This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: E53rta0Tgivo22qxAiJbhbW284VGo0peEzTQSFI2Jl8= Subject key identifier: 0F:B0:54:C9:77:E4:41:25:D5:EE:CB:E2:34:54:6A:90:F3:78:9D:A8 Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 3586F231AC2BD1169D227361C0393C6BE3FEFA84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 0532 Signing time: Tue 02 Dec 2025 11:51:14 +0000 Manifest this update: Tue 02 Dec 2025 11:46:14 +0000 Manifest next update: Fri 05 Dec 2025 12:28:14 +0000 Files and hashes: 1: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: uoKR/b+CMZa61lyoLoZQDuQvc2uQ81dcO4F/APcrhH4=) 2: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) 3: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:86:f2:31:ac:2b:d1:16:9d:22:73:61:c0:39:3c:6b:e3:fe:fa:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Dec 2 11:46:14 2025 GMT Not After : Dec 5 12:28:14 2025 GMT Subject: CN=0FB054C977E44125D5EECBE234546A90F3789DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:e6:e9:f9:cb:2f:10:b9:57:04:41:27:d1: cc:1c:26:55:1e:12:18:0a:67:7c:ae:cd:cf:25:ec: b2:ef:1a:5d:8b:e6:0b:3e:2c:9c:a1:8d:4e:04:80: 6c:39:a3:78:d4:1b:4f:ff:68:11:7a:98:ae:30:73: 22:a0:bb:8e:8d:ad:31:a0:7d:35:2a:5c:cf:ed:d3: 2a:24:dd:17:56:a7:64:7b:7c:47:98:4e:38:bd:f6: c0:5a:31:4c:a1:0d:9e:ef:00:84:c8:94:9b:a0:d6: 2c:32:93:0c:81:7e:61:2a:ac:75:58:8d:83:3e:fe: 81:c2:ed:7d:de:e5:dc:44:d8:dc:c1:53:d0:38:84: 2f:e0:58:3f:da:5b:85:63:91:b5:67:13:41:ab:fc: 7e:61:09:e6:49:aa:3f:9e:de:93:0d:b4:06:d8:3a: fb:60:e1:3d:75:5c:04:df:c5:4c:44:71:65:ca:56: 55:10:05:0c:db:ff:82:e1:24:b6:a0:b8:29:7c:57: fb:1d:fc:76:f0:17:f2:f8:42:3b:b1:eb:6a:62:5c: 91:e1:13:69:d5:49:63:f7:6a:76:60:e4:cd:87:97: ad:5d:6d:c9:5c:60:cb:8f:81:54:5c:e3:2e:c0:85: aa:cf:85:de:0d:25:b1:b2:e1:fd:53:56:19:da:83: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:54:C9:77:E4:41:25:D5:EE:CB:E2:34:54:6A:90:F3:78:9D:A8 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:82:34:4b:53:dd:6e:3c:6f:97:7d:cb:93:6a:42:e3:3a:6b: 88:55:25:15:00:9a:da:42:5f:a5:e8:bc:6c:06:23:1a:d8:07: c3:9b:33:76:18:b4:5c:c3:92:f8:c3:0d:f3:9b:a6:49:91:fb: 2a:8d:96:a8:88:44:2c:46:3d:11:f5:fe:df:69:9d:a6:c0:83: f4:ab:e8:57:72:e3:26:ef:5c:88:40:83:57:00:92:7f:41:17: fd:b2:83:0c:cc:c9:98:c6:a2:91:04:45:da:7b:86:19:d2:13: 6c:db:85:50:e0:4f:3e:dc:11:75:24:2c:0b:83:dc:cb:ad:7c: 29:e6:0d:91:67:c2:2b:df:65:5f:3a:ae:6c:bd:9e:e9:30:7e: 1b:4d:12:7f:7f:3e:b8:0d:c5:5d:fc:c1:d2:15:8a:64:df:f0: 61:31:12:e4:bd:14:5a:ba:13:6f:2a:9b:f9:76:1c:f6:15:37: b2:b8:19:53:6b:d2:08:1c:63:d4:98:0e:ab:ec:6c:bb:8f:30: 1e:b6:17:ad:a1:ac:95:11:dc:7d:c7:93:4d:33:b7:e6:31:68: 55:56:a5:5a:4a:69:7c:83:c3:a9:89:b3:14:2b:3d:14:13:e0: 1a:f5:a4:79:c2:94:83:a6:0e:af:5e:7c:07:83:86:7e:85:54: 85:3a:81:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYbyMawr0RadInNhwDk8a+P++oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTEyMDIxMTQ2MTRaFw0yNTEyMDUxMjI4MTRaMDMxMTAvBgNV BAMTKDBGQjA1NEM5NzdFNDQxMjVENUVFQ0JFMjM0NTQ2QTkwRjM3ODlEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10+bp+csvELlXBEEn0cwcJlUe EhgKZ3yuzc8l7LLvGl2L5gs+LJyhjU4EgGw5o3jUG0//aBF6mK4wcyKgu46NrTGg fTUqXM/t0yok3RdWp2R7fEeYTji99sBaMUyhDZ7vAITIlJug1iwykwyBfmEqrHVY jYM+/oHC7X3e5dxE2NzBU9A4hC/gWD/aW4VjkbVnE0Gr/H5hCeZJqj+e3pMNtAbY Ovtg4T11XATfxUxEcWXKVlUQBQzb/4LhJLaguCl8V/sd/HbwF/L4Qjux62piXJHh E2nVSWP3anZg5M2Hl61dbclcYMuPgVRc4y7AharPhd4NJbGy4f1TVhnag0ItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD7BUyXfkQSXV7sviNFRqkPN4nagwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuCNEtT3W48b5d9y5NqQuM6a4hVJRUAmtpC X6XovGwGIxrYB8ObM3YYtFzDkvjDDfObpkmR+yqNlqiIRCxGPRH1/t9pnabAg/Sr 6Fdy4ybvXIhAg1cAkn9BF/2ygwzMyZjGopEERdp7hhnSE2zbhVDgTz7cEXUkLAuD 3MutfCnmDZFnwivfZV86rmy9nukwfhtNEn9/PrgNxV38wdIVimTf8GExEuS9FFq6 E28qm/l2HPYVN7K4GVNr0ggcY9SYDqvsbLuPMB62F62hrJUR3H3Hk00zt+YxaFVW pVpKaXyDw6mJsxQrPRQT4Br1pHnClIOmDq9efAeDhn6FVIU6gRc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:40 2025 by rpki-client