This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: 1pCzfUfLGmkS7CXzoKSjWVxVRiJ1rqcToVk+Pbd9PMU= Subject key identifier: F7:BB:FF:EB:6A:54:2B:90:7C:41:40:67:F3:8A:17:E0:89:4C:0A:D2 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 6E65BE7FFA5B7915DCB6D7ED2567A7873D9C6F11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01C0 Signing time: Mon 01 Dec 2025 07:42:21 +0000 Manifest this update: Mon 01 Dec 2025 07:37:21 +0000 Manifest next update: Thu 04 Dec 2025 17:01:21 +0000 Files and hashes: 1: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=) 2: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: vyewh8srPcPqYmqlfJbFGfy0CT3atirB3bnak8F4GJo=) 3: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: RBXBTLZW8n4PpljcPBc2IThtds8yc4Acph2OG46WKAQ=) 4: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: jSYEjMFXMgVZcL2ZGiFEKnhzKMu/9GiCugDhrbE5OB8=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: C+bYdmCez5iIZyu+2ps5yYRoe335MlICnDmH6/GP+kw=) 6: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: CfvBdS5IBCOEZvX5RPxDKHTHJzQIXXgR8eDjCnOahQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:65:be:7f:fa:5b:79:15:dc:b6:d7:ed:25:67:a7:87:3d:9c:6f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Dec 1 07:37:21 2025 GMT Not After : Dec 4 17:01:21 2025 GMT Subject: CN=F7BBFFEB6A542B907C414067F38A17E0894C0AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:ee:3e:77:62:d4:ae:0f:34:fe:46:95:b1: 01:17:36:9b:0e:fb:bf:86:3a:6e:2f:99:18:33:3e: c1:71:d5:a7:5b:b4:5c:d9:a7:3d:42:6b:95:75:50: d7:16:30:5d:65:50:da:61:07:97:0a:5b:5d:54:ae: 8f:3f:f6:de:75:6c:38:de:6a:26:72:ff:03:70:18: de:d0:81:c8:39:15:57:25:da:22:74:f3:a5:4a:19: 07:e6:06:aa:56:23:0f:c2:c4:40:22:07:ce:f8:46: 71:6b:62:8b:03:86:e3:f7:44:9c:38:90:03:9e:02: 94:f1:73:81:42:3f:aa:14:b3:f6:17:41:90:f1:e3: de:58:94:95:3c:0d:de:45:5d:3c:03:aa:f3:56:d9: ff:26:7a:21:ee:5f:15:53:78:b8:1a:ac:02:61:a0: 0b:ad:da:db:86:09:81:e8:b6:4c:a1:2a:34:54:ef: 48:2b:88:d7:ab:9b:12:41:ef:62:ad:ac:18:de:bb: 04:8f:13:f0:f6:32:1b:70:e1:42:9c:93:41:9d:9f: e8:1f:75:47:07:46:ab:00:12:35:42:e0:bd:7b:2b: b3:10:03:41:36:35:54:bc:23:60:d5:03:0b:1f:8d: 07:56:d4:01:20:96:3b:94:01:82:26:08:f9:a2:c2: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BB:FF:EB:6A:54:2B:90:7C:41:40:67:F3:8A:17:E0:89:4C:0A:D2 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:00:15:59:16:02:15:57:dc:0f:a1:75:20:d4:44:0c:6e:33: 1d:d9:3b:ab:ab:29:76:e4:87:97:e7:b7:67:36:8c:e6:a2:09: 75:7b:19:c0:0a:57:4f:d7:0f:84:a5:d3:5b:bc:4a:94:98:19: 6c:92:90:47:ff:55:04:ea:87:cb:77:7b:a0:2c:61:8f:09:f2: 68:09:07:e2:2a:1e:07:1b:5f:23:70:bb:ef:f1:4b:dc:79:dd: cd:03:5b:de:0f:6d:19:2a:e5:5d:d0:15:86:9d:19:90:09:cf: 94:9c:55:7d:13:f6:98:f6:75:b6:7c:e0:a9:2d:03:aa:63:a0: 80:09:c2:58:36:24:8a:fe:3e:2e:96:d3:6d:5c:8a:1f:91:6b: fe:d7:f2:4a:41:8d:39:26:83:1e:fa:56:96:8f:c8:70:a4:69: 63:0b:fc:c6:fb:d8:6f:9c:ce:d8:d6:4d:8d:5f:e1:72:82:ab: 2c:18:b9:1e:38:23:17:e1:a2:0f:5e:61:5a:76:de:c0:80:e1: 8e:1d:5d:6f:81:04:0c:2d:a4:d1:7f:ef:37:3a:40:e8:53:f5: 6c:88:00:52:c9:0c:df:6f:49:60:ae:e7:b9:f5:07:3c:5f:62: a8:eb:18:50:ae:86:24:f4:36:ff:d9:de:fe:70:07:67:72:bd: cd:88:21:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmW+f/pbeRXcttftJWenhz2cbxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTEyMDEwNzM3MjFaFw0yNTEyMDQxNzAxMjFaMDMxMTAvBgNV BAMTKEY3QkJGRkVCNkE1NDJCOTA3QzQxNDA2N0YzOEExN0UwODk0QzBBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQO4+d2LUrg80/kaVsQEXNpsO +7+GOm4vmRgzPsFx1adbtFzZpz1Ca5V1UNcWMF1lUNphB5cKW11Uro8/9t51bDje aiZy/wNwGN7Qgcg5FVcl2iJ086VKGQfmBqpWIw/CxEAiB874RnFrYosDhuP3RJw4 kAOeApTxc4FCP6oUs/YXQZDx495YlJU8Dd5FXTwDqvNW2f8meiHuXxVTeLgarAJh oAut2tuGCYHotkyhKjRU70griNermxJB72KtrBjeuwSPE/D2Mhtw4UKck0Gdn+gf dUcHRqsAEjVC4L17K7MQA0E2NVS8I2DVAwsfjQdW1AEgljuUAYImCPmiwirjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97v/62pUK5B8QUBn84oX4IlMCtIwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoAFVkWAhVX3A+hdSDURAxuMx3ZO6urKXbk h5fnt2c2jOaiCXV7GcAKV0/XD4Sl01u8SpSYGWySkEf/VQTqh8t3e6AsYY8J8mgJ B+IqHgcbXyNwu+/xS9x53c0DW94PbRkq5V3QFYadGZAJz5ScVX0T9pj2dbZ84Kkt A6pjoIAJwlg2JIr+Pi6W021cih+Ra/7X8kpBjTkmgx76VpaPyHCkaWML/Mb72G+c ztjWTY1f4XKCqywYuR44Ixfhog9eYVp23sCA4Y4dXW+BBAwtpNF/7zc6QOhT9WyI AFLJDN9vSWCu57n1BzxfYqjrGFCuhiT0Nv/Z3v5wB2dyvc2IIX4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:53 2025 by rpki-client