This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: MBTVzTUDHhgjZ/JDpjtFsuphEyiKdCc/kWlMsiGr/Zk= Subject key identifier: 07:75:85:29:07:F9:51:1D:87:BE:F6:B3:F2:F8:1F:65:3D:0D:F3:7D Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 6637BA73A8D1CB12BB49C83211EFEEF48316918E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:56:20 +0000 Manifest next update: Tue 09 Dec 2025 16:22:20 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: 5SN0/2uvCW3bBerpSjqZAddPGrsP+Jd5/BnPOla3qPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:37:ba:73:a8:d1:cb:12:bb:49:c8:32:11:ef:ee:f4:83:16:91:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Dec 6 04:56:20 2025 GMT Not After : Dec 9 16:22:20 2025 GMT Subject: CN=0775852907F9511D87BEF6B3F2F81F653D0DF37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:43:bb:8e:37:4e:b2:40:f5:c4:fd:be:df: be:30:33:59:0b:13:04:d3:14:0a:a6:7b:9b:1b:56: 91:53:f3:70:04:ae:9c:20:c6:71:db:e4:c7:bd:93: c5:b9:1a:67:69:38:ba:b2:c5:7e:62:bb:10:58:58: 8b:e2:9e:87:00:8b:ee:e7:94:68:fc:71:fd:55:c9: 8b:7f:2a:4e:d4:9e:79:bc:ca:71:dd:c1:59:08:d9: ce:af:3e:1b:22:cc:7b:4d:7d:8b:27:81:9e:b9:1c: af:d0:ae:7b:f6:e2:2d:82:2d:2a:23:39:5f:92:7a: 8a:e6:d0:a1:0d:07:7f:1f:d9:92:89:23:ac:6d:92: eb:4d:45:eb:2d:d3:af:4a:37:a7:65:3e:43:fe:0f: 59:55:66:c5:da:ba:ee:ba:96:87:fa:36:08:6f:51: 76:e8:2f:3c:46:f5:0e:3c:dc:16:c2:59:84:6d:ae: fa:a8:30:29:89:21:44:e4:c7:66:78:24:d8:19:68: 55:9c:1c:f1:dc:0d:ac:af:98:cd:5a:02:32:5b:df: d6:4b:ef:30:4c:6c:65:2e:dd:a7:16:83:ce:8e:14: a7:29:98:dc:d9:3a:b6:f8:04:8e:be:24:cc:3c:e3: 55:b8:6b:2f:34:93:ba:54:2a:e6:6d:b2:5c:a9:4a: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:75:85:29:07:F9:51:1D:87:BE:F6:B3:F2:F8:1F:65:3D:0D:F3:7D X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:6a:27:47:47:7e:ec:a2:5d:6f:db:d5:ae:b5:a1:3d:5b:f9: f5:f0:df:66:a4:e4:59:f0:6a:b5:6d:7d:be:f1:2f:b7:4f:d0: 62:b9:7b:96:04:49:57:2c:1f:da:8d:13:e8:73:67:96:21:6f: 4f:20:75:8d:7c:8b:e1:27:8b:1b:3e:a5:c4:32:f9:a4:5b:41: 2b:06:7c:77:0d:cd:41:4d:80:2b:4d:4e:40:3c:bc:19:87:e3: 91:e6:3d:72:e4:16:bf:22:c0:ad:a1:2e:25:de:cd:a4:64:20: 86:31:01:43:4f:05:af:96:7b:cf:44:13:58:9f:18:21:98:4d: a7:0d:28:39:fb:74:ae:63:42:fa:f9:e5:2e:62:e1:11:df:94: ff:4e:c5:c8:72:9c:30:c3:82:0d:10:92:0a:a5:70:eb:da:9a: 98:1a:85:75:af:ca:2f:8c:d5:b4:da:99:14:a5:f7:bd:f5:cb: e7:98:60:13:13:f6:5f:c3:fe:5c:b9:c1:e2:23:f1:3a:68:b4: 7a:b2:0a:34:9e:cc:bb:8a:81:f1:03:ae:b8:fc:5a:bd:f6:42: 25:59:a1:e1:56:35:1a:c6:6a:25:e3:5a:b2:d4:f0:86:93:0b: 89:76:2e:50:02:89:d4:64:29:a3:38:f1:d9:0a:c1:b4:2d:03: 49:d2:6b:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZje6c6jRyxK7ScgyEe/u9IMWkY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTEyMDYwNDU2MjBaFw0yNTEyMDkxNjIyMjBaMDMxMTAvBgNV BAMTKDA3NzU4NTI5MDdGOTUxMUQ4N0JFRjZCM0YyRjgxRjY1M0QwREYzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K0O7jjdOskD1xP2+374wM1kL EwTTFAqme5sbVpFT83AErpwgxnHb5Me9k8W5GmdpOLqyxX5iuxBYWIvinocAi+7n lGj8cf1VyYt/Kk7Unnm8ynHdwVkI2c6vPhsizHtNfYsngZ65HK/Qrnv24i2CLSoj OV+Seorm0KENB38f2ZKJI6xtkutNRest069KN6dlPkP+D1lVZsXauu66lof6Nghv UXboLzxG9Q483BbCWYRtrvqoMCmJIUTkx2Z4JNgZaFWcHPHcDayvmM1aAjJb39ZL 7zBMbGUu3acWg86OFKcpmNzZOrb4BI6+JMw841W4ay80k7pUKuZtslypSkAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3WFKQf5UR2Hvvaz8vgfZT0N830wHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlqJ0dHfuyiXW/b1a61oT1b+fXw32ak5Fnw arVtfb7xL7dP0GK5e5YESVcsH9qNE+hzZ5Yhb08gdY18i+Enixs+pcQy+aRbQSsG fHcNzUFNgCtNTkA8vBmH45HmPXLkFr8iwK2hLiXezaRkIIYxAUNPBa+We89EE1if GCGYTacNKDn7dK5jQvr55S5i4RHflP9OxchynDDDgg0QkgqlcOvampgahXWvyi+M 1bTamRSl9731y+eYYBMT9l/D/ly5weIj8TpotHqyCjSezLuKgfEDrrj8Wr32QiVZ oeFWNRrGaiXjWrLU8IaTC4l2LlACidRkKaM48dkKwbQtA0nSa6U= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:21 2025 by rpki-client