This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: hoqPV/7tRcHJaOsl4c67LJW6e4OjiPyomtlL67dCVjA= Subject key identifier: A3:BC:27:74:05:EE:65:F2:92:79:E0:84:40:3C:96:EF:22:B1:67:CD Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 487CCF16496261E24DCE3A97F5E692E3005F263C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01C0 Signing time: Tue 02 Dec 2025 00:22:22 +0000 Manifest this update: Tue 02 Dec 2025 00:17:22 +0000 Manifest next update: Fri 05 Dec 2025 04:17:22 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: eGaNtrhY8ZKSTJEQvvmwCjfpsEXR4WdsPcxsiDQmxSE=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7c:cf:16:49:62:61:e2:4d:ce:3a:97:f5:e6:92:e3:00:5f:26:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Dec 2 00:17:22 2025 GMT Not After : Dec 5 04:17:22 2025 GMT Subject: CN=A3BC277405EE65F29279E084403C96EF22B167CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:dd:6c:c7:a6:cd:75:52:fc:3c:ec:28:7e: 59:45:8f:3f:9d:29:14:00:73:e2:0a:a0:4c:e1:7c: d6:26:97:36:bd:e5:48:8d:b0:56:b3:9f:5c:09:4b: ca:81:f1:d4:27:71:41:75:11:54:2f:08:10:a6:4f: a5:2e:5f:89:30:44:cf:ed:8f:65:72:5d:b9:15:f4: 89:53:30:4a:e7:9e:d5:80:ab:d1:7e:00:69:e5:e1: 07:ac:65:ee:d1:48:e8:8d:ce:b7:10:85:02:10:b9: f6:a2:e9:e0:37:e8:2c:4c:39:2c:06:09:14:e7:c9: 61:3c:63:2c:28:c5:9b:5d:44:d9:d9:76:dd:e4:d6: c4:5b:eb:9e:36:6e:94:98:9c:dc:d7:a1:00:20:c6: a5:65:57:cf:c0:83:86:f8:57:4c:9c:d7:a4:aa:7a: d8:35:44:c6:b7:f8:0d:ea:4f:c8:9e:61:6e:40:0c: 03:7b:49:50:6c:51:1d:73:51:e5:8d:0d:dd:bd:34: 63:2b:dc:50:61:c4:92:69:bb:d0:99:8d:19:8d:1e: 32:66:76:94:58:73:fe:f1:c8:16:37:b4:99:1f:36: af:35:11:a1:e8:c7:66:27:fc:59:a8:7a:87:91:2c: a0:6d:61:ae:4c:ab:02:16:80:ff:13:e0:53:89:45: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:27:74:05:EE:65:F2:92:79:E0:84:40:3C:96:EF:22:B1:67:CD X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:b6:41:8b:73:b3:66:62:32:fc:c6:68:9d:9d:a5:ef:0f: ab:f6:9b:32:0e:ab:a0:74:c2:c2:59:d5:53:3e:86:e8:e5:a6: 48:6f:e3:b7:57:0f:57:70:56:e5:a4:ba:af:52:06:cf:c8:01: b6:a1:64:7d:d1:78:60:38:f3:08:21:d4:50:bc:9a:e8:70:cb: e1:23:2e:b6:73:49:4d:fa:48:cf:23:3a:53:b4:97:43:df:ba: 55:ec:b3:5c:bb:50:2e:38:a3:68:4e:fc:51:2f:f9:41:17:83: 81:be:a0:3a:6b:b7:7b:ef:44:51:4b:aa:97:43:19:b7:1a:a6: 36:ba:e9:f5:01:b7:29:44:44:f0:9f:96:a8:c1:e0:7f:b9:7d: b2:38:6a:63:ac:3b:4e:91:da:b9:5f:b3:4a:ff:d4:4a:bd:a4: 88:0c:e7:1a:77:05:9d:f0:17:43:33:81:9c:e8:12:ce:6e:9f: d4:d5:8f:b8:0d:cc:08:1d:90:e9:8b:e7:42:a6:b5:a5:ec:fb: 29:69:dc:d1:96:2d:9e:ef:3b:52:65:21:d3:5a:8c:cf:40:ea: 78:2c:75:51:ee:58:b0:29:7c:73:38:c3:04:30:2b:4b:b0:67: 42:b4:d4:bc:de:cd:1a:7b:8f:c5:22:be:3f:92:66:06:dd:7b: cc:a3:f0:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHzPFkliYeJNzjqX9eaS4wBfJjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTEyMDIwMDE3MjJaFw0yNTEyMDUwNDE3MjJaMDMxMTAvBgNV BAMTKEEzQkMyNzc0MDVFRTY1RjI5Mjc5RTA4NDQwM0M5NkVGMjJCMTY3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPet1sx6bNdVL8POwofllFjz+d KRQAc+IKoEzhfNYmlza95UiNsFazn1wJS8qB8dQncUF1EVQvCBCmT6UuX4kwRM/t j2VyXbkV9IlTMErnntWAq9F+AGnl4QesZe7RSOiNzrcQhQIQufai6eA36CxMOSwG CRTnyWE8YywoxZtdRNnZdt3k1sRb6542bpSYnNzXoQAgxqVlV8/Ag4b4V0yc16Sq etg1RMa3+A3qT8ieYW5ADAN7SVBsUR1zUeWNDd29NGMr3FBhxJJpu9CZjRmNHjJm dpRYc/7xyBY3tJkfNq81EaHox2Yn/FmoeoeRLKBtYa5MqwIWgP8T4FOJRb1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7wndAXuZfKSeeCEQDyW7yKxZ80wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYltkGLc7NmYjL8xmidnaXvD6v2mzIOq6B0 wsJZ1VM+hujlpkhv47dXD1dwVuWkuq9SBs/IAbahZH3ReGA48wgh1FC8muhwy+Ej LrZzSU36SM8jOlO0l0PfulXss1y7UC44o2hO/FEv+UEXg4G+oDprt3vvRFFLqpdD Gbcapja66fUBtylERPCflqjB4H+5fbI4amOsO06R2rlfs0r/1Eq9pIgM5xp3BZ3w F0MzgZzoEs5un9TVj7gNzAgdkOmL50KmtaXs+ylp3NGWLZ7vO1JlIdNajM9A6ngs dVHuWLApfHM4wwQwK0uwZ0K01LzezRp7j8Uivj+SZgbde8yj8II= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:52 2025 by rpki-client