This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: DC4mWM0IlckesQEkiqUfsZqmK7UakJ04mdpYbDzINSg= Subject key identifier: B3:37:55:41:BC:6A:F1:AC:0D:1D:55:95:EB:9A:82:B9:7A:9E:59:45 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 134EE72646C26025457A5F3EC4DE97F4CF20B1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 02AE Signing time: Wed 24 Dec 2025 18:01:22 +0000 Manifest this update: Wed 24 Dec 2025 17:56:22 +0000 Manifest next update: Sun 28 Dec 2025 00:38:22 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: ezxZsA9o0ecjwzcHDEv3yWqGwC3cwg1LAuVnADxFfII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4e:e7:26:46:c2:60:25:45:7a:5f:3e:c4:de:97:f4:cf:20:b1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Dec 24 17:56:22 2025 GMT Not After : Dec 28 00:38:22 2025 GMT Subject: CN=B3375541BC6AF1AC0D1D5595EB9A82B97A9E5945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:13:ee:43:08:2b:d6:9c:d4:79:45:17:e7: 6f:b0:f8:f5:7e:10:8a:54:77:d5:b3:e6:37:77:eb: 58:ec:d1:73:ed:a3:ea:08:7f:94:71:9c:a9:06:79: 8c:34:48:25:b6:b2:89:db:8e:61:fa:59:67:04:e6: 54:29:ed:99:02:4d:5c:fc:4f:d9:22:83:f4:b8:e7: a1:0e:e0:35:90:e9:e6:11:0a:97:01:e9:b4:4b:e4: 41:00:99:45:cb:fa:bb:f3:f8:70:dd:41:c2:46:3b: cc:1d:b1:14:ee:e9:42:87:0e:37:e2:14:7e:f6:8e: dd:f1:58:23:17:76:2a:2d:34:2a:0e:9c:68:c7:db: 5c:34:69:0c:43:fb:b7:3d:a3:aa:c3:1d:76:e4:ad: 81:16:53:ac:f5:5e:0e:c5:82:32:c1:f8:a5:a1:a8: 35:e9:b9:ee:3c:f7:fe:80:17:7f:e8:24:04:cb:ea: c0:c9:e5:97:c7:9d:c8:2f:0e:c2:a3:f7:27:f6:b7: 2a:3c:a1:50:19:5b:10:cf:93:39:e0:83:9f:ba:f5: ed:39:1f:32:7c:92:4e:72:08:ed:f4:d9:dd:8d:8d: 9b:7b:22:f4:fc:31:c5:a6:3a:95:41:ab:c5:e0:52: ed:e4:1c:3e:c8:c0:8a:a9:9d:90:df:18:61:c6:46: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:55:41:BC:6A:F1:AC:0D:1D:55:95:EB:9A:82:B9:7A:9E:59:45 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:18:47:0d:5d:78:b6:ad:42:62:3a:2f:93:af:cf:82:9a: 51:e2:46:48:c3:d2:43:8a:f4:55:e5:2c:39:ca:d8:b3:63:6c: 57:3e:16:62:b2:0e:09:d0:99:33:09:06:63:aa:f9:4f:1a:a3: aa:3c:39:07:7e:e7:e8:4d:b1:26:7b:9d:e8:ac:3e:5b:81:5c: 77:02:ea:9e:a2:fb:6c:e2:38:76:74:3c:09:d3:d1:ab:fb:ec: 87:7f:ef:ba:f9:74:88:a8:31:2a:c0:eb:84:2f:fe:dc:ba:62: 03:2b:7c:0c:bf:7f:bc:20:b0:7e:19:73:2a:b9:5b:08:b5:41: 1a:0e:f1:c2:44:26:a7:64:dd:fd:7b:3e:9a:0f:9a:a7:37:c2: 87:4d:43:aa:f1:b2:93:88:44:0f:96:79:64:24:d1:c4:44:27: 93:63:24:90:45:5b:3e:29:d6:d8:6f:2d:c9:7b:38:53:ce:9b: e6:2b:e5:73:f0:a4:f1:72:29:60:c7:26:6a:92:5c:e8:47:b6: e0:59:b9:d0:01:a2:42:06:d0:79:c3:71:8d:29:07:f8:01:b6: 5a:01:97:59:69:ab:70:63:45:9a:01:61:e9:69:f3:5f:65:ad: 7a:05:9d:73:aa:f7:3f:3d:6a:03:7a:ef:a2:ed:1f:cd:1a:8c: 39:de:11:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE07nJkbCYCVFel8+xN6X9M8gsekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTEyMjQxNzU2MjJaFw0yNTEyMjgwMDM4MjJaMDMxMTAvBgNV BAMTKEIzMzc1NTQxQkM2QUYxQUMwRDFENTU5NUVCOUE4MkI5N0E5RTU5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6xPuQwgr1pzUeUUX52+w+PV+ EIpUd9Wz5jd361js0XPto+oIf5RxnKkGeYw0SCW2sonbjmH6WWcE5lQp7ZkCTVz8 T9kig/S456EO4DWQ6eYRCpcB6bRL5EEAmUXL+rvz+HDdQcJGO8wdsRTu6UKHDjfi FH72jt3xWCMXdiotNCoOnGjH21w0aQxD+7c9o6rDHXbkrYEWU6z1Xg7FgjLB+KWh qDXpue489/6AF3/oJATL6sDJ5ZfHncgvDsKj9yf2tyo8oVAZWxDPkzngg5+69e05 HzJ8kk5yCO302d2NjZt7IvT8McWmOpVBq8XgUu3kHD7IwIqpnZDfGGHGRod9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszdVQbxq8awNHVWV65qCuXqeWUUwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHrGEcNXXi2rUJiOi+Tr8+CmlHiRkjD0kOK 9FXlLDnK2LNjbFc+FmKyDgnQmTMJBmOq+U8ao6o8OQd+5+hNsSZ7neisPluBXHcC 6p6i+2ziOHZ0PAnT0av77Id/77r5dIioMSrA64Qv/ty6YgMrfAy/f7wgsH4Zcyq5 Wwi1QRoO8cJEJqdk3f17PpoPmqc3wodNQ6rxspOIRA+WeWQk0cREJ5NjJJBFWz4p 1thvLcl7OFPOm+Yr5XPwpPFyKWDHJmqSXOhHtuBZudABokIG0HnDcY0pB/gBtloB l1lpq3BjRZoBYelp819lrXoFnXOq9z89agN676LtH80ajDneEUo= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:02 2025 by rpki-client