This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: G84W80rF2I4jJvnHszgN6CjI+GMwoSrUf3P2WR4JmEo= Subject key identifier: F2:C9:53:F2:32:94:F6:E0:9D:9F:8C:1F:1E:57:51:6A:25:C7:B4:DD Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 5BFE453E403386F9D53DAA83239881E0711FBFFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: EA Signing time: Sun 07 Dec 2025 14:02:15 +0000 Manifest this update: Sun 07 Dec 2025 13:57:15 +0000 Manifest next update: Thu 11 Dec 2025 00:34:15 +0000 Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: 2tBMUo2qNWgrMyaMK0GmFoVjJvRZqQdJT1w6ms8PDx4=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fe:45:3e:40:33:86:f9:d5:3d:aa:83:23:98:81:e0:71:1f:bf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Dec 7 13:57:15 2025 GMT Not After : Dec 11 00:34:15 2025 GMT Subject: CN=F2C953F23294F6E09D9F8C1F1E57516A25C7B4DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:df:41:6a:72:2d:41:a4:61:4e:47:b9:3a: 58:01:2d:fc:97:58:7b:87:34:e1:40:c9:80:5b:f6: e5:97:ce:62:dd:3c:71:dd:6a:3e:b7:75:2c:97:6a: 1d:ca:15:8a:a6:58:5d:f4:e3:19:43:87:be:5e:3d: f5:87:eb:c1:96:ce:45:cd:93:d2:39:ab:04:34:f7: 25:95:45:d7:0d:4f:b4:52:83:aa:2a:7e:d6:13:d7: fa:63:2c:aa:54:46:4c:f6:e4:31:51:ab:d4:89:47: ab:d8:f0:60:85:95:fe:4c:ce:8b:6a:85:e5:c9:ce: d7:6f:56:49:f8:a9:f6:81:81:11:16:ff:f7:75:54: c6:83:6e:87:80:15:0a:9a:7f:e0:9b:09:7c:e7:82: a0:ba:66:5f:20:f1:79:1d:93:ba:5b:a4:19:d4:57: 95:f9:e0:d5:e2:33:5f:3b:d1:a3:10:dd:73:1b:02: 34:7d:8c:b8:2e:ae:16:2a:d3:73:31:05:71:23:a8: 6c:20:6f:0b:48:74:70:db:76:1a:7c:b6:a8:dd:ed: 4c:07:e1:12:d5:72:72:3f:b3:e4:b2:4c:75:e4:0d: fb:da:8b:04:7a:20:eb:55:82:bf:e3:7e:17:4d:a4: 49:fe:16:62:12:b7:5a:40:29:2f:21:73:a6:b1:85: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:53:F2:32:94:F6:E0:9D:9F:8C:1F:1E:57:51:6A:25:C7:B4:DD X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:dd:2a:ca:db:74:3f:4a:ac:48:32:52:9a:70:89:94:8d: 24:3f:6d:74:51:81:94:a3:dc:3f:2f:d3:71:84:a0:78:b2:37: fb:3b:bb:98:1f:fa:92:40:b5:40:67:4a:76:d7:03:f9:1e:a8: 41:f0:88:e3:8b:c2:23:c4:76:74:d6:77:ab:2c:71:5b:c2:7f: bf:6a:cd:39:9a:6f:f0:76:d4:0a:59:6b:31:6b:5c:09:84:1e: 87:dc:7d:90:77:fd:33:ff:88:8c:c0:81:6f:1a:70:d9:93:9f: 59:fc:85:27:d2:04:85:6e:97:a2:05:e7:b4:21:9c:13:af:61: bc:f5:3b:b1:5d:d7:ae:00:a3:84:d5:8e:6c:6e:4c:b7:da:8a: f5:3e:82:03:39:9a:21:bf:46:e0:63:34:4b:5d:72:54:3c:0f: fc:d0:55:cf:a8:9e:8e:a0:70:b2:5d:22:7a:46:27:1a:26:c1: 97:a1:f2:18:58:f3:c4:12:8d:2d:73:68:0c:58:2e:79:6a:00: c8:3c:33:57:85:8d:f8:b2:ff:a5:21:3d:d8:6e:38:ac:39:29: f6:08:3d:6a:82:64:db:30:af:77:26:8d:e3:85:c1:1b:59:7c: 94:6f:34:99:9c:57:eb:c1:5a:c8:8d:00:bf:a9:15:e1:13:6e: 7d:82:93:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/5FPkAzhvnVPaqDI5iB4HEfv/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTEyMDcxMzU3MTVaFw0yNTEyMTEwMDM0MTVaMDMxMTAvBgNV BAMTKEYyQzk1M0YyMzI5NEY2RTA5RDlGOEMxRjFFNTc1MTZBMjVDN0I0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+99BanItQaRhTke5OlgBLfyX WHuHNOFAyYBb9uWXzmLdPHHdaj63dSyXah3KFYqmWF304xlDh75ePfWH68GWzkXN k9I5qwQ09yWVRdcNT7RSg6oqftYT1/pjLKpURkz25DFRq9SJR6vY8GCFlf5Mzotq heXJztdvVkn4qfaBgREW//d1VMaDboeAFQqaf+CbCXzngqC6Zl8g8Xkdk7pbpBnU V5X54NXiM1870aMQ3XMbAjR9jLgurhYq03MxBXEjqGwgbwtIdHDbdhp8tqjd7UwH 4RLVcnI/s+SyTHXkDfvaiwR6IOtVgr/jfhdNpEn+FmISt1pAKS8hc6axhUd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8slT8jKU9uCdn4wfHldRaiXHtN0wHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUh3SrK23Q/SqxIMlKacImUjSQ/bXRRgZSj 3D8v03GEoHiyN/s7u5gf+pJAtUBnSnbXA/keqEHwiOOLwiPEdnTWd6sscVvCf79q zTmab/B21ApZazFrXAmEHofcfZB3/TP/iIzAgW8acNmTn1n8hSfSBIVul6IF57Qh nBOvYbz1O7Fd164Ao4TVjmxuTLfaivU+ggM5miG/RuBjNEtdclQ8D/zQVc+ono6g cLJdInpGJxomwZeh8hhY88QSjS1zaAxYLnlqAMg8M1eFjfiy/6UhPdhuOKw5KfYI PWqCZNswr3cmjeOFwRtZfJRvNJmcV+vBWsiNAL+pFeETbn2Ck7o= -----END CERTIFICATE-----Generated at Sun Dec 7 18:46:17 2025 by rpki-client