This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: 6WmWdrg4IgCRRrCirJhZCgDpdgHtQKZ5pQ6/EhVzOns= Subject key identifier: 07:DF:5C:C8:2B:AD:F9:E5:FB:FD:FD:C9:24:05:D7:0E:3A:9D:94:4D Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 41A9EC786232506555B736ACAB08B07CA8BECA4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 028E Signing time: Wed 17 Dec 2025 19:40:50 +0000 Manifest this update: Wed 17 Dec 2025 19:35:50 +0000 Manifest next update: Sun 21 Dec 2025 00:47:50 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) 2: D1E28E396E82778793018513BD084854BE663886.crl (hash: 5vLCpTqoXqcdw+DoOjkIVN/d+d/935LwmhBPFhIihq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a9:ec:78:62:32:50:65:55:b7:36:ac:ab:08:b0:7c:a8:be:ca:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Dec 17 19:35:50 2025 GMT Not After : Dec 21 00:47:50 2025 GMT Subject: CN=07DF5CC82BADF9E5FBFDFDC92405D70E3A9D944D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:98:44:87:a1:3c:34:e7:64:d8:65:b8:7f: f5:7b:f5:b2:4e:cc:03:cc:6e:a6:1b:12:11:c7:00: a0:c6:68:19:c2:7b:49:1e:2c:76:ec:a3:b9:e3:70: bb:8f:3e:c5:4a:86:84:ef:c4:67:ff:a0:cb:43:bc: fc:86:b4:c6:03:8c:b2:d6:aa:08:73:f1:e9:61:60: d9:93:8b:9f:c4:25:ea:b1:1a:28:0f:85:41:4b:6e: e8:70:6e:c0:aa:68:c0:57:8c:fb:4f:7d:d2:36:a3: fc:08:26:bc:e9:07:5f:82:84:6d:ad:87:65:0c:56: 22:21:c8:62:39:1c:e8:a1:6d:aa:28:4b:37:24:b5: 6b:93:40:f8:12:4d:2e:6a:45:e9:30:46:33:71:ba: ac:44:7e:49:1c:f9:2b:11:a2:34:86:d2:73:b0:4c: 4a:fd:61:7e:32:83:e1:a1:05:c5:72:72:f4:7d:0c: e8:34:32:af:7a:d0:fa:5c:73:c3:1e:d7:37:79:c6: 5d:41:8c:3f:ae:5d:00:2a:bb:66:6b:6a:89:5e:cd: f4:2e:d6:6e:c3:77:f0:ac:d4:97:4b:d9:f4:52:63: cb:83:8d:0c:c4:7e:82:85:45:87:80:8c:1d:d2:72: 2a:b5:fe:76:14:32:c4:16:79:0e:47:78:93:77:60: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:5C:C8:2B:AD:F9:E5:FB:FD:FD:C9:24:05:D7:0E:3A:9D:94:4D X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a6:57:83:29:87:1a:f1:cd:45:38:68:34:98:4a:a1:41:e8: 29:7c:e5:a7:1b:da:67:c0:58:b2:e4:c2:e2:28:74:3f:85:74: 46:cb:b2:0d:7c:a9:38:55:00:0a:4c:6e:53:15:3e:ce:71:aa: 27:57:51:16:59:d3:11:cb:d7:83:3b:ce:c5:5f:91:5d:c7:21: 06:de:4f:04:de:20:97:b5:f1:db:05:c2:d2:01:d9:a5:02:34: e6:97:f4:00:9b:a3:eb:47:d5:0f:80:76:9a:84:00:16:b2:2a: 70:1a:f0:2f:b9:0f:a3:e9:7e:dd:bb:47:eb:0c:6e:8f:77:8d: 8f:12:8b:df:b7:0d:08:55:08:f7:71:7d:05:11:14:fd:b0:b8: 81:bd:32:14:da:b9:9f:b1:54:93:60:08:e8:da:cb:05:07:97: 6b:82:fe:c1:1a:0a:fb:fb:0e:d7:d3:e1:85:30:a0:bf:d4:02: f7:e4:12:dc:be:d8:31:23:47:85:50:90:7a:49:4e:65:bb:96: 4a:8f:2d:55:c2:4d:0c:65:cf:61:39:82:44:22:8a:42:2b:ec: 91:55:0d:8c:3a:f0:91:ba:fd:ba:56:20:a2:9c:c2:f2:f3:1a: 3b:64:77:48:97:62:98:df:ed:fe:7b:d3:57:e4:6a:54:99:8f: 58:68:76:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQanseGIyUGVVtzasqwiwfKi+yk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTEyMTcxOTM1NTBaFw0yNTEyMjEwMDQ3NTBaMDMxMTAvBgNV BAMTKDA3REY1Q0M4MkJBREY5RTVGQkZERkRDOTI0MDVENzBFM0E5RDk0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WphEh6E8NOdk2GW4f/V79bJO zAPMbqYbEhHHAKDGaBnCe0keLHbso7njcLuPPsVKhoTvxGf/oMtDvPyGtMYDjLLW qghz8elhYNmTi5/EJeqxGigPhUFLbuhwbsCqaMBXjPtPfdI2o/wIJrzpB1+ChG2t h2UMViIhyGI5HOihbaooSzcktWuTQPgSTS5qRekwRjNxuqxEfkkc+SsRojSG0nOw TEr9YX4yg+GhBcVycvR9DOg0Mq960Ppcc8Me1zd5xl1BjD+uXQAqu2ZraolezfQu 1m7Dd/Cs1JdL2fRSY8uDjQzEfoKFRYeAjB3Sciq1/nYUMsQWeQ5HeJN3YP8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB99cyCut+eX7/f3JJAXXDjqdlE0wHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFemV4MphxrxzUU4aDSYSqFB6Cl85acb2mfA WLLkwuIodD+FdEbLsg18qThVAApMblMVPs5xqidXURZZ0xHL14M7zsVfkV3HIQbe TwTeIJe18dsFwtIB2aUCNOaX9ACbo+tH1Q+AdpqEABayKnAa8C+5D6Ppft27R+sM bo93jY8Si9+3DQhVCPdxfQURFP2wuIG9MhTauZ+xVJNgCOjaywUHl2uC/sEaCvv7 DtfT4YUwoL/UAvfkEty+2DEjR4VQkHpJTmW7lkqPLVXCTQxlz2E5gkQiikIr7JFV DYw68JG6/bpWIKKcwvLzGjtkd0iXYpjf7f5701fkalSZj1hodgc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:29 2025 by rpki-client