This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: Npj2VPrZCWMEf/yDpJ1fZTHF8sDKkTc6tR5gAxHgGlU= Subject key identifier: 13:6E:9F:4F:1A:D8:3D:1E:7B:69:6C:C3:43:BE:7D:14:66:65:E7:B2 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 7B318E601BB012C1AA0699BB7542CBBB1E7A9CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 0362 Signing time: Mon 01 Dec 2025 08:40:59 +0000 Manifest this update: Mon 01 Dec 2025 08:35:59 +0000 Manifest next update: Thu 04 Dec 2025 14:53:59 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 2: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: HXlY5aPTuwhPkXy2BekpB/8ZMx8y7/HEr0x2hVn7lX8=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:31:8e:60:1b:b0:12:c1:aa:06:99:bb:75:42:cb:bb:1e:7a:9c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Dec 1 08:35:59 2025 GMT Not After : Dec 4 14:53:59 2025 GMT Subject: CN=136E9F4F1AD83D1E7B696CC343BE7D146665E7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:af:e6:e6:9f:fb:1d:1d:02:6e:d8:c9:0b:ac: 53:d6:1d:0b:c7:7e:d2:ea:90:8c:21:2d:f4:36:e7: 0c:51:46:35:57:c6:49:13:7b:a8:f6:e0:bc:6e:5e: 3b:e2:3c:f2:4e:c1:b5:bf:87:dc:8b:1c:3c:04:b2: e6:62:91:4c:28:46:36:94:d0:ef:26:73:66:52:ab: 22:78:cb:58:05:2f:25:4b:62:e2:7e:33:a1:a9:8c: 7e:27:1c:d0:59:83:85:7d:81:bf:65:1f:dc:66:57: 92:96:b5:e0:eb:e1:70:42:4d:a9:70:9f:12:06:32: 03:4e:a4:22:c0:ed:97:21:d0:17:6c:05:2b:e5:8b: 9d:e4:41:0e:bd:9d:bd:69:16:ae:9f:d6:c0:80:52: b0:46:4e:84:fe:17:f5:70:06:f5:e0:47:b4:5e:ef: f8:b7:10:91:73:1a:26:03:08:08:e0:07:a1:bb:37: 14:59:9e:17:3b:69:c7:22:66:6d:bb:52:ea:bd:0d: e6:5d:d8:1b:ca:36:b5:15:85:32:a6:39:cb:61:48: 45:bb:fa:fd:8b:04:5a:49:1d:9f:7e:86:d3:e9:c1: 01:fd:08:d3:ca:5d:8d:bc:c8:18:4f:3b:41:b2:59: 33:91:c2:76:39:cd:89:eb:62:7a:70:e8:37:2e:b7: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:9F:4F:1A:D8:3D:1E:7B:69:6C:C3:43:BE:7D:14:66:65:E7:B2 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:e6:c2:1c:84:c7:93:01:2a:c5:7e:5a:f4:6d:ac:3a:d8: 40:3d:94:39:dc:d3:2b:c4:c3:a3:f1:ae:ce:44:67:81:5c:74: df:58:1e:70:ac:3b:dd:52:20:cc:30:02:68:6f:ae:8f:6e:26: cf:79:9c:e1:74:66:c1:e7:ee:5a:2d:6d:17:2b:65:1b:bb:1a: 90:ac:eb:8f:ee:a0:03:e6:88:2a:e0:ff:75:3e:db:27:79:07: 08:63:bd:4d:b1:e5:8b:2b:ca:27:52:3b:2f:a6:fb:7a:a1:7d: f1:29:6f:0f:c0:f3:45:7f:80:fe:27:bd:a9:b5:c3:23:26:bf: 33:b9:b7:19:b4:69:9c:55:79:67:7c:8b:fe:e1:b9:06:7f:f2: 57:5d:d0:68:55:ed:0e:d6:70:9f:3b:cb:92:b5:2f:0c:2f:1f: c4:e4:8a:e3:f1:c9:26:d7:2e:a0:27:ed:f9:6e:95:a5:da:1a: 27:69:85:9e:2b:9b:05:51:5a:7a:9b:56:99:c4:1f:ce:f3:65: a8:f7:8e:2d:b0:8c:68:fc:70:f5:63:1d:4d:b6:83:89:c4:4d: 5d:58:9b:61:d7:d7:ac:8c:f5:34:10:88:49:b7:4d:53:c8:61: e0:f3:58:91:fd:a0:32:67:a2:7f:f6:2b:a3:f7:a7:a9:c9:f7: b8:05:e2:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezGOYBuwEsGqBpm7dULLux56nPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTEyMDEwODM1NTlaFw0yNTEyMDQxNDUzNTlaMDMxMTAvBgNV BAMTKDEzNkU5RjRGMUFEODNEMUU3QjY5NkNDMzQzQkU3RDE0NjY2NUU3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxr+bmn/sdHQJu2MkLrFPWHQvH ftLqkIwhLfQ25wxRRjVXxkkTe6j24LxuXjviPPJOwbW/h9yLHDwEsuZikUwoRjaU 0O8mc2ZSqyJ4y1gFLyVLYuJ+M6GpjH4nHNBZg4V9gb9lH9xmV5KWteDr4XBCTalw nxIGMgNOpCLA7Zch0BdsBSvli53kQQ69nb1pFq6f1sCAUrBGToT+F/VwBvXgR7Re 7/i3EJFzGiYDCAjgB6G7NxRZnhc7acciZm27Uuq9DeZd2BvKNrUVhTKmOcthSEW7 +v2LBFpJHZ9+htPpwQH9CNPKXY28yBhPO0GyWTORwnY5zYnrYnpw6Dcut16LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE26fTxrYPR57aWzDQ759FGZl57IwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDR5sIchMeTASrFflr0baw62EA9lDnc0yvE w6Pxrs5EZ4FcdN9YHnCsO91SIMwwAmhvro9uJs95nOF0ZsHn7lotbRcrZRu7GpCs 64/uoAPmiCrg/3U+2yd5BwhjvU2x5YsryidSOy+m+3qhffEpbw/A80V/gP4nvam1 wyMmvzO5txm0aZxVeWd8i/7huQZ/8ldd0GhV7Q7WcJ87y5K1LwwvH8TkiuPxySbX LqAn7flulaXaGidphZ4rmwVRWnqbVpnEH87zZaj3ji2wjGj8cPVjHU22g4nETV1Y m2HX16yM9TQQiEm3TVPIYeDzWJH9oDJnon/2K6P3p6nJ97gF4uc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:11 2025 by rpki-client