This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: Kz3bz5SD4SkZyxnAfOypHDjXKRo/R4HiI2XDFEJ7/As= Subject key identifier: 84:EB:6A:2E:74:F8:A6:6C:42:65:67:3B:57:D8:39:7D:92:61:5B:85 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 30563DEC08D2A06B6806FBE52CFFB49F838A62D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 039E Signing time: Mon 01 Dec 2025 16:02:22 +0000 Manifest this update: Mon 01 Dec 2025 15:57:22 +0000 Manifest next update: Thu 04 Dec 2025 21:16:22 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: SmTqmLTPQE76/lO3KANXLOOno5WnbnNYbmFyGqSJLt4=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:3d:ec:08:d2:a0:6b:68:06:fb:e5:2c:ff:b4:9f:83:8a:62:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Dec 1 15:57:22 2025 GMT Not After : Dec 4 21:16:22 2025 GMT Subject: CN=84EB6A2E74F8A66C4265673B57D8397D92615B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:75:e0:ea:74:c2:26:fb:91:7f:50:83:a2: 37:cd:3a:df:4f:31:9a:d8:d3:19:c1:06:7d:32:ee: 48:7f:37:4b:a1:33:f8:78:2d:05:5d:15:39:03:04: 8d:33:9e:e1:dd:1c:90:51:21:a1:33:aa:ab:33:da: 7b:35:c4:b5:b9:60:cd:97:17:48:12:f6:75:87:c4: 24:be:ca:43:5a:93:5d:a4:81:d1:fb:62:7b:5c:ea: c4:d1:c5:eb:ef:13:00:4a:b0:bc:a7:25:23:7a:63: 7a:ce:79:d5:37:7e:cb:60:cb:b4:10:91:42:77:76: 34:82:79:8d:4d:bf:96:74:2c:03:bb:ae:6a:6b:b5: d3:8c:fd:45:8d:51:45:e2:9c:c8:3b:33:ff:ff:db: 13:59:e3:76:cf:f1:06:5e:36:49:68:a5:79:a4:bb: 33:b5:9d:02:95:6b:3f:de:0c:f2:a4:f6:2e:04:73: d9:82:e3:d1:0e:dc:3a:f9:2c:79:3c:cc:0d:a1:09: ee:a8:42:e5:cf:1e:91:40:0d:9b:f0:48:c8:36:9f: 80:40:a7:34:08:8c:08:43:3d:60:0c:38:1d:68:08: 5d:49:bb:cb:89:46:53:05:3e:12:e0:77:35:48:ae: 60:c5:67:9b:08:21:96:d2:20:08:07:ca:39:d8:9a: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EB:6A:2E:74:F8:A6:6C:42:65:67:3B:57:D8:39:7D:92:61:5B:85 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:04:67:b5:14:0c:f6:f3:e4:e1:65:c7:19:b3:71:26:8a: 23:84:a5:0b:33:06:b2:61:39:ec:89:23:01:0f:3d:b1:7c:97: 47:f0:b4:1e:24:04:1c:ba:6f:5f:69:9f:f4:f9:25:b5:ba:7e: 8c:1e:f2:c7:e5:26:c6:1d:14:21:28:ba:bb:f2:40:d5:50:9a: 51:4c:93:fc:02:da:4e:1c:09:a6:15:be:a3:0c:1c:7b:36:bf: 1b:27:9b:ad:1a:9f:09:cc:cd:9c:25:af:3e:cc:8b:d1:c7:80: 6a:e6:37:9b:57:76:91:18:fc:a1:f3:6b:ac:b3:95:94:9f:b2: 05:03:43:c4:4d:8f:aa:7c:4d:72:f0:dc:81:47:36:95:aa:ee: ff:9e:3d:99:5b:1d:71:cb:3c:4e:20:37:2c:b4:04:5f:69:40: e2:93:5d:f4:99:6e:66:19:d8:53:b5:04:da:1b:cd:fd:68:5b: a7:2e:95:7b:c5:fd:2c:89:e5:58:87:94:3c:cf:db:58:b6:bc: 2e:12:26:0f:ba:95:86:ab:fe:0d:7d:f1:a4:bb:99:53:1d:fc: c3:0f:33:51:04:c9:c2:5b:94:70:54:93:de:c0:9e:81:a0:f9: ad:40:1d:00:60:a9:6c:be:a7:2d:79:4a:cc:e5:74:1b:1e:1c: 56:4c:89:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFY97AjSoGtoBvvlLP+0n4OKYtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTEyMDExNTU3MjJaFw0yNTEyMDQyMTE2MjJaMDMxMTAvBgNV BAMTKDg0RUI2QTJFNzRGOEE2NkM0MjY1NjczQjU3RDgzOTdEOTI2MTVCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx3Xg6nTCJvuRf1CDojfNOt9P MZrY0xnBBn0y7kh/N0uhM/h4LQVdFTkDBI0znuHdHJBRIaEzqqsz2ns1xLW5YM2X F0gS9nWHxCS+ykNak12kgdH7Yntc6sTRxevvEwBKsLynJSN6Y3rOedU3fstgy7QQ kUJ3djSCeY1Nv5Z0LAO7rmprtdOM/UWNUUXinMg7M///2xNZ43bP8QZeNklopXmk uzO1nQKVaz/eDPKk9i4Ec9mC49EO3Dr5LHk8zA2hCe6oQuXPHpFADZvwSMg2n4BA pzQIjAhDPWAMOB1oCF1Ju8uJRlMFPhLgdzVIrmDFZ5sIIZbSIAgHyjnYmrxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOtqLnT4pmxCZWc7V9g5fZJhW4UwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItaBGe1FAz28+ThZccZs3EmiiOEpQszBrJh OeyJIwEPPbF8l0fwtB4kBBy6b19pn/T5JbW6fowe8sflJsYdFCEourvyQNVQmlFM k/wC2k4cCaYVvqMMHHs2vxsnm60anwnMzZwlrz7Mi9HHgGrmN5tXdpEY/KHza6yz lZSfsgUDQ8RNj6p8TXLw3IFHNpWq7v+ePZlbHXHLPE4gNyy0BF9pQOKTXfSZbmYZ 2FO1BNobzf1oW6culXvF/SyJ5ViHlDzP21i2vC4SJg+6lYar/g198aS7mVMd/MMP M1EEycJblHBUk97AnoGg+a1AHQBgqWy+py15SszldBseHFZMiWI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:37 2025 by rpki-client