This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 137FHbU1Sl6Dro5wwX0WZXRkthBBnEx00j2ozAD85KI= Subject key identifier: 2F:4A:EA:5F:FF:7F:66:CF:BC:73:C4:CC:6A:0F:69:3F:08:91:56:01 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 1DF00757D0D51E5301A93030AEAD56E01FDDF53A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 0533 Signing time: Wed 17 Dec 2025 10:30:03 +0000 Manifest this update: Wed 17 Dec 2025 10:25:03 +0000 Manifest next update: Sat 20 Dec 2025 13:25:03 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: aNfpfsESLkxemOm2MfgRkaWTnUfXQW0DUb8OCznEMnQ=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f0:07:57:d0:d5:1e:53:01:a9:30:30:ae:ad:56:e0:1f:dd:f5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Dec 17 10:25:03 2025 GMT Not After : Dec 20 13:25:03 2025 GMT Subject: CN=2F4AEA5FFF7F66CFBC73C4CC6A0F693F08915601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:f4:84:c7:65:15:99:cd:db:9f:d5:c4:1e: b9:41:a7:3f:6c:f6:1d:37:47:58:2e:f5:cd:b0:8a: 49:1a:09:e4:a9:52:47:ac:77:23:e9:25:ca:e1:9a: 25:23:71:af:27:23:d5:dc:fb:4c:75:41:59:14:c3: b6:84:d0:74:14:3f:54:62:a7:69:7b:b5:1e:16:d0: 3c:0e:72:e2:22:92:78:c2:c5:ba:2b:83:21:67:cd: d8:5c:84:45:b1:b7:1d:32:89:b3:bc:36:83:23:82: 56:9f:83:3c:ea:74:78:a5:fc:bc:2d:f8:f7:90:91: ba:89:a4:b7:88:61:6f:50:bc:40:b7:4d:05:86:37: 8e:f8:66:f1:18:6f:e3:a3:70:c2:1c:73:ec:bd:77: 5c:66:46:70:fa:77:40:9c:7a:a0:a6:b3:bb:11:06: 74:3a:29:d3:ea:f2:ab:ab:e5:5f:5b:30:58:81:8c: 05:85:a4:2a:3b:14:44:74:7b:8e:ab:15:51:66:18: 83:9c:b7:68:27:51:2d:d3:60:30:f6:5a:f9:d0:88: ce:34:37:25:e9:17:6b:a9:a3:65:c0:18:2a:02:84: ef:74:d1:a3:75:9f:18:28:62:40:66:3f:ef:b2:3c: 5b:88:cf:f4:05:e6:ee:fe:b5:b0:3b:31:97:93:10: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:EA:5F:FF:7F:66:CF:BC:73:C4:CC:6A:0F:69:3F:08:91:56:01 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:cf:bc:ef:45:9e:c7:e5:c9:86:ab:22:40:d0:0f:b8:e3: 77:7b:e7:00:9b:4b:87:cd:e5:fe:a3:81:71:b1:2a:5b:eb:8a: f7:33:b4:36:87:fb:9b:03:e8:d2:68:af:48:c0:5d:cf:dc:03: 09:51:74:da:e5:a7:76:6d:71:e3:0b:28:01:aa:e6:05:75:45: 42:a8:f2:8e:fe:31:3e:4d:dd:2f:54:c6:ca:8f:b0:9b:fd:69: 68:f8:54:5c:9a:c9:f9:ce:7a:b0:ba:22:9b:00:60:86:6e:d9: bc:65:37:a0:bc:22:87:f2:74:c5:36:56:ce:0d:ff:8f:ae:a6: bd:67:82:66:a3:b0:da:00:3e:cd:f1:89:f5:c9:70:20:28:5b: 99:a8:5d:db:33:7b:98:f8:3a:41:40:b8:43:f0:82:fa:c6:ba: 61:3e:4e:d5:7b:e0:38:7e:ad:94:e2:51:f1:b4:90:4e:7b:ac: 07:6f:65:9a:fb:0a:36:a3:4b:70:d8:8a:49:1b:86:e0:b6:a6: 9c:4a:bd:f4:16:73:cb:8a:a8:ba:ec:ae:6e:de:c9:aa:23:17: db:9a:fd:b6:a5:a0:a4:18:c2:7d:07:7a:5c:7f:e9:8d:13:6c: 69:dc:b5:50:ff:3c:fa:61:fd:46:5b:57:6f:0e:40:9c:df:02: 21:85:6f:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfAHV9DVHlMBqTAwrq1W4B/d9TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTEyMTcxMDI1MDNaFw0yNTEyMjAxMzI1MDNaMDMxMTAvBgNV BAMTKDJGNEFFQTVGRkY3RjY2Q0ZCQzczQzRDQzZBMEY2OTNGMDg5MTU2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaPSEx2UVmc3bn9XEHrlBpz9s 9h03R1gu9c2wikkaCeSpUkesdyPpJcrhmiUjca8nI9Xc+0x1QVkUw7aE0HQUP1Ri p2l7tR4W0DwOcuIiknjCxborgyFnzdhchEWxtx0yibO8NoMjglafgzzqdHil/Lwt +PeQkbqJpLeIYW9QvEC3TQWGN474ZvEYb+OjcMIcc+y9d1xmRnD6d0CceqCms7sR BnQ6KdPq8qur5V9bMFiBjAWFpCo7FER0e46rFVFmGIOct2gnUS3TYDD2WvnQiM40 NyXpF2upo2XAGCoChO900aN1nxgoYkBmP++yPFuIz/QF5u7+tbA7MZeTEFLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0rqX/9/Zs+8c8TMag9pPwiRVgEwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiZz7zvRZ7H5cmGqyJA0A+443d75wCbS4fN 5f6jgXGxKlvrivcztDaH+5sD6NJor0jAXc/cAwlRdNrlp3ZtceMLKAGq5gV1RUKo 8o7+MT5N3S9UxsqPsJv9aWj4VFyayfnOerC6IpsAYIZu2bxlN6C8IofydMU2Vs4N /4+upr1ngmajsNoAPs3xifXJcCAoW5moXdsze5j4OkFAuEPwgvrGumE+TtV74Dh+ rZTiUfG0kE57rAdvZZr7CjajS3DYikkbhuC2ppxKvfQWc8uKqLrsrm7eyaojF9ua /baloKQYwn0Helx/6Y0TbGnctVD/PPph/UZbV28OQJzfAiGFb3U= -----END CERTIFICATE-----Generated at Thu Dec 18 01:14:18 2025 by rpki-client