This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: t3fIBXDqEHxvGLS7+1PYCIAuDLFAOaPJ+MWgHybDVyU= Subject key identifier: 6B:7C:DD:9D:B0:7A:E6:0D:62:E4:8D:A6:91:96:BB:15:15:E8:F8:C4 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 1BB9876D94FD011707BE10B9DD56C262EF331C5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: E3 Signing time: Mon 01 Dec 2025 15:32:11 +0000 Manifest this update: Mon 01 Dec 2025 15:27:11 +0000 Manifest next update: Thu 04 Dec 2025 16:27:11 +0000 Files and hashes: 1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) 3: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: mqbFlCm/T9IcH/tb5n4osaY1tll8Bzr/I01/6KRROVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b9:87:6d:94:fd:01:17:07:be:10:b9:dd:56:c2:62:ef:33:1c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Dec 1 15:27:11 2025 GMT Not After : Dec 4 16:27:11 2025 GMT Subject: CN=6B7CDD9DB07AE60D62E48DA69196BB1515E8F8C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:b4:8e:3a:43:02:db:02:27:33:4c:0d:c4: cb:97:3c:ba:08:5a:f2:29:2f:35:31:30:d5:cf:f7: 74:3b:65:1b:a6:73:66:c5:f5:d6:30:b8:0b:c0:64: 0e:1e:27:69:6f:f5:f5:0b:fa:61:dd:7a:4d:48:c5: 3d:e4:1d:7a:e3:26:c5:69:28:09:8c:25:4c:23:ab: b1:8d:18:10:1f:af:9b:6e:32:73:05:75:28:00:f6: 9d:fe:12:8c:14:75:1f:d7:39:2f:53:00:66:2b:12: 43:23:85:29:a3:0f:1a:1e:03:c1:b0:60:d0:c1:84: c3:51:6a:f0:92:ff:88:6c:ee:62:be:e4:b3:a9:6c: c6:ed:0a:03:79:8d:46:47:06:5b:91:32:32:8c:61: a5:dd:f1:37:91:e3:7f:eb:af:e8:71:53:8e:3f:b3: 1a:66:2c:d2:72:16:1e:d8:5f:93:d0:3f:3b:f3:fa: 3a:dc:12:d2:a9:5a:55:07:f0:9a:91:50:e6:8f:23: bd:81:b9:f7:57:cc:5f:c1:0b:e0:9f:c0:ff:e2:44: 07:6e:37:45:6b:ca:a4:a9:7a:32:dd:01:4e:fd:ae: f1:0f:fa:c4:60:37:5f:48:ae:03:ec:cd:03:0a:f5: 06:77:de:75:73:dc:bd:f0:31:eb:1a:32:91:65:48: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:DD:9D:B0:7A:E6:0D:62:E4:8D:A6:91:96:BB:15:15:E8:F8:C4 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:06:07:77:55:92:dd:a4:24:b6:4d:8e:d0:99:1c:8c:ed:c3: 8d:60:c9:29:89:a0:a3:ac:83:df:10:46:e5:2d:de:c4:f3:29: a1:df:c2:24:43:88:e8:e1:94:1b:73:aa:8c:c3:51:64:8e:0a: a2:f8:45:aa:c1:8a:ff:d1:ea:1f:fc:85:63:9a:3f:68:85:16: 86:07:b1:8b:eb:c6:1e:ad:2c:c6:79:fe:ff:a6:78:9f:fd:90: 46:41:c8:59:5b:0b:db:bb:0d:fa:b3:88:ed:18:9d:ca:2d:cc: fa:36:1f:09:d5:35:b9:f5:d5:78:a7:bb:56:88:35:fd:db:2b: 2f:75:6c:45:bb:68:0a:1a:a2:d3:71:b8:04:81:87:04:6b:88: 03:29:72:d4:47:de:99:3d:ee:6b:86:71:10:06:df:56:79:7e: 0c:ed:ca:cd:f6:97:5d:08:4a:38:db:7e:0a:ca:c5:27:c7:cf: 3d:c2:db:b9:60:f3:8b:78:a9:7f:59:7c:80:8d:1d:db:7f:c4: 95:09:c3:0c:f5:3a:b5:8a:b3:b7:c6:d4:5e:47:b8:43:e0:db: c0:41:dd:19:17:66:37:e3:0f:8e:22:33:42:97:d1:7e:da:b6: 15:63:f5:95:f9:12:dd:5f:e2:20:6d:27:e9:fe:f4:57:dc:17: d5:72:e2:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7mHbZT9ARcHvhC53VbCYu8zHFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTEyMDExNTI3MTFaFw0yNTEyMDQxNjI3MTFaMDMxMTAvBgNV BAMTKDZCN0NERDlEQjA3QUU2MEQ2MkU0OERBNjkxOTZCQjE1MTVFOEY4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMrSOOkMC2wInM0wNxMuXPLoI WvIpLzUxMNXP93Q7ZRumc2bF9dYwuAvAZA4eJ2lv9fUL+mHdek1IxT3kHXrjJsVp KAmMJUwjq7GNGBAfr5tuMnMFdSgA9p3+EowUdR/XOS9TAGYrEkMjhSmjDxoeA8Gw YNDBhMNRavCS/4hs7mK+5LOpbMbtCgN5jUZHBluRMjKMYaXd8TeR43/rr+hxU44/ sxpmLNJyFh7YX5PQPzvz+jrcEtKpWlUH8JqRUOaPI72BufdXzF/BC+CfwP/iRAdu N0VryqSpejLdAU79rvEP+sRgN19IrgPszQMK9QZ33nVz3L3wMesaMpFlSLvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa3zdnbB65g1i5I2mkZa7FRXo+MQwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0GB3dVkt2kJLZNjtCZHIztw41gySmJoKOs g98QRuUt3sTzKaHfwiRDiOjhlBtzqozDUWSOCqL4RarBiv/R6h/8hWOaP2iFFoYH sYvrxh6tLMZ5/v+meJ/9kEZByFlbC9u7DfqziO0YncotzPo2HwnVNbn11Xinu1aI Nf3bKy91bEW7aAoaotNxuASBhwRriAMpctRH3pk97muGcRAG31Z5fgztys32l10I SjjbfgrKxSfHzz3C27lg84t4qX9ZfICNHdt/xJUJwwz1OrWKs7fG1F5HuEPg28BB 3RkXZjfjD44iM0KX0X7athVj9ZX5Et1f4iBtJ+n+9FfcF9Vy4kI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:39 2025 by rpki-client