This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: rMF3yi+F1KHxv+OuJ/lGDbfvP5rUrSC5XEp8cLX3gdI= Subject key identifier: 1C:A3:32:FE:9A:00:18:82:97:33:1C:7F:2C:44:64:92:A7:D9:01:97 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 4255A4C917C52C6DD4EA8F4FAD50BD03C9E09FFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: EF Signing time: Fri 19 Dec 2025 13:52:49 +0000 Manifest this update: Fri 19 Dec 2025 13:47:49 +0000 Manifest next update: Mon 22 Dec 2025 15:29:49 +0000 Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 3: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: vO1lzFfXNmuZxugE/i2Inc8gAlsz8ysyFlz1Qm2xZN8=) 4: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:55:a4:c9:17:c5:2c:6d:d4:ea:8f:4f:ad:50:bd:03:c9:e0:9f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Dec 19 13:47:49 2025 GMT Not After : Dec 22 15:29:49 2025 GMT Subject: CN=1CA332FE9A00188297331C7F2C446492A7D90197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:3e:2f:8a:6b:0b:c9:d4:d8:b2:d0:da:4c: 96:cc:35:b4:24:54:06:54:d4:6c:13:da:f7:f4:7b: d7:53:a4:d9:1e:6b:b5:38:fb:a6:33:06:66:a2:d9: 00:10:b7:31:97:6c:c6:68:b9:97:aa:0e:7d:bc:5b: e1:2a:d2:cf:9a:38:19:99:0a:f1:a3:fe:e1:4f:17: 02:ba:05:9a:f7:dc:b6:95:aa:da:80:de:8e:5d:db: 50:3b:6b:98:61:f8:6c:65:53:72:fa:1c:26:1e:c4: e1:e8:94:b8:b7:95:ec:65:8b:e3:0f:f7:cd:bd:d9: 1e:e4:df:d0:55:d3:72:42:28:ae:d1:52:8b:7a:03: f3:08:3e:9d:c9:db:17:db:28:84:7d:30:66:70:f4: b5:93:32:cd:9f:f4:60:13:99:c3:ff:bf:6f:0b:02: bd:04:b3:26:0e:8b:51:5d:58:4d:e5:a1:e9:30:d5: 35:3d:5d:0a:5e:9c:6c:b3:38:81:cb:18:70:94:76: a2:cb:ec:10:57:d2:a9:c4:95:bb:ac:1f:5a:fc:ba: c7:33:f5:01:a4:01:b4:7c:b0:c1:24:0f:5a:c1:b4: 5d:20:0b:a8:52:9d:ff:77:7c:a6:0a:c4:be:6e:6b: c3:a4:0f:87:ed:b8:b9:60:5e:f0:a1:23:a4:87:f0: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A3:32:FE:9A:00:18:82:97:33:1C:7F:2C:44:64:92:A7:D9:01:97 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:56:02:7f:f2:f1:b0:88:32:f5:5f:26:13:bd:3b:70:45:2e: 77:c9:fe:ab:9d:e7:5c:54:66:5f:5c:17:8e:e9:96:10:2a:c3: 92:3e:58:6c:b3:66:55:15:c2:f1:1a:94:ee:78:f1:c4:16:67: eb:96:d0:74:9b:c0:4e:39:2e:74:c8:33:ec:e2:b0:0d:e3:b7: 92:ca:87:ee:dd:21:e3:10:29:46:44:7f:4c:d8:54:ba:05:31: 2a:9f:93:bf:ed:30:1e:1e:4d:e8:51:e6:df:5f:34:cc:9c:98: 25:94:ad:f6:27:cb:37:68:7d:76:36:35:c0:ec:ae:75:a5:52: 90:17:ae:85:b8:be:22:35:ac:96:fb:bb:86:b9:68:72:be:24: 4c:a7:bc:6e:41:96:92:38:fa:57:5e:1c:c8:8f:f7:ad:6a:89: 21:0e:cd:e9:15:e7:3e:8b:8c:f4:98:49:45:91:86:94:a1:e2: 5b:93:3c:82:d1:9d:cc:37:c1:c7:47:8e:32:31:82:e8:d0:66: 40:1e:20:a9:5d:cb:c2:33:f6:06:d3:0f:e3:25:6f:8f:e1:f0: 86:27:44:22:ee:54:34:88:c4:e0:35:ec:a2:24:e8:d1:6c:22: 8a:8d:85:23:3c:cd:47:c0:7e:63:71:e2:4e:f4:c4:e8:b0:19: 8c:cb:3d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlWkyRfFLG3U6o9PrVC9A8ngn/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTEyMTkxMzQ3NDlaFw0yNTEyMjIxNTI5NDlaMDMxMTAvBgNV BAMTKDFDQTMzMkZFOUEwMDE4ODI5NzMzMUM3RjJDNDQ2NDkyQTdEOTAxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnT4vimsLydTYstDaTJbMNbQk VAZU1GwT2vf0e9dTpNkea7U4+6YzBmai2QAQtzGXbMZouZeqDn28W+Eq0s+aOBmZ CvGj/uFPFwK6BZr33LaVqtqA3o5d21A7a5hh+GxlU3L6HCYexOHolLi3lexli+MP 98292R7k39BV03JCKK7RUot6A/MIPp3J2xfbKIR9MGZw9LWTMs2f9GATmcP/v28L Ar0EsyYOi1FdWE3loekw1TU9XQpenGyzOIHLGHCUdqLL7BBX0qnElbusH1r8uscz 9QGkAbR8sMEkD1rBtF0gC6hSnf93fKYKxL5ua8OkD4ftuLlgXvChI6SH8O8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKMy/poAGIKXMxx/LERkkqfZAZcwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNWAn/y8bCIMvVfJhO9O3BFLnfJ/qud51xU Zl9cF47plhAqw5I+WGyzZlUVwvEalO548cQWZ+uW0HSbwE45LnTIM+zisA3jt5LK h+7dIeMQKUZEf0zYVLoFMSqfk7/tMB4eTehR5t9fNMycmCWUrfYnyzdofXY2NcDs rnWlUpAXroW4viI1rJb7u4a5aHK+JEynvG5BlpI4+ldeHMiP961qiSEOzekV5z6L jPSYSUWRhpSh4luTPILRncw3wcdHjjIxgujQZkAeIKldy8Iz9gbTD+Mlb4/h8IYn RCLuVDSIxOA17KIk6NFsIoqNhSM8zUfAfmNx4k70xOiwGYzLPTk= -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:08 2025 by rpki-client