This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: w8wzllakqXvVveb2FEVppI7oqy2AsIWsNayS9gilC64= Subject key identifier: 6F:AB:E7:6B:A4:DC:A4:88:39:CB:65:AF:DB:40:8F:36:FB:8A:9A:DD Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 423A40A2C9A7B5A600BBF3D0469E79B50918CDA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03AB Signing time: Sat 06 Dec 2025 21:51:15 +0000 Manifest this update: Sat 06 Dec 2025 21:46:15 +0000 Manifest next update: Wed 10 Dec 2025 01:21:15 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: L/Sqwc/BJ0w57QqJGKtf+iAIFAu0+59wLLAHk1sLSkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3a:40:a2:c9:a7:b5:a6:00:bb:f3:d0:46:9e:79:b5:09:18:cd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Dec 6 21:46:15 2025 GMT Not After : Dec 10 01:21:15 2025 GMT Subject: CN=6FABE76BA4DCA48839CB65AFDB408F36FB8A9ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:16:b2:de:ba:2e:0c:da:f1:bc:96:eb:ec: 12:c6:7e:5d:5f:4b:c5:d3:e7:00:60:70:fa:98:a9: bd:39:6a:7c:b8:01:f4:50:a6:d5:31:83:d0:b7:da: 69:7d:3a:72:7f:99:94:cf:e8:3c:bf:39:8b:51:05: 9d:f7:0f:2e:50:2f:36:3c:e8:6e:b8:3c:67:6d:de: 56:8c:56:f3:82:11:6e:63:a8:64:32:9b:20:c7:bf: b9:39:57:59:1f:84:c4:45:9d:c9:dc:25:42:68:e3: 82:40:a7:3e:88:45:fc:9d:92:7c:ac:db:16:c8:27: 9d:2a:17:21:a3:de:a9:b1:9e:d5:94:b9:cf:9b:42: 09:37:ce:75:aa:0e:3f:60:ba:a5:e5:88:69:48:ea: 18:0b:f0:e7:8d:4e:1f:a3:6b:37:14:df:dd:4e:1f: b0:1d:58:05:99:8e:0a:0a:f1:54:ec:01:ae:10:ce: bb:51:60:bc:5c:5e:df:59:c8:2c:8f:8d:4d:f4:d5: d9:19:9c:05:77:f4:0a:c2:d5:12:e4:b9:02:4d:a2: ab:48:82:a6:2a:7e:ef:10:6f:df:f8:67:6c:02:3d: a0:da:ae:85:07:54:30:0a:b1:b1:20:81:fa:0f:25: 76:54:9c:f5:8f:9b:9c:af:8b:90:9e:05:5c:f6:8c: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AB:E7:6B:A4:DC:A4:88:39:CB:65:AF:DB:40:8F:36:FB:8A:9A:DD X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9a:a5:be:b9:04:8c:c4:bd:af:a8:f5:7e:55:6d:af:36:f8: 4a:65:aa:a0:a1:8c:11:af:fb:2e:2a:9a:72:52:ca:da:bd:99: 7b:89:3c:31:a1:9c:12:ce:26:df:c3:96:ee:5e:71:78:32:e7: 15:95:65:80:6b:0f:47:b9:84:b8:85:0d:08:6b:9b:e7:88:ab: 54:f8:30:06:54:06:5f:3a:60:ae:ae:3b:ea:01:95:b6:04:1a: 80:3e:d8:69:60:08:a3:d4:0d:4e:6f:c2:76:dc:81:92:73:95: 8f:eb:0b:63:a1:bf:07:16:85:a8:28:3c:52:0a:a1:f5:23:3e: c6:b4:41:1f:4f:d4:c2:5c:9e:eb:0d:0b:06:e7:9b:80:53:77: db:d3:96:6d:36:40:4d:7b:95:8d:b8:13:94:ed:20:1a:d5:1e: 0e:7e:36:5c:25:dd:5e:c3:9d:bb:0a:2f:53:b7:51:59:1c:0d: 65:90:f2:e7:2a:df:52:2d:5d:00:5e:c4:91:d4:49:af:94:63: 0a:41:4d:c8:36:17:da:e3:06:d0:e7:33:0e:a5:5c:cb:5b:ff: ae:a6:d2:87:fc:4a:db:88:7e:fa:6f:af:41:76:be:99:96:c1: d5:02:8c:18:8b:62:b9:5c:66:99:3b:4a:01:10:28:e9:9c:72: 3f:f8:7d:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjpAosmntaYAu/PQRp55tQkYzacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTEyMDYyMTQ2MTVaFw0yNTEyMTAwMTIxMTVaMDMxMTAvBgNV BAMTKDZGQUJFNzZCQTREQ0E0ODgzOUNCNjVBRkRCNDA4RjM2RkI4QTlBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzBay3rouDNrxvJbr7BLGfl1f S8XT5wBgcPqYqb05any4AfRQptUxg9C32ml9OnJ/mZTP6Dy/OYtRBZ33Dy5QLzY8 6G64PGdt3laMVvOCEW5jqGQymyDHv7k5V1kfhMRFncncJUJo44JApz6IRfydknys 2xbIJ50qFyGj3qmxntWUuc+bQgk3znWqDj9guqXliGlI6hgL8OeNTh+jazcU391O H7AdWAWZjgoK8VTsAa4QzrtRYLxcXt9ZyCyPjU301dkZnAV39ArC1RLkuQJNoqtI gqYqfu8Qb9/4Z2wCPaDaroUHVDAKsbEggfoPJXZUnPWPm5yvi5CeBVz2jD2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb6vna6TcpIg5y2Wv20CPNvuKmt0wHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImapb65BIzEva+o9X5Vba82+EplqqChjBGv +y4qmnJSytq9mXuJPDGhnBLOJt/Dlu5ecXgy5xWVZYBrD0e5hLiFDQhrm+eIq1T4 MAZUBl86YK6uO+oBlbYEGoA+2GlgCKPUDU5vwnbcgZJzlY/rC2OhvwcWhagoPFIK ofUjPsa0QR9P1MJcnusNCwbnm4BTd9vTlm02QE17lY24E5TtIBrVHg5+Nlwl3V7D nbsKL1O3UVkcDWWQ8ucq31ItXQBexJHUSa+UYwpBTcg2F9rjBtDnMw6lXMtb/66m 0of8StuIfvpvr0F2vpmWwdUCjBiLYrlcZpk7SgEQKOmccj/4fWY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:19 2025 by rpki-client