This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: qilpEKXQrO6vn1b1GDKNr5NbjLewTwR+33p5d2uXJOo= Subject key identifier: 86:9F:7A:14:C3:53:50:62:68:AA:DF:6A:CA:CB:27:6C:28:C3:FD:39 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 789F68DB74E75F15DBF839A6068031C2A3F087CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03C0 Signing time: Fri 23 Jan 2026 11:21:15 +0000 Manifest this update: Fri 23 Jan 2026 11:16:15 +0000 Manifest next update: Mon 26 Jan 2026 19:01:15 +0000 Files and hashes: 1: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: 488mx+YhfKAXRB0+2DWu2AB5shxgn4Ry+ICxQPmmCc8=) 2: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9f:68:db:74:e7:5f:15:db:f8:39:a6:06:80:31:c2:a3:f0:87:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Jan 23 11:16:15 2026 GMT Not After : Jan 26 19:01:15 2026 GMT Subject: CN=869F7A14C353506268AADF6ACACB276C28C3FD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:2d:89:2b:8d:6d:5a:80:95:4e:7b:c6:ac: 98:ac:4c:ed:cd:e5:23:2c:fb:13:d8:5a:c7:1e:8d: 7a:10:4e:53:13:62:2b:8b:6f:06:72:eb:04:fb:58: 8f:ac:e2:48:84:ed:b2:95:94:56:de:9b:17:02:4e: cb:c2:85:b6:a9:54:3f:d4:78:e5:9c:35:0a:62:d7: cf:49:2b:ae:f1:ad:44:e6:54:5c:21:e0:ef:77:6b: 2a:ac:ab:fa:ca:07:d0:03:4a:f1:e5:6d:04:1b:7a: 46:a0:59:be:15:46:dc:58:5e:b9:2a:6c:5a:df:dd: 2e:e7:47:47:6f:21:02:ca:8f:69:75:fa:4e:14:a3: 94:8b:62:47:65:8f:10:33:6f:45:e9:72:c4:c4:60: 44:22:ce:e8:e9:cf:99:e6:64:b1:4f:4c:9d:a7:37: 3b:82:17:47:48:a1:6f:1b:e8:4b:9b:1f:0c:8a:fc: e8:34:af:ce:63:fe:1c:38:2e:14:b9:e9:df:e6:43: 23:32:b2:91:87:44:0d:1b:85:d9:98:f8:ea:3d:ae: b3:1d:2c:7e:e6:56:ce:d2:23:58:77:01:de:4d:3e: fd:cf:d5:14:32:c3:b3:32:a5:c5:88:a1:19:2f:86: e6:91:04:fd:bb:b3:c8:69:5e:5a:f0:d8:20:6c:e1: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:7A:14:C3:53:50:62:68:AA:DF:6A:CA:CB:27:6C:28:C3:FD:39 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e1:74:b7:08:ab:cc:b7:0f:20:66:2c:4f:62:f5:86:ca:a1: 55:3e:aa:ce:91:a7:b8:f0:54:f4:e6:b1:4c:84:22:f0:95:94: bd:be:29:35:e2:6c:e2:db:fd:d3:1c:0b:62:90:7e:c5:08:3f: 65:76:7f:38:2c:9e:f1:b5:39:18:c4:91:76:bc:70:41:cd:31: a9:7b:35:15:bb:56:1a:06:98:b1:d0:4a:1a:d6:aa:93:12:6f: 34:6f:05:e5:a5:eb:9d:57:6b:a4:f2:82:47:74:83:ab:13:0e: 57:85:d7:a3:af:dc:32:83:ad:b9:de:09:b6:f9:36:61:5a:68: d8:be:4a:8a:78:61:57:b3:1a:70:9e:20:00:7e:9b:aa:44:f8: d2:32:89:d3:eb:2c:8e:a5:9d:59:82:ad:ee:89:8f:79:57:ac: 07:0d:5a:49:0e:2a:e0:1a:42:28:ae:de:e6:62:20:4f:41:eb: 09:da:91:35:f0:d8:3f:9d:e4:eb:82:d5:68:f2:23:17:7a:83: c8:b5:55:4e:c5:4d:4d:fd:b4:a2:1e:22:39:21:ae:6f:b3:00: 31:24:ee:ac:77:29:cc:0a:a9:68:be:29:ac:1e:14:e3:72:7b: c4:d8:97:b4:3d:7f:15:4f:aa:d8:fe:b6:09:ad:b9:87:18:c3: 11:99:76:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJ9o23TnXxXb+DmmBoAxwqPwh8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNjAxMjMxMTE2MTVaFw0yNjAxMjYxOTAxMTVaMDMxMTAvBgNV BAMTKDg2OUY3QTE0QzM1MzUwNjI2OEFBREY2QUNBQ0IyNzZDMjhDM0ZEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmy2JK41tWoCVTnvGrJisTO3N 5SMs+xPYWscejXoQTlMTYiuLbwZy6wT7WI+s4kiE7bKVlFbemxcCTsvChbapVD/U eOWcNQpi189JK67xrUTmVFwh4O93ayqsq/rKB9ADSvHlbQQbekagWb4VRtxYXrkq bFrf3S7nR0dvIQLKj2l1+k4Uo5SLYkdljxAzb0XpcsTEYEQizujpz5nmZLFPTJ2n NzuCF0dIoW8b6EubHwyK/Og0r85j/hw4LhS56d/mQyMyspGHRA0bhdmY+Oo9rrMd LH7mVs7SI1h3Ad5NPv3P1RQyw7MypcWIoRkvhuaRBP27s8hpXlrw2CBs4c/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhp96FMNTUGJoqt9qyssnbCjD/TkwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJThdLcIq8y3DyBmLE9i9YbKoVU+qs6Rp7jw VPTmsUyEIvCVlL2+KTXibOLb/dMcC2KQfsUIP2V2fzgsnvG1ORjEkXa8cEHNMal7 NRW7VhoGmLHQShrWqpMSbzRvBeWl651Xa6Tygkd0g6sTDleF16Ov3DKDrbneCbb5 NmFaaNi+Sop4YVezGnCeIAB+m6pE+NIyidPrLI6lnVmCre6Jj3lXrAcNWkkOKuAa Qiiu3uZiIE9B6wnakTXw2D+d5OuC1WjyIxd6g8i1VU7FTU39tKIeIjkhrm+zADEk 7qx3KcwKqWi+KaweFONye8TYl7Q9fxVPqtj+tgmtuYcYwxGZdmU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:30 2026 by rpki-client