This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: FovREb2O/SSuIji6UKRUtpMiKgb9cX8BGcXooBs/WZs= Subject key identifier: FB:85:BA:A5:E4:CD:3D:CB:47:70:07:7E:88:17:BC:7E:CE:E0:B2:80 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 44B7A02C7C336C8BB03EFA2F6D60081AEE277504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 021C Signing time: Wed 17 Dec 2025 10:51:19 +0000 Manifest this update: Wed 17 Dec 2025 10:46:19 +0000 Manifest next update: Sat 20 Dec 2025 22:45:19 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: JVWU+nnqKVH+iG6eJw5WheyoWGTWFJzf6z5rviRIuUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b7:a0:2c:7c:33:6c:8b:b0:3e:fa:2f:6d:60:08:1a:ee:27:75:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Dec 17 10:46:19 2025 GMT Not After : Dec 20 22:45:19 2025 GMT Subject: CN=FB85BAA5E4CD3DCB4770077E8817BC7ECEE0B280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:ca:94:1a:b9:15:03:59:bc:b2:e5:a2:a1: 63:b7:cb:2d:35:a4:68:f8:f9:aa:68:44:ec:72:07: ca:e5:c3:79:38:f5:1b:80:80:cc:fe:70:10:ed:1d: ce:4c:a3:e2:7c:68:25:40:8b:c2:47:d5:d5:18:9e: 72:27:28:63:30:7c:99:ce:5e:61:d8:43:22:1a:c7: 35:d8:fa:b4:60:13:e5:c4:32:a7:5c:5c:48:0f:09: fb:32:83:a2:15:d4:e1:5c:5a:cf:4d:ed:31:68:25: 71:d0:91:4a:fa:93:c8:56:d4:b9:cf:d5:72:38:85: 86:bc:70:59:70:2e:ef:c7:e7:0e:4a:1a:21:c2:d5: ee:fc:4a:e7:24:db:f3:13:50:03:3b:27:3d:93:7f: 89:5e:79:2c:3c:07:99:48:ea:12:c4:9f:c8:14:42: c4:9e:39:b4:32:c2:c1:48:a2:af:35:17:86:84:12: 83:4a:a4:93:8d:46:a5:0a:fa:c9:f3:03:c0:d5:3e: 8d:65:91:d7:87:0e:2e:7d:59:13:d5:be:1a:2e:eb: 67:7f:ce:5e:40:38:51:c2:fe:95:67:a2:60:00:c0: d7:2e:37:e3:d7:b0:6e:d7:45:dd:2d:3d:d5:47:04: f6:f1:d8:9a:ed:82:27:cb:1e:5b:5a:a2:82:c0:f6: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:BA:A5:E4:CD:3D:CB:47:70:07:7E:88:17:BC:7E:CE:E0:B2:80 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:1b:cf:07:9a:7e:e2:f7:ee:cd:5d:23:b8:f1:fb:88:ea:35: a8:be:a3:68:b0:db:f4:50:b1:79:e9:1a:a5:52:b3:5f:b9:70: 03:10:18:76:e4:82:b5:b3:d2:ed:b2:bd:7a:bb:d8:71:ef:3a: 2c:fa:2f:c0:1f:14:16:76:f8:7b:a4:df:3c:b8:d6:81:8a:0e: 2f:9c:a9:f6:4a:3f:29:fb:bd:7f:a8:50:19:33:19:ba:b0:82: a9:98:c6:e1:26:bd:ba:5a:c0:6a:74:f0:00:99:5b:db:1b:5f: 2e:0c:79:93:0e:d4:c7:5c:a1:49:2c:81:c9:40:90:4f:a6:02: cc:d3:38:a2:b2:d7:dc:12:f4:b9:31:60:5e:d1:da:bb:9b:c5: e8:7c:e3:7d:44:5d:d8:e9:a3:ea:4a:79:0c:ea:97:e7:d8:1e: ae:96:39:25:01:70:95:11:05:e4:92:71:c3:d6:2f:c9:77:dd: 9b:46:0e:a1:67:01:4c:92:fc:cd:85:c7:9f:4b:ca:02:0e:89: 19:97:fd:f4:4b:df:d3:dc:46:7c:6c:51:5d:c1:ba:69:83:a5: 7e:9f:8a:17:35:49:a4:97:15:d1:ea:58:d1:c6:70:af:99:a4: c4:b8:6d:8b:31:10:c0:fd:f8:f5:94:34:25:f4:b9:e7:de:0d: f0:ea:51:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLegLHwzbIuwPvovbWAIGu4ndQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTEyMTcxMDQ2MTlaFw0yNTEyMjAyMjQ1MTlaMDMxMTAvBgNV BAMTKEZCODVCQUE1RTRDRDNEQ0I0NzcwMDc3RTg4MTdCQzdFQ0VFMEIyODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6cqUGrkVA1m8suWioWO3yy01 pGj4+apoROxyB8rlw3k49RuAgMz+cBDtHc5Mo+J8aCVAi8JH1dUYnnInKGMwfJnO XmHYQyIaxzXY+rRgE+XEMqdcXEgPCfsyg6IV1OFcWs9N7TFoJXHQkUr6k8hW1LnP 1XI4hYa8cFlwLu/H5w5KGiHC1e78Suck2/MTUAM7Jz2Tf4leeSw8B5lI6hLEn8gU QsSeObQywsFIoq81F4aEEoNKpJONRqUK+snzA8DVPo1lkdeHDi59WRPVvhou62d/ zl5AOFHC/pVnomAAwNcuN+PXsG7XRd0tPdVHBPbx2JrtgifLHltaooLA9uqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+4W6peTNPctHcAd+iBe8fs7gsoAwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAbzweafuL37s1dI7jx+4jqNai+o2iw2/RQ sXnpGqVSs1+5cAMQGHbkgrWz0u2yvXq72HHvOiz6L8AfFBZ2+Huk3zy41oGKDi+c qfZKPyn7vX+oUBkzGbqwgqmYxuEmvbpawGp08ACZW9sbXy4MeZMO1MdcoUksgclA kE+mAszTOKKy19wS9LkxYF7R2rubxeh8431EXdjpo+pKeQzql+fYHq6WOSUBcJUR BeSSccPWL8l33ZtGDqFnAUyS/M2Fx59LygIOiRmX/fRL39PcRnxsUV3BummDpX6f ihc1SaSXFdHqWNHGcK+ZpMS4bYsxEMD9+PWUNCX0uefeDfDqUVw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:15 2025 by rpki-client