This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: E9pG8iIW8ednRP6a9WqdO/0io5mzOdAdtlW1Pl7cXso= Subject key identifier: D7:57:3E:3B:C8:39:18:4B:EF:C8:F6:07:7F:FF:D8:03:2F:3F:AE:A1 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 584DFCB6244C416DAA1D5FAB9FCFF778E550AF6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01B4 Signing time: Tue 02 Dec 2025 06:21:44 +0000 Manifest this update: Tue 02 Dec 2025 06:16:44 +0000 Manifest next update: Fri 05 Dec 2025 10:46:44 +0000 Files and hashes: 1: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: vGIxlV9YtBNrSjNSGefmawbredDx00x/yHOwH+rY3V4=) 2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: pl2aC0IIT/dgK9CaNgkJgYKAwqoRPa5nJhThVhYqZNE=) 3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: wHrBa+c+ly9WQVtUTnKCsmph42u67ih6vTR7IaW+QU0=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: ZzonM3LG74Q/floyou6ghQdc5wNDGTAm+n820HmsJq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4d:fc:b6:24:4c:41:6d:aa:1d:5f:ab:9f:cf:f7:78:e5:50:af:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Dec 2 06:16:44 2025 GMT Not After : Dec 5 10:46:44 2025 GMT Subject: CN=D7573E3BC839184BEFC8F6077FFFD8032F3FAEA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:0b:05:f3:fc:3b:88:25:2e:0a:57:f3:f1: 6b:a3:7f:af:b6:ce:c5:f1:ea:6c:27:77:64:f5:3a: 1d:88:51:9b:34:9e:4c:b6:2e:2d:14:a6:c1:35:a0: 82:97:af:ba:75:16:b3:65:a7:d5:a0:1f:41:de:d2: f1:ba:79:da:0c:fb:93:18:23:58:2c:51:0f:fc:04: 29:b7:8b:3c:8f:3d:6b:41:f5:6d:ec:17:59:ef:92: 9b:4a:1a:fc:67:d1:33:2c:f2:50:bf:25:9f:69:83: c7:c9:ce:cf:10:4b:3a:da:24:3f:b2:a1:91:d8:70: 45:c5:22:ce:98:b3:ee:f7:75:21:0f:87:ab:36:34: cf:c7:79:1b:2f:e5:64:72:65:e9:59:7b:41:42:5d: 42:73:c7:9b:8c:6e:6f:ab:31:46:93:27:f7:ff:98: e8:62:8c:18:3b:ef:9a:34:19:98:08:a2:34:36:f3: 48:3c:e3:9c:03:83:09:69:34:83:fc:d9:57:0c:fe: b7:d6:75:b1:c6:f2:c1:26:bf:9b:ee:0c:0b:af:b8: 6f:a2:f8:2e:c1:32:f7:cf:f9:d3:62:39:51:e2:7a: a5:49:fe:2c:af:e8:a4:e9:4c:2a:6f:9c:4d:53:74: 68:57:7d:7d:c6:08:0b:f3:e4:64:52:e4:12:1e:3d: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:3E:3B:C8:39:18:4B:EF:C8:F6:07:7F:FF:D8:03:2F:3F:AE:A1 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:19:bd:80:a6:91:14:fa:af:bc:c3:cb:f7:93:b8:08:7d:0d: 0f:ff:bc:86:de:c1:4b:1b:3f:77:20:3e:8b:33:11:55:f8:bc: b4:40:b8:34:69:c6:ff:c5:40:8d:0e:5b:88:40:7b:94:1f:94: 08:24:0e:bb:d5:eb:f1:d7:a6:05:06:74:77:5e:54:da:2e:0c: fc:56:ec:91:1b:66:aa:0a:c8:30:0e:db:10:8c:06:c1:22:a0: 8d:31:12:98:7f:1f:e8:24:28:37:0d:44:e1:44:f3:eb:58:c9: 2c:a4:9e:9e:bd:b1:7d:c6:0d:9a:fe:c6:65:f4:02:05:c6:53: 26:d3:bb:37:6b:76:65:ac:f2:cd:53:7e:65:a4:4d:4a:e8:6a: 2b:85:47:2e:c9:2e:2b:da:36:78:7b:0c:05:ec:2c:0c:0a:77: 51:fe:40:51:08:30:e7:3c:2c:92:0d:9c:04:83:11:01:a7:3a: 76:93:ed:d9:b3:d6:6e:8d:a2:fe:5e:ba:1a:f9:12:76:49:3f: 7a:9c:aa:57:17:21:51:0c:b3:c7:bc:0a:0a:3d:0c:8a:f1:66: 15:be:0d:44:ad:17:e8:70:f0:c1:03:3c:76:ba:1e:4e:3c:df: 41:c2:96:34:52:37:b4:16:36:7d:69:d8:a7:f6:1a:a2:d8:6f: 48:4d:6c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWE38tiRMQW2qHV+rn8/3eOVQr2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNTEyMDIwNjE2NDRaFw0yNTEyMDUxMDQ2NDRaMDMxMTAvBgNV BAMTKEQ3NTczRTNCQzgzOTE4NEJFRkM4RjYwNzdGRkZEODAzMkYzRkFFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAQsF8/w7iCUuClfz8Wujf6+2 zsXx6mwnd2T1Oh2IUZs0nky2Li0UpsE1oIKXr7p1FrNlp9WgH0He0vG6edoM+5MY I1gsUQ/8BCm3izyPPWtB9W3sF1nvkptKGvxn0TMs8lC/JZ9pg8fJzs8QSzraJD+y oZHYcEXFIs6Ys+73dSEPh6s2NM/HeRsv5WRyZelZe0FCXUJzx5uMbm+rMUaTJ/f/ mOhijBg775o0GZgIojQ280g845wDgwlpNIP82VcM/rfWdbHG8sEmv5vuDAuvuG+i +C7BMvfP+dNiOVHieqVJ/iyv6KTpTCpvnE1TdGhXfX3GCAvz5GRS5BIePXGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11c+O8g5GEvvyPYHf//YAy8/rqEwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8ZvYCmkRT6r7zDy/eTuAh9DQ//vIbewUsb P3cgPoszEVX4vLRAuDRpxv/FQI0OW4hAe5QflAgkDrvV6/HXpgUGdHdeVNouDPxW 7JEbZqoKyDAO2xCMBsEioI0xEph/H+gkKDcNROFE8+tYySyknp69sX3GDZr+xmX0 AgXGUybTuzdrdmWs8s1TfmWkTUroaiuFRy7JLivaNnh7DAXsLAwKd1H+QFEIMOc8 LJINnASDEQGnOnaT7dmz1m6Nov5euhr5EnZJP3qcqlcXIVEMs8e8Cgo9DIrxZhW+ DUStF+hw8MEDPHa6Hk4830HCljRSN7QWNn1p2Kf2GqLYb0hNbIs= -----END CERTIFICATE-----Generated at Wed Dec 3 15:43:37 2025 by rpki-client