This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: NqjtJaV7ZtbIqT6P+99ipSE1cS+GZLDRe2Jup1DH+Zs= Subject key identifier: C0:05:FF:E8:58:52:5A:22:52:CD:D3:D3:28:73:61:78:5A:1C:AD:5A Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 410FC14D05CD41B9F73C55BF2B96F1DE3523F5E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 016B Signing time: Tue 16 Dec 2025 09:01:11 +0000 Manifest this update: Tue 16 Dec 2025 08:56:11 +0000 Manifest next update: Fri 19 Dec 2025 17:14:11 +0000 Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 5: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: Z0J/T6pjQy0PYR1o2ScRQQ4mBgBGGfO//oj+zCuuASM=) 6: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0f:c1:4d:05:cd:41:b9:f7:3c:55:bf:2b:96:f1:de:35:23:f5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Dec 16 08:56:11 2025 GMT Not After : Dec 19 17:14:11 2025 GMT Subject: CN=C005FFE858525A2252CDD3D3287361785A1CAD5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:5b:5e:3e:2f:85:6f:50:04:a5:d7:3f:5c: 32:11:79:aa:b3:2b:2d:3e:ba:41:86:1b:fc:df:99: bf:77:35:3e:f8:ce:d8:7e:9b:b7:29:ba:e2:b7:13: d8:bf:c4:48:13:88:b5:cd:16:95:9d:b4:cc:3b:98: 0e:eb:51:98:3e:e4:d8:c8:f9:56:58:25:26:bd:ad: 6e:41:fd:7f:02:2e:01:0f:1b:9e:ee:ae:ed:73:74: f3:38:82:1a:59:ac:5f:b8:92:36:06:62:01:08:8d: 6f:97:d2:fd:cc:76:09:9d:53:90:e4:36:87:df:0a: 2b:2c:05:c7:b0:a2:c0:e0:e1:dd:be:93:5e:a8:7d: a1:37:a4:39:4d:b9:1b:d4:87:51:31:56:cc:62:31: b6:75:42:b6:11:e3:13:77:d2:c0:08:2b:fb:b1:c0: db:a8:d3:ce:23:eb:16:36:a7:fa:78:d3:11:bb:ce: bc:30:c6:c9:61:ce:7d:77:9a:b6:fe:a0:9b:61:4d: 79:16:ee:66:7c:41:9c:ec:94:c3:73:c8:df:51:cd: 7e:2a:df:68:2a:f8:1c:44:7d:f2:17:bb:8e:11:74: 9f:bb:b5:c1:53:0f:23:c2:f0:8b:f3:5d:2d:3f:a3: f8:9c:97:bb:9c:69:d6:2d:0a:82:37:12:94:21:4d: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:FF:E8:58:52:5A:22:52:CD:D3:D3:28:73:61:78:5A:1C:AD:5A X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:37:b4:9d:3a:24:4f:f1:da:2c:0f:1b:63:a4:ef:f4:4a:b2: ab:44:f9:45:12:3b:5c:bc:61:0f:6f:2d:e9:e5:1e:f8:14:28: af:d1:3f:b4:ab:0b:b3:46:b7:88:c2:2d:71:46:c0:c8:07:99: fa:ff:7e:6e:98:45:a1:0f:87:a8:12:10:15:b0:80:23:a7:d5: ee:2b:6f:b2:3a:7f:2c:22:48:6b:19:d4:f5:a3:9a:61:76:3c: 0e:1a:bc:33:4e:2b:ca:d4:56:f6:79:5d:7c:48:fe:24:e4:dc: 60:87:01:06:7b:f7:e6:63:45:4f:25:5f:37:d3:7b:42:f8:31: a3:89:f7:66:23:e4:b2:cf:cd:88:04:0f:84:b6:af:5a:e0:fa: 9a:de:da:f5:fc:5c:a8:83:20:1b:bf:84:bc:e3:ab:1b:5e:b5: c6:8f:27:58:9c:a6:4a:23:47:33:9c:d0:76:4e:7e:ef:95:61: 49:ea:9c:e7:1f:00:2e:f5:d2:51:31:80:cc:81:23:40:52:23: 9b:91:48:99:ea:f9:47:31:02:03:79:7f:54:e7:67:92:d8:94: ed:00:3f:98:2a:65:87:40:15:c1:e3:a6:4b:4d:a9:34:8f:0f: 3a:e9:0a:8c:ca:08:7a:49:c1:e4:b6:b3:3e:04:d8:bc:2a:33: 3e:54:2d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQ/BTQXNQbn3PFW/K5bx3jUj9ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTEyMTYwODU2MTFaFw0yNTEyMTkxNzE0MTFaMDMxMTAvBgNV BAMTKEMwMDVGRkU4NTg1MjVBMjI1MkNERDNEMzI4NzM2MTc4NUExQ0FENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeltePi+Fb1AEpdc/XDIReaqz Ky0+ukGGG/zfmb93NT74zth+m7cpuuK3E9i/xEgTiLXNFpWdtMw7mA7rUZg+5NjI +VZYJSa9rW5B/X8CLgEPG57uru1zdPM4ghpZrF+4kjYGYgEIjW+X0v3MdgmdU5Dk NoffCissBcewosDg4d2+k16ofaE3pDlNuRvUh1ExVsxiMbZ1QrYR4xN30sAIK/ux wNuo084j6xY2p/p40xG7zrwwxslhzn13mrb+oJthTXkW7mZ8QZzslMNzyN9RzX4q 32gq+BxEffIXu44RdJ+7tcFTDyPC8IvzXS0/o/icl7ucadYtCoI3EpQhTbolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwAX/6FhSWiJSzdPTKHNheFocrVowHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI3tJ06JE/x2iwPG2Ok7/RKsqtE+UUSO1y8 YQ9vLenlHvgUKK/RP7SrC7NGt4jCLXFGwMgHmfr/fm6YRaEPh6gSEBWwgCOn1e4r b7I6fywiSGsZ1PWjmmF2PA4avDNOK8rUVvZ5XXxI/iTk3GCHAQZ79+ZjRU8lXzfT e0L4MaOJ92Yj5LLPzYgED4S2r1rg+pre2vX8XKiDIBu/hLzjqxtetcaPJ1icpkoj RzOc0HZOfu+VYUnqnOcfAC710lExgMyBI0BSI5uRSJnq+UcxAgN5f1TnZ5LYlO0A P5gqZYdAFcHjpktNqTSPDzrpCozKCHpJweS2sz4E2LwqMz5ULWU= -----END CERTIFICATE-----Generated at Thu Dec 18 15:44:35 2025 by rpki-client