This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: j5DTE3kjtqM+SbEsyJ3puN3aBNnUE0McH1ekBPiyJJU= Subject key identifier: EF:20:28:6B:F1:2B:76:58:E5:E5:A0:EB:DD:A4:0D:A3:68:89:08:B0 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 6BB5A8453F146498BA3829C000F82AF208CBBDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01C8 Signing time: Thu 18 Dec 2025 00:22:21 +0000 Manifest this update: Thu 18 Dec 2025 00:17:21 +0000 Manifest next update: Sun 21 Dec 2025 03:27:21 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: BaBqvms+OmVbvTp9zeTzzSoqJf66torEYkU5vCDEtZs=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b5:a8:45:3f:14:64:98:ba:38:29:c0:00:f8:2a:f2:08:cb:bd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Dec 18 00:17:21 2025 GMT Not After : Dec 21 03:27:21 2025 GMT Subject: CN=EF20286BF12B7658E5E5A0EBDDA40DA3688908B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:fa:37:79:61:5d:6b:c3:2e:7f:03:ac:18: 6b:c4:cd:b6:57:1a:0c:c2:11:11:15:3d:3d:c7:bb: 68:2e:f0:b9:00:6c:c1:50:17:7c:18:97:a2:55:50: c2:b1:59:93:a4:d0:cd:7e:81:ea:d2:a0:61:4e:e2: aa:92:94:ba:5e:eb:29:9e:19:07:f3:38:1c:de:12: 88:3a:aa:5b:e4:07:37:d0:4f:3e:86:b6:3e:a9:2f: 7c:c7:a8:77:6c:ea:7a:16:b7:43:6d:77:c9:69:cb: f3:4e:f4:4e:06:0e:8e:4d:02:9b:fe:63:7a:43:24: fa:87:7a:55:24:86:31:f4:48:05:d1:1f:8d:e0:36: 04:01:c9:45:e1:4f:8c:82:1c:e7:0e:8d:04:e8:e1: c0:e9:df:84:c9:20:bc:be:77:98:f7:f0:fd:a2:3c: b0:82:2c:fa:ac:ca:4d:75:3c:83:a5:d4:e0:d6:c6: 94:71:4e:65:70:ba:0a:14:cb:65:58:d2:1c:ab:81: 2a:96:93:bd:56:e4:43:01:36:b6:b7:71:fe:53:51: 7e:49:51:32:9e:72:58:1c:db:6a:e8:09:b0:e5:88: 0b:83:62:49:fe:44:71:71:58:b8:f9:b8:6f:50:fc: 50:31:0b:d5:b4:4a:41:0a:37:bc:e1:07:a6:d8:7d: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:20:28:6B:F1:2B:76:58:E5:E5:A0:EB:DD:A4:0D:A3:68:89:08:B0 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:8c:80:5d:4d:5b:30:69:7a:50:7b:33:a8:d3:a7:d2:79: 76:17:8f:ce:b0:f4:10:11:c2:92:87:7d:1e:12:7b:a4:ac:60: 5b:0d:71:71:44:fb:f7:6a:1a:9a:8c:ee:2d:4b:61:3e:52:2b: 28:f6:6d:cd:9e:5f:9a:57:ab:29:56:60:09:ce:63:af:e4:4d: 09:aa:c1:7d:0a:1d:28:9c:6a:83:19:4b:76:c2:46:59:10:41: 5c:9a:38:de:d9:57:5b:c0:b3:3c:28:69:80:59:fa:46:ae:bd: 71:7d:27:92:70:c7:bc:95:9c:98:de:7e:4b:ca:37:0c:dc:a4: de:8d:0d:cb:77:65:37:c8:a4:21:0b:2b:2a:fd:21:41:b3:55: 5e:d0:51:cf:52:7e:11:59:13:31:a1:db:63:5a:87:45:41:53: 74:c9:03:3d:b5:84:03:dd:6d:f9:41:d5:4f:bd:ec:d1:d4:a0: 62:9e:6a:52:81:25:a1:ab:77:8b:0a:38:73:49:a7:e7:11:64: 57:19:48:5f:6f:1f:a7:92:a9:eb:fb:1d:38:3f:8c:7e:33:26: 1f:d7:66:12:0a:e1:19:9e:d1:8a:00:bd:10:a9:98:97:4d:5f: 6a:ab:bc:50:da:af:e1:e4:78:b5:46:95:26:d5:18:9d:84:b4: cf:a1:03:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7WoRT8UZJi6OCnAAPgq8gjLve0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTEyMTgwMDE3MjFaFw0yNTEyMjEwMzI3MjFaMDMxMTAvBgNV BAMTKEVGMjAyODZCRjEyQjc2NThFNUU1QTBFQkREQTQwREEzNjg4OTA4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2/o3eWFda8MufwOsGGvEzbZX GgzCEREVPT3Hu2gu8LkAbMFQF3wYl6JVUMKxWZOk0M1+gerSoGFO4qqSlLpe6yme GQfzOBzeEog6qlvkBzfQTz6Gtj6pL3zHqHds6noWt0Ntd8lpy/NO9E4GDo5NApv+ Y3pDJPqHelUkhjH0SAXRH43gNgQByUXhT4yCHOcOjQTo4cDp34TJILy+d5j38P2i PLCCLPqsyk11PIOl1ODWxpRxTmVwugoUy2VY0hyrgSqWk71W5EMBNra3cf5TUX5J UTKeclgc22roCbDliAuDYkn+RHFxWLj5uG9Q/FAxC9W0SkEKN7zhB6bYfZDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7yAoa/Erdljl5aDr3aQNo2iJCLAwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW1jIBdTVswaXpQezOo06fSeXYXj86w9BAR wpKHfR4Se6SsYFsNcXFE+/dqGpqM7i1LYT5SKyj2bc2eX5pXqylWYAnOY6/kTQmq wX0KHSicaoMZS3bCRlkQQVyaON7ZV1vAszwoaYBZ+kauvXF9J5Jwx7yVnJjefkvK NwzcpN6NDct3ZTfIpCELKyr9IUGzVV7QUc9SfhFZEzGh22Nah0VBU3TJAz21hAPd bflB1U+97NHUoGKealKBJaGrd4sKOHNJp+cRZFcZSF9vH6eSqev7HTg/jH4zJh/X ZhIK4Rme0YoAvRCpmJdNX2qrvFDar+HkeLVGlSbVGJ2EtM+hA9o= -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:39 2025 by rpki-client