This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: RVz2PpbBonkxjxXKbGKuwANfchUYDU4enO2ICky/eJs= Subject key identifier: 03:6D:88:AB:D7:69:17:F5:59:86:9E:E2:64:1E:A9:CD:29:3A:F4:F6 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 6E2597772577752B9B6D83B913BD08D69EB08227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: E9 Signing time: Fri 05 Dec 2025 09:42:13 +0000 Manifest this update: Fri 05 Dec 2025 09:37:13 +0000 Manifest next update: Mon 08 Dec 2025 13:53:13 +0000 Files and hashes: 1: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 3: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 4: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: mTbkGdEHzBEbIj7/R761lS1z+jVqdAfGrSUxlW4KihU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:25:97:77:25:77:75:2b:9b:6d:83:b9:13:bd:08:d6:9e:b0:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Dec 5 09:37:13 2025 GMT Not After : Dec 8 13:53:13 2025 GMT Subject: CN=036D88ABD76917F559869EE2641EA9CD293AF4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:43:2d:0f:26:30:78:c5:52:c8:b2:02:36: 74:0e:7d:95:54:07:76:83:14:c0:9f:30:d6:61:6b: 23:8f:9c:9b:cb:8e:0f:b8:08:2a:f0:11:d0:57:86: 65:99:43:3f:16:ec:71:ee:70:aa:12:7c:64:5c:d4: d3:bf:26:43:b1:ea:c0:4c:32:b9:b6:e9:6d:1f:c2: 41:27:ba:67:7f:1a:b1:d3:d9:72:2c:8a:e3:9d:c9: 0a:58:66:bf:7e:af:d7:3d:92:0f:98:5b:c8:91:a0: 4e:52:20:62:1e:70:6e:0a:94:69:96:c7:bf:60:98: 67:e5:36:c7:71:97:98:d8:2b:87:f1:45:7e:06:23: fc:61:6b:16:67:30:de:e8:85:f0:25:7d:77:66:c2: 94:23:70:a8:d5:a0:61:69:6b:0b:61:80:22:b0:de: 9e:62:8e:fb:4d:8c:d2:32:ff:92:f9:82:90:1b:3c: 17:65:d7:f3:ff:9e:af:85:2e:73:fd:dd:8b:df:99: d9:98:34:92:86:69:0c:36:00:ad:b1:e4:41:8c:7c: f0:2d:5e:68:13:0c:ca:f6:84:51:27:08:85:44:fc: 8d:2c:ec:f8:f4:a1:8e:40:c3:b7:80:2b:77:99:bb: 46:09:2a:71:81:14:e5:11:5c:eb:c1:93:2f:cd:c3: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6D:88:AB:D7:69:17:F5:59:86:9E:E2:64:1E:A9:CD:29:3A:F4:F6 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:9f:ac:f8:61:bd:92:f0:62:1f:71:ba:77:de:76:a5:04: 50:6b:7e:6a:d0:3a:8d:de:ea:73:5c:6f:77:00:3b:82:4f:e4: 72:c2:d6:b7:ee:dd:54:12:7b:f8:b8:f9:85:b9:8b:ab:30:81: fb:12:7a:40:61:4f:84:7b:73:41:be:36:7d:91:55:62:01:47: 94:f4:4c:a7:aa:75:e1:c3:97:e2:d5:1c:4a:cd:5b:c8:66:73: 60:87:1c:8d:82:f8:0d:e1:68:79:7a:76:f7:f8:37:5a:fa:f2: 3b:45:d5:49:f2:50:3c:ed:00:2d:89:7b:bd:2f:27:ba:80:0c: 59:84:3f:2c:d2:ab:df:89:e7:e1:0e:ab:11:4a:7a:97:9c:4b: 95:2c:7e:83:f8:76:f0:f2:9f:c6:ee:d5:b8:a1:4e:e0:25:70: f3:3f:e6:6e:61:81:e2:23:1e:d5:07:24:2a:b1:a7:70:35:b0: 80:87:e7:1a:3b:f0:74:90:7f:e3:33:e6:e7:6f:43:f7:b9:4b: 7c:fa:49:c9:99:ba:59:1b:3f:2a:cd:87:7b:5c:39:d3:e2:84: 51:ce:ab:bc:74:a1:bd:ce:9f:bd:a7:88:4c:ae:43:37:67:44: 7c:90:59:35:71:3a:2b:43:61:43:a4:73:4f:6d:7d:57:d3:d4: d1:71:bc:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiWXdyV3dSubbYO5E70I1p6wgicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTEyMDUwOTM3MTNaFw0yNTEyMDgxMzUzMTNaMDMxMTAvBgNV BAMTKDAzNkQ4OEFCRDc2OTE3RjU1OTg2OUVFMjY0MUVBOUNEMjkzQUY0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/X0MtDyYweMVSyLICNnQOfZVU B3aDFMCfMNZhayOPnJvLjg+4CCrwEdBXhmWZQz8W7HHucKoSfGRc1NO/JkOx6sBM Mrm26W0fwkEnumd/GrHT2XIsiuOdyQpYZr9+r9c9kg+YW8iRoE5SIGIecG4KlGmW x79gmGflNsdxl5jYK4fxRX4GI/xhaxZnMN7ohfAlfXdmwpQjcKjVoGFpawthgCKw 3p5ijvtNjNIy/5L5gpAbPBdl1/P/nq+FLnP93YvfmdmYNJKGaQw2AK2x5EGMfPAt XmgTDMr2hFEnCIVE/I0s7Pj0oY5Aw7eAK3eZu0YJKnGBFOURXOvBky/Nw+g5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA22Iq9dpF/VZhp7iZB6pzSk69PYwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxQn6z4Yb2S8GIfcbp33nalBFBrfmrQOo3e 6nNcb3cAO4JP5HLC1rfu3VQSe/i4+YW5i6swgfsSekBhT4R7c0G+Nn2RVWIBR5T0 TKeqdeHDl+LVHErNW8hmc2CHHI2C+A3haHl6dvf4N1r68jtF1UnyUDztAC2Je70v J7qADFmEPyzSq9+J5+EOqxFKepecS5UsfoP4dvDyn8bu1bihTuAlcPM/5m5hgeIj HtUHJCqxp3A1sICH5xo78HSQf+Mz5udvQ/e5S3z6ScmZulkbPyrNh3tcOdPihFHO q7x0ob3On72niEyuQzdnRHyQWTVxOitDYUOkc09tfVfT1NFxvHA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:24 2025 by rpki-client