This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: pWnTl2GFT/azndEGb0lT5nXgyTqzJgKrjF69HdOjRTI= Subject key identifier: 48:52:B3:90:ED:FC:E8:35:99:D9:0E:76:C6:13:1D:31:2A:82:54:92 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 49CF4CE51DF985A6731C3D236ECBDCC8A86CF625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01FC Signing time: Tue 02 Dec 2025 12:11:06 +0000 Manifest this update: Tue 02 Dec 2025 12:06:06 +0000 Manifest next update: Fri 05 Dec 2025 23:37:06 +0000 Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) 2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: beRZaLitU3jQqTxMt7BL53MACjgsBvkNi5HSqHK3GdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cf:4c:e5:1d:f9:85:a6:73:1c:3d:23:6e:cb:dc:c8:a8:6c:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Dec 2 12:06:06 2025 GMT Not After : Dec 5 23:37:06 2025 GMT Subject: CN=4852B390EDFCE83599D90E76C6131D312A825492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:14:37:00:13:f1:cc:a0:61:b2:b7:92:05: cf:57:de:26:f2:72:41:27:9a:1d:48:1c:c0:c5:3a: 03:6a:96:04:e6:b8:55:e8:8d:cc:18:4e:bc:3e:ce: ab:f3:26:81:9a:15:49:f5:1c:85:a0:cd:07:04:9f: 19:76:4a:20:91:56:a1:d0:ce:ce:d7:c1:6c:70:40: f6:b5:a0:d9:be:c2:02:8c:83:d6:5a:71:64:5e:83: 41:03:69:14:20:df:7a:3d:c9:ba:07:fa:94:36:08: c2:62:3d:59:74:64:c0:ba:d4:e9:f8:b3:93:6a:f6: 0a:ba:ac:21:96:4c:a6:70:67:27:9e:21:fa:c8:19: 3d:4f:b0:2e:16:5c:cd:3e:63:41:de:13:89:50:ef: 5f:10:94:33:e9:4c:99:dd:ca:29:36:81:e4:20:48: ca:8d:87:09:c8:35:b1:16:7e:76:6e:5c:a2:18:aa: b1:9a:a7:0a:15:c6:79:a8:0f:8e:1e:fa:da:3a:af: 14:1a:23:52:ab:b0:74:11:97:3c:eb:4a:33:de:7f: cf:ea:8c:f2:81:bf:9a:0d:8a:e4:0c:60:70:7e:a1: 34:ae:0e:b9:34:db:1d:ce:f9:e8:db:56:f6:a8:87: c9:c9:be:ed:22:97:3a:f2:d1:10:d7:6f:1d:5d:32: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:52:B3:90:ED:FC:E8:35:99:D9:0E:76:C6:13:1D:31:2A:82:54:92 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e0:61:89:c7:73:2f:e9:b4:48:e2:9c:fe:e8:91:c6:b6:13: 35:d5:b8:4c:32:57:88:18:8a:d0:7a:33:54:fc:df:3c:f4:93: 30:72:10:80:4a:fd:c8:b0:6d:26:37:21:fd:5c:e2:7d:f9:1e: b6:cd:3e:cf:cf:4f:c4:8e:b6:e5:21:be:79:85:21:a0:8c:29: 6b:2c:9b:27:25:1c:ef:9a:65:07:cc:c7:46:22:d3:1e:a3:1f: 37:c0:82:24:60:6d:d6:5a:0c:d0:80:30:9b:c8:3f:01:4e:0d: f2:3e:7f:9f:02:d4:8a:50:cf:6c:7e:98:56:93:58:6d:a9:eb: 47:dd:15:68:ef:92:ec:95:51:b1:1c:fe:24:a9:1a:5a:b2:6e: db:4d:62:87:f2:7f:7d:48:9c:27:77:d4:89:05:7c:dd:0f:73: ba:b6:29:1e:56:39:ce:22:3b:79:53:a2:e3:3b:62:8f:8d:c3: fd:68:cf:8a:09:5f:d2:48:59:a2:03:4d:7a:a6:70:70:ec:38: be:6a:2e:63:38:cf:91:de:ed:b1:4b:ad:6d:e2:13:d7:99:31: 3f:bb:eb:53:97:b2:55:f1:31:f5:32:a4:63:5f:a4:bd:6e:29: c6:97:b2:62:51:d4:06:53:58:c7:70:5e:62:d8:a2:2f:18:98: 3d:3a:44:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc9M5R35haZzHD0jbsvcyKhs9iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTEyMDIxMjA2MDZaFw0yNTEyMDUyMzM3MDZaMDMxMTAvBgNV BAMTKDQ4NTJCMzkwRURGQ0U4MzU5OUQ5MEU3NkM2MTMxRDMxMkE4MjU0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87hQ3ABPxzKBhsreSBc9X3iby ckEnmh1IHMDFOgNqlgTmuFXojcwYTrw+zqvzJoGaFUn1HIWgzQcEnxl2SiCRVqHQ zs7XwWxwQPa1oNm+wgKMg9ZacWReg0EDaRQg33o9yboH+pQ2CMJiPVl0ZMC61On4 s5Nq9gq6rCGWTKZwZyeeIfrIGT1PsC4WXM0+Y0HeE4lQ718QlDPpTJndyik2geQg SMqNhwnINbEWfnZuXKIYqrGapwoVxnmoD44e+to6rxQaI1KrsHQRlzzrSjPef8/q jPKBv5oNiuQMYHB+oTSuDrk02x3O+ejbVvaoh8nJvu0ilzry0RDXbx1dMnSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFKzkO386DWZ2Q52xhMdMSqCVJIwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/gYYnHcy/ptEjinP7okca2EzXVuEwyV4gY itB6M1T83zz0kzByEIBK/ciwbSY3If1c4n35HrbNPs/PT8SOtuUhvnmFIaCMKWss myclHO+aZQfMx0Yi0x6jHzfAgiRgbdZaDNCAMJvIPwFODfI+f58C1IpQz2x+mFaT WG2p60fdFWjvkuyVUbEc/iSpGlqybttNYofyf31InCd31IkFfN0Pc7q2KR5WOc4i O3lTouM7Yo+Nw/1oz4oJX9JIWaIDTXqmcHDsOL5qLmM4z5He7bFLrW3iE9eZMT+7 61OXslXxMfUypGNfpL1uKcaXsmJR1AZTWMdwXmLYoi8YmD06RLc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:25 2025 by rpki-client