This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: Qznt8HyhMoBEAv6e1AU4OserEvEKry/awhVByyX6cvE= Subject key identifier: A0:ED:57:13:C8:EC:02:DC:83:E9:19:38:8E:16:A0:C5:6C:BD:F5:9B Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 13F48C1917B26AA9C84D4FAD65622BA4773A9CD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 011A Signing time: Fri 19 Dec 2025 01:02:35 +0000 Manifest this update: Fri 19 Dec 2025 00:57:35 +0000 Manifest next update: Mon 22 Dec 2025 04:32:35 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: yi961KEnPduWD2QcZPdJd4+c5SxOiodq1iNWri13BbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f4:8c:19:17:b2:6a:a9:c8:4d:4f:ad:65:62:2b:a4:77:3a:9c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Dec 19 00:57:35 2025 GMT Not After : Dec 22 04:32:35 2025 GMT Subject: CN=A0ED5713C8EC02DC83E919388E16A0C56CBDF59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:72:27:3e:ca:1f:50:6d:de:8f:a0:75:17: 5b:90:8c:aa:fd:0e:d2:15:33:e7:ec:ee:4d:de:07: f2:c9:5a:75:a5:7b:58:2f:c4:44:fa:12:b0:b1:fd: 2e:43:46:e0:30:34:07:1a:e9:07:a6:9a:34:12:50: 49:b0:64:de:0e:f3:ec:b3:6c:50:98:09:cb:bf:fd: d7:5d:b3:cc:52:64:8c:41:98:6b:70:e1:f1:f0:7c: b3:6a:c6:4c:f6:b2:4d:61:8b:47:3b:cf:68:c6:6b: 4b:ee:f4:a2:ab:29:25:dc:b2:4d:1e:19:02:d1:9b: 4e:8d:da:48:65:ba:4b:a0:fc:51:b0:5f:da:4e:be: 8c:43:f6:73:58:12:97:53:0d:ca:63:b5:8a:f8:c0: d1:f0:3a:8f:a0:da:a6:dd:17:07:5e:70:00:a2:42: 8d:80:a7:b5:3e:e4:61:e5:0f:69:b1:02:b5:4e:42: 2d:86:dc:52:94:67:5f:a0:d9:c0:d1:67:1e:52:f4: ed:f9:d6:d5:81:1f:79:08:3b:79:f1:2a:ab:c2:c5: b0:a5:b5:7a:84:10:f3:9f:86:c9:4f:3d:23:59:d0: df:a0:02:5d:62:b8:2f:57:08:b4:f3:ef:a3:cf:7a: 0c:08:8f:18:64:b6:9f:c4:89:c4:66:13:9e:7e:23: ce:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:57:13:C8:EC:02:DC:83:E9:19:38:8E:16:A0:C5:6C:BD:F5:9B X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7e:8c:d5:89:f5:24:42:f2:b8:f4:2e:ac:f6:33:a6:9d:2d: 99:26:80:c9:71:76:68:9f:c0:f1:c9:b4:7d:32:d0:77:72:b3: 3c:6e:39:28:f6:74:b1:6d:c5:9f:12:42:d3:81:28:a7:48:36: 8e:a5:3b:69:a2:24:ca:35:a4:03:a8:8d:3b:59:a0:2a:9e:f9: 7e:2e:51:99:39:21:57:c3:b3:f0:72:9d:2e:d5:5d:00:cb:17: 7b:a6:2c:da:52:76:1c:ae:11:d3:e9:bf:8b:68:f5:b4:2e:4c: 59:ea:6b:42:23:41:cc:e7:ba:ad:db:ac:f7:de:f9:e0:b9:4d: 11:10:6f:df:b5:f3:e1:74:82:08:c1:b0:bb:83:59:79:4a:4a: 3b:a4:56:90:9d:0e:81:c8:fb:40:89:ca:d9:fe:8e:0f:ca:47: 58:3f:f1:b7:52:a0:5f:06:0a:7c:52:60:48:e3:49:16:d3:5a: 5a:06:d6:5a:0f:89:48:f8:92:0d:80:2a:08:9c:11:7f:54:ad: 28:0e:c4:70:58:08:6a:66:7f:0d:a2:4f:9f:71:81:1c:ed:c8: 83:83:59:9b:ce:4d:85:f3:c6:c0:6d:43:55:2f:47:50:35:bc: d3:c8:1c:65:9b:67:45:22:b0:07:67:4b:9a:f2:4a:b6:a3:91: 35:66:fc:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/SMGReyaqnITU+tZWIrpHc6nNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTEyMTkwMDU3MzVaFw0yNTEyMjIwNDMyMzVaMDMxMTAvBgNV BAMTKEEwRUQ1NzEzQzhFQzAyREM4M0U5MTkzODhFMTZBMEM1NkNCREY1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0HInPsofUG3ej6B1F1uQjKr9 DtIVM+fs7k3eB/LJWnWle1gvxET6ErCx/S5DRuAwNAca6QemmjQSUEmwZN4O8+yz bFCYCcu//ddds8xSZIxBmGtw4fHwfLNqxkz2sk1hi0c7z2jGa0vu9KKrKSXcsk0e GQLRm06N2khlukug/FGwX9pOvoxD9nNYEpdTDcpjtYr4wNHwOo+g2qbdFwdecACi Qo2Ap7U+5GHlD2mxArVOQi2G3FKUZ1+g2cDRZx5S9O351tWBH3kIO3nxKqvCxbCl tXqEEPOfhslPPSNZ0N+gAl1iuC9XCLTz76PPegwIjxhktp/EicRmE55+I84HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoO1XE8jsAtyD6Rk4jhagxWy99ZswHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh+jNWJ9SRC8rj0Lqz2M6adLZkmgMlxdmif wPHJtH0y0HdyszxuOSj2dLFtxZ8SQtOBKKdINo6lO2miJMo1pAOojTtZoCqe+X4u UZk5IVfDs/BynS7VXQDLF3umLNpSdhyuEdPpv4to9bQuTFnqa0IjQcznuq3brPfe +eC5TREQb9+18+F0ggjBsLuDWXlKSjukVpCdDoHI+0CJytn+jg/KR1g/8bdSoF8G CnxSYEjjSRbTWloG1loPiUj4kg2AKgicEX9UrSgOxHBYCGpmfw2iT59xgRztyIOD WZvOTYXzxsBtQ1UvR1A1vNPIHGWbZ0UisAdnS5rySrajkTVm/Cw= -----END CERTIFICATE-----Generated at Sat Dec 20 20:44:21 2025 by rpki-client