This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: xMClDv6qDkxyXcCOq3DcyKBeeO1H+ej8KENo5MVVlNY= Subject key identifier: 07:54:22:09:59:BC:8E:5D:43:6F:39:DE:C2:14:23:18:FF:7D:36:F4 Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 33DFED8133FF7901F2ABACB9F45478B2DCD6F04F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 0201 Signing time: Mon 01 Dec 2025 21:11:26 +0000 Manifest this update: Mon 01 Dec 2025 21:06:26 +0000 Manifest next update: Fri 05 Dec 2025 04:45:26 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: u4FkHqE3XYhyzHO3e/5Ifqqi9biXZm3jadkUN50mfwE=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:df:ed:81:33:ff:79:01:f2:ab:ac:b9:f4:54:78:b2:dc:d6:f0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Dec 1 21:06:26 2025 GMT Not After : Dec 5 04:45:26 2025 GMT Subject: CN=0754220959BC8E5D436F39DEC2142318FF7D36F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:3e:3d:35:78:44:70:4c:81:ea:38:73:c4: ab:71:00:98:3c:13:aa:9c:22:d8:66:d7:94:f2:bc: e4:d3:ef:4f:38:c5:54:c1:9b:ce:ec:c2:09:cd:8f: 32:8e:82:21:a3:03:b8:c1:9d:d8:11:cf:c1:aa:1b: ed:98:d7:d7:f5:2e:48:6a:46:3c:ce:81:3b:a1:2f: 6c:be:ab:17:36:3a:9b:2f:03:e6:12:c5:cd:43:ab: bb:e2:01:15:2e:a8:d3:95:3d:8a:0b:48:dc:28:08: 58:f8:a3:fa:5e:57:af:f1:46:cc:00:1d:f3:1e:de: 4a:18:f2:ad:5b:7a:55:a1:c4:45:8e:be:6b:1d:77: 8b:68:c5:f6:eb:50:fa:ca:17:f8:76:65:6d:56:b6: 2f:0f:3f:4c:27:1e:ca:da:46:30:f0:04:4f:41:7b: 00:da:63:ab:a7:94:87:57:6a:d5:0e:37:bc:bf:1b: 4d:cb:4c:f6:aa:20:57:cd:5d:fb:94:10:03:2f:b7: 38:ba:49:53:a3:14:e5:0d:f9:10:ae:99:a8:7c:50: 98:22:e2:8f:92:de:ec:c9:8e:cb:41:08:7f:45:10: 0d:19:4c:ed:61:19:d9:d0:45:11:b4:9f:63:bd:ec: a3:9f:7c:95:46:4c:26:1e:ed:cc:01:00:df:be:d7: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:22:09:59:BC:8E:5D:43:6F:39:DE:C2:14:23:18:FF:7D:36:F4 X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a0:80:fa:ed:36:82:01:cf:07:65:a3:2a:90:44:aa:e5:61: 20:f3:d7:4b:79:08:70:c9:31:06:9e:97:be:7d:fe:23:97:38: 1b:00:2a:e3:d3:a7:d4:3b:df:2b:1c:65:fa:96:c3:72:58:51: d7:87:71:12:cf:b4:e5:9c:bc:7c:9f:9a:74:3a:fd:2d:7d:31: ef:ed:ce:c8:86:fe:fa:f0:30:ad:7e:9e:3c:8d:77:7f:85:5a: aa:b3:ef:6f:1b:5c:45:43:46:56:eb:88:d1:f8:e6:25:6a:5d: 6e:80:54:63:67:bd:b3:01:1e:a0:26:59:16:15:ed:e1:f5:ba: ab:37:49:2d:87:93:43:a2:31:01:af:da:0e:96:c1:ea:99:26: a4:a9:df:f3:d4:3b:c5:f2:17:44:4a:7e:7e:84:20:a9:f5:c0: aa:91:76:c0:ea:ff:54:eb:03:6b:bb:65:c2:58:48:80:92:2a: ce:d2:a7:aa:30:dc:41:83:5a:c1:02:83:2d:16:f4:57:a5:8a: 73:f8:ec:a4:d1:0f:24:84:e8:73:be:4c:b8:14:70:dd:f7:79: b9:95:25:44:de:de:b1:e7:39:62:5c:a1:4e:20:ba:c1:4f:29: c2:98:65:14:86:a3:7d:d4:66:08:0d:eb:e7:e6:ac:df:0b:be: 17:dd:ad:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9/tgTP/eQHyq6y59FR4stzW8E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTEyMDEyMTA2MjZaFw0yNTEyMDUwNDQ1MjZaMDMxMTAvBgNV BAMTKDA3NTQyMjA5NTlCQzhFNUQ0MzZGMzlERUMyMTQyMzE4RkY3RDM2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+T49NXhEcEyB6jhzxKtxAJg8 E6qcIthm15TyvOTT7084xVTBm87swgnNjzKOgiGjA7jBndgRz8GqG+2Y19f1Lkhq RjzOgTuhL2y+qxc2OpsvA+YSxc1Dq7viARUuqNOVPYoLSNwoCFj4o/peV6/xRswA HfMe3koY8q1belWhxEWOvmsdd4toxfbrUPrKF/h2ZW1Wti8PP0wnHsraRjDwBE9B ewDaY6unlIdXatUON7y/G03LTPaqIFfNXfuUEAMvtzi6SVOjFOUN+RCumah8UJgi 4o+S3uzJjstBCH9FEA0ZTO1hGdnQRRG0n2O97KOffJVGTCYe7cwBAN++1+g/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1QiCVm8jl1DbznewhQjGP99NvQwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGggPrtNoIBzwdloyqQRKrlYSDz10t5CHDJ MQael759/iOXOBsAKuPTp9Q73yscZfqWw3JYUdeHcRLPtOWcvHyfmnQ6/S19Me/t zsiG/vrwMK1+njyNd3+FWqqz728bXEVDRlbriNH45iVqXW6AVGNnvbMBHqAmWRYV 7eH1uqs3SS2Hk0OiMQGv2g6WweqZJqSp3/PUO8XyF0RKfn6EIKn1wKqRdsDq/1Tr A2u7ZcJYSICSKs7Sp6ow3EGDWsECgy0W9FelinP47KTRDySE6HO+TLgUcN33ebmV JUTe3rHnOWJcoU4gusFPKcKYZRSGo33UZggN6+fmrN8LvhfdrY0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client