This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 4UPmEP+qT+s178bStGhuBxBxkMBVzJspJKd+zFyHgn0= Subject key identifier: 64:88:5D:67:65:F8:12:9F:67:4C:2E:26:D9:30:C1:71:3D:F2:4A:64 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 4FDA3C4A3D282FDDE01DCDD1E8CAC5B2169AB200 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 0535 Signing time: Sun 21 Dec 2025 19:00:03 +0000 Manifest this update: Sun 21 Dec 2025 18:55:03 +0000 Manifest next update: Wed 24 Dec 2025 21:22:03 +0000 Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) 2: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: ov6OHwNqLJgvso9U/M6ui4qlrHwmhUgpMTjxh7pZ4QQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:da:3c:4a:3d:28:2f:dd:e0:1d:cd:d1:e8:ca:c5:b2:16:9a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Dec 21 18:55:03 2025 GMT Not After : Dec 24 21:22:03 2025 GMT Subject: CN=64885D6765F8129F674C2E26D930C1713DF24A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:03:17:90:b3:ea:21:e1:e6:51:7f:7a:2a: 1c:36:c9:4e:28:ed:c5:f0:13:4a:04:8d:69:be:c6: 68:a5:70:6f:c6:8c:4c:3d:ec:78:12:95:5e:42:ee: ba:ae:91:e0:64:86:8c:88:93:c9:d7:16:fc:af:95: af:77:06:0e:13:1f:37:87:3d:70:7e:c0:48:bb:26: 81:f1:48:d8:9d:c0:5f:02:09:8d:19:5d:3d:3a:2b: 9a:9f:16:59:3c:85:32:0a:14:df:5f:7b:cc:4b:8d: ea:7b:f5:08:ba:69:48:6d:a4:5f:8b:7e:39:1a:2e: 48:e2:a1:19:e0:08:f5:12:f8:c8:37:e2:2f:fb:6d: 20:5e:a6:86:ec:89:fe:53:ce:03:7b:f3:99:04:d7: a2:d4:c6:85:2e:30:c7:f7:dd:0e:43:91:dc:18:58: d5:02:ad:95:b8:2d:56:a2:90:c5:b5:18:e7:aa:c3: 72:32:82:be:80:14:d9:6c:71:7f:ae:2f:a7:ce:c8: 4a:8e:a4:59:c1:a4:be:87:e8:86:3d:e2:e4:0a:9d: 64:f8:b8:7c:4d:47:ba:1d:59:a9:45:fb:53:75:c8: 12:d9:94:e1:3d:a9:4f:16:bb:f0:bc:fd:d5:47:98: e3:d2:c1:ec:83:de:98:a7:d7:f5:f8:bc:d9:fd:ec: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:88:5D:67:65:F8:12:9F:67:4C:2E:26:D9:30:C1:71:3D:F2:4A:64 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:44:ec:9c:01:13:fe:46:94:9c:fa:3c:78:01:39:62:4d:46: 43:5d:8c:0c:36:fc:86:27:5b:48:2c:76:08:c5:ad:c7:35:f9: 71:a4:9e:f9:41:37:d1:43:db:3e:a6:6d:5b:ac:68:46:d5:18: 40:06:7b:97:c6:b4:e3:d3:fb:64:b8:a1:02:11:d8:0b:9b:d1: 4e:94:2f:d9:b1:57:73:f4:3f:ca:85:fc:ea:7a:d6:68:c2:4c: cf:fc:10:16:3c:81:cc:11:f3:81:cf:99:f9:ef:12:71:0d:00: 23:ee:bd:a9:cf:3e:e7:09:6b:71:45:cf:37:39:97:b7:c0:f1: 3d:f9:c7:3a:a7:59:8c:17:15:4f:79:4c:01:8f:7f:59:73:00: a8:bf:ea:2f:70:b9:03:4e:6d:67:5d:85:ff:97:0a:e9:05:8b: e0:70:8e:a1:07:c7:38:ad:e2:bb:59:11:8a:62:70:7b:c5:23: 79:49:b1:37:c4:85:f8:de:2e:18:3b:54:13:37:c8:a4:a8:94: 09:59:5f:ea:0d:8d:91:74:9d:56:e9:7f:fd:cb:9b:0e:42:9a: 1d:2a:9c:53:71:48:45:57:7c:62:b3:61:03:22:0e:36:60:93: 5d:77:7a:7e:4b:7c:e1:d7:24:23:57:ec:f0:d5:26:ec:bc:f0: 47:fd:81:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9o8Sj0oL93gHc3R6MrFshaasgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTEyMjExODU1MDNaFw0yNTEyMjQyMTIyMDNaMDMxMTAvBgNV BAMTKDY0ODg1RDY3NjVGODEyOUY2NzRDMkUyNkQ5MzBDMTcxM0RGMjRBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdgMXkLPqIeHmUX96Khw2yU4o 7cXwE0oEjWm+xmilcG/GjEw97HgSlV5C7rqukeBkhoyIk8nXFvyvla93Bg4THzeH PXB+wEi7JoHxSNidwF8CCY0ZXT06K5qfFlk8hTIKFN9fe8xLjep79Qi6aUhtpF+L fjkaLkjioRngCPUS+Mg34i/7bSBepobsif5TzgN785kE16LUxoUuMMf33Q5DkdwY WNUCrZW4LVaikMW1GOeqw3Iygr6AFNlscX+uL6fOyEqOpFnBpL6H6IY94uQKnWT4 uHxNR7odWalF+1N1yBLZlOE9qU8Wu/C8/dVHmOPSweyD3pin1/X4vNn97I+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIhdZ2X4Ep9nTC4m2TDBcT3ySmQwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBE7JwBE/5GlJz6PHgBOWJNRkNdjAw2/IYn W0gsdgjFrcc1+XGknvlBN9FD2z6mbVusaEbVGEAGe5fGtOPT+2S4oQIR2Aub0U6U L9mxV3P0P8qF/Op61mjCTM/8EBY8gcwR84HPmfnvEnENACPuvanPPucJa3FFzzc5 l7fA8T35xzqnWYwXFU95TAGPf1lzAKi/6i9wuQNObWddhf+XCukFi+BwjqEHxzit 4rtZEYpicHvFI3lJsTfEhfjeLhg7VBM3yKSolAlZX+oNjZF0nVbpf/3Lmw5Cmh0q nFNxSEVXfGKzYQMiDjZgk113en5LfOHXJCNX7PDVJuy88Ef9gVA= -----END CERTIFICATE-----Generated at Wed Dec 24 03:02:30 2025 by rpki-client