:06:0e:59:a2:4e:18:e8:fa:54:36: a2:0d:ff:8a:b4:68:05:e0:13:70:1e:04:db:60:4d: 0b:d1:ce:f4:6f:c7:15:e3:36:c0:50:0e:7f:22:a2: f9:e7:92:fd:aa:36:22:fc:84:f3:d4:d1:8b:93:b5: 62:43:5c:ad:e7:d5:68:e2:2f:db:05:67:cc:58:bb: 0a:91:02:f1:bf:26:66:cb:bb:84:bf:f4:7b:31:d9: 02:bc:13:b6:eb:4c:f7:e7:3a:e5:69:5b:21:59:1b: 37:bb:f1:49:b4:3b:b6:28:84:9c:14:a0:79:96:da: de:39:2f:3b:f9:4d:b5:fd:23:0d:b4:0b:af:7c:6b: 19:d7:50:f2:32:8e:21:b2:cd:ee:4a:65:09:fd:7d: 85:a1:a5:9a:53:92:8c:68:63:fd:a7:8f:b1:2d:bd: 8c:68:db:ec:e5:fa:e0:cb:8b:3e:31:5b:e9:f2:f6: 77:05:82:30:f9:be:9d:fe:00:18:d8:07:9b:2c:88: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:F9:BF:43:32:15:7C:1E:BF:00:5B:5C:23:3A:0B:D8:6F:99:DA X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7f:3f:cf:7a:0e:0f:39:dc:f1:4d:28:47:10:23:f8:68:e7: 32:2c:cb:01:f6:bb:7e:92:17:df:60:4f:c6:31:5b:b4:96:14: e7:68:1d:01:aa:0b:1d:69:3e:b2:85:d6:5e:2d:79:c7:ba:38: 25:fa:b4:90:6b:8a:47:1e:16:97:41:2c:bd:88:85:4b:5b:b0: 65:3f:f1:51:18:87:9d:00:1f:bb:b0:5f:e4:b2:e3:a8:c4:ff: 1e:e0:8e:8c:97:60:10:20:c6:2d:a3:3e:ef:97:db:69:cc:f0: 62:07:8e:a0:03:9b:47:9d:c5:85:2e:63:69:be:ae:17:98:47: 6b:94:86:04:86:21:48:50:41:56:e4:de:62:80:df:82:67:f0: 46:68:1d:7d:62:78:ff:ee:49:6a:68:4a:06:99:7c:99:1c:2f: 04:2c:07:7b:25:5e:bf:68:52:05:16:67:5e:64:0f:13:77:1f: 24:04:9a:7a:32:b4:2e:50:c6:75:49:d5:48:b3:87:7a:92:0c: 2d:09:1c:33:85:ef:6f:d7:97:85:ff:4a:3a:8f:8f:cb:93:39: 38:c2:af:02:d1:69:86:22:3a:21:5a:fb:1d:5b:5f:e9:c0:08: 3e:66:2c:4e:b3:12:5f:ce:89:0c:69:84:36:5f:02:43:ed:b3: 32:10:2f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0d9/hfeHSR9L9UEFjymJbBGXb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNTEyMDMwMTE1NDRaFw0yNTEyMDYwNTI4NDRaMDMxMTAvBgNV BAMTKEM5MzhGOUJGNDMzMjE1N0MxRUJGMDA1QjVDMjMzQTBCRDg2Rjk5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55RAdZhXlZ0Tqnm6fjll8bSkl JA5c1Nf71Va5NZCATcIxPVxzhTG9wqnMjjufBm1mc+GR8eLBZdVnf+Ifsb2xBg5Z ok4Y6PpUNqIN/4q0aAXgE3AeBNtgTQvRzvRvxxXjNsBQDn8iovnnkv2qNiL8hPPU 0YuTtWJDXK3n1WjiL9sFZ8xYuwqRAvG/JmbLu4S/9Hsx2QK8E7brTPfnOuVpWyFZ Gze78Um0O7YohJwUoHmW2t45Lzv5TbX9Iw20C698axnXUPIyjiGyze5KZQn9fYWh pZpTkoxoY/2nj7EtvYxo2+zl+uDLiz4xW+ny9ncFgjD5vp3+ABjYB5ssiPh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTj5v0MyFXwevwBbXCM6C9hvmdowHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF/P896Dg853PFNKEcQI/ho5zIsywH2u36S F99gT8YxW7SWFOdoHQGqCx1pPrKF1l4tece6OCX6tJBrikceFpdBLL2IhUtbsGU/ 8VEYh50AH7uwX+Sy46jE/x7gjoyXYBAgxi2jPu+X22nM8GIHjqADm0edxYUuY2m+ rheYR2uUhgSGIUhQQVbk3mKA34Jn8EZoHX1ieP/uSWpoSgaZfJkcLwQsB3slXr9o UgUWZ15kDxN3HyQEmnoytC5QxnVJ1Uizh3qSDC0JHDOF72/Xl4X/SjqPj8uTOTjC rwLRaYYiOiFa+x1bX+nACD5mLE6zEl/OiQxphDZfAkPtszIQL4I= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:49 2025 by rpki-client