This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: 5O/+7i8WJgzuP1rw0ZyCMMf1gtfVpeC8TaG7qvVETwo= Subject key identifier: 7F:F4:8E:AB:97:14:41:B5:85:C9:45:9C:07:4A:E5:49:A8:AE:3F:28 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 156C9A24B19F7F6C683CE12E9769FAF5960BFE2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01D0 Signing time: Sun 01 Feb 2026 21:21:48 +0000 Manifest this update: Sun 01 Feb 2026 21:16:48 +0000 Manifest next update: Thu 05 Feb 2026 08:25:48 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: TVmrhve3nV264h2tT3DA0BtF8YnIwO/2/KhWCJy2bqc=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: YPnyu3J46S+PNDfPl4x2HfdMro8qcwKYQIJNOuw7SNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6c:9a:24:b1:9f:7f:6c:68:3c:e1:2e:97:69:fa:f5:96:0b:fe:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Feb 1 21:16:48 2026 GMT Not After : Feb 5 08:25:48 2026 GMT Subject: CN=7FF48EAB971441B585C9459C074AE549A8AE3F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:5a:ba:c2:b0:24:e1:2c:77:c0:bd:34:0b: 08:a3:75:d0:8d:4e:3b:4d:ed:09:3c:de:01:b4:74: d9:f2:90:05:aa:31:c9:d3:48:4f:6e:5f:3f:ba:da: ed:d8:4a:80:06:3c:13:2c:d1:75:04:7a:71:ea:7e: 4f:e1:a8:64:aa:00:ae:ba:3a:b6:e7:26:4d:a6:6e: d7:e7:41:06:77:e6:68:a8:af:b6:7c:aa:93:17:94: 03:a6:ac:f8:d3:48:32:bd:12:58:4d:63:6a:fa:4b: 94:88:37:51:dc:93:aa:1b:17:1c:52:f9:c3:a1:71: c9:d2:50:70:c2:28:8f:77:0a:6d:76:d5:31:68:36: f7:7a:37:42:6a:92:ad:15:91:98:78:4f:2e:8d:80: 7f:6d:7e:40:f3:03:72:89:9d:85:23:97:66:4c:95: 62:21:aa:04:33:ac:1d:e6:86:30:5b:00:37:66:92: 92:fe:8e:eb:d9:ad:2f:f3:e8:b1:34:30:01:05:6a: d1:1c:93:00:a0:92:07:fd:5d:79:b3:e2:45:c7:0d: 49:45:69:92:99:32:e0:13:45:7c:1f:41:74:ee:57: b2:75:53:60:8e:9e:78:18:3a:06:44:d3:5f:19:ac: 8c:f7:5c:bf:78:69:01:05:37:f9:57:55:5e:76:9e: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F4:8E:AB:97:14:41:B5:85:C9:45:9C:07:4A:E5:49:A8:AE:3F:28 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:f6:7b:5c:50:12:a9:f4:8e:ce:30:c4:a2:a1:5e:02:b4: e1:42:fe:bd:c5:b6:f8:a8:a2:d4:28:79:99:bd:40:01:5a:2e: 13:3b:23:13:dc:86:bb:37:75:0e:b2:53:59:d2:a2:10:54:b5: bc:0a:1e:58:11:53:26:f6:9d:86:2c:60:55:66:62:79:f6:9c: e6:57:f2:4a:8f:dc:d6:7e:31:6c:23:4f:92:a6:1f:f0:e8:2c: 1d:19:ca:5a:f5:29:5b:97:9e:68:23:09:0b:fd:8b:9e:62:a5: 5b:de:65:31:79:ae:36:d0:e3:db:ca:6a:d4:14:84:c0:2d:af: 12:1f:25:17:bf:95:bd:69:95:c2:cd:51:2e:d4:79:05:20:3c: ff:09:42:dc:c5:8e:d1:11:7c:e5:be:e9:88:ce:5e:1d:d2:ed: b4:40:44:9d:c6:aa:50:46:98:20:18:fc:de:a3:30:a6:b5:cb: 5b:e2:4a:27:f8:f8:20:2b:86:ad:cb:55:79:22:79:57:92:be: 20:b9:42:66:19:6e:0c:4f:96:df:cb:98:70:b8:4c:51:71:39: 9f:9b:37:32:45:3b:a7:66:4c:18:d8:ba:7e:7b:8c:ec:3d:82: 3e:4a:07:41:3d:7f:e9:34:46:a9:e8:1f:4e:cc:e9:2f:02:56: fb:86:4c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWyaJLGff2xoPOEul2n69ZYL/iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNjAyMDEyMTE2NDhaFw0yNjAyMDUwODI1NDhaMDMxMTAvBgNV BAMTKDdGRjQ4RUFCOTcxNDQxQjU4NUM5NDU5QzA3NEFFNTQ5QThBRTNGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEFq6wrAk4Sx3wL00CwijddCN TjtN7Qk83gG0dNnykAWqMcnTSE9uXz+62u3YSoAGPBMs0XUEenHqfk/hqGSqAK66 OrbnJk2mbtfnQQZ35mior7Z8qpMXlAOmrPjTSDK9ElhNY2r6S5SIN1Hck6obFxxS +cOhccnSUHDCKI93Cm121TFoNvd6N0Jqkq0VkZh4Ty6NgH9tfkDzA3KJnYUjl2ZM lWIhqgQzrB3mhjBbADdmkpL+juvZrS/z6LE0MAEFatEckwCgkgf9XXmz4kXHDUlF aZKZMuATRXwfQXTuV7J1U2COnngYOgZE018ZrIz3XL94aQEFN/lXVV52nmO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/SOq5cUQbWFyUWcB0rlSaiuPygwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6d9ntcUBKp9I7OMMSioV4CtOFC/r3Ftvio otQoeZm9QAFaLhM7IxPchrs3dQ6yU1nSohBUtbwKHlgRUyb2nYYsYFVmYnn2nOZX 8kqP3NZ+MWwjT5KmH/DoLB0Zylr1KVuXnmgjCQv9i55ipVveZTF5rjbQ49vKatQU hMAtrxIfJRe/lb1plcLNUS7UeQUgPP8JQtzFjtERfOW+6YjOXh3S7bRARJ3GqlBG mCAY/N6jMKa1y1viSif4+CArhq3LVXkieVeSviC5QmYZbgxPlt/LmHC4TFFxOZ+b NzJFO6dmTBjYun57jOw9gj5KB0E9f+k0RqnoH07M6S8CVvuGTJo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:31 2026 by rpki-client