This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: 14FpbP+VlJ8rdmSNpS91jN8lOzM1/Lq7ffh+b5hJT60= Subject key identifier: D7:97:90:4A:15:89:23:BB:87:92:51:7C:F3:39:CC:A2:9E:CF:C2:E2 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 0205AB7B566F8AAE5114C06A530EB92FFE3F70D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 03A8 Signing time: Tue 23 Dec 2025 19:53:34 +0000 Manifest this update: Tue 23 Dec 2025 19:48:34 +0000 Manifest next update: Sat 27 Dec 2025 03:08:34 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: QUdsi9KTGrcIROkOHHZHEAtXTXwCkZoV/kD0zDQPIxg=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:05:ab:7b:56:6f:8a:ae:51:14:c0:6a:53:0e:b9:2f:fe:3f:70:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Dec 23 19:48:34 2025 GMT Not After : Dec 27 03:08:34 2025 GMT Subject: CN=D797904A158923BB8792517CF339CCA29ECFC2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:36:77:eb:af:e9:4d:f9:4e:50:f3:84:48: 00:6d:1c:58:b9:a4:e7:65:80:67:36:90:fd:cf:93: 67:fc:f3:0e:ae:79:ff:58:7a:af:6d:37:51:ca:b7: d1:62:29:ce:e0:15:9b:20:6a:a5:e1:ee:12:eb:18: 20:66:40:2b:0a:2f:1b:33:ce:20:4e:7d:97:b9:66: 4d:91:87:32:cc:c3:17:ce:a9:41:8a:72:1a:d3:05: 97:d0:1e:69:95:7e:90:fd:c4:01:06:54:b7:36:cf: 9f:e3:52:7f:4d:52:d1:7e:8c:e4:03:86:34:3b:c3: 1b:3b:a2:a5:81:63:67:69:b4:91:18:01:35:84:be: 92:69:4f:da:1b:4c:77:4c:a4:c3:b7:af:67:f5:1b: 23:3f:03:60:3f:bd:bc:f7:11:a8:71:15:8f:86:50: b9:51:8c:ae:25:c7:40:02:5a:31:4a:59:76:47:d5: f1:a2:08:25:63:e9:47:5d:3f:8f:3e:ab:e8:2a:4e: c5:69:ac:b6:bf:64:5e:ea:fb:42:0c:50:b4:ab:e9: 07:f8:51:f4:d6:bd:48:da:a1:44:e0:32:ba:97:2e: 64:e2:bd:85:2b:72:f3:cd:87:24:6c:5c:d9:80:e1: 23:72:08:0f:37:d2:5f:9f:e4:16:93:01:96:53:e4: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:97:90:4A:15:89:23:BB:87:92:51:7C:F3:39:CC:A2:9E:CF:C2:E2 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:49:31:08:1f:78:de:6d:10:0b:5c:73:bc:fe:ee:e0:1a: 85:98:e2:7e:61:6c:09:90:6c:a2:08:66:29:c4:fd:bd:84:93: 4b:20:dc:fe:57:0a:37:c0:d7:bf:e6:d2:63:3c:45:39:cc:26: c6:21:73:95:fc:03:c9:15:c6:e4:c2:5c:a6:12:f0:27:9d:db: f4:af:8d:09:e3:16:fe:94:61:9c:e3:1e:1d:b0:9d:77:21:12: 66:b7:d9:6f:97:33:ff:c9:d1:14:10:1a:71:5b:ab:56:76:62: 89:c2:d1:08:d8:87:4b:bd:8c:25:67:28:cd:fd:e1:52:04:a1: 25:6f:2c:03:48:6c:91:e5:39:d3:60:1a:31:48:2f:47:1e:cc: 38:e3:83:c6:fe:c5:88:54:7b:c2:ee:d1:a7:58:df:c3:eb:93: a6:28:ed:c5:a4:f0:37:9d:0f:1f:de:e9:fc:69:63:77:7c:da: 8e:58:40:e4:95:dd:f9:f1:dd:3b:4c:2c:f4:5d:06:56:75:a9: ee:65:ac:5a:8e:a0:c9:43:bb:64:62:37:17:04:99:5f:1d:c5: 2d:b2:6f:c6:ef:cb:4a:a0:c6:d3:ce:65:15:51:4b:e4:e3:f2: 37:b6:b4:a7:70:5d:81:06:da:2c:2c:23:2d:b9:5e:e5:cd:f6: 09:44:27:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgWre1Zviq5RFMBqUw65L/4/cNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTEyMjMxOTQ4MzRaFw0yNTEyMjcwMzA4MzRaMDMxMTAvBgNV BAMTKEQ3OTc5MDRBMTU4OTIzQkI4NzkyNTE3Q0YzMzlDQ0EyOUVDRkMyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRDZ366/pTflOUPOESABtHFi5 pOdlgGc2kP3Pk2f88w6uef9Yeq9tN1HKt9FiKc7gFZsgaqXh7hLrGCBmQCsKLxsz ziBOfZe5Zk2RhzLMwxfOqUGKchrTBZfQHmmVfpD9xAEGVLc2z5/jUn9NUtF+jOQD hjQ7wxs7oqWBY2dptJEYATWEvpJpT9obTHdMpMO3r2f1GyM/A2A/vbz3EahxFY+G ULlRjK4lx0ACWjFKWXZH1fGiCCVj6UddP48+q+gqTsVprLa/ZF7q+0IMULSr6Qf4 UfTWvUjaoUTgMrqXLmTivYUrcvPNhyRsXNmA4SNyCA830l+f5BaTAZZT5P6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15eQShWJI7uHklF88znMop7PwuIwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8ySTEIH3jebRALXHO8/u7gGoWY4n5hbAmQ bKIIZinE/b2Ek0sg3P5XCjfA17/m0mM8RTnMJsYhc5X8A8kVxuTCXKYS8Ced2/Sv jQnjFv6UYZzjHh2wnXchEma32W+XM//J0RQQGnFbq1Z2YonC0QjYh0u9jCVnKM39 4VIEoSVvLANIbJHlOdNgGjFIL0cezDjjg8b+xYhUe8Lu0adY38Prk6Yo7cWk8Ded Dx/e6fxpY3d82o5YQOSV3fnx3TtMLPRdBlZ1qe5lrFqOoMlDu2RiNxcEmV8dxS2y b8bvy0qgxtPOZRVRS+Tj8je2tKdwXYEG2iwsIy25XuXN9glEJxU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:56 2025 by rpki-client