This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: xyytLAPejNMlDKeBpUZ55XYLArY35907AdZEXgN+lXw= Subject key identifier: C3:07:E9:BB:5C:65:B1:E6:E3:00:CD:5D:BA:22:23:9D:BC:CD:2A:F5 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 58262647756B6180414D883624E41679797D0D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 024F Signing time: Mon 01 Dec 2025 16:31:15 +0000 Manifest this update: Mon 01 Dec 2025 16:26:15 +0000 Manifest next update: Fri 05 Dec 2025 01:07:15 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: CXbAIciCbm9S5GR0eVDD9JAZyALLxbyzF6yaePgYUPE=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:26:26:47:75:6b:61:80:41:4d:88:36:24:e4:16:79:79:7d:0d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Dec 1 16:26:15 2025 GMT Not After : Dec 5 01:07:15 2025 GMT Subject: CN=C307E9BB5C65B1E6E300CD5DBA22239DBCCD2AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:8e:d4:dd:5d:d2:c5:a6:63:a3:7e:de:24: db:3b:1a:ed:90:00:27:12:ca:0b:4a:f1:c1:d3:f0: 94:92:65:a2:78:ba:e2:02:80:dd:4a:c5:a7:e8:e9: 5b:12:22:cc:c5:09:2d:e9:89:bf:4f:1b:5b:a6:51: e8:3e:72:09:50:f3:bc:0b:c9:93:71:b9:d1:95:82: 42:53:aa:65:ae:30:d0:51:ae:dd:33:8c:23:d5:1e: f5:d1:81:68:e9:77:89:e7:e9:f7:3a:61:f0:a6:a4: 61:23:a3:cb:4e:30:a4:b8:d9:5f:6c:ee:17:6d:f1: b4:ca:ca:1e:ac:a1:0f:f8:ca:92:43:12:29:8e:61: 26:e9:05:02:88:55:c1:7f:d2:ef:47:13:ea:b4:53: 67:24:e2:2a:64:f9:e1:58:63:c2:b8:78:80:c9:fd: 3c:43:d6:8e:e5:8e:34:98:90:92:22:65:db:b9:ce: 40:d1:0d:b5:21:5e:ab:f3:1c:16:6a:66:b9:f9:42: 08:06:d1:47:4f:0f:fe:93:19:e0:ed:ab:29:d3:42: 74:43:22:fe:28:6e:66:f6:e6:f9:1c:63:92:74:03: a9:16:ea:1e:37:3f:49:2e:a4:19:3c:0f:4e:6b:23: 10:87:5b:ca:9c:70:d4:f5:0b:e3:97:ff:e9:59:35: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:E9:BB:5C:65:B1:E6:E3:00:CD:5D:BA:22:23:9D:BC:CD:2A:F5 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e3:db:40:89:3c:41:e7:cb:e0:0e:b1:23:24:41:b1:21:65: 19:29:9c:df:76:b4:a9:00:c2:e3:b1:2e:b6:3a:24:d5:27:b2: 1c:f3:4c:42:fc:40:d1:c6:f1:0f:36:de:32:c1:53:12:c7:75: 3d:5d:3d:95:7d:fb:f9:e2:dc:7d:f8:a5:70:12:6f:35:b1:19: 38:14:8a:91:62:26:75:de:b0:8a:5d:b9:99:ed:e7:69:fa:2a: c7:3a:f3:f5:f0:cb:fa:07:17:e4:97:89:a5:ba:a2:ee:34:41: 07:81:35:cb:92:1a:fd:2c:17:92:d6:34:b0:38:5c:e8:46:72: 75:f2:09:76:e9:36:95:ee:8d:11:11:ce:58:42:4d:dc:3b:c5: 22:ac:2c:e2:fc:a2:47:32:50:17:7f:cd:76:63:0a:4e:45:39: 48:4e:dd:0d:25:96:5d:3a:79:60:4d:bd:fe:1f:d6:1f:ac:82: ee:80:b8:fc:a2:d6:db:0f:d8:02:ff:b4:a2:61:0a:50:b7:24: 47:ba:69:69:06:d8:0e:f7:e8:df:7d:ed:a4:b1:2e:a1:1d:8f: ac:06:d2:06:fa:13:6b:53:72:3d:ae:ef:ce:3a:3f:21:97:ce: 37:c6:c3:8c:b6:59:f1:05:bc:9a:f7:04:ad:46:d1:8a:ac:7a: e0:cb:29:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCYmR3VrYYBBTYg2JOQWeXl9DY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEyMDExNjI2MTVaFw0yNTEyMDUwMTA3MTVaMDMxMTAvBgNV BAMTKEMzMDdFOUJCNUM2NUIxRTZFMzAwQ0Q1REJBMjIyMzlEQkNDRDJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5o7U3V3SxaZjo37eJNs7Gu2Q ACcSygtK8cHT8JSSZaJ4uuICgN1Kxafo6VsSIszFCS3pib9PG1umUeg+cglQ87wL yZNxudGVgkJTqmWuMNBRrt0zjCPVHvXRgWjpd4nn6fc6YfCmpGEjo8tOMKS42V9s 7hdt8bTKyh6soQ/4ypJDEimOYSbpBQKIVcF/0u9HE+q0U2ck4ipk+eFYY8K4eIDJ /TxD1o7ljjSYkJIiZdu5zkDRDbUhXqvzHBZqZrn5QggG0UdPD/6TGeDtqynTQnRD Iv4obmb25vkcY5J0A6kW6h43P0kupBk8D05rIxCHW8qccNT1C+OX/+lZNTa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwfpu1xlsebjAM1duiIjnbzNKvUwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILj20CJPEHny+AOsSMkQbEhZRkpnN92tKkA wuOxLrY6JNUnshzzTEL8QNHG8Q823jLBUxLHdT1dPZV9+/ni3H34pXASbzWxGTgU ipFiJnXesIpduZnt52n6Ksc68/Xwy/oHF+SXiaW6ou40QQeBNcuSGv0sF5LWNLA4 XOhGcnXyCXbpNpXujRERzlhCTdw7xSKsLOL8okcyUBd/zXZjCk5FOUhO3Q0lll06 eWBNvf4f1h+sgu6AuPyi1tsP2AL/tKJhClC3JEe6aWkG2A736N997aSxLqEdj6wG 0gb6E2tTcj2u7846PyGXzjfGw4y2WfEFvJr3BK1G0YqseuDLKZs= -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:10 2025 by rpki-client