This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: 2GbWvhxZ3+8+mhR0Dr6XoU7amhxws54SgPE0QfHmTUI= Subject key identifier: 25:7E:E1:82:90:82:AC:E8:AD:D1:6B:5A:EC:3E:A3:20:7A:9F:D4:8F Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 5253BE8BB14E2B42AB9B481733F5B2DE3A6668AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 022B Signing time: Thu 18 Dec 2025 12:22:12 +0000 Manifest this update: Thu 18 Dec 2025 12:17:12 +0000 Manifest next update: Sun 21 Dec 2025 17:55:12 +0000 Files and hashes: 1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: KR+U5+CtfTbuMw9Ja6F2qaYWki/MncYujZFqNMqMEmA=) 2: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: nfbRSnlG//ZRSW6EOv/DCvXGN1H1XD0xJADQSEpFd9M=) 3: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 79HlO+LSLY3tmhIbxY08KatYQ7yRtRdViTkMJQak98w=) 4: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: mUWK0YKe3566Wh5cI0OkdARZoIJpWF4UZkK4KY+Au0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:53:be:8b:b1:4e:2b:42:ab:9b:48:17:33:f5:b2:de:3a:66:68:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Dec 18 12:17:12 2025 GMT Not After : Dec 21 17:55:12 2025 GMT Subject: CN=257EE1829082ACE8ADD16B5AEC3EA3207A9FD48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:73:61:5c:6e:2b:0b:54:ac:3e:06:3d:b9: b1:b6:8a:0d:8e:67:20:6e:dc:38:11:8f:a5:60:14: 4c:17:bd:f7:91:fc:f4:bd:34:27:5f:53:bf:e8:3a: cc:8e:fc:f5:f6:73:5a:b7:7d:58:23:0a:13:f2:59: 73:e3:26:6b:a2:e2:0b:be:dd:a8:24:31:78:fc:15: 7d:5e:be:65:10:cc:ca:8e:63:92:c1:b6:dc:24:ac: e6:56:bb:8a:c4:f7:00:19:59:fc:0f:91:af:27:e9: b7:4c:21:37:46:ce:f6:37:61:2e:96:a8:e8:cd:cb: 3e:38:ee:37:c8:78:81:3f:03:ff:42:61:d9:d9:57: 56:c4:53:f9:cf:b0:20:54:ff:2d:47:2d:04:d4:29: 93:ff:3b:ff:23:a5:47:0e:01:2a:8c:10:43:1a:32: be:d7:04:80:59:cd:e3:74:6d:90:77:06:7b:e3:e0: 3b:92:eb:25:48:c7:5d:e6:f2:65:78:50:83:bd:9e: e6:54:a6:65:57:01:49:28:05:a7:78:bb:74:bb:81: f7:3d:b2:9b:2b:bb:f8:ec:c8:87:88:1d:7b:94:5c: 92:d1:f6:81:15:8b:74:f9:8f:56:66:e7:4d:e1:54: 2b:84:3c:32:0f:10:94:a2:a9:9a:8d:06:0d:ac:83: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7E:E1:82:90:82:AC:E8:AD:D1:6B:5A:EC:3E:A3:20:7A:9F:D4:8F X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2b:17:47:5e:9b:79:c2:95:1a:5f:37:7c:9f:30:c3:03:f3: c9:b8:5c:f1:74:a7:f8:48:fd:9a:dd:3b:2d:7b:19:a5:f3:d8: 82:6d:76:67:6e:7d:70:fd:1c:b1:41:40:ff:43:f9:23:bc:14: 9b:19:b9:33:1c:bd:25:ed:56:df:77:e7:28:0f:6d:14:40:84: 82:80:e3:c3:ce:f5:3b:7f:ae:3b:05:84:c3:06:93:4a:11:d4: c9:da:b7:f2:2f:2d:f5:a4:a0:77:53:a1:49:ce:d7:4b:79:1c: 4b:47:24:b1:b6:1c:76:d8:e5:29:c5:ae:1a:4b:35:05:74:a5: 42:8e:dd:f4:bf:42:e6:bf:2b:c4:1a:29:99:34:65:9b:22:89: 2d:ec:2b:97:e0:c2:f5:1b:24:27:48:35:a2:e5:fa:91:de:a4: 2f:49:d6:55:39:7d:0c:3e:39:2a:7c:f7:b9:08:89:f1:8b:99: 2d:19:b1:21:39:78:ec:2b:cf:ff:02:8f:30:bc:eb:f1:d2:15: 5e:b7:54:24:3e:b4:b3:40:1e:c7:f8:d7:72:c5:56:c1:2e:de: 28:86:45:a4:84:a4:dc:53:fe:04:2f:43:2d:72:db:00:c9:ec: 17:3a:de:36:ce:78:93:f0:e2:6c:cf:eb:a8:35:f9:40:be:b6: 27:9d:58:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlO+i7FOK0Krm0gXM/Wy3jpmaKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTEyMTgxMjE3MTJaFw0yNTEyMjExNzU1MTJaMDMxMTAvBgNV BAMTKDI1N0VFMTgyOTA4MkFDRThBREQxNkI1QUVDM0VBMzIwN0E5RkQ0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEXNhXG4rC1SsPgY9ubG2ig2O ZyBu3DgRj6VgFEwXvfeR/PS9NCdfU7/oOsyO/PX2c1q3fVgjChPyWXPjJmui4gu+ 3agkMXj8FX1evmUQzMqOY5LBttwkrOZWu4rE9wAZWfwPka8n6bdMITdGzvY3YS6W qOjNyz447jfIeIE/A/9CYdnZV1bEU/nPsCBU/y1HLQTUKZP/O/8jpUcOASqMEEMa Mr7XBIBZzeN0bZB3Bnvj4DuS6yVIx13m8mV4UIO9nuZUpmVXAUkoBad4u3S7gfc9 spsru/jsyIeIHXuUXJLR9oEVi3T5j1Zm503hVCuEPDIPEJSiqZqNBg2sgyh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJX7hgpCCrOit0Wta7D6jIHqf1I8wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQrF0dem3nClRpfN3yfMMMD88m4XPF0p/hI /ZrdOy17GaXz2IJtdmdufXD9HLFBQP9D+SO8FJsZuTMcvSXtVt935ygPbRRAhIKA 48PO9Tt/rjsFhMMGk0oR1Mnat/IvLfWkoHdToUnO10t5HEtHJLG2HHbY5SnFrhpL NQV0pUKO3fS/Qua/K8QaKZk0ZZsiiS3sK5fgwvUbJCdINaLl+pHepC9J1lU5fQw+ OSp897kIifGLmS0ZsSE5eOwrz/8CjzC86/HSFV63VCQ+tLNAHsf413LFVsEu3iiG RaSEpNxT/gQvQy1y2wDJ7Bc63jbOeJPw4mzP66g1+UC+tiedWKQ= -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:56 2025 by rpki-client