This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: Prj7ETSNO/Tz0S9Yius3cYBJqm2GtkUu/gEbg3T/DXU= Subject key identifier: EA:4E:B6:67:79:46:33:FA:82:B5:50:42:B1:EB:85:0A:2F:97:B3:DE Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 6F352DDD9347BBF865C391C11B0AA074D0692761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 015D Signing time: Fri 05 Dec 2025 19:32:17 +0000 Manifest this update: Fri 05 Dec 2025 19:27:17 +0000 Manifest next update: Mon 08 Dec 2025 19:47:17 +0000 Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: enORB7AQ2Y+42S5HE1FDggaW6vwKU8hKfiqSx3+Dqyk=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: CpAmfGFPshchskDFioWZ40Jjj5tg/7Zw7Qwd2g3Gj7s=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:35:2d:dd:93:47:bb:f8:65:c3:91:c1:1b:0a:a0:74:d0:69:27:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Dec 5 19:27:17 2025 GMT Not After : Dec 8 19:47:17 2025 GMT Subject: CN=EA4EB667794633FA82B55042B1EB850A2F97B3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:8f:3e:fd:20:22:99:eb:86:42:fc:eb:c1: f3:59:ca:dc:47:7d:42:fd:f3:ce:02:4c:9b:67:06: 6a:4c:87:8b:96:05:6d:ea:6c:bf:c2:43:0e:ce:6a: 52:29:91:21:17:02:5d:55:fd:d2:ce:ba:63:79:de: f9:0e:60:d3:71:a2:ca:de:67:b2:c8:43:de:2b:e6: 74:dc:a4:bf:89:20:e7:f8:2e:c1:bb:27:ec:f5:d8: 68:71:cf:6e:2b:c0:83:91:11:4f:c7:6e:c7:34:e7: e0:45:2a:b3:6f:65:08:f9:58:22:d5:e4:57:e3:2f: a7:b8:a0:bd:6c:4b:4b:ed:35:ce:80:aa:d1:ea:f8: 55:2b:65:46:4e:4f:77:ae:7b:b6:31:40:62:5d:4e: a0:b9:91:7c:d2:5c:f6:48:d2:2f:41:ff:40:8a:8b: 4d:af:fb:65:d3:c6:90:c1:56:2c:2a:d9:cd:56:83: cc:af:ed:c0:90:78:ae:2e:d8:e0:f0:b6:ca:07:ce: 15:a5:bf:6d:8a:cf:7c:76:40:6c:10:7c:1e:40:b9: a0:6d:18:47:10:f1:43:b4:d4:94:67:ed:d5:1b:33: db:b7:59:8a:a0:1c:a4:7e:ca:a6:ac:23:f4:76:c5: c8:9c:9f:19:03:74:13:b6:8a:a2:bc:61:a5:00:5e: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4E:B6:67:79:46:33:FA:82:B5:50:42:B1:EB:85:0A:2F:97:B3:DE X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:2b:38:0b:d0:1d:db:a5:fc:6a:3e:9d:db:9d:05:ce:6f: 5d:ff:23:53:53:3f:da:dd:5c:b6:94:a9:69:e2:65:3c:ea:30: fd:3c:3c:99:1e:7f:15:a2:ef:12:f0:d8:53:43:75:79:c7:81: cd:63:f3:e5:f4:3c:7c:b0:21:7f:85:dd:7b:5a:c9:81:2b:8e: 69:ff:52:8f:e8:35:aa:6d:15:60:a1:4b:3e:9e:93:da:1d:ad: e0:34:a4:fc:be:c5:33:20:a2:59:71:6b:8e:43:c9:64:9c:ea: 37:db:77:44:b7:8b:4b:a7:98:f1:5d:fd:ea:94:4c:ab:7a:bb: 8e:8b:22:c2:07:62:80:16:3e:19:34:87:9c:4f:a2:60:2e:55: 5d:1a:a3:71:b2:d6:59:0c:c2:57:ca:ea:1c:9e:47:16:8f:00: 72:62:a3:b5:da:f8:9e:c0:03:3a:be:d8:da:28:61:14:cc:e4: bd:8e:3b:7e:f6:c1:ea:c0:f0:18:f2:0e:73:b8:5e:b0:e5:4e: 74:bd:03:29:1d:45:d3:ce:67:1d:4a:14:bf:a6:80:64:7c:ae: 68:1e:55:c9:e1:c7:fd:14:b5:9d:14:a9:24:c4:6c:db:0a:b5: bb:7d:6b:37:bf:be:8a:27:bb:38:8f:3b:ea:58:61:ad:49:3f: ba:fb:be:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzUt3ZNHu/hlw5HBGwqgdNBpJ2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTEyMDUxOTI3MTdaFw0yNTEyMDgxOTQ3MTdaMDMxMTAvBgNV BAMTKEVBNEVCNjY3Nzk0NjMzRkE4MkI1NTA0MkIxRUI4NTBBMkY5N0IzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCej48+/SAimeuGQvzrwfNZytxH fUL9884CTJtnBmpMh4uWBW3qbL/CQw7OalIpkSEXAl1V/dLOumN53vkOYNNxosre Z7LIQ94r5nTcpL+JIOf4LsG7J+z12Ghxz24rwIOREU/Hbsc05+BFKrNvZQj5WCLV 5FfjL6e4oL1sS0vtNc6AqtHq+FUrZUZOT3eue7YxQGJdTqC5kXzSXPZI0i9B/0CK i02v+2XTxpDBViwq2c1Wg8yv7cCQeK4u2ODwtsoHzhWlv22Kz3x2QGwQfB5AuaBt GEcQ8UO01JRn7dUbM9u3WYqgHKR+yqasI/R2xcicnxkDdBO2iqK8YaUAXr1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6k62Z3lGM/qCtVBCseuFCi+Xs94wHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrrKzgL0B3bpfxqPp3bnQXOb13/I1NTP9rd XLaUqWniZTzqMP08PJkefxWi7xLw2FNDdXnHgc1j8+X0PHywIX+F3XtayYErjmn/ Uo/oNaptFWChSz6ek9odreA0pPy+xTMgollxa45DyWSc6jfbd0S3i0unmPFd/eqU TKt6u46LIsIHYoAWPhk0h5xPomAuVV0ao3Gy1lkMwlfK6hyeRxaPAHJio7Xa+J7A Azq+2NooYRTM5L2OO372werA8BjyDnO4XrDlTnS9AykdRdPOZx1KFL+mgGR8rmge Vcnhx/0UtZ0UqSTEbNsKtbt9aze/voonuziPO+pYYa1JP7r7vhs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:25 2025 by rpki-client