This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: aWUdAiUNc0FVw0NwI70/lTG4ItBM+uA/1zoCisSVPfM= Subject key identifier: 6C:B7:2F:1E:D8:02:03:C1:02:31:3F:A9:7D:CF:88:D0:43:20:1F:88 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 09660525D6A13360BECC6011C47176482E6EE304 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 022F Signing time: Fri 05 Dec 2025 17:11:19 +0000 Manifest this update: Fri 05 Dec 2025 17:06:19 +0000 Manifest next update: Tue 09 Dec 2025 00:34:19 +0000 Files and hashes: 1: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: 3ogRMC5ye7LcMSSNKICZiZ70zEk5UIqpdHC69Jt4SNM=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:66:05:25:d6:a1:33:60:be:cc:60:11:c4:71:76:48:2e:6e:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Dec 5 17:06:19 2025 GMT Not After : Dec 9 00:34:19 2025 GMT Subject: CN=6CB72F1ED80203C102313FA97DCF88D043201F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:47:6b:87:c8:70:f0:f8:ae:b7:35:0f:87: 55:12:67:75:e6:0b:fa:ae:f1:1e:90:a3:4f:30:8f: 2e:ce:fc:4f:25:1d:22:e7:d7:7e:b5:d4:33:a5:54: 28:e8:57:c2:f4:c0:23:a4:8d:fd:8f:ec:9b:f3:14: 7f:1f:8b:53:77:48:dc:5a:be:84:45:04:6e:b4:73: a4:58:c8:af:78:ed:78:47:87:77:a3:71:58:08:65: 7a:d1:f4:e1:4f:4c:98:83:1f:36:a4:9a:5a:59:d1: b5:d0:31:f8:f8:a1:d3:7c:d0:23:64:94:89:49:59: c1:c2:95:a0:be:30:ce:d0:86:e8:ab:f0:a6:b0:2f: dc:d4:e4:54:c0:e2:9d:ea:b5:79:ee:34:2c:d6:6d: b9:98:38:3c:3e:46:8e:f3:e2:fe:50:28:79:1e:98: bb:5d:f3:6f:24:91:13:79:e1:18:61:60:83:12:d5: 82:10:13:c2:a1:b2:b0:4a:af:c4:dd:c4:26:8a:f4: 88:ff:a1:2d:1d:b0:c0:27:03:5e:72:a6:d5:26:7c: e1:99:36:d6:06:46:ba:f0:68:c2:7f:40:50:b8:f5: a7:16:fb:5c:6b:4a:30:be:a3:54:ce:6d:72:a0:f4: e3:e3:f0:3d:35:ed:ee:c2:96:d1:41:ad:60:d7:15: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B7:2F:1E:D8:02:03:C1:02:31:3F:A9:7D:CF:88:D0:43:20:1F:88 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:16:bb:01:cf:8e:06:19:eb:a5:8c:97:1c:9f:80:fe:41:50: b6:c9:db:e2:c7:25:f0:02:e8:38:8f:b4:9f:99:54:6a:d7:bb: 27:4e:59:de:00:8f:56:16:08:8c:a2:f0:dd:00:0f:6b:08:ea: 22:97:aa:80:a2:60:c6:84:63:fc:e1:7a:b0:f7:e8:dd:c0:f0: 9f:a4:59:05:c0:78:20:51:61:6b:2c:33:e3:c6:af:01:73:15: 8b:09:1a:fd:c9:3b:79:40:65:6c:df:3a:8b:80:4c:d3:24:57: d5:39:4d:77:e2:ff:ed:fd:fe:b0:54:63:2d:d3:c7:f1:37:73: d6:28:23:80:70:b4:9c:de:06:2b:cd:53:51:45:a8:42:e9:53: de:95:1f:10:fb:08:25:8b:24:0d:68:35:f6:b2:81:ad:e4:0b: 5c:09:e9:28:10:2c:06:72:a0:26:92:0f:da:2d:36:13:f1:d6: 86:77:81:b1:47:4b:6f:7a:76:b6:6a:3f:b7:30:f1:f7:8c:39: 4d:84:c8:c5:d0:46:16:88:74:38:d4:e0:31:cf:7d:90:3f:48: 63:3c:3b:9b:91:f2:50:f6:ea:a1:ac:82:ab:4e:a4:88:ad:0c: 5e:41:e3:7d:dc:7d:a3:e0:4a:83:ec:07:d8:b1:13:c8:3f:27: c8:d3:c3:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWYFJdahM2C+zGARxHF2SC5u4wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTEyMDUxNzA2MTlaFw0yNTEyMDkwMDM0MTlaMDMxMTAvBgNV BAMTKDZDQjcyRjFFRDgwMjAzQzEwMjMxM0ZBOTdEQ0Y4OEQwNDMyMDFGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWukdrh8hw8PiutzUPh1USZ3Xm C/qu8R6Qo08wjy7O/E8lHSLn13611DOlVCjoV8L0wCOkjf2P7JvzFH8fi1N3SNxa voRFBG60c6RYyK947XhHh3ejcVgIZXrR9OFPTJiDHzakmlpZ0bXQMfj4odN80CNk lIlJWcHClaC+MM7Qhuir8KawL9zU5FTA4p3qtXnuNCzWbbmYODw+Ro7z4v5QKHke mLtd828kkRN54RhhYIMS1YIQE8KhsrBKr8TdxCaK9Ij/oS0dsMAnA15yptUmfOGZ NtYGRrrwaMJ/QFC49acW+1xrSjC+o1TObXKg9OPj8D017e7CltFBrWDXFZeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLcvHtgCA8ECMT+pfc+I0EMgH4gwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcWuwHPjgYZ66WMlxyfgP5BULbJ2+LHJfAC 6DiPtJ+ZVGrXuydOWd4Aj1YWCIyi8N0AD2sI6iKXqoCiYMaEY/zherD36N3A8J+k WQXAeCBRYWssM+PGrwFzFYsJGv3JO3lAZWzfOouATNMkV9U5TXfi/+39/rBUYy3T x/E3c9YoI4BwtJzeBivNU1FFqELpU96VHxD7CCWLJA1oNfayga3kC1wJ6SgQLAZy oCaSD9otNhPx1oZ3gbFHS296drZqP7cw8feMOU2EyMXQRhaIdDjU4DHPfZA/SGM8 O5uR8lD26qGsgqtOpIitDF5B433cfaPgSoPsB9ixE8g/J8jTw9s= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:10 2025 by rpki-client