This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: QEkznxdfsocpumqDu/dOnGHHXSk95fdPjqBBEbH0gSI= Subject key identifier: A8:8B:B2:29:98:0B:7F:8E:24:EC:39:79:AB:7B:E8:E2:4C:A6:3C:17 Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 299E66183F512D37D5C3A096077F8E7771D24D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 020B Signing time: Wed 24 Dec 2025 10:13:35 +0000 Manifest this update: Wed 24 Dec 2025 10:08:35 +0000 Manifest next update: Sat 27 Dec 2025 22:12:35 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: i4iTDAXjpKq5kpNVWlzM3CH0VgnUeU2mr/D8LoNzYXI=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9e:66:18:3f:51:2d:37:d5:c3:a0:96:07:7f:8e:77:71:d2:4d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Dec 24 10:08:35 2025 GMT Not After : Dec 27 22:12:35 2025 GMT Subject: CN=A88BB229980B7F8E24EC3979AB7BE8E24CA63C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:b0:48:dd:b3:50:51:04:a0:fa:ce:c5:81: cc:4d:a8:75:a7:64:c3:3e:1f:fb:be:a0:ca:22:3e: ff:4f:a8:cc:18:69:c1:37:18:a3:66:f9:ed:3e:11: 09:36:94:20:80:64:92:52:ad:3d:e0:cd:85:c5:42: 83:89:df:4b:08:31:7f:aa:79:37:20:8f:6d:a3:a5: f6:16:ba:46:4c:38:b7:f7:15:bd:cb:46:d7:67:c2: 7a:6c:06:62:ed:24:d5:1f:22:eb:a1:83:9c:97:c1: 04:0f:b7:84:32:8b:26:1d:33:69:d6:6f:f1:d7:4b: 69:9c:1e:44:5e:7a:c8:4a:99:7a:a1:a2:df:0e:36: 02:a5:e0:f8:9b:2f:cd:cb:e1:18:ad:05:92:21:20: cc:5a:7c:29:35:ac:fe:ad:4e:f3:9f:74:82:c5:0a: 55:c0:87:23:a7:2f:d5:19:1f:36:be:28:f8:0c:cd: 50:c4:a0:38:4e:ef:1c:0c:ae:db:f9:e9:23:ef:c0: dd:c6:5b:d5:70:65:94:77:a9:84:73:9c:60:10:fd: 51:5a:07:1b:9b:14:00:86:37:32:60:3c:27:0c:85: 4c:f0:7c:84:e1:0e:4b:95:28:88:71:d3:b5:cc:a1: 0c:86:70:02:72:33:d4:77:32:5a:ec:c8:d0:8b:79: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:B2:29:98:0B:7F:8E:24:EC:39:79:AB:7B:E8:E2:4C:A6:3C:17 X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f0:74:b1:5d:b4:84:77:21:ce:6f:7c:16:99:22:a6:83:a6: ad:03:be:e1:a0:c7:f2:af:47:be:49:6c:d7:1a:d4:41:1a:5a: c6:91:7f:50:83:e2:ef:53:a1:64:72:3f:6f:1c:11:ae:38:71: c8:1a:5d:ff:d9:16:64:a1:75:5f:3b:df:ae:25:8a:e1:d2:3a: 8e:c3:d7:17:24:4b:c7:c5:0d:ef:cc:d0:db:6e:33:02:40:9f: c6:a4:aa:b0:20:76:de:4c:c1:be:19:e3:15:a6:ab:c6:9a:4c: 3d:25:4c:eb:de:9e:cd:46:be:dd:a6:f0:c6:cd:de:fb:69:08: f6:4c:5a:00:b6:f8:aa:26:3d:40:52:6b:a1:26:a6:12:f6:1f: c1:1b:2b:4e:8b:bc:8b:1f:19:1d:6f:31:d7:c8:ac:98:39:1e: 3c:50:6d:77:6b:bc:95:1e:36:73:77:27:94:c7:81:f4:20:19: a6:52:4d:ee:62:7d:a7:93:f6:75:f9:3d:db:93:e7:74:0e:6d: bc:1d:37:94:a2:f1:43:92:24:3c:ed:90:02:df:60:51:a7:0f: 99:cb:f6:ca:9f:bb:2b:1e:95:88:a6:f3:09:d5:ad:47:36:a2: da:72:1e:d4:60:a4:84:bd:df:3d:25:3d:78:cc:a3:13:86:33: 9c:37:1d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZ5mGD9RLTfVw6CWB3+Od3HSTYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTEyMjQxMDA4MzVaFw0yNTEyMjcyMjEyMzVaMDMxMTAvBgNV BAMTKEE4OEJCMjI5OTgwQjdGOEUyNEVDMzk3OUFCN0JFOEUyNENBNjNDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujrBI3bNQUQSg+s7FgcxNqHWn ZMM+H/u+oMoiPv9PqMwYacE3GKNm+e0+EQk2lCCAZJJSrT3gzYXFQoOJ30sIMX+q eTcgj22jpfYWukZMOLf3Fb3LRtdnwnpsBmLtJNUfIuuhg5yXwQQPt4QyiyYdM2nW b/HXS2mcHkReeshKmXqhot8ONgKl4PibL83L4RitBZIhIMxafCk1rP6tTvOfdILF ClXAhyOnL9UZHza+KPgMzVDEoDhO7xwMrtv56SPvwN3GW9VwZZR3qYRznGAQ/VFa BxubFACGNzJgPCcMhUzwfIThDkuVKIhx07XMoQyGcAJyM9R3MlrsyNCLeSvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIuyKZgLf44k7Dl5q3vo4kymPBcwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfwdLFdtIR3Ic5vfBaZIqaDpq0DvuGgx/Kv R75JbNca1EEaWsaRf1CD4u9ToWRyP28cEa44ccgaXf/ZFmShdV87364liuHSOo7D 1xckS8fFDe/M0NtuMwJAn8akqrAgdt5Mwb4Z4xWmq8aaTD0lTOvens1Gvt2m8MbN 3vtpCPZMWgC2+KomPUBSa6EmphL2H8EbK06LvIsfGR1vMdfIrJg5HjxQbXdrvJUe NnN3J5THgfQgGaZSTe5ifaeT9nX5PduT53QObbwdN5Si8UOSJDztkALfYFGnD5nL 9sqfuyselYim8wnVrUc2otpyHtRgpIS93z0lPXjMoxOGM5w3HVQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:23 2025 by rpki-client