This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: lHBnN+XBBcHWVhy6zCaSJKQULoKR7X9yGuJHno+oorM= Subject key identifier: DB:1F:94:5D:92:54:32:4D:8A:B6:76:C6:23:54:A1:45:D3:62:5C:98 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 234420EC73B5D655E30092941E6CC305B48FF0BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 0292 Signing time: Fri 26 Dec 2025 20:30:50 +0000 Manifest this update: Fri 26 Dec 2025 20:25:50 +0000 Manifest next update: Tue 30 Dec 2025 06:52:50 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) 2: D1E28E396E82778793018513BD084854BE663886.crl (hash: gg5Mi3BX4ke5uZ8pc8A1tXR9UYFGm2HiaG5MHKfyB60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:44:20:ec:73:b5:d6:55:e3:00:92:94:1e:6c:c3:05:b4:8f:f0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Dec 26 20:25:50 2025 GMT Not After : Dec 30 06:52:50 2025 GMT Subject: CN=DB1F945D9254324D8AB676C62354A145D3625C98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:94:34:7f:82:1d:91:22:33:6f:5c:6d:39: b0:b7:1d:7e:4a:ba:73:d1:cd:21:21:9b:00:a3:eb: 4b:58:a0:48:34:73:b3:ab:6f:82:fd:0d:58:e0:b4: 25:2d:46:bb:4c:d4:0a:b6:c0:30:9c:e4:f0:bd:41: b0:47:b6:fb:16:00:da:eb:7b:68:c0:cb:84:39:fd: b2:34:a8:90:94:4b:ad:a6:70:0b:e7:20:f2:12:da: fc:72:a8:ac:1a:ac:1f:3f:ae:9c:90:64:d9:14:47: 21:33:88:9e:39:2d:63:ee:00:b7:c2:23:20:cd:8e: ac:81:18:53:7a:11:c9:fa:f2:5b:8d:1a:61:b2:35: ad:e2:52:16:45:ab:bf:c2:af:9d:9d:65:59:6e:c7: 51:cf:65:96:36:4d:7b:99:95:f0:cf:c2:7b:d6:f5: 4f:73:e9:e8:82:ec:17:f1:88:21:57:0e:7d:d1:3d: 6e:57:fd:8c:fd:5c:9b:89:fa:11:7d:e4:b4:08:2b: 1b:3b:c8:f4:2c:e4:df:e3:36:19:5e:13:2f:b8:eb: 07:f6:5d:1a:15:e1:ec:2a:5a:3b:bb:1d:c0:24:12: 5b:1e:7b:3e:d5:52:bb:0e:8c:f7:1f:0f:07:05:bb: b7:07:e6:77:ce:aa:a7:c8:90:58:8b:ac:2d:25:1d: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:94:5D:92:54:32:4D:8A:B6:76:C6:23:54:A1:45:D3:62:5C:98 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:af:fc:a9:b0:95:08:47:9b:fe:2e:ba:cb:f8:0d:b9:9e:2f: 36:b4:07:7b:d5:73:f2:8b:38:be:ca:7c:f5:17:93:05:d8:57: 45:19:a0:6f:00:84:29:6a:ea:ed:65:c6:72:cb:22:59:7c:d9: 00:5f:46:28:c5:34:d4:c0:b3:cc:18:84:ec:43:b9:dc:41:df: c1:95:a1:1d:fb:fb:d3:53:62:82:43:86:fb:5c:0c:c5:bf:49: 9a:e9:24:53:b3:f2:96:a9:98:e9:57:a2:7a:bb:e7:c9:5c:dd: 86:4c:92:3d:89:32:43:7f:86:66:1c:33:b2:80:0e:a8:64:90: ee:91:d9:cd:2c:14:0c:07:0e:7c:a8:92:01:b2:7c:29:29:0d: 99:2c:f2:c0:18:14:89:23:18:8a:d1:d5:9c:89:fb:3f:55:46: 8d:36:48:4e:4e:e6:67:12:bb:44:a1:72:34:70:b4:37:74:77: ec:ec:70:9c:cc:6f:07:0a:c7:80:50:5b:97:6e:18:fd:e2:62: 11:0a:b8:e7:e0:21:31:ae:38:04:15:9d:8a:70:8b:de:b7:bf: 78:71:33:a2:2f:dd:38:97:56:15:eb:3b:a8:0b:39:1b:a4:43: c6:14:e7:b7:27:a0:30:4f:28:3d:e8:4b:ce:d4:ca:53:e2:93: 84:77:7c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0Qg7HO11lXjAJKUHmzDBbSP8LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTEyMjYyMDI1NTBaFw0yNTEyMzAwNjUyNTBaMDMxMTAvBgNV BAMTKERCMUY5NDVEOTI1NDMyNEQ4QUI2NzZDNjIzNTRBMTQ1RDM2MjVDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2G5Q0f4IdkSIzb1xtObC3HX5K unPRzSEhmwCj60tYoEg0c7Orb4L9DVjgtCUtRrtM1Aq2wDCc5PC9QbBHtvsWANrr e2jAy4Q5/bI0qJCUS62mcAvnIPIS2vxyqKwarB8/rpyQZNkURyEziJ45LWPuALfC IyDNjqyBGFN6Ecn68luNGmGyNa3iUhZFq7/Cr52dZVlux1HPZZY2TXuZlfDPwnvW 9U9z6eiC7BfxiCFXDn3RPW5X/Yz9XJuJ+hF95LQIKxs7yPQs5N/jNhleEy+46wf2 XRoV4ewqWju7HcAkElseez7VUrsOjPcfDwcFu7cH5nfOqqfIkFiLrC0lHZ9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2x+UXZJUMk2KtnbGI1ShRdNiXJgwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+v/KmwlQhHm/4uusv4DbmeLza0B3vVc/KL OL7KfPUXkwXYV0UZoG8AhClq6u1lxnLLIll82QBfRijFNNTAs8wYhOxDudxB38GV oR37+9NTYoJDhvtcDMW/SZrpJFOz8papmOlXonq758lc3YZMkj2JMkN/hmYcM7KA DqhkkO6R2c0sFAwHDnyokgGyfCkpDZks8sAYFIkjGIrR1ZyJ+z9VRo02SE5O5mcS u0ShcjRwtDd0d+zscJzMbwcKx4BQW5duGP3iYhEKuOfgITGuOAQVnYpwi963v3hx M6Iv3TiXVhXrO6gLORukQ8YU57cnoDBPKD3oS87UylPik4R3fCc= -----END CERTIFICATE-----Generated at Sat Dec 27 07:26:32 2025 by rpki-client