This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: QKI/+uU2Ui2nQVncR8gybtFmSWOTkhP7Zsa4epQMWSk= Subject key identifier: CC:4D:AD:19:5C:00:BC:39:29:90:D4:30:D9:7B:EE:FF:9E:BE:BA:1D Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 57812B3EEED362BD45909A2070DEC3C8BD9E8CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 0132 Signing time: Wed 03 Dec 2025 08:51:45 +0000 Manifest this update: Wed 03 Dec 2025 08:46:45 +0000 Manifest next update: Sat 06 Dec 2025 17:12:45 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: KcYP6HA1J2e9x2Uo/e5FvIGa+Vk5DyNV6YegcXuzeCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:81:2b:3e:ee:d3:62:bd:45:90:9a:20:70:de:c3:c8:bd:9e:8c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Dec 3 08:46:45 2025 GMT Not After : Dec 6 17:12:45 2025 GMT Subject: CN=CC4DAD195C00BC392990D430D97BEEFF9EBEBA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:ec:31:85:84:93:db:ec:6e:6d:a0:c1:db: 9e:4c:e8:4d:74:4f:ad:8f:fb:57:58:ba:c0:10:be: 5c:d4:ff:0b:6a:5b:dc:90:f4:69:53:c1:94:60:89: b7:30:8e:1b:f2:39:ba:ef:cd:4b:43:37:31:f4:59: 1c:02:6d:fe:f6:60:67:dc:b7:2d:77:8e:5e:03:22: 0b:65:02:59:ea:00:e6:c2:ac:69:3d:c9:cb:15:0e: 58:0e:c9:15:60:0f:2d:05:e2:8b:0c:61:a1:ff:5d: 11:aa:ce:9a:58:72:57:a6:39:a0:5b:ef:31:bd:9e: ba:d6:9f:db:dd:31:2d:b7:ee:52:41:87:33:8a:b8: 71:63:2b:2b:8b:83:d7:59:3f:d1:13:90:6d:95:03: 4a:90:02:8f:e6:7d:96:6c:d8:f4:a1:af:09:3c:c8: 0a:95:8e:44:2e:59:48:84:16:a2:bb:12:90:64:2c: 4a:ad:ee:2f:b7:bc:b3:cb:56:f7:62:c0:4e:a5:d4: bd:91:da:7e:c9:6a:05:10:c7:6b:23:1b:2e:04:60: 44:3c:0a:59:c0:17:87:46:98:5b:3e:5a:93:b1:12: 9e:52:55:31:d7:79:85:a4:97:0f:96:8b:cb:51:0a: 62:3b:5c:34:ac:cd:8b:8c:ef:1b:c2:71:1e:c5:da: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:AD:19:5C:00:BC:39:29:90:D4:30:D9:7B:EE:FF:9E:BE:BA:1D X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:83:c3:2f:57:50:45:2c:55:ee:78:f1:14:6d:4a:59:6b:37: df:54:ee:cf:9b:e7:52:cc:22:00:f1:88:27:d6:67:72:b3:54: 6c:be:6f:1b:69:89:6c:6f:c8:38:0f:92:39:9b:4d:d1:b8:d0: 10:32:49:88:51:3d:46:f4:0d:e8:f2:42:1b:23:34:f0:33:5e: b5:0f:d8:56:d2:6b:1f:9f:e4:1c:1e:3b:df:3c:92:5f:29:60: 51:4b:d2:75:9a:5e:ef:b6:23:5b:63:92:f6:8d:79:1a:dc:e4: cc:07:a4:d8:00:97:9b:35:95:27:82:d7:9c:03:de:d0:ce:30: 88:8d:dd:da:08:39:63:a6:94:e9:ba:1c:c9:21:56:53:2f:af: 6d:34:60:1e:53:d9:65:30:8a:0b:81:ec:9f:db:d7:b7:04:db: 0b:d3:aa:21:61:17:bd:a4:16:74:9b:a4:49:a1:1f:e9:3a:b9: 6a:1e:ed:d6:75:51:2c:8a:a5:e7:3b:db:6f:43:d9:32:8a:5e: b6:36:18:d2:33:04:a1:44:85:01:39:62:4f:8a:7c:4e:8f:5e: f9:d0:01:30:68:22:1f:e0:5d:de:08:09:19:c0:c2:d6:cd:ea: 1e:81:aa:33:e0:11:f4:ad:6a:3b:a3:78:8d:b0:46:80:23:11: fd:da:43:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4ErPu7TYr1FkJogcN7DyL2ejP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTEyMDMwODQ2NDVaFw0yNTEyMDYxNzEyNDVaMDMxMTAvBgNV BAMTKENDNERBRDE5NUMwMEJDMzkyOTkwRDQzMEQ5N0JFRUZGOUVCRUJBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3OwxhYST2+xubaDB255M6E10 T62P+1dYusAQvlzU/wtqW9yQ9GlTwZRgibcwjhvyObrvzUtDNzH0WRwCbf72YGfc ty13jl4DIgtlAlnqAObCrGk9ycsVDlgOyRVgDy0F4osMYaH/XRGqzppYclemOaBb 7zG9nrrWn9vdMS237lJBhzOKuHFjKyuLg9dZP9ETkG2VA0qQAo/mfZZs2PShrwk8 yAqVjkQuWUiEFqK7EpBkLEqt7i+3vLPLVvdiwE6l1L2R2n7JagUQx2sjGy4EYEQ8 ClnAF4dGmFs+WpOxEp5SVTHXeYWklw+Wi8tRCmI7XDSszYuM7xvCcR7F2isrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzE2tGVwAvDkpkNQw2Xvu/56+uh0wHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGDwy9XUEUsVe548RRtSllrN99U7s+b51LM IgDxiCfWZ3KzVGy+bxtpiWxvyDgPkjmbTdG40BAySYhRPUb0DejyQhsjNPAzXrUP 2FbSax+f5BweO988kl8pYFFL0nWaXu+2I1tjkvaNeRrc5MwHpNgAl5s1lSeC15wD 3tDOMIiN3doIOWOmlOm6HMkhVlMvr200YB5T2WUwiguB7J/b17cE2wvTqiFhF72k FnSbpEmhH+k6uWoe7dZ1USyKpec7229D2TKKXrY2GNIzBKFEhQE5Yk+KfE6PXvnQ ATBoIh/gXd4ICRnAwtbN6h6BqjPgEfStajujeI2wRoAjEf3aQyE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:26 2025 by rpki-client