This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: bellJfIuJp7nAx5MwEJ7I/6w8huMfJFQg3hjE9eTxFA= Subject key identifier: F1:DB:A5:E2:D3:97:25:69:E4:C6:19:FE:B3:A9:6F:F3:4D:1B:80:36 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 0C2923B6D8533423AE4E9255062DD20EA2DDD526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 022D Signing time: Mon 01 Dec 2025 11:31:17 +0000 Manifest this update: Mon 01 Dec 2025 11:26:17 +0000 Manifest next update: Thu 04 Dec 2025 15:19:17 +0000 Files and hashes: 1: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: ANN6MEi5zgniNRkrJBKQVj1+dWStZ9I3vOHfBZP9xro=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:29:23:b6:d8:53:34:23:ae:4e:92:55:06:2d:d2:0e:a2:dd:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Dec 1 11:26:17 2025 GMT Not After : Dec 4 15:19:17 2025 GMT Subject: CN=F1DBA5E2D3972569E4C619FEB3A96FF34D1B8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:49:27:81:87:e2:b2:9f:55:16:47:35:59: d0:60:65:49:4c:46:8a:e4:9f:34:19:ef:68:c4:fc: c8:b3:38:eb:9c:13:4e:6c:7b:96:85:e9:9c:81:7a: 8a:68:d7:d2:bc:09:5a:84:cc:86:a1:f4:08:fe:9e: 2e:5e:a7:d4:d5:40:d2:36:3f:1d:d1:11:e1:dc:f5: 8c:54:fb:b1:ff:2f:76:d0:f2:3b:f4:8d:3b:a6:5b: eb:3c:88:f9:51:5f:83:38:9e:04:ed:94:29:28:c1: bb:ed:b1:be:d5:6d:3d:31:23:87:83:5a:9a:32:29: 61:19:ee:df:22:c1:36:24:bd:6a:21:72:ca:7c:3f: ae:07:20:ed:01:06:81:fc:be:1c:c9:87:ef:7f:49: 68:ea:f4:a4:e8:67:6f:39:25:48:f8:93:c5:20:b6: 0c:35:7a:6f:58:42:66:e0:6a:85:cd:09:a8:9f:0d: 32:30:46:6d:f6:bb:c2:38:15:04:59:e8:eb:96:0a: 97:41:b0:f5:2e:79:e9:69:18:ba:7a:1b:1c:48:09: d7:ac:a9:b3:82:52:a7:f4:35:f1:25:f1:32:b9:18: 96:ec:42:94:25:76:73:2d:5e:1a:a9:10:dd:e1:4d: 0e:fa:f5:e3:45:ea:88:66:67:83:dc:1a:66:41:fc: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:A5:E2:D3:97:25:69:E4:C6:19:FE:B3:A9:6F:F3:4D:1B:80:36 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:15:18:33:81:51:80:5d:0a:91:38:46:6c:91:05:d1:34:23: 48:78:dc:77:b4:09:d3:68:c6:69:ec:1b:c7:08:b9:47:e6:54: eb:fc:76:08:8a:ff:cc:b9:ac:2c:bd:5a:eb:f4:18:55:b5:80: 2f:0f:f6:39:8a:c0:57:ca:0e:63:2b:8b:fb:e2:10:e1:95:26: c6:fe:79:31:73:d7:94:26:6e:c0:41:2b:84:cf:95:55:ee:30: 7a:eb:46:0e:46:8a:3d:fd:9e:9c:a1:92:53:fe:d7:5b:b4:3d: fe:82:2b:25:e0:fc:6c:e5:e3:b2:a8:d6:e4:55:dc:51:8d:58: 78:37:96:a8:75:62:32:1c:f9:28:6b:2b:cd:e3:6e:c1:ea:66: 7d:0f:0c:98:fe:4a:71:d6:74:e2:6b:b0:77:de:9b:ef:b5:b8: 36:7f:65:69:b8:4b:7a:4d:05:6d:70:54:01:dc:90:a9:92:02: 0a:82:7a:a8:5b:3b:57:37:16:10:68:47:8b:85:ef:13:d9:cc: b7:21:a8:5a:a8:1c:83:87:62:ab:bc:67:d7:42:3e:67:16:78: e6:f8:ba:2e:62:ba:50:6a:3b:d7:17:9c:f7:3e:20:75:ae:6c: ef:b3:38:e8:c2:40:d2:a2:b5:63:35:a4:d6:34:3b:d2:ed:c5: 02:01:28:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCkjtthTNCOuTpJVBi3SDqLd1SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTEyMDExMTI2MTdaFw0yNTEyMDQxNTE5MTdaMDMxMTAvBgNV BAMTKEYxREJBNUUyRDM5NzI1NjlFNEM2MTlGRUIzQTk2RkYzNEQxQjgwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwkkngYfisp9VFkc1WdBgZUlM RorknzQZ72jE/MizOOucE05se5aF6ZyBeopo19K8CVqEzIah9Aj+ni5ep9TVQNI2 Px3REeHc9YxU+7H/L3bQ8jv0jTumW+s8iPlRX4M4ngTtlCkowbvtsb7VbT0xI4eD WpoyKWEZ7t8iwTYkvWohcsp8P64HIO0BBoH8vhzJh+9/SWjq9KToZ285JUj4k8Ug tgw1em9YQmbgaoXNCaifDTIwRm32u8I4FQRZ6OuWCpdBsPUueelpGLp6GxxICdes qbOCUqf0NfEl8TK5GJbsQpQldnMtXhqpEN3hTQ769eNF6ohmZ4PcGmZB/OF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8dul4tOXJWnkxhn+s6lv800bgDYwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUVGDOBUYBdCpE4RmyRBdE0I0h43He0CdNo xmnsG8cIuUfmVOv8dgiK/8y5rCy9Wuv0GFW1gC8P9jmKwFfKDmMri/viEOGVJsb+ eTFz15QmbsBBK4TPlVXuMHrrRg5Gij39npyhklP+11u0Pf6CKyXg/Gzl47Ko1uRV 3FGNWHg3lqh1YjIc+ShrK83jbsHqZn0PDJj+SnHWdOJrsHfem++1uDZ/ZWm4S3pN BW1wVAHckKmSAgqCeqhbO1c3FhBoR4uF7xPZzLchqFqoHIOHYqu8Z9dCPmcWeOb4 ui5iulBqO9cXnPc+IHWubO+zOOjCQNKitWM1pNY0O9LtxQIBKCA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:52 2025 by rpki-client