This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: 7dZu7gkR6dkC9JJpBVm7+SCyk4nj01eYX6w7q5tGXUM= Subject key identifier: 52:75:D7:7A:B1:E4:B5:86:85:7F:31:1C:E0:59:FF:A0:6D:F2:05:CC Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 3BC78673D71E652942D190E57FBCFE30B3E4BB56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 23 Signing time: Wed 17 Dec 2025 00:31:16 +0000 Manifest this update: Wed 17 Dec 2025 00:26:16 +0000 Manifest next update: Sat 20 Dec 2025 09:07:16 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: NoZ+d9GNg0ySAdIMyoXUvniTPbxHVX0E3FTTQ4SwPM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c7:86:73:d7:1e:65:29:42:d1:90:e5:7f:bc:fe:30:b3:e4:bb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Dec 17 00:26:16 2025 GMT Not After : Dec 20 09:07:16 2025 GMT Subject: CN=5275D77AB1E4B586857F311CE059FFA06DF205CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:70:f5:65:9a:ab:66:ad:c8:85:4b:43:fb: ec:6e:1b:06:8c:d5:52:b6:64:99:20:66:62:25:89: 0c:29:0d:f1:fb:04:47:53:5d:d4:f8:e5:17:7f:66: 38:92:20:7e:02:7b:f1:5c:b2:4e:57:04:fd:fd:63: ae:6c:d1:d8:e1:da:f6:9e:4c:be:d8:f2:bb:3f:9e: b7:86:c1:4a:d7:73:b0:a5:bc:af:f3:77:0f:f8:28: 6e:dc:57:a4:b8:d1:b9:25:42:f1:be:1e:cd:b5:25: 69:60:91:8b:64:80:ad:e8:35:8d:10:fe:6a:b5:8d: 30:e2:02:15:b3:4c:2b:8d:0b:1a:f2:86:93:8d:4b: 75:86:ce:ef:a9:6d:8e:4e:86:43:c8:6f:1f:cf:ce: 71:01:c6:15:11:59:b2:93:18:22:35:55:d9:e9:f2: c1:05:6f:20:38:13:26:7e:85:9f:29:14:ac:37:2a: 66:91:37:89:8b:6b:34:20:97:17:c7:ed:81:04:af: 3a:a4:a3:97:af:54:36:5d:e2:6b:3c:9d:9e:98:f2: 84:de:3b:45:36:6b:81:fa:de:16:3c:10:6d:4e:67: 91:38:e0:c7:06:c1:7d:6f:e9:34:31:64:f2:0a:4f: b0:44:3c:57:a3:d1:4c:a3:b8:e0:4d:60:c2:30:58: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:D7:7A:B1:E4:B5:86:85:7F:31:1C:E0:59:FF:A0:6D:F2:05:CC X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:87:58:b0:f5:e4:0a:57:da:4d:46:0e:c6:33:c3:69:0d:32: c8:6d:ce:12:01:23:5b:1c:1e:48:61:54:82:aa:1e:1a:d2:81: 1f:08:54:63:90:cd:fa:98:85:7f:9b:a6:f3:0e:e2:4d:b3:64: cd:c5:83:64:06:a1:e3:44:d8:e5:cf:d4:00:0d:3e:22:f2:5e: 20:fa:83:93:30:ef:8a:76:a5:7d:11:28:52:1b:4f:c3:a5:db: f4:21:52:46:b5:ed:e5:ba:93:37:43:70:8c:ca:c0:a8:02:7b: 45:d4:d9:fd:6e:ce:d1:d3:34:ec:c1:c9:1b:ac:0e:74:89:a2: 91:47:5d:97:91:ff:7f:08:5f:16:71:c5:5c:77:75:65:9d:bb: 82:88:5d:c2:81:84:0a:94:c1:a5:42:dc:58:6a:c4:58:36:e9: e4:01:3b:48:85:35:ef:56:d4:16:ad:fa:d7:c8:4a:b6:bb:a4: b9:e0:3f:d2:fb:8b:fd:7c:06:4c:8a:91:a1:15:20:ee:95:29: 83:10:cd:59:a1:46:a2:8d:24:d5:23:9c:06:99:37:a4:00:09: 32:38:93:f0:fe:b8:4f:ee:a5:b0:41:06:c0:e8:18:54:a0:2c: ba:e7:19:9f:11:cd:3d:e0:44:76:2d:42:a0:84:f6:8b:1e:0a: a9:f0:61:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8eGc9ceZSlC0ZDlf7z+MLPku1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNTEyMTcwMDI2MTZaFw0yNTEyMjAwOTA3MTZaMDMxMTAvBgNV BAMTKDUyNzVENzdBQjFFNEI1ODY4NTdGMzExQ0UwNTlGRkEwNkRGMjA1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjHD1ZZqrZq3IhUtD++xuGwaM 1VK2ZJkgZmIliQwpDfH7BEdTXdT45Rd/ZjiSIH4Ce/Fcsk5XBP39Y65s0djh2vae TL7Y8rs/nreGwUrXc7ClvK/zdw/4KG7cV6S40bklQvG+Hs21JWlgkYtkgK3oNY0Q /mq1jTDiAhWzTCuNCxryhpONS3WGzu+pbY5OhkPIbx/PznEBxhURWbKTGCI1Vdnp 8sEFbyA4EyZ+hZ8pFKw3KmaRN4mLazQglxfH7YEErzqko5evVDZd4ms8nZ6Y8oTe O0U2a4H63hY8EG1OZ5E44McGwX1v6TQxZPIKT7BEPFej0UyjuOBNYMIwWEc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnXXerHktYaFfzEc4Fn/oG3yBcwwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6HWLD15ApX2k1GDsYzw2kNMshtzhIBI1sc HkhhVIKqHhrSgR8IVGOQzfqYhX+bpvMO4k2zZM3Fg2QGoeNE2OXP1AANPiLyXiD6 g5Mw74p2pX0RKFIbT8Ol2/QhUka17eW6kzdDcIzKwKgCe0XU2f1uztHTNOzByRus DnSJopFHXZeR/38IXxZxxVx3dWWdu4KIXcKBhAqUwaVC3FhqxFg26eQBO0iFNe9W 1Bat+tfISra7pLngP9L7i/18BkyKkaEVIO6VKYMQzVmhRqKNJNUjnAaZN6QACTI4 k/D+uE/upbBBBsDoGFSgLLrnGZ8RzT3gRHYtQqCE9oseCqnwYXg= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:45 2025 by rpki-client