This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: ++gpSr/+crIcdgnu+PcwM9bxvpgNpla7CFkS5F1FcHE= Subject key identifier: 64:A6:2B:6B:C7:4B:49:ED:84:E4:81:23:59:CA:39:F5:42:5B:86:05 Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 37ABB91EC4A4EC3CEA60B7CE42F42251616D828B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 01AD Signing time: Sun 21 Dec 2025 22:21:46 +0000 Manifest this update: Sun 21 Dec 2025 22:16:46 +0000 Manifest next update: Thu 25 Dec 2025 05:32:46 +0000 Files and hashes: 1: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=) 2: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=) 3: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: wsmoxhTc27y6e6Fkvr/Tem3Dk0hVI1X1Y4Ps5NoOWGE=) 4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ab:b9:1e:c4:a4:ec:3c:ea:60:b7:ce:42:f4:22:51:61:6d:82:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Dec 21 22:16:46 2025 GMT Not After : Dec 25 05:32:46 2025 GMT Subject: CN=64A62B6BC74B49ED84E4812359CA39F5425B8605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:1a:48:33:c0:2b:d2:c6:83:a4:6b:6a:b6: 0c:42:3c:ca:e7:fe:1d:9a:8f:67:51:65:6e:e2:ce: da:e1:07:7f:bd:2f:8c:ff:ee:8b:69:67:11:25:78: 94:0c:ad:dc:da:3e:8f:d4:52:02:40:78:aa:63:42: 39:71:f4:4f:ce:45:56:3b:d4:0a:c1:33:9b:24:e7: 39:51:f7:cc:51:49:49:70:bb:dd:4e:0c:b3:6e:53: 8f:f5:f5:52:0d:31:9c:5a:3c:8b:b2:8f:2a:02:63: 4a:3e:55:2f:b9:bc:b0:e6:fb:92:42:17:b3:25:40: c0:d5:29:b0:69:03:d2:c9:5e:ed:9e:77:37:f6:91: 89:7c:df:81:1f:d8:54:6e:35:5a:49:08:1c:25:af: 2f:7a:35:ea:b4:5e:34:06:81:2d:b2:71:4b:86:23: 83:75:2a:eb:6b:04:56:f3:75:8c:97:0c:4f:c7:9f: 77:6c:da:23:e1:58:fa:1c:27:32:02:aa:9c:a2:d4: 6f:fc:f0:93:71:7b:69:fb:73:14:da:61:1a:fc:ce: 14:cf:48:ac:31:c5:19:0f:6c:52:54:f2:fa:65:c2: 93:f7:90:8e:92:90:ec:35:e0:af:a7:91:d4:f2:ea: e3:98:82:e7:08:60:97:ab:a5:30:8d:cb:0f:f7:ba: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A6:2B:6B:C7:4B:49:ED:84:E4:81:23:59:CA:39:F5:42:5B:86:05 X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3d:45:2d:aa:d2:d0:a3:76:f7:b4:d2:fd:29:50:7c:ac:c8: 62:14:1a:f6:4d:0c:8f:75:e5:bb:df:82:c1:62:db:9e:82:27: 3c:16:79:ed:48:0b:2c:a2:36:65:24:b5:f3:b0:04:85:4f:0b: 30:65:ea:f6:58:f1:b2:3f:e5:ab:47:d1:5b:45:4b:37:96:08: 4f:44:68:3f:0b:61:06:2a:1b:ef:96:76:d3:ce:78:1e:9d:bf: 9c:f7:20:68:d1:eb:61:35:d3:c1:37:16:91:83:53:4a:60:ff: ed:41:b9:9a:4f:ad:8b:d9:ba:51:1c:69:5e:ab:98:e0:04:96: a7:1d:d2:48:db:da:69:51:ad:7a:b4:43:27:07:83:2f:2c:0f: b9:32:20:b8:d4:aa:62:a2:1c:72:63:86:ae:e3:d6:18:d8:73: f7:86:df:26:42:0f:be:0f:fb:15:cd:1e:5e:ee:8a:11:be:cf: bf:0b:8a:db:75:d4:ca:95:99:f2:45:14:8e:eb:87:cf:5b:2e: e3:ec:df:42:35:5e:a5:ac:73:38:2c:62:d8:e3:c8:07:4e:cb: bb:bf:d4:c4:f8:32:48:d0:4f:39:6a:ef:17:4d:3f:76:ec:ed: 75:12:1b:f0:b5:f9:f1:86:fb:64:49:e7:21:31:18:48:2e:de: f3:e7:70:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6u5HsSk7DzqYLfOQvQiUWFtgoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNTEyMjEyMjE2NDZaFw0yNTEyMjUwNTMyNDZaMDMxMTAvBgNV BAMTKDY0QTYyQjZCQzc0QjQ5RUQ4NEU0ODEyMzU5Q0EzOUY1NDI1Qjg2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlRpIM8Ar0saDpGtqtgxCPMrn /h2aj2dRZW7iztrhB3+9L4z/7otpZxEleJQMrdzaPo/UUgJAeKpjQjlx9E/ORVY7 1ArBM5sk5zlR98xRSUlwu91ODLNuU4/19VINMZxaPIuyjyoCY0o+VS+5vLDm+5JC F7MlQMDVKbBpA9LJXu2edzf2kYl834Ef2FRuNVpJCBwlry96Neq0XjQGgS2ycUuG I4N1KutrBFbzdYyXDE/Hn3ds2iPhWPocJzICqpyi1G/88JNxe2n7cxTaYRr8zhTP SKwxxRkPbFJU8vplwpP3kI6SkOw14K+nkdTy6uOYgucIYJerpTCNyw/3umIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZKYra8dLSe2E5IEjWco59UJbhgUwHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA9RS2q0tCjdve00v0pUHysyGIUGvZNDI91 5bvfgsFi256CJzwWee1ICyyiNmUktfOwBIVPCzBl6vZY8bI/5atH0VtFSzeWCE9E aD8LYQYqG++WdtPOeB6dv5z3IGjR62E108E3FpGDU0pg/+1BuZpPrYvZulEcaV6r mOAElqcd0kjb2mlRrXq0QycHgy8sD7kyILjUqmKiHHJjhq7j1hjYc/eG3yZCD74P +xXNHl7uihG+z78Litt11MqVmfJFFI7rh89bLuPs30I1XqWsczgsYtjjyAdOy7u/ 1MT4MkjQTzlq7xdNP3bs7XUSG/C1+fGG+2RJ5yExGEgu3vPncJ8= -----END CERTIFICATE-----Generated at Tue Dec 23 06:52:13 2025 by rpki-client