This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: WKV3I6GcpWbx4Y+KYMIspf3x6YbTh64NdmSXvOLQBAk= Subject key identifier: 08:F0:DC:E6:6E:93:6C:1B:ED:98:F3:B7:7E:7E:23:7D:AD:24:05:E3 Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 183DB14C90A32A518A4E629382F09FEEA8402FB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 01A4 Signing time: Mon 01 Dec 2025 18:11:11 +0000 Manifest this update: Mon 01 Dec 2025 18:06:11 +0000 Manifest next update: Fri 05 Dec 2025 02:36:11 +0000 Files and hashes: 1: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=) 2: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: 3PNCN1x3bz0+fUSiDnwMDeifUahEV1+iN7J/Dn8nM3s=) 3: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=) 4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3d:b1:4c:90:a3:2a:51:8a:4e:62:93:82:f0:9f:ee:a8:40:2f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Dec 1 18:06:11 2025 GMT Not After : Dec 5 02:36:11 2025 GMT Subject: CN=08F0DCE66E936C1BED98F3B77E7E237DAD2405E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:ff:cb:96:af:66:31:5d:43:a8:4e:b5:a6: ac:fc:28:e6:db:02:71:1c:4a:e4:51:ea:cd:3d:2c: c2:bf:56:07:87:6e:48:de:00:88:97:87:39:ca:08: 52:44:53:21:69:b7:02:f0:bf:46:38:8c:2d:ce:5b: bc:0d:1c:52:e7:1b:4e:5c:00:7e:eb:da:c4:ce:3b: 35:cf:0f:29:0e:0b:e8:0b:6c:85:c2:43:96:84:4f: 71:1c:c0:c6:d6:a1:36:bf:3f:27:f8:cd:06:a0:e9: 9a:3a:36:ab:ce:d4:9e:68:cd:e7:2d:ed:e5:e8:bd: 71:43:cc:df:ec:c7:e8:fd:47:3e:17:28:75:7d:92: 5a:65:50:12:c0:80:ba:3f:83:bc:14:43:d2:b7:02: ee:9e:de:3c:3a:4f:b9:c1:9e:2b:50:e1:ac:80:fc: 8f:3b:1e:9f:58:da:44:c1:c4:e1:22:8c:65:d2:2b: db:33:de:4b:6a:c4:1f:19:dd:a9:ff:c0:93:77:21: 11:3f:06:6d:49:fe:99:a2:ec:3c:94:74:59:4f:5e: 02:3e:01:3f:11:d5:3f:eb:c3:7f:3a:25:4e:9b:02: a3:26:1d:0f:2d:ef:3d:02:86:b2:06:f4:b5:5d:ec: 6a:c1:b1:ed:22:cd:c9:bf:b8:1d:ee:07:c8:a8:78: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:DC:E6:6E:93:6C:1B:ED:98:F3:B7:7E:7E:23:7D:AD:24:05:E3 X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7c:92:7d:05:65:80:03:83:b0:84:19:42:73:ad:04:21:91: a1:a2:6a:32:9d:fe:bf:34:72:9d:99:c3:cf:a3:ff:53:8c:98: d9:a8:2a:4d:9e:ef:50:5f:6c:c7:ca:b9:b7:fc:d4:7b:70:e8: 1c:be:7e:4a:ba:0f:29:96:40:f3:b0:32:f3:1e:90:cf:3c:33: ed:8a:27:3a:17:fb:e6:3b:a5:5c:4f:a6:5c:17:85:8c:75:1a: 8e:4e:3d:a8:8a:15:5f:19:36:0e:c5:73:ea:0e:c2:d4:d5:c6: 6e:b4:65:6c:18:74:e8:1d:04:1b:2b:d0:79:d9:4f:80:2c:1d: 81:22:45:8f:cd:2d:99:a8:5c:d2:9b:a2:53:d1:7c:48:81:ff: 64:23:ff:94:6a:17:bf:82:c4:12:73:6d:78:fe:f6:0b:7a:ef: 4b:8a:f7:7b:81:a9:0e:de:89:f5:46:b7:9b:57:33:57:c9:38: 79:c4:6a:33:2b:ce:9d:25:31:e4:c0:0e:a2:ca:ee:db:39:11: 34:a9:54:0f:5f:73:a4:77:ee:03:0a:bb:c9:97:ae:d0:41:07: 3a:21:4a:90:70:5b:d5:3e:70:a9:ac:d2:66:2d:82:9e:7d:11: 0e:db:dd:e4:31:3f:6b:81:91:2c:18:09:1d:70:dd:37:26:ef: 15:1f:8d:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGD2xTJCjKlGKTmKTgvCf7qhAL7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNTEyMDExODA2MTFaFw0yNTEyMDUwMjM2MTFaMDMxMTAvBgNV BAMTKDA4RjBEQ0U2NkU5MzZDMUJFRDk4RjNCNzdFN0UyMzdEQUQyNDA1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCng//Llq9mMV1DqE61pqz8KObb AnEcSuRR6s09LMK/VgeHbkjeAIiXhznKCFJEUyFptwLwv0Y4jC3OW7wNHFLnG05c AH7r2sTOOzXPDykOC+gLbIXCQ5aET3EcwMbWoTa/Pyf4zQag6Zo6NqvO1J5ozect 7eXovXFDzN/sx+j9Rz4XKHV9klplUBLAgLo/g7wUQ9K3Au6e3jw6T7nBnitQ4ayA /I87Hp9Y2kTBxOEijGXSK9sz3ktqxB8Z3an/wJN3IRE/Bm1J/pmi7DyUdFlPXgI+ AT8R1T/rw386JU6bAqMmHQ8t7z0ChrIG9LVd7GrBse0izcm/uB3uB8ioeM/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCPDc5m6TbBvtmPO3fn4jfa0kBeMwHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE58kn0FZYADg7CEGUJzrQQhkaGiajKd/r80 cp2Zw8+j/1OMmNmoKk2e71BfbMfKubf81Htw6By+fkq6DymWQPOwMvMekM88M+2K JzoX++Y7pVxPplwXhYx1Go5OPaiKFV8ZNg7Fc+oOwtTVxm60ZWwYdOgdBBsr0HnZ T4AsHYEiRY/NLZmoXNKbolPRfEiB/2Qj/5RqF7+CxBJzbXj+9gt670uK93uBqQ7e ifVGt5tXM1fJOHnEajMrzp0lMeTADqLK7ts5ETSpVA9fc6R37gMKu8mXrtBBBzoh SpBwW9U+cKms0mYtgp59EQ7b3eQxP2uBkSwYCR1w3Tcm7xUfjdE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:26 2025 by rpki-client