This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: Zc/G6v/AIznMEHE0pLXoSV3GkNDVqjV9C1KNvwCl+2Y= Subject key identifier: EE:23:5E:6F:77:2E:4A:AA:4C:DD:5A:E2:83:EA:39:C3:91:A5:4F:65 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 7A4EF694868385BBB38AFA6F5ABA219785C6380F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 0114 Signing time: Fri 05 Dec 2025 12:42:28 +0000 Manifest this update: Fri 05 Dec 2025 12:37:28 +0000 Manifest next update: Mon 08 Dec 2025 21:28:28 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 3: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: Qqbz8/8NZbicKw2fZRN8WMipuC7IL586P8rHYt3S6t8=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4e:f6:94:86:83:85:bb:b3:8a:fa:6f:5a:ba:21:97:85:c6:38:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Dec 5 12:37:28 2025 GMT Not After : Dec 8 21:28:28 2025 GMT Subject: CN=EE235E6F772E4AAA4CDD5AE283EA39C391A54F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:83:8c:ed:d1:ca:27:e1:b5:ae:30:b3:4b: 56:4e:17:01:6f:60:4e:58:79:d9:22:81:65:27:c8: e7:34:85:67:33:6e:a3:b0:ef:4e:58:47:40:4b:ed: c9:85:70:bd:11:e9:a9:36:c7:55:e6:5c:ee:99:2e: bf:db:6b:72:91:b9:a3:43:38:a3:10:08:75:5a:13: a3:06:9c:65:2e:cd:f6:f5:50:79:b3:ad:1a:ee:f8: 64:d6:23:e7:95:bb:88:4c:f9:c6:d3:f9:4c:ea:06: 6c:52:41:96:1d:d6:7c:25:d1:f5:0e:6a:0a:7d:f2: d9:fa:d4:3e:a1:9c:12:d3:f2:91:70:5f:a0:65:0b: 62:28:12:1b:04:55:32:c4:df:9c:45:a9:b2:b0:50: b0:83:b5:1e:d7:2d:6a:48:a5:2e:fa:19:c6:c3:1a: 70:e1:5b:93:b8:c5:6f:8c:e7:1b:56:1a:6b:05:30: 69:b1:4b:74:bf:5c:d0:e1:f6:6c:1d:66:95:ed:d4: 4f:67:26:a8:78:c8:f7:56:f4:45:58:ca:e9:36:ab: a8:bc:73:f9:35:21:74:16:9b:7b:38:72:e6:ae:fb: 2a:0e:c7:94:4b:ec:22:5b:27:9c:62:d0:2c:0b:14: 56:b4:39:9d:44:19:eb:c7:76:1c:3d:3e:01:1b:5c: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:5E:6F:77:2E:4A:AA:4C:DD:5A:E2:83:EA:39:C3:91:A5:4F:65 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b9:f8:7d:3e:1f:e0:04:7f:6e:a0:a1:ae:b5:9b:41:2e:d8: ca:e3:72:2d:f5:db:99:84:e5:99:ae:44:8c:7e:93:75:2e:7c: af:23:66:e8:87:89:fd:af:ef:40:7c:bf:10:63:74:d9:6f:07: 43:02:34:b8:1d:35:51:04:9b:e9:6a:db:fd:1b:77:f6:d4:07: a2:c7:d5:83:cd:dc:02:17:df:5f:cf:67:e0:ea:a8:42:fa:b7: 2a:ae:ea:fb:3a:5c:92:5b:22:21:11:87:45:1c:92:50:d1:47: d9:c6:d2:eb:5e:8c:1f:dd:9e:08:86:33:83:5e:64:46:ee:06: de:d7:65:6a:0d:9f:97:3e:59:89:be:26:55:1e:c9:66:c0:81: 23:ff:72:70:10:9b:a5:a9:05:73:cf:25:93:13:b7:1f:6b:bb: 4e:2e:0a:99:7a:a2:10:a1:11:58:7f:2a:60:e7:5e:22:79:f7: c3:e5:ee:fb:78:64:26:47:e8:c3:13:93:cb:ec:af:4f:00:ad: 6d:b7:62:84:f4:c1:31:72:de:d0:67:a3:68:7f:45:b7:3c:6e: 3b:cc:28:84:5a:89:13:8f:91:b8:12:d0:96:49:42:b1:81:9d: 0d:f3:e9:c9:97:7a:59:47:02:d5:65:8f:99:2b:94:4a:5d:cc: 65:95:8c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUek72lIaDhbuzivpvWrohl4XGOA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTEyMDUxMjM3MjhaFw0yNTEyMDgyMTI4MjhaMDMxMTAvBgNV BAMTKEVFMjM1RTZGNzcyRTRBQUE0Q0RENUFFMjgzRUEzOUMzOTFBNTRGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kYOM7dHKJ+G1rjCzS1ZOFwFv YE5YedkigWUnyOc0hWczbqOw705YR0BL7cmFcL0R6ak2x1XmXO6ZLr/ba3KRuaND OKMQCHVaE6MGnGUuzfb1UHmzrRru+GTWI+eVu4hM+cbT+UzqBmxSQZYd1nwl0fUO agp98tn61D6hnBLT8pFwX6BlC2IoEhsEVTLE35xFqbKwULCDtR7XLWpIpS76GcbD GnDhW5O4xW+M5xtWGmsFMGmxS3S/XNDh9mwdZpXt1E9nJqh4yPdW9EVYyuk2q6i8 c/k1IXQWm3s4cuau+yoOx5RL7CJbJ5xi0CwLFFa0OZ1EGevHdhw9PgEbXP5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iNeb3cuSqpM3Vrig+o5w5GlT2UwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu5+H0+H+AEf26goa61m0Eu2Mrjci3125mE 5ZmuRIx+k3UufK8jZuiHif2v70B8vxBjdNlvB0MCNLgdNVEEm+lq2/0bd/bUB6LH 1YPN3AIX31/PZ+DqqEL6tyqu6vs6XJJbIiERh0UcklDRR9nG0utejB/dngiGM4Ne ZEbuBt7XZWoNn5c+WYm+JlUeyWbAgSP/cnAQm6WpBXPPJZMTtx9ru04uCpl6ohCh EVh/KmDnXiJ598Pl7vt4ZCZH6MMTk8vsr08ArW23YoT0wTFy3tBno2h/Rbc8bjvM KIRaiROPkbgS0JZJQrGBnQ3z6cmXellHAtVlj5krlEpdzGWVjJ8= -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:00 2025 by rpki-client