This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: ftm+eN5/wU0hnFUKOHJExUBKvlzkbqAR0bWjOqEYL2Q= Subject key identifier: 58:DD:B8:CD:3D:A3:05:36:B4:D9:F8:50:AB:00:5E:26:F7:25:7B:C8 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 491D4B6222FC5C73213A28E144A95EA6F1530B4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 052F Signing time: Wed 17 Dec 2025 05:01:33 +0000 Manifest this update: Wed 17 Dec 2025 04:56:33 +0000 Manifest next update: Sat 20 Dec 2025 06:55:33 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: SGLMZ19qjgGGZ5em5Wm2Rl2H2fVvwgsbWKM46yjDO5Q=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1d:4b:62:22:fc:5c:73:21:3a:28:e1:44:a9:5e:a6:f1:53:0b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Dec 17 04:56:33 2025 GMT Not After : Dec 20 06:55:33 2025 GMT Subject: CN=58DDB8CD3DA30536B4D9F850AB005E26F7257BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:c9:0d:c5:3f:1f:f0:6b:f5:8e:b4:a0:c2: 80:79:5b:24:1b:8c:0e:18:d7:1a:a8:67:eb:72:d9: 7a:b8:e3:a1:67:0a:d0:2e:b6:2a:fa:34:47:53:d0: d4:68:52:4d:14:c3:1a:42:f3:1d:53:cf:f5:88:6e: 94:45:9f:5b:a9:24:8d:82:22:47:b3:27:f6:8c:95: 2a:13:f9:fc:6e:4e:81:b6:1f:66:86:1e:68:51:0b: 70:f8:e5:3d:23:93:c6:44:d0:bd:59:41:00:e2:24: c4:0d:22:97:6d:34:f1:94:44:bb:c6:18:d6:6d:38: d6:78:5f:b1:50:f5:16:89:9a:ab:99:fc:46:b5:a8: 4e:63:68:32:3a:80:07:7c:fe:88:ae:94:67:03:96: d8:d1:0f:4d:a1:00:42:53:3e:0a:aa:02:7f:d0:b9: 1f:8f:49:9b:d7:3f:bf:e8:24:d0:81:1e:ef:fc:d2: ab:8a:fd:f4:21:8a:20:f5:cd:dc:fe:c0:cc:4c:d3: 07:f9:14:62:8b:a7:53:a8:91:65:e9:ba:ba:5b:e0: 8d:4d:af:2d:03:08:2f:fe:6b:47:31:a3:16:68:86: bd:9b:13:27:d9:44:cd:42:92:6c:2b:ac:20:22:bf: 36:65:29:f6:2c:47:5f:e8:a0:52:de:e3:92:df:ef: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:B8:CD:3D:A3:05:36:B4:D9:F8:50:AB:00:5E:26:F7:25:7B:C8 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:55:d8:79:cb:05:15:57:79:b8:52:60:45:b7:d4:26:0e:ce: 46:14:73:bf:2c:b2:4e:7b:01:1c:e1:92:17:8a:7f:4f:75:b2: 86:89:c8:c3:0d:8f:5d:79:1b:a3:45:ad:06:82:53:77:d1:c2: b3:04:63:64:d8:9e:93:f4:ad:27:88:e5:2f:cd:7b:00:96:14: 91:91:77:6b:1f:ee:51:b1:89:ce:80:9c:d8:53:11:6a:86:fe: 12:32:f0:cb:69:28:3f:55:10:54:bb:7c:4c:2c:63:7c:bd:4b: 09:2a:0f:1e:d5:af:ef:ca:7a:b4:cd:c8:ee:c2:74:5c:42:60: 54:ff:60:54:9d:72:b9:73:1e:c3:ea:62:29:56:53:ea:eb:b3: fd:05:a3:b5:63:84:c8:36:16:41:72:c0:d9:c1:e6:b8:de:6b: 5d:4e:50:ab:57:f2:09:fa:67:2c:2f:83:75:a8:6f:27:9c:fe: 6f:ef:95:49:9b:81:bd:7b:96:8c:15:a6:fc:45:7d:17:7b:3e: 53:b4:05:32:39:45:4c:86:48:24:6f:60:df:72:77:99:31:f5: c2:72:c1:28:72:1b:38:bc:89:75:cb:c0:73:5a:42:c4:cc:99: d6:17:12:f7:2a:9d:cb:0d:7c:3b:b1:0a:05:8a:d0:80:83:a0: aa:07:82:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSR1LYiL8XHMhOijhRKlepvFTC04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTEyMTcwNDU2MzNaFw0yNTEyMjAwNjU1MzNaMDMxMTAvBgNV BAMTKDU4RERCOENEM0RBMzA1MzZCNEQ5Rjg1MEFCMDA1RTI2RjcyNTdCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClockNxT8f8Gv1jrSgwoB5WyQb jA4Y1xqoZ+ty2Xq446FnCtAutir6NEdT0NRoUk0UwxpC8x1Tz/WIbpRFn1upJI2C IkezJ/aMlSoT+fxuToG2H2aGHmhRC3D45T0jk8ZE0L1ZQQDiJMQNIpdtNPGURLvG GNZtONZ4X7FQ9RaJmquZ/Ea1qE5jaDI6gAd8/oiulGcDltjRD02hAEJTPgqqAn/Q uR+PSZvXP7/oJNCBHu/80quK/fQhiiD1zdz+wMxM0wf5FGKLp1OokWXpurpb4I1N ry0DCC/+a0cxoxZohr2bEyfZRM1CkmwrrCAivzZlKfYsR1/ooFLe45Lf73ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWN24zT2jBTa02fhQqwBeJvcle8gwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBV2HnLBRVXebhSYEW31CYOzkYUc78ssk57 ARzhkheKf091soaJyMMNj115G6NFrQaCU3fRwrMEY2TYnpP0rSeI5S/NewCWFJGR d2sf7lGxic6AnNhTEWqG/hIy8MtpKD9VEFS7fEwsY3y9SwkqDx7Vr+/KerTNyO7C dFxCYFT/YFSdcrlzHsPqYilWU+rrs/0Fo7VjhMg2FkFywNnB5rjea11OUKtX8gn6 Zywvg3Wobyec/m/vlUmbgb17lowVpvxFfRd7PlO0BTI5RUyGSCRvYN9yd5kx9cJy wShyGzi8iXXLwHNaQsTMmdYXEvcqncsNfDuxCgWK0ICDoKoHgtg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:01 2025 by rpki-client