This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: CZKGFrRAfm2Eqrm8BA2P5ILcyzr7AxDVYuemIM9ZWzg= Subject key identifier: BB:B8:AD:70:2A:AE:6A:54:9F:01:32:9B:E6:4D:95:57:12:2E:98:48 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 10B2FA3F11ED2BD4515ACDC82514A7F3FCB3D4BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 0293 Signing time: Mon 29 Dec 2025 07:00:50 +0000 Manifest this update: Mon 29 Dec 2025 06:55:50 +0000 Manifest next update: Thu 01 Jan 2026 12:41:50 +0000 Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: TTvEeur0nfdakGg7M1Xnk4IFH4uJlpAp62pFfJCW0bo=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 12:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b2:fa:3f:11:ed:2b:d4:51:5a:cd:c8:25:14:a7:f3:fc:b3:d4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Dec 29 06:55:50 2025 GMT Not After : Jan 1 12:41:50 2026 GMT Subject: CN=BBB8AD702AAE6A549F01329BE64D9557122E9848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:37:12:6f:08:1a:b8:ab:47:35:0e:52:13: 1f:ef:d0:dc:57:89:0b:3f:17:f9:14:c9:fb:7a:be: be:d5:7d:b4:af:2a:19:89:e3:1b:a2:42:e8:6d:1c: bb:8e:24:eb:97:21:76:1a:c2:47:14:bf:dc:7d:5d: 26:bf:b5:aa:fa:aa:b4:47:e0:91:d2:ec:40:f9:c4: e4:46:2f:08:ed:e3:11:d9:d6:86:b9:3e:8c:ef:ce: d0:41:32:e3:fd:dd:e0:7c:6d:e1:b4:da:d2:32:0e: b2:e3:bf:5d:ae:f5:11:30:ef:26:1b:4c:6c:1a:ae: 63:16:fd:d2:a1:18:d6:e2:54:19:5d:db:d7:80:63: 21:7e:e8:e9:2d:c1:ad:a1:fd:ed:c4:3b:61:e4:c3: 6e:e9:26:5d:5e:83:74:21:3c:65:14:11:3d:7e:8b: a6:1c:89:d3:c4:24:d8:26:54:51:1e:b5:3c:00:a9: c4:90:e5:2a:ca:b8:e2:56:e4:0d:ec:b4:7c:63:38: f7:2c:b3:29:4b:86:51:3b:11:d3:da:20:87:1c:5a: d5:5c:d5:b5:0f:a8:8a:a4:80:46:4f:cc:2d:99:7d: e1:e8:96:59:bd:ef:0f:17:25:f1:22:ee:b6:71:d2: a4:65:f5:34:a5:cd:96:79:42:13:fb:87:aa:c3:56: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:AD:70:2A:AE:6A:54:9F:01:32:9B:E6:4D:95:57:12:2E:98:48 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ff:1b:df:d2:88:b4:4d:3e:c2:09:86:f0:8f:64:c7:df:62: 9c:2f:19:5e:1a:85:b6:66:f0:22:3d:7a:3a:db:bd:68:3a:9b: e0:2a:bb:e6:6c:88:b2:d0:5a:0b:18:aa:cb:f9:3b:33:81:a6: 00:4b:ab:44:18:08:61:5b:a2:e0:8e:13:b3:7d:38:9c:cc:7e: 54:78:98:28:1d:d0:05:39:cb:7f:3d:41:f0:09:34:1d:99:9e: eb:0c:e4:dc:0a:9c:63:76:ff:1e:49:ba:f9:fa:38:49:fc:82: ca:29:82:94:30:db:e2:55:b8:bc:84:09:b4:13:16:75:05:4d: 85:12:0a:4d:e0:1e:b4:30:11:3a:6f:ad:38:00:8a:fd:e4:07: 5c:e6:bc:9d:5b:e2:0d:02:45:42:9f:42:ae:dd:2b:39:06:96: 65:47:dc:5c:71:e8:a7:ce:57:e2:66:19:6a:ee:20:f7:8d:55: 3e:eb:0d:32:cb:34:95:2b:6b:ba:b2:b6:0d:ba:a8:44:31:85: 78:1b:a4:b9:14:0a:38:4b:93:38:82:1f:d8:26:b9:41:a4:3d: c3:32:8a:ae:74:29:2a:53:45:b8:6e:aa:f8:31:97:81:2e:d8: 36:64:a8:8f:0e:aa:5b:e9:d9:b1:6e:b9:1c:1a:f8:de:39:34: a5:cc:36:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELL6PxHtK9RRWs3IJRSn8/yz1LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTEyMjkwNjU1NTBaFw0yNjAxMDExMjQxNTBaMDMxMTAvBgNV BAMTKEJCQjhBRDcwMkFBRTZBNTQ5RjAxMzI5QkU2NEQ5NTU3MTIyRTk4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjXTcSbwgauKtHNQ5SEx/v0NxX iQs/F/kUyft6vr7VfbSvKhmJ4xuiQuhtHLuOJOuXIXYawkcUv9x9XSa/tar6qrRH 4JHS7ED5xORGLwjt4xHZ1oa5PozvztBBMuP93eB8beG02tIyDrLjv12u9REw7yYb TGwarmMW/dKhGNbiVBld29eAYyF+6Oktwa2h/e3EO2Hkw27pJl1eg3QhPGUUET1+ i6YcidPEJNgmVFEetTwAqcSQ5SrKuOJW5A3stHxjOPcssylLhlE7EdPaIIccWtVc 1bUPqIqkgEZPzC2ZfeHollm97w8XJfEi7rZx0qRl9TSlzZZ5QhP7h6rDVrA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7itcCqualSfATKb5k2VVxIumEgwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC//G9/SiLRNPsIJhvCPZMffYpwvGV4ahbZm 8CI9ejrbvWg6m+Aqu+ZsiLLQWgsYqsv5OzOBpgBLq0QYCGFbouCOE7N9OJzMflR4 mCgd0AU5y389QfAJNB2ZnusM5NwKnGN2/x5Juvn6OEn8gsopgpQw2+JVuLyECbQT FnUFTYUSCk3gHrQwETpvrTgAiv3kB1zmvJ1b4g0CRUKfQq7dKzkGlmVH3Fxx6KfO V+JmGWruIPeNVT7rDTLLNJUra7qytg26qEQxhXgbpLkUCjhLkziCH9gmuUGkPcMy iq50KSpTRbhuqvgxl4Eu2DZkqI8Oqlvp2bFuuRwa+N45NKXMNuo= -----END CERTIFICATE-----Generated at Tue Dec 30 07:20:02 2025 by rpki-client