This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: NN0OA6PdtKnGj1QEBccsHxQP2WCn+ShcnbR3rRiqt2E= Subject key identifier: FF:CF:0C:3B:9D:82:EB:DE:BD:44:41:8E:A3:E5:23:41:E8:9F:41:AC Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 5F569A69D3CD4F478AC9C8B6736C5BDAA54A009C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 1E Signing time: Fri 05 Dec 2025 05:11:15 +0000 Manifest this update: Fri 05 Dec 2025 05:06:15 +0000 Manifest next update: Mon 08 Dec 2025 16:48:15 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: OkVIliYiZ5cp9uiZdTT+bexjswUr/Yo0++RUXdOetfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:56:9a:69:d3:cd:4f:47:8a:c9:c8:b6:73:6c:5b:da:a5:4a:00:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Dec 5 05:06:15 2025 GMT Not After : Dec 8 16:48:15 2025 GMT Subject: CN=FFCF0C3B9D82EBDEBD44418EA3E52341E89F41AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:11:3b:d6:b3:e0:f8:f7:26:29:d9:04:1b: e6:63:8d:42:fe:3e:1b:b9:a2:75:2f:b6:28:17:06: 3e:f9:93:66:e3:aa:1d:0c:34:30:f1:97:44:a2:be: 8a:b9:03:c8:92:54:31:b2:a1:37:d2:dd:ee:07:0d: 76:dc:b9:6e:53:ba:67:31:45:72:b1:2c:6d:b8:cf: a1:4c:92:6f:8c:e7:5f:a0:79:3d:00:c1:a8:fb:70: bd:f1:c3:06:34:8e:63:0a:23:56:59:88:f2:26:3a: 10:f1:2c:34:7d:68:74:ff:99:bd:87:a0:f9:56:35: b2:fb:35:16:dc:75:a7:6f:e4:63:7e:69:f2:d0:83: 50:4b:83:51:cf:eb:0a:b5:1b:8d:ad:69:06:d2:e6: 88:c1:42:6e:2d:82:d3:ef:fa:41:6c:b6:35:46:91: a8:d6:b2:eb:7f:42:68:83:30:08:6c:41:ae:29:08: de:e7:22:d7:bd:8d:d1:69:fa:fe:2f:36:48:99:df: 39:9f:06:e4:39:ac:ba:2d:4f:bf:a7:ef:13:5e:82: 12:7c:ea:37:24:db:a6:8a:68:33:93:64:b6:e3:ac: f3:c3:71:27:bd:fa:58:ac:4b:79:17:bd:2a:13:b2: cd:87:82:1f:9d:83:2a:d0:95:d6:69:d5:be:40:4f: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CF:0C:3B:9D:82:EB:DE:BD:44:41:8E:A3:E5:23:41:E8:9F:41:AC X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c4:d6:04:f2:91:80:eb:50:c2:c3:05:1f:e1:c7:f4:32:17: 0a:ed:5d:83:f0:d2:38:c0:79:b6:d6:5f:74:6c:27:6b:07:cb: 64:0a:a7:f1:2d:7e:ec:0b:99:d5:81:5b:cc:0e:a6:26:a2:3c: cc:4c:68:a9:2d:c4:02:54:45:b8:7c:c6:c8:75:f7:34:4e:d1: 56:33:da:f5:d8:98:63:b4:ea:af:00:78:60:eb:ae:71:b1:5b: 46:e6:e8:34:4e:6e:ad:53:d2:96:1a:7d:d6:16:3d:31:bb:a6: 9f:50:57:f8:d1:53:de:74:da:d1:4c:db:40:0b:6b:f9:ed:a5: 98:68:8c:d0:9d:0a:ce:a4:d1:c4:23:3c:b5:40:fd:88:3a:a2: 5b:18:05:16:1b:ae:9d:b0:a8:1e:8c:aa:13:18:fe:f6:5f:18: 95:2a:f7:5f:37:47:b0:75:db:cb:14:95:9d:35:c7:d8:7b:dc: 7e:1e:e2:1a:16:e4:c7:d8:a6:69:bd:d4:51:c9:9c:92:d4:11: cb:9f:46:76:25:ba:85:20:9b:b4:07:cc:0d:e1:72:86:8f:5d: 33:41:b8:5c:c7:fe:96:66:7f:6b:df:d6:1c:f5:8f:3a:ad:2b: ed:cd:22:4b:81:45:d1:3b:ba:f0:a2:56:02:5a:96:8a:6f:e6: 68:3d:49:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1aaadPNT0eKyci2c2xb2qVKAJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNTEyMDUwNTA2MTVaFw0yNTEyMDgxNjQ4MTVaMDMxMTAvBgNV BAMTKEZGQ0YwQzNCOUQ4MkVCREVCRDQ0NDE4RUEzRTUyMzQxRTg5RjQxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBBE71rPg+PcmKdkEG+ZjjUL+ Phu5onUvtigXBj75k2bjqh0MNDDxl0Sivoq5A8iSVDGyoTfS3e4HDXbcuW5Tumcx RXKxLG24z6FMkm+M51+geT0Awaj7cL3xwwY0jmMKI1ZZiPImOhDxLDR9aHT/mb2H oPlWNbL7NRbcdadv5GN+afLQg1BLg1HP6wq1G42taQbS5ojBQm4tgtPv+kFstjVG kajWsut/QmiDMAhsQa4pCN7nIte9jdFp+v4vNkiZ3zmfBuQ5rLotT7+n7xNeghJ8 6jck26aKaDOTZLbjrPPDcSe9+lisS3kXvSoTss2Hgh+dgyrQldZp1b5AT4+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/88MO52C6969REGOo+UjQeifQawwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfE1gTykYDrUMLDBR/hx/QyFwrtXYPw0jjA ebbWX3RsJ2sHy2QKp/EtfuwLmdWBW8wOpiaiPMxMaKktxAJURbh8xsh19zRO0VYz 2vXYmGO06q8AeGDrrnGxW0bm6DRObq1T0pYafdYWPTG7pp9QV/jRU9502tFM20AL a/ntpZhojNCdCs6k0cQjPLVA/Yg6olsYBRYbrp2wqB6MqhMY/vZfGJUq9183R7B1 28sUlZ01x9h73H4e4hoW5MfYpmm91FHJnJLUEcufRnYluoUgm7QHzA3hcoaPXTNB uFzH/pZmf2vf1hz1jzqtK+3NIkuBRdE7uvCiVgJalopv5mg9SQY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:50 2025 by rpki-client