This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: HgKoBMTGhQfvEWbkxbLfQQxGOZpItUpfo0vSQgEUxKA= Subject key identifier: 9C:AF:DE:67:A5:27:1A:0A:45:62:D5:7C:60:8F:18:AC:1F:5F:6E:85 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 62C7B8FC8E40EA18C91D33C1A63715C13D91DA6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 026B Signing time: Sat 31 Jan 2026 07:21:17 +0000 Manifest this update: Sat 31 Jan 2026 07:16:17 +0000 Manifest next update: Tue 03 Feb 2026 11:03:17 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: 3T9C/u80Mnp6XEEpjf0S6hv3chw0HjcNUm3dxGiXuHQ=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: xmE/JEyhXthuYU++MAzsO/GoVJLu7FXPu8oedNkxkIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c7:b8:fc:8e:40:ea:18:c9:1d:33:c1:a6:37:15:c1:3d:91:da:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Jan 31 07:16:17 2026 GMT Not After : Feb 3 11:03:17 2026 GMT Subject: CN=9CAFDE67A5271A0A4562D57C608F18AC1F5F6E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:67:91:9d:53:b2:31:a0:48:6a:18:96:db: ec:6d:d6:66:b5:63:cc:58:df:c9:48:e6:a4:b7:aa: 2d:ea:68:09:3d:60:98:ce:9b:63:46:cb:97:0f:86: b6:f6:0f:bd:d6:6a:69:5c:55:3f:f7:af:d5:24:4e: 32:dd:8b:4f:20:84:98:b2:e0:92:c9:85:b1:96:cd: 7f:b9:40:f3:5e:22:7e:d9:d2:50:44:81:a8:df:87: ad:1e:df:00:ff:94:09:f0:59:60:7d:7c:63:64:3b: 78:fd:a5:c9:1c:6c:bd:06:10:21:8b:60:49:f4:a7: 4a:7c:bc:f5:d8:cf:6c:23:21:92:53:b9:85:d1:3a: 8d:13:dc:40:6f:08:1d:d9:74:56:c0:08:11:de:a0: 8e:d8:67:2f:11:4e:21:5c:98:83:f5:23:c0:5d:eb: eb:7f:0f:b7:32:46:65:7f:65:c7:3b:92:ff:0f:8b: c5:7d:fb:73:fa:14:d8:d8:b6:21:d6:ce:a0:21:8f: a9:d1:f9:89:5a:4e:ee:70:12:8b:93:8e:25:96:9d: 69:15:bd:19:be:e5:de:fb:b9:b2:dd:98:2d:53:be: 1c:4c:7e:db:22:53:ae:cb:74:d9:bd:5a:37:8e:32: bd:b3:6a:f8:1d:97:b8:a4:af:16:a4:da:61:46:12: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:DE:67:A5:27:1A:0A:45:62:D5:7C:60:8F:18:AC:1F:5F:6E:85 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:31:ad:de:08:59:6e:b2:1a:8a:94:35:3e:fa:9e:e0:8c: b0:26:b6:f6:ea:c5:a1:8b:0e:b1:2f:54:68:b5:e8:11:0b:4e: a2:ee:a3:67:62:b2:97:7a:96:65:bf:f4:8e:ba:b8:03:19:62: 32:be:db:46:39:79:8b:b3:af:f5:f3:9d:5c:eb:b5:e2:95:54: a5:cf:7f:d2:8f:7a:44:a6:60:0d:39:b2:c0:a3:43:11:00:75: 5c:4a:b5:b6:11:37:32:25:fc:41:25:0a:e4:13:67:b0:98:2a: c3:dd:72:19:ca:f3:d5:0d:94:47:82:4b:90:00:8e:3b:9a:fa: 79:b7:40:aa:69:c5:09:b0:f8:8b:f7:4f:0a:03:b7:cd:39:b1: f7:1a:0d:bc:72:0d:68:79:42:89:00:a4:d7:7e:6d:a1:25:37: 81:b8:f4:89:c6:42:57:bf:4a:b7:08:d3:f5:8b:24:d1:77:aa: 83:a0:38:8c:33:26:f5:b8:00:20:65:eb:b7:27:7d:fb:1b:66: 88:bd:62:af:c8:a8:d5:c2:81:60:be:68:e3:8a:f9:09:f0:0d: c9:66:b5:c1:5f:c2:a3:85:5a:c8:18:ab:43:2e:55:b4:66:39: 95:01:cd:4e:36:00:14:9d:78:a3:7e:63:ba:ac:ad:8b:66:53: 47:15:84:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYse4/I5A6hjJHTPBpjcVwT2R2m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNjAxMzEwNzE2MTdaFw0yNjAyMDMxMTAzMTdaMDMxMTAvBgNV BAMTKDlDQUZERTY3QTUyNzFBMEE0NTYyRDU3QzYwOEYxOEFDMUY1RjZFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjGeRnVOyMaBIahiW2+xt1ma1 Y8xY38lI5qS3qi3qaAk9YJjOm2NGy5cPhrb2D73WamlcVT/3r9UkTjLdi08ghJiy 4JLJhbGWzX+5QPNeIn7Z0lBEgajfh60e3wD/lAnwWWB9fGNkO3j9pckcbL0GECGL YEn0p0p8vPXYz2wjIZJTuYXROo0T3EBvCB3ZdFbACBHeoI7YZy8RTiFcmIP1I8Bd 6+t/D7cyRmV/Zcc7kv8Pi8V9+3P6FNjYtiHWzqAhj6nR+YlaTu5wEouTjiWWnWkV vRm+5d77ubLdmC1TvhxMftsiU67LdNm9WjeOMr2zavgdl7ikrxak2mFGEmpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnK/eZ6UnGgpFYtV8YI8YrB9fboUwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjoMa3eCFlushqKlDU++p7gjLAmtvbqxaGL DrEvVGi16BELTqLuo2dispd6lmW/9I66uAMZYjK+20Y5eYuzr/XznVzrteKVVKXP f9KPekSmYA05ssCjQxEAdVxKtbYRNzIl/EElCuQTZ7CYKsPdchnK89UNlEeCS5AA jjua+nm3QKppxQmw+Iv3TwoDt805sfcaDbxyDWh5QokApNd+baElN4G49InGQle/ SrcI0/WLJNF3qoOgOIwzJvW4ACBl67cnffsbZoi9Yq/IqNXCgWC+aOOK+QnwDclm tcFfwqOFWsgYq0MuVbRmOZUBzU42ABSdeKN+Y7qsrYtmU0cVhCw= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:00 2026 by rpki-client