This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: b+poLfQ13JVKUsxrQ3ur0PzouxEhTvMrA+QIteeb64w= Subject key identifier: F8:BF:0E:95:E7:B5:26:C0:2D:03:1B:BF:A2:7C:3B:0E:3C:30:14:0F Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 586A4315B3F236477C4C2693535BA5C7C4894012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0166 Signing time: Fri 05 Dec 2025 04:11:12 +0000 Manifest this update: Fri 05 Dec 2025 04:06:12 +0000 Manifest next update: Mon 08 Dec 2025 05:29:12 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 3: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 6: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: +SLb4Z8dssTWwF1fx3CqCdZbBVaswcTA462ZLqFt2t4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6a:43:15:b3:f2:36:47:7c:4c:26:93:53:5b:a5:c7:c4:89:40:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Dec 5 04:06:12 2025 GMT Not After : Dec 8 05:29:12 2025 GMT Subject: CN=F8BF0E95E7B526C02D031BBFA27C3B0E3C30140F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:5a:08:b6:65:10:8a:45:2f:5a:55:74:b7: ac:44:9c:aa:34:4e:2c:8e:18:fc:89:fe:67:f6:30: 5f:ce:78:5d:d3:a0:59:6b:93:58:06:f0:9e:4f:93: 1b:81:dd:4b:15:03:9a:2d:a3:ee:0e:e5:8d:09:83: 5d:b8:ba:20:f0:ee:55:40:d9:82:8b:ed:f7:79:3e: 82:12:51:3e:8c:6d:33:37:39:ef:f6:bf:7b:b3:dc: 70:9c:45:7d:b8:fd:8b:30:68:a9:c2:a3:16:63:62: d0:58:54:34:09:ff:c6:9f:79:48:09:75:23:a3:e1: 53:5a:69:a5:21:5a:ee:04:fe:05:fa:05:e3:68:81: 1c:e6:99:e5:38:d3:fc:d8:82:7d:db:5a:fb:9e:6d: 81:1d:bb:ed:d9:44:c8:a6:27:ed:48:64:f0:db:66: 64:2d:05:32:fe:23:e2:6d:f5:f4:ab:af:ae:52:0b: e1:58:9f:1b:40:02:1c:9e:ff:5c:f0:ca:38:4c:56: 60:58:06:b0:20:c1:32:3b:90:88:7b:37:21:5a:70: 1d:51:2c:93:27:af:89:2a:01:97:7c:e1:11:9f:09: 20:ed:50:7f:12:c6:49:6a:3a:4d:9a:54:b5:6d:87: 63:a5:c8:83:85:46:fa:95:12:7c:ac:c9:4d:90:0c: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BF:0E:95:E7:B5:26:C0:2D:03:1B:BF:A2:7C:3B:0E:3C:30:14:0F X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b1:41:29:d9:74:84:d6:36:df:97:4a:99:e9:80:37:6c:05: 8b:aa:c6:3b:14:b6:28:87:43:fd:c6:78:64:fc:76:bc:8a:d2: 86:e6:74:40:4e:fd:70:eb:b0:f9:fe:e9:e6:16:4e:61:4f:a9: 0b:c4:f6:1e:57:74:d9:85:2c:80:ad:1b:fa:f7:5b:e2:44:f5: 7f:52:97:1f:5d:03:c3:71:63:16:79:81:dc:d0:7e:04:8d:c4: c9:bb:c8:29:9e:1b:e8:12:f1:c3:ae:4b:9c:80:7c:44:b2:26: b3:fc:e1:b8:10:b7:86:7f:a4:f2:0b:f3:ee:5f:6a:77:84:96: 98:62:9b:24:8f:4d:e9:bb:82:79:ac:3b:d9:69:52:73:cb:78: 3f:95:10:50:04:92:ee:66:d9:4d:2a:6b:97:80:06:ac:69:32: 25:4a:2d:6a:99:62:8a:cb:69:dd:af:23:c6:dc:62:3e:8f:7c: 8a:2c:2a:d8:a2:d3:0f:50:f9:99:8a:29:27:55:63:38:74:e4: 76:fb:5e:29:3f:8d:cc:4c:db:c4:3b:ea:02:4b:82:69:6d:6b: 86:f1:c9:2c:76:02:98:1b:14:c3:4f:75:0b:95:df:e3:77:21: 8d:83:e6:ac:86:c9:19:e3:a2:3e:19:97:6c:7e:b3:c6:75:78: 3e:74:69:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGpDFbPyNkd8TCaTU1ulx8SJQBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTEyMDUwNDA2MTJaFw0yNTEyMDgwNTI5MTJaMDMxMTAvBgNV BAMTKEY4QkYwRTk1RTdCNTI2QzAyRDAzMUJCRkEyN0MzQjBFM0MzMDE0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xloItmUQikUvWlV0t6xEnKo0 TiyOGPyJ/mf2MF/OeF3ToFlrk1gG8J5PkxuB3UsVA5oto+4O5Y0Jg124uiDw7lVA 2YKL7fd5PoISUT6MbTM3Oe/2v3uz3HCcRX24/YswaKnCoxZjYtBYVDQJ/8afeUgJ dSOj4VNaaaUhWu4E/gX6BeNogRzmmeU40/zYgn3bWvuebYEdu+3ZRMimJ+1IZPDb ZmQtBTL+I+Jt9fSrr65SC+FYnxtAAhye/1zwyjhMVmBYBrAgwTI7kIh7NyFacB1R LJMnr4kqAZd84RGfCSDtUH8SxklqOk2aVLVth2OlyIOFRvqVEnysyU2QDCBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+L8Olee1JsAtAxu/onw7DjwwFA8wHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHixQSnZdITWNt+XSpnpgDdsBYuqxjsUtiiH Q/3GeGT8dryK0obmdEBO/XDrsPn+6eYWTmFPqQvE9h5XdNmFLICtG/r3W+JE9X9S lx9dA8NxYxZ5gdzQfgSNxMm7yCmeG+gS8cOuS5yAfESyJrP84bgQt4Z/pPIL8+5f aneElphimySPTem7gnmsO9lpUnPLeD+VEFAEku5m2U0qa5eABqxpMiVKLWqZYorL ad2vI8bcYj6PfIosKtii0w9Q+ZmKKSdVYzh05Hb7Xik/jcxM28Q76gJLgmlta4bx ySx2ApgbFMNPdQuV3+N3IY2D5qyGyRnjoj4Zl2x+s8Z1eD50aRo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:11 2025 by rpki-client