This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
File: 28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json)
Hash identifier: KZ6z7/zj+aBpL7FlnCnoQcCQ6Kum5sA5SfB938IxgQg=
Subject key identifier: 68:05:14:7C:E0:6A:F6:09:83:EC:D1:2C:19:F9:65:F9:6F:BB:AF:EA
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial: 7DDA9497F3D9E753999200D7C0CDE1AA8C201E08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
Manifest number: 0538
Signing time: Sun 28 Dec 2025 07:30:48 +0000
Manifest this update: Sun 28 Dec 2025 07:25:48 +0000
Manifest next update: Wed 31 Dec 2025 16:01:48 +0000
Files and hashes: 1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: iP5DwSyfUL5exxyNjMDQ+1fcb6ngK3/LzByJJLI9xyw=)
2: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: OqfsOYg/HuhRheOY7XtpBvVh7Zqp58h+Rj/M/YaFZNI=)
3: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: qKSq3uz3mAbrZSzfHP44tJYlF6gqnOloWG4wyUGOKH8=)
4: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: WygMqvrzr917+KMa/vGo8fQyT0ctkaWPjHAmxb/T5Js=)
5: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: +tRBG8B/+C8vTbXJTWqe0liAiPTh4alenhwEBf60dxs=)
6: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: D4SmgWinw2uDnNDHY1kT9jgep4MItUVn6E6KY3uTDIU=)
7: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: wP5JcTumZVhD5RKTIHW84jMQLqPiyj2qPNYzd9k1ZOs=)
8: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: aGKoTLbh2lO+zsgQRnIdGyxg084mUemWK5F44nFPfqQ=)
9: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: meqQFV3Ai00Xi6pHJ24Fpc5SOLYd2Ucdi8hBuOG/mOI=)
10: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: GDVJSN1CaQCPhQqR3FRWg5swzCjmjmNit8vMHebzfag=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:da:94:97:f3:d9:e7:53:99:92:00:d7:c0:cd:e1:aa:8c:20:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Validity
Not Before: Dec 28 07:25:48 2025 GMT
Not After : Dec 31 16:01:48 2025 GMT
Subject: CN=6805147CE06AF60983ECD12C19F965F96FBBAFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:01:37:94:cc:d3:96:c6:a4:93:5f:a8:35:
e9:d3:4e:58:61:30:53:e4:da:c0:23:96:4a:7d:f8:
b3:58:08:ba:3c:cd:62:e0:73:dc:e0:ef:f6:be:01:
83:45:eb:bf:ee:9c:b0:be:c3:1f:2e:e4:ce:0d:72:
97:20:29:66:34:b5:20:ff:0e:24:e9:39:64:7d:c3:
e6:33:97:0c:c9:42:e7:b4:df:e6:5f:42:8b:43:c8:
05:a8:b9:4a:51:33:1e:32:0a:db:fc:96:2a:36:85:
91:01:66:1f:cb:46:7f:f7:6c:25:4a:02:ed:63:b0:
77:e9:f2:43:4c:70:01:ff:d5:84:9d:04:15:b0:a7:
81:83:25:ea:c4:ed:7d:cb:64:db:35:df:3f:9b:76:
1e:98:4a:c7:36:4d:41:b6:4e:85:f2:68:77:b2:ee:
7f:46:fd:ae:e7:28:c9:7c:55:22:b7:9b:4b:29:7e:
77:bc:dd:80:5f:65:d7:af:1b:91:c5:e8:6f:d7:2f:
d7:17:ff:5f:15:fc:15:b0:ba:98:02:86:d8:e9:c8:
d8:21:9a:5f:9b:e0:54:74:b2:63:b5:2a:c7:f3:be:
34:9e:ef:63:64:8a:7f:ea:dd:7a:86:37:7d:9f:c8:
91:a7:0c:3e:44:2b:9b:c1:14:ac:70:8c:83:b3:e3:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:14:7C:E0:6A:F6:09:83:EC:D1:2C:19:F9:65:F9:6F:BB:AF:EA
X509v3 Authority Key Identifier:
keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:2b:97:8d:90:29:61:ec:64:40:dd:21:e0:af:37:df:d8:
f8:cf:b7:ce:fe:59:94:d8:e9:68:67:19:8b:fe:2b:24:04:6d:
e1:ce:74:8c:d2:62:bf:24:38:bc:34:ff:c7:ac:25:68:df:f6:
20:19:6d:81:ca:ef:a8:22:e3:b7:36:92:0b:21:73:9e:35:54:
7e:5c:7a:d3:98:01:01:de:1a:bc:cc:b6:24:15:57:bc:0f:77:
e8:be:61:b5:19:03:30:5b:71:ba:95:2e:c5:1f:0b:71:35:76:
b0:95:4e:ff:b6:c7:84:24:c6:9e:37:ec:a1:14:77:26:1f:2d:
b4:ba:72:36:e0:e5:a0:21:ce:56:f5:59:80:db:3d:af:81:37:
00:8c:3c:b5:eb:87:e6:29:6f:c9:d4:4f:a3:38:1b:e3:79:79:
cb:d5:ee:06:71:ca:9b:2c:98:5f:d1:ae:1d:68:8b:2f:52:65:
e4:26:42:37:91:f2:06:a4:dc:76:6c:40:84:1b:67:da:30:25:
43:dc:ce:47:35:8a:f6:93:ad:fe:fb:3c:9f:1c:25:61:eb:fb:
10:9d:90:3c:19:df:6e:76:b8:95:e7:43:93:6b:51:0e:78:ec:
8f:41:03:9b:c6:93:c8:6e:49:bf:c8:4d:ee:74:c1:8a:ad:8d:
c8:f2:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:14:47 2025 by rpki-client