This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: PF8lpXOQ6xN31XlqZ+qAn4kbSjX/kSMTfN60Jlu18Bs= Subject key identifier: 16:41:9C:51:BD:73:9A:0D:8F:47:1C:6E:84:1E:B5:83:00:3A:C0:8D Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 681B093B90904C3C9A3A13FB485D7D4AB36AA268 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 0529 Signing time: Wed 03 Dec 2025 13:21:32 +0000 Manifest this update: Wed 03 Dec 2025 13:16:31 +0000 Manifest next update: Sat 06 Dec 2025 23:24:31 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: I6nJ3o5FokDtrD9Ig8romQNNl9GpbQHNvD39ar43wCQ=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:09:3b:90:90:4c:3c:9a:3a:13:fb:48:5d:7d:4a:b3:6a:a2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Dec 3 13:16:31 2025 GMT Not After : Dec 6 23:24:31 2025 GMT Subject: CN=16419C51BD739A0D8F471C6E841EB583003AC08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:46:00:db:c2:3b:c0:2e:99:15:d1:d8:75: 32:13:1d:ec:c0:9d:27:c0:5f:5c:76:02:e7:a3:1b: fd:72:ca:30:7a:a7:cb:00:ed:77:18:53:1c:d7:b2: 01:e7:37:65:bd:51:75:7e:0f:50:52:d9:42:ba:55: 55:29:84:93:d6:13:67:15:c4:d2:2f:1f:be:ce:41: 4b:d9:29:f0:00:56:58:49:ab:08:f1:cb:a7:40:3e: c5:8b:73:12:02:31:09:fd:18:6a:bf:a6:c9:a1:db: 32:53:73:37:ee:5b:7d:f6:b4:a1:68:9a:dc:ff:c8: d4:a8:69:9b:02:1a:bb:9e:5b:77:ed:45:90:0a:01: 9a:d6:de:63:43:37:95:9c:00:e0:4d:a3:f1:85:85: 18:70:52:ca:eb:f0:ad:c1:f9:45:2c:3a:92:1a:2e: 91:46:a0:cf:12:b0:f3:79:1f:bb:95:95:0d:24:aa: 89:e1:35:33:74:6a:b0:86:4c:22:ca:9e:73:0a:2a: e4:33:bb:3c:3e:eb:0b:79:39:28:c2:77:e7:dd:ce: 91:f8:bb:b4:ef:3d:cc:0c:62:07:b1:d8:20:00:21: 66:42:ad:d0:f9:3a:64:57:62:3a:15:b4:03:db:8e: c0:ff:1c:1f:e4:b1:68:b3:9e:2e:f6:a8:14:39:fa: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:9C:51:BD:73:9A:0D:8F:47:1C:6E:84:1E:B5:83:00:3A:C0:8D X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cd:fb:44:f7:9b:3e:4b:da:87:46:a0:9d:7a:b7:df:65:60: 82:8c:0e:97:71:9c:3f:b6:8a:7f:9a:42:1b:9f:1c:00:2c:a5: e0:d3:30:fc:2a:b3:61:28:e7:5d:ff:a9:4c:a4:fb:1c:df:05: 1c:ac:1b:bd:84:10:df:c4:31:de:5c:59:60:f0:c0:d1:ba:d9: af:b1:55:72:77:d9:02:58:27:d7:c8:23:20:0c:af:72:f4:6c: 58:f4:4d:10:62:6d:5e:54:81:59:0c:a4:dc:9f:38:63:55:54: f1:ee:e6:34:15:80:01:11:23:d5:5e:b8:ee:9f:76:bb:16:64: df:12:a0:2e:85:0b:56:86:ad:32:ba:66:ae:12:ca:42:87:7a: 43:02:ae:f5:64:3a:b6:27:9c:c1:35:4e:ea:8b:1e:97:98:5e: 5e:44:72:d0:fb:92:61:cf:5a:f7:27:6b:60:3b:ac:ed:29:ce: d5:05:e4:05:5f:64:0a:db:de:41:a9:b6:74:47:b7:4c:2d:13: f6:c7:b2:54:f2:bf:c0:2c:72:6e:29:35:a7:81:f0:1b:8f:d3: 65:1c:81:76:16:9e:38:e1:2d:c3:2a:b3:52:19:b5:1a:d4:02: 36:43:21:05:7b:c6:05:7e:f3:6f:6c:fd:4b:b2:85:ab:5a:73: c0:b4:dc:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBsJO5CQTDyaOhP7SF19SrNqomgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTEyMDMxMzE2MzFaFw0yNTEyMDYyMzI0MzFaMDMxMTAvBgNV BAMTKDE2NDE5QzUxQkQ3MzlBMEQ4RjQ3MUM2RTg0MUVCNTgzMDAzQUMwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0kYA28I7wC6ZFdHYdTITHezA nSfAX1x2AuejG/1yyjB6p8sA7XcYUxzXsgHnN2W9UXV+D1BS2UK6VVUphJPWE2cV xNIvH77OQUvZKfAAVlhJqwjxy6dAPsWLcxICMQn9GGq/psmh2zJTczfuW332tKFo mtz/yNSoaZsCGrueW3ftRZAKAZrW3mNDN5WcAOBNo/GFhRhwUsrr8K3B+UUsOpIa LpFGoM8SsPN5H7uVlQ0kqonhNTN0arCGTCLKnnMKKuQzuzw+6wt5OSjCd+fdzpH4 u7TvPcwMYgex2CAAIWZCrdD5OmRXYjoVtAPbjsD/HB/ksWizni72qBQ5+pf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkGcUb1zmg2PRxxuhB61gwA6wI0wHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7N+0T3mz5L2odGoJ16t99lYIKMDpdxnD+2 in+aQhufHAAspeDTMPwqs2Eo513/qUyk+xzfBRysG72EEN/EMd5cWWDwwNG62a+x VXJ32QJYJ9fIIyAMr3L0bFj0TRBibV5UgVkMpNyfOGNVVPHu5jQVgAERI9VeuO6f drsWZN8SoC6FC1aGrTK6Zq4SykKHekMCrvVkOrYnnME1TuqLHpeYXl5EctD7kmHP Wvcna2A7rO0pztUF5AVfZArb3kGptnRHt0wtE/bHslTyv8Ascm4pNaeB8BuP02Uc gXYWnjjhLcMqs1IZtRrUAjZDIQV7xgV+829s/Uuyhatac8C03Ak= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:32 2025 by rpki-client