This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 6RNtrpZYFB7STlbANJBSBlK/dC/JLyS+gRHUnUtCrR8= Subject key identifier: CD:5E:F7:63:FC:52:29:87:3F:63:3C:B5:54:F1:84:BE:7E:2E:C2:E4 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 0B5DC6F303F8FFAF9C686EFC37C3E1F9244A3D92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 10:10:03 +0000 Manifest this update: Sat 06 Dec 2025 10:05:03 +0000 Manifest next update: Tue 09 Dec 2025 17:27:03 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: qNm5x8uLMfb21B01ooKTDbhtYQunKeIVlsMza+QW9iQ=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5d:c6:f3:03:f8:ff:af:9c:68:6e:fc:37:c3:e1:f9:24:4a:3d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Dec 6 10:05:03 2025 GMT Not After : Dec 9 17:27:03 2025 GMT Subject: CN=CD5EF763FC5229873F633CB554F184BE7E2EC2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:48:ee:1d:c4:24:e2:ea:4e:86:87:de:22: cf:d9:a7:bd:f5:45:ec:7e:23:97:fe:f7:d1:fe:63: bb:eb:49:a1:d5:59:11:09:a0:ce:23:56:44:4b:f7: 72:c9:18:b4:b3:b0:ab:01:43:d6:c3:41:15:9a:b8: 54:51:8f:26:8e:8b:01:a1:47:80:61:8a:ba:76:bd: b0:bf:04:a9:53:a4:30:03:4b:24:2f:b4:c6:b5:10: 19:b7:c7:8e:b7:fc:26:2d:84:1b:37:39:8b:a2:44: 55:d1:bb:16:22:e5:90:98:d7:58:9f:77:3c:3e:e8: 2b:a6:ff:de:60:d9:59:fa:4f:d4:c0:81:cd:e3:b0: 39:45:b3:4a:46:cc:ba:1a:d5:fd:60:33:0b:f0:ad: 8d:7d:c2:29:be:a6:33:da:76:27:be:c8:f8:39:e8: 34:2c:fc:e7:19:29:23:a1:6d:e5:2a:e6:1a:ec:29: 57:88:df:37:fc:c7:c8:71:dd:30:04:3d:a9:6f:94: b0:d5:65:6a:2e:eb:da:e9:42:07:f0:a7:6b:3e:a0: 67:1d:31:2e:22:37:6c:68:15:af:2d:12:a3:49:81: ca:c4:db:a3:34:e5:41:10:16:10:b4:ef:09:8e:8b: 49:56:ad:8d:42:3b:5d:7e:09:7d:fa:e5:7e:09:ac: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:F7:63:FC:52:29:87:3F:63:3C:B5:54:F1:84:BE:7E:2E:C2:E4 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:29:9a:ce:b5:7b:b0:cb:49:a2:9c:8c:7c:b1:37:f7:14: c0:e3:05:0d:17:62:e0:94:76:24:e4:59:5d:c3:ce:3d:84:41: 3f:cd:68:bc:20:9c:f3:2a:ac:99:6a:60:2c:6d:9d:65:cf:1b: c1:b3:0e:6a:96:31:32:de:55:d5:b4:b3:27:86:d3:38:3d:39: 37:f1:c9:0d:32:9a:c5:67:54:85:8e:fb:d0:d0:83:e9:c7:ea: 65:b9:49:99:c7:ec:3f:0b:83:f0:a7:06:e8:f2:10:81:68:b2: 5b:e4:e5:07:37:6c:52:5c:27:c3:26:53:07:19:e3:10:a6:3c: 6c:d3:12:68:11:f3:ec:b3:2e:bc:2f:40:ce:3c:38:37:63:09: 96:fe:b7:59:6a:9a:79:67:1f:81:a6:d2:7d:96:68:13:a9:d0: 4b:53:5e:10:d0:42:a7:73:dc:31:63:3d:aa:ea:d3:8a:b7:9a: 18:0c:18:e2:9c:12:6c:7c:a3:4d:14:a1:6c:d8:1d:45:c7:d9: 0c:98:01:88:35:5d:f5:fb:d3:48:78:25:af:39:c7:32:06:ca: a5:b4:58:e2:8b:14:2e:af:4f:18:8d:4e:23:53:8f:17:ef:e4: b6:10:ed:a7:77:86:1d:25:7c:ae:21:be:c6:7b:19:b9:8f:bc: f6:52:d0:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC13G8wP4/6+caG78N8Ph+SRKPZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTEyMDYxMDA1MDNaFw0yNTEyMDkxNzI3MDNaMDMxMTAvBgNV BAMTKENENUVGNzYzRkM1MjI5ODczRjYzM0NCNTU0RjE4NEJFN0UyRUMyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+UjuHcQk4upOhofeIs/Zp731 Rex+I5f+99H+Y7vrSaHVWREJoM4jVkRL93LJGLSzsKsBQ9bDQRWauFRRjyaOiwGh R4Bhirp2vbC/BKlTpDADSyQvtMa1EBm3x463/CYthBs3OYuiRFXRuxYi5ZCY11if dzw+6Cum/95g2Vn6T9TAgc3jsDlFs0pGzLoa1f1gMwvwrY19wim+pjPadie+yPg5 6DQs/OcZKSOhbeUq5hrsKVeI3zf8x8hx3TAEPalvlLDVZWou69rpQgfwp2s+oGcd MS4iN2xoFa8tEqNJgcrE26M05UEQFhC07wmOi0lWrY1CO11+CX365X4JrEWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzV73Y/xSKYc/Yzy1VPGEvn4uwuQwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsyKZrOtXuwy0minIx8sTf3FMDjBQ0XYuCU diTkWV3Dzj2EQT/NaLwgnPMqrJlqYCxtnWXPG8GzDmqWMTLeVdW0syeG0zg9OTfx yQ0ymsVnVIWO+9DQg+nH6mW5SZnH7D8Lg/CnBujyEIFoslvk5Qc3bFJcJ8MmUwcZ 4xCmPGzTEmgR8+yzLrwvQM48ODdjCZb+t1lqmnlnH4Gm0n2WaBOp0EtTXhDQQqdz 3DFjParq04q3mhgMGOKcEmx8o00UoWzYHUXH2QyYAYg1XfX700h4Ja85xzIGyqW0 WOKLFC6vTxiNTiNTjxfv5LYQ7ad3hh0lfK4hvsZ7GbmPvPZS0DE= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:46 2025 by rpki-client