This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: qdU5E1aEphn184ZDBEgslOZ+UQ4EUF4nbjKohxNCv3c= Subject key identifier: 09:BB:92:CC:24:B1:1F:01:83:EC:E0:66:99:5B:99:D0:52:2F:DE:F9 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 494132670F0723AE8E811669458F8D603C32D49A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 02B9 Signing time: Mon 22 Dec 2025 18:51:51 +0000 Manifest this update: Mon 22 Dec 2025 18:46:51 +0000 Manifest next update: Fri 26 Dec 2025 00:27:51 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: TTEKk5/wG854IqEPu2bo3DnVK85FfuTFxM8RSCPONYg=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:41:32:67:0f:07:23:ae:8e:81:16:69:45:8f:8d:60:3c:32:d4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Dec 22 18:46:51 2025 GMT Not After : Dec 26 00:27:51 2025 GMT Subject: CN=09BB92CC24B11F0183ECE066995B99D0522FDEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:dd:53:f8:5d:ef:89:b2:37:b7:8d:92:78: 2c:9b:41:96:8a:4c:6f:29:6b:93:5b:55:52:bd:47: fa:4f:d6:69:e3:08:f4:3c:3d:b0:dd:a5:87:7e:ab: ca:d0:72:0b:0a:8b:5a:c7:14:d3:7d:88:c0:39:ee: c0:c2:a7:3b:79:51:60:09:5a:16:45:d0:e4:43:1c: fc:4c:2e:89:85:09:6a:5c:df:b7:0d:d5:80:fe:48: 66:75:f3:91:03:e6:da:1c:8a:33:2d:d9:07:4d:75: 0e:1e:eb:cc:78:d8:a5:9d:e3:f0:b5:07:a3:aa:0a: 57:e9:83:00:04:1e:8a:1e:25:fc:b7:bc:20:a5:bf: 64:c2:85:69:7c:32:5e:48:3c:e6:e5:03:f1:67:60: 18:ea:13:68:7e:3d:37:c8:ad:f0:3e:cf:80:6e:14: 83:5f:75:da:33:6b:0f:34:c5:37:1c:3c:aa:09:c3: d5:57:ee:7d:55:55:45:bb:df:4d:3a:1e:94:3f:65: 68:b2:35:14:c6:fc:35:f0:2a:d7:f2:01:e7:75:23: e5:cd:e7:46:9f:b1:fd:d0:2c:00:11:10:6d:05:0d: e4:c7:b7:12:5e:4e:db:60:2c:33:84:18:7a:16:8e: 6d:05:df:0e:a1:97:ba:17:fb:1a:f2:8f:b6:70:9f: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:92:CC:24:B1:1F:01:83:EC:E0:66:99:5B:99:D0:52:2F:DE:F9 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:07:7e:1f:bf:e9:7b:48:14:aa:71:db:b8:47:a6:a7:da: b6:86:90:a0:de:85:26:0b:00:bd:8c:84:f2:64:5d:26:88:d8: 10:a3:c2:c5:6f:11:be:24:47:a9:d8:9f:18:c5:2a:ff:e6:ec: d1:02:b1:ee:71:ef:19:23:13:62:52:6b:51:7a:a3:98:ab:c6: ba:df:0c:69:93:27:7a:53:e5:77:dc:b2:b9:32:01:5e:6e:5e: 36:91:e8:65:ae:84:56:c7:40:ef:52:62:bc:7a:9d:d2:ea:00: a0:98:13:e6:b2:1e:17:e5:0d:1e:41:dc:8e:9a:a4:c9:9a:4b: 14:18:7e:91:b7:5e:23:fb:9d:3b:4c:66:23:42:40:39:0b:73: 6a:b2:79:58:c6:99:63:1c:57:e8:d6:c1:ec:18:35:c1:b4:46: fd:e1:c6:89:5f:d5:02:69:a1:de:b9:d9:13:ec:cc:93:85:f7: 29:cb:24:33:79:d6:8b:16:48:0d:af:ed:cd:2b:f3:ac:3b:45: 4f:46:62:ac:4f:e5:a2:25:e8:8b:d5:da:b2:66:f6:06:e9:b8: 8a:33:11:15:56:3a:c7:7d:be:48:60:85:93:b1:41:d2:c9:2c: 29:97:f4:a2:f7:18:db:ba:cb:6c:23:99:6b:9f:07:53:37:f0: c9:de:e4:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUEyZw8HI66OgRZpRY+NYDwy1JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTEyMjIxODQ2NTFaFw0yNTEyMjYwMDI3NTFaMDMxMTAvBgNV BAMTKDA5QkI5MkNDMjRCMTFGMDE4M0VDRTA2Njk5NUI5OUQwNTIyRkRFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHt1T+F3vibI3t42SeCybQZaK TG8pa5NbVVK9R/pP1mnjCPQ8PbDdpYd+q8rQcgsKi1rHFNN9iMA57sDCpzt5UWAJ WhZF0ORDHPxMLomFCWpc37cN1YD+SGZ185ED5tocijMt2QdNdQ4e68x42KWd4/C1 B6OqClfpgwAEHooeJfy3vCClv2TChWl8Ml5IPOblA/FnYBjqE2h+PTfIrfA+z4Bu FINfddozaw80xTccPKoJw9VX7n1VVUW73006HpQ/ZWiyNRTG/DXwKtfyAed1I+XN 50afsf3QLAAREG0FDeTHtxJeTttgLDOEGHoWjm0F3w6hl7oX+xryj7Zwn+GtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbuSzCSxHwGD7OBmmVuZ0FIv3vkwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFguB34fv+l7SBSqcdu4R6an2raGkKDehSYL AL2MhPJkXSaI2BCjwsVvEb4kR6nYnxjFKv/m7NECse5x7xkjE2JSa1F6o5irxrrf DGmTJ3pT5XfcsrkyAV5uXjaR6GWuhFbHQO9SYrx6ndLqAKCYE+ayHhflDR5B3I6a pMmaSxQYfpG3XiP7nTtMZiNCQDkLc2qyeVjGmWMcV+jWwewYNcG0Rv3hxolf1QJp od652RPszJOF9ynLJDN51osWSA2v7c0r86w7RU9GYqxP5aIl6IvV2rJm9gbpuIoz ERVWOsd9vkhghZOxQdLJLCmX9KL3GNu6y2wjmWufB1M38Mne5AI= -----END CERTIFICATE-----Generated at Thu Dec 25 00:40:00 2025 by rpki-client