This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: 1LHW0V2AkiLHEeGaggi2KJvXfSyEg6PGfTM6tCKYk2c= Subject key identifier: E2:58:9F:0B:CC:2A:25:F3:D4:D7:CE:CC:40:FE:E1:27:F5:7D:78:62 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 194DB6E2A22883EA84A4872BADA494CD9AF756D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: E9 Signing time: Sun 14 Dec 2025 17:32:10 +0000 Manifest this update: Sun 14 Dec 2025 17:27:10 +0000 Manifest next update: Thu 18 Dec 2025 05:31:10 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: 32HU1Bbe+1bargJXX7ufIqdGfoE5EbPpRVXW94hbAsA=) 2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 05:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4d:b6:e2:a2:28:83:ea:84:a4:87:2b:ad:a4:94:cd:9a:f7:56:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Dec 14 17:27:10 2025 GMT Not After : Dec 18 05:31:10 2025 GMT Subject: CN=E2589F0BCC2A25F3D4D7CECC40FEE127F57D7862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:8a:8d:56:7a:3b:35:6a:92:eb:72:ff:ef: e2:12:01:7b:ca:4c:ac:35:66:67:c7:4b:0e:1b:d9: 0d:11:d3:56:6e:85:bb:68:54:f2:68:43:b8:7f:23: 34:64:0d:da:4e:3b:e6:97:aa:0b:46:1a:53:d0:a5: d5:f3:bf:fa:d4:1c:33:6e:27:b8:b3:43:1d:f8:20: c2:ae:4e:81:12:fb:70:62:ae:c5:2f:7f:f9:f4:e3: d1:be:a9:2d:d9:0d:85:eb:b6:0e:97:21:88:d7:5f: d8:58:36:3d:95:86:9d:01:1b:47:2b:99:1d:f2:56: 4b:ed:89:4a:19:16:ab:89:7c:e8:88:f6:07:4f:18: 06:64:00:a9:b7:da:49:b1:da:0a:95:96:f3:9b:4a: cc:cc:8d:0a:bd:0f:ca:e2:e1:10:93:cc:8a:4b:7b: dc:54:2f:d4:e4:ac:37:45:cd:82:6a:06:38:8c:da: 84:83:c8:0c:c6:89:4c:ed:3c:54:5e:92:20:f3:26: 65:51:00:e0:b9:3a:46:61:ac:ed:39:01:fd:78:cf: ac:10:ad:e7:34:48:65:5e:c9:5c:81:e6:0b:58:d0: 10:e6:9f:40:78:32:14:f4:de:1a:18:d8:8e:a1:62: 4c:6d:5b:ae:13:18:55:30:38:c9:56:1a:fc:73:9a: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:9F:0B:CC:2A:25:F3:D4:D7:CE:CC:40:FE:E1:27:F5:7D:78:62 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:80:57:2f:ea:d9:a7:35:69:99:14:82:c4:ee:2f:54:fd:c5: 96:09:c3:0d:5b:c3:61:6c:98:56:7a:4b:96:23:f0:e5:e6:6f: f5:eb:e1:19:99:1e:06:9f:a5:02:e8:10:5f:a8:2a:59:b4:13: c6:75:a2:c5:76:f3:27:2d:c3:30:31:8c:ca:43:d4:93:26:bf: e7:a7:90:40:07:94:56:aa:1f:2f:71:72:aa:7f:d4:b5:96:0b: f7:c1:44:9e:d5:32:1b:e6:0e:8f:6b:7e:58:89:3a:71:d6:66: 51:a7:aa:1b:53:e6:ec:b4:c2:b6:b1:1c:4d:c5:1c:cf:90:3e: 2a:6e:2f:6d:60:6d:ce:57:2a:a7:8e:dc:45:77:80:3e:5f:e8: f2:9c:3d:a1:e2:4a:17:82:5c:16:81:a9:4c:f3:d7:26:cd:e3: 92:4d:a6:d9:63:41:f1:58:d5:a1:c4:57:72:40:f7:d5:c4:46: 9b:bb:e6:fd:f1:3a:aa:51:62:27:aa:29:e8:0b:e9:8b:ce:43: e5:f8:fe:f2:c0:9a:ab:62:79:19:6d:91:a4:3a:b5:fe:83:c8: 85:ff:63:a9:a7:de:5b:79:88:93:36:1f:cd:ee:d0:3f:cb:4f: e4:6b:ac:f4:df:2d:99:0c:2c:53:4e:ca:67:ee:1b:e3:56:56: ac:63:3f:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGU224qIog+qEpIcrraSUzZr3VtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTEyMTQxNzI3MTBaFw0yNTEyMTgwNTMxMTBaMDMxMTAvBgNV BAMTKEUyNTg5RjBCQ0MyQTI1RjNENEQ3Q0VDQzQwRkVFMTI3RjU3RDc4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkIqNVno7NWqS63L/7+ISAXvK TKw1ZmfHSw4b2Q0R01ZuhbtoVPJoQ7h/IzRkDdpOO+aXqgtGGlPQpdXzv/rUHDNu J7izQx34IMKuToES+3BirsUvf/n049G+qS3ZDYXrtg6XIYjXX9hYNj2Vhp0BG0cr mR3yVkvtiUoZFquJfOiI9gdPGAZkAKm32kmx2gqVlvObSszMjQq9D8ri4RCTzIpL e9xUL9TkrDdFzYJqBjiM2oSDyAzGiUztPFRekiDzJmVRAOC5OkZhrO05Af14z6wQ rec0SGVeyVyB5gtY0BDmn0B4MhT03hoY2I6hYkxtW64TGFUwOMlWGvxzms4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lifC8wqJfPU187MQP7hJ/V9eGIwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGAVy/q2ac1aZkUgsTuL1T9xZYJww1bw2Fs mFZ6S5Yj8OXmb/Xr4RmZHgafpQLoEF+oKlm0E8Z1osV28yctwzAxjMpD1JMmv+en kEAHlFaqHy9xcqp/1LWWC/fBRJ7VMhvmDo9rfliJOnHWZlGnqhtT5uy0wraxHE3F HM+QPipuL21gbc5XKqeO3EV3gD5f6PKcPaHiSheCXBaBqUzz1ybN45JNptljQfFY 1aHEV3JA99XERpu75v3xOqpRYieqKegL6YvOQ+X4/vLAmqtieRltkaQ6tf6DyIX/ Y6mn3lt5iJM2H83u0D/LT+RrrPTfLZkMLFNOymfuG+NWVqxjP1I= -----END CERTIFICATE-----Generated at Tue Dec 16 07:05:49 2025 by rpki-client