This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: 47IP7H3GI9xijE30DOGlXJ4pGIHsCWrH1hSqGBb8JQc= Subject key identifier: 8D:93:EC:6D:8C:37:3A:65:8C:A9:8F:9C:5E:1C:99:BF:D7:05:45:56 Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 542C4704DE585950F70457999EAE93F160C53A80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 023A Signing time: Mon 01 Dec 2025 14:31:02 +0000 Manifest this update: Mon 01 Dec 2025 14:26:02 +0000 Manifest next update: Thu 04 Dec 2025 19:25:02 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: FzN9pQ0mBUN64C6I1vgC0VMo/cpjTzMM6bIEm5rATcw=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: uC/qnArDdSiiufGjxuhvh3127pXhWNHzqVlIjcIb2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2c:47:04:de:58:59:50:f7:04:57:99:9e:ae:93:f1:60:c5:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Dec 1 14:26:02 2025 GMT Not After : Dec 4 19:25:02 2025 GMT Subject: CN=8D93EC6D8C373A658CA98F9C5E1C99BFD7054556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:99:1f:22:22:24:93:c7:9b:75:33:2e:e5: 08:63:3a:90:f8:4c:5d:6f:3b:61:bc:af:3b:97:14: b6:bf:db:ef:60:4c:32:ea:f3:bc:7e:2b:a4:f4:83: 5b:f3:d5:09:d4:e1:80:08:04:a8:86:8b:3f:01:6b: 08:43:77:31:91:97:78:35:51:2d:98:f7:8f:28:28: a9:d2:db:23:98:68:6f:04:84:46:04:a4:1b:fd:a3: 88:4e:68:45:49:5e:55:f8:58:58:c9:1e:b6:c7:8b: 1c:ad:fa:d4:9f:40:42:da:71:47:18:a8:cc:9f:6f: 89:fe:28:48:c6:ed:77:b0:ad:1c:50:be:6d:24:1f: c2:eb:b7:98:91:6e:36:e3:15:9f:28:d8:16:52:66: 43:f3:ee:42:88:13:52:e1:5c:50:06:4f:d0:ea:47: 4d:52:f0:9f:58:24:6a:04:e0:6b:cf:6c:47:e6:5a: bc:90:da:36:42:59:8c:23:c2:6b:c2:5b:65:bd:8c: 06:d9:2d:39:b9:42:7e:53:b6:21:d5:d6:13:0e:e8: e9:a1:63:e5:04:89:96:70:b9:a5:31:84:e0:0e:6a: 1a:9a:ac:f4:b5:38:4b:d7:3f:43:e6:d6:71:f6:44: 24:98:60:d1:f2:8b:c9:44:0f:07:e7:59:96:80:7e: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:93:EC:6D:8C:37:3A:65:8C:A9:8F:9C:5E:1C:99:BF:D7:05:45:56 X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:f7:65:34:95:e0:04:b5:48:2e:96:7e:26:23:06:1f:f3: 70:cc:04:d0:36:8a:59:24:fb:ac:d5:9f:19:30:7b:03:51:b0: be:c6:06:d5:2e:57:52:f3:64:ee:0e:73:2b:cb:9c:03:da:63: a1:60:44:65:04:ff:30:85:d6:a9:b0:1b:5d:11:d9:e4:5a:f4: f2:07:82:77:be:28:65:30:76:35:23:bf:cf:8e:8a:73:ae:88: d8:39:b1:5a:21:3d:51:f8:5d:09:06:b0:22:5d:b2:94:54:6c: ec:ce:c5:6e:cf:1a:21:46:5f:98:54:da:d0:5d:31:cd:74:b5: 3a:86:1e:b6:de:87:a2:68:3c:53:eb:5c:81:06:b2:3a:02:39: df:1a:6d:3f:5e:d4:5d:b6:a3:ad:1d:ba:0b:d3:14:02:48:44: 6d:c4:8b:13:bb:a6:ca:66:9c:35:6b:d4:c8:68:bb:15:bb:3b: 4d:e7:56:fa:cc:16:69:bc:b7:36:f4:4a:e4:d0:cf:68:22:14: c6:1a:3c:b9:d7:af:c7:30:f6:d3:44:65:86:73:b6:be:c3:cc: 9d:af:d3:71:a9:b8:99:ac:2a:74:48:01:3a:65:9d:e2:06:dd: b7:7c:56:ce:9c:3d:d6:19:54:68:03:69:a4:d2:25:d5:ac:4d: c6:59:b8:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCxHBN5YWVD3BFeZnq6T8WDFOoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNTEyMDExNDI2MDJaFw0yNTEyMDQxOTI1MDJaMDMxMTAvBgNV BAMTKDhEOTNFQzZEOEMzNzNBNjU4Q0E5OEY5QzVFMUM5OUJGRDcwNTQ1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfpkfIiIkk8ebdTMu5QhjOpD4 TF1vO2G8rzuXFLa/2+9gTDLq87x+K6T0g1vz1QnU4YAIBKiGiz8BawhDdzGRl3g1 US2Y948oKKnS2yOYaG8EhEYEpBv9o4hOaEVJXlX4WFjJHrbHixyt+tSfQELacUcY qMyfb4n+KEjG7XewrRxQvm0kH8Lrt5iRbjbjFZ8o2BZSZkPz7kKIE1LhXFAGT9Dq R01S8J9YJGoE4GvPbEfmWryQ2jZCWYwjwmvCW2W9jAbZLTm5Qn5TtiHV1hMO6Omh Y+UEiZZwuaUxhOAOahqarPS1OEvXP0Pm1nH2RCSYYNHyi8lEDwfnWZaAfh7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZPsbYw3OmWMqY+cXhyZv9cFRVYwHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn292U0leAEtUguln4mIwYf83DMBNA2ilkk +6zVnxkwewNRsL7GBtUuV1LzZO4OcyvLnAPaY6FgRGUE/zCF1qmwG10R2eRa9PIH gne+KGUwdjUjv8+OinOuiNg5sVohPVH4XQkGsCJdspRUbOzOxW7PGiFGX5hU2tBd Mc10tTqGHrbeh6JoPFPrXIEGsjoCOd8abT9e1F22o60dugvTFAJIRG3EixO7pspm nDVr1MhouxW7O03nVvrMFmm8tzb0SuTQz2giFMYaPLnXr8cw9tNEZYZztr7DzJ2v 03GpuJmsKnRIATplneIG3bd8Vs6cPdYZVGgDaaTSJdWsTcZZuAw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:47 2025 by rpki-client