This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: z1YDLzmDkt1EhVmtQ92PmaCKQ3RsdlB9/dTi6tl2X30= Subject key identifier: 91:75:78:3A:8D:E6:60:2C:E3:59:EC:9C:71:07:B0:F1:CA:CC:77:8E Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 173211A10A66DBCE1FE40CFCB7666509A76EA38E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 016D Signing time: Sat 20 Dec 2025 23:41:13 +0000 Manifest this update: Sat 20 Dec 2025 23:36:13 +0000 Manifest next update: Wed 24 Dec 2025 05:11:13 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) 4: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 6: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: eW04r7yhlYmGBJ/uIyhK6U3rT1W7gR0w5b5IUHNIkQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:32:11:a1:0a:66:db:ce:1f:e4:0c:fc:b7:66:65:09:a7:6e:a3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Dec 20 23:36:13 2025 GMT Not After : Dec 24 05:11:13 2025 GMT Subject: CN=9175783A8DE6602CE359EC9C7107B0F1CACC778E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:21:7e:eb:0a:01:17:94:10:96:e9:c3:dc: 06:0a:85:04:6c:eb:0f:44:80:ce:f2:5a:3d:d7:b3: 54:35:ac:b4:86:bb:77:1b:b2:e7:08:d2:84:18:ff: eb:ce:06:f6:04:e0:b5:4e:86:51:72:45:59:78:42: 4d:26:3f:4c:26:f2:03:01:f8:c0:2b:3f:87:e3:e8: 7b:fe:3b:7a:d3:2c:ef:7b:33:05:0d:2a:2b:45:58: 6d:2f:86:88:d4:0e:62:2e:a1:e7:c6:0b:fc:5d:be: 9b:17:32:8a:46:6a:0a:31:e3:2a:2b:5b:4f:b2:59: f4:45:75:5a:56:85:b7:dd:65:c2:52:33:9c:10:54: 36:87:f6:84:67:b5:0c:6b:c9:6f:f9:6f:b1:0e:72: d9:14:15:c7:04:9f:33:c1:8a:f5:d2:8c:5b:de:87: e8:55:d0:ab:08:2e:84:b9:50:a3:3c:85:95:94:bb: 1e:90:3d:03:99:43:53:db:ba:3d:2d:03:33:08:44: 2b:8d:25:25:3e:70:d7:c6:f1:df:fa:eb:a4:a0:68: c4:15:d5:bd:ee:5a:eb:b8:3f:3f:43:b5:d1:62:b0: 67:b2:7f:ca:c8:70:c8:a8:4f:63:b9:c9:00:9d:79: 1a:50:d7:75:17:28:db:ad:c7:97:aa:43:63:57:e1: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:78:3A:8D:E6:60:2C:E3:59:EC:9C:71:07:B0:F1:CA:CC:77:8E X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d1:ad:17:ba:d1:49:7e:68:25:00:95:c3:02:06:1e:62:d8: e0:04:77:47:26:36:0e:84:28:37:c9:3c:09:e7:24:47:f9:a7: 15:8a:f7:39:35:5a:d6:64:77:7d:b9:08:69:b7:f8:2e:e6:72: 4e:f3:cb:54:19:86:c8:5b:58:80:75:22:99:b6:d6:9c:6b:91: e0:9a:c6:b2:de:1c:26:96:e5:9b:17:67:a2:d7:0c:9f:e1:40: 98:63:7b:d5:a5:89:29:36:85:50:7c:80:04:de:90:db:a6:eb: 7d:7d:ca:fb:68:97:e2:82:cb:67:bc:f2:6a:bb:4a:fa:a4:2d: 24:4b:ee:9b:84:08:67:fe:e4:92:f0:1c:cd:9c:f6:84:76:31: dd:24:e2:71:db:72:93:4a:55:46:6b:c7:54:e4:c4:3f:e4:ff: d6:a3:8f:78:bc:93:64:16:20:58:b0:1e:4b:ec:3b:29:99:83: 0a:a5:c2:23:4e:b3:4b:bc:1e:a4:37:d9:13:31:68:54:06:a5: 8d:0c:58:2f:1b:33:bd:72:7c:c7:6a:21:79:4b:21:d8:c4:a4: df:7b:0c:79:e8:e7:ca:a5:b9:0a:08:f1:7a:2a:7f:ff:3b:d5: 74:18:cc:f2:ec:c4:b8:a7:11:7f:da:33:6d:ee:f7:2d:ba:26: 31:bc:4b:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzIRoQpm284f5Az8t2ZlCaduo44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTEyMjAyMzM2MTNaFw0yNTEyMjQwNTExMTNaMDMxMTAvBgNV BAMTKDkxNzU3ODNBOERFNjYwMkNFMzU5RUM5QzcxMDdCMEYxQ0FDQzc3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ISF+6woBF5QQlunD3AYKhQRs 6w9EgM7yWj3Xs1Q1rLSGu3cbsucI0oQY/+vOBvYE4LVOhlFyRVl4Qk0mP0wm8gMB +MArP4fj6Hv+O3rTLO97MwUNKitFWG0vhojUDmIuoefGC/xdvpsXMopGagox4yor W0+yWfRFdVpWhbfdZcJSM5wQVDaH9oRntQxryW/5b7EOctkUFccEnzPBivXSjFve h+hV0KsILoS5UKM8hZWUux6QPQOZQ1Pbuj0tAzMIRCuNJSU+cNfG8d/666SgaMQV 1b3uWuu4Pz9DtdFisGeyf8rIcMioT2O5yQCdeRpQ13UXKNutx5eqQ2NX4czpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXV4Oo3mYCzjWeyccQew8crMd44wHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/RrRe60Ul+aCUAlcMCBh5i2OAEd0cmNg6E KDfJPAnnJEf5pxWK9zk1WtZkd325CGm3+C7mck7zy1QZhshbWIB1Ipm21pxrkeCa xrLeHCaW5ZsXZ6LXDJ/hQJhje9WliSk2hVB8gATekNum6319yvtol+KCy2e88mq7 SvqkLSRL7puECGf+5JLwHM2c9oR2Md0k4nHbcpNKVUZrx1TkxD/k/9ajj3i8k2QW IFiwHkvsOymZgwqlwiNOs0u8HqQ32RMxaFQGpY0MWC8bM71yfMdqIXlLIdjEpN97 DHno58qluQoI8Xoqf/871XQYzPLsxLinEX/aM23u9y26JjG8Sz8= -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:54 2025 by rpki-client