This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: CpLsVXFXFV2+1JsafjD6x+XzyS4eHf9xLFbu88YSwMI= Subject key identifier: 34:8B:B5:9B:45:B2:BE:5B:AD:E1:02:FA:66:0F:A4:7B:E7:D9:23:D6 Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 4FFB63F1B0B2CABC0ABBFA2D0E97DCCA4DBF6EAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: 0100 Signing time: Thu 25 Dec 2025 06:11:26 +0000 Manifest this update: Thu 25 Dec 2025 06:06:26 +0000 Manifest next update: Sun 28 Dec 2025 09:23:26 +0000 Files and hashes: 1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: Am7Ds29NlM8wkINxJrLSlvlk5EALkCRY2UUhia3aT9g=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fb:63:f1:b0:b2:ca:bc:0a:bb:fa:2d:0e:97:dc:ca:4d:bf:6e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Dec 25 06:06:26 2025 GMT Not After : Dec 28 09:23:26 2025 GMT Subject: CN=348BB59B45B2BE5BADE102FA660FA47BE7D923D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:af:56:b1:7d:5a:0b:44:69:75:0f:f0:12:a5: f6:f5:03:b6:0b:09:a5:06:1d:92:18:48:5c:07:7a: 1b:7a:4a:00:3a:57:08:2d:c5:27:4a:35:0a:94:5a: aa:13:9a:ef:74:69:d0:c8:aa:a4:c2:ce:65:3f:5d: c1:a1:9d:ca:a0:3c:f6:e1:38:3f:a2:7f:74:d0:97: 7c:c5:c0:6c:19:c2:39:84:65:07:7a:47:43:83:82: 66:54:8b:1c:fa:19:51:fc:ba:58:66:9f:96:8e:b3: dd:62:5c:7d:7e:6a:87:d1:87:7e:1d:eb:98:fd:57: 35:20:8c:b3:80:c3:cb:7b:42:77:d1:a9:97:a1:0b: a1:16:65:46:5c:e9:cc:a0:88:aa:40:a3:26:a8:21: 92:76:2b:8c:37:3b:09:c4:74:96:d6:8c:22:1d:77: a3:d7:6a:0a:69:e6:7c:70:1d:df:2a:ac:c1:48:ea: be:e0:80:3e:a1:fc:8c:75:5d:68:10:46:4c:12:7b: 72:58:2a:47:d4:15:76:a8:20:07:fd:e6:86:28:02: 80:33:8b:49:7e:5d:d2:94:53:41:75:c9:0e:ac:6d: 63:b1:ad:93:8b:86:7f:5e:2c:ba:e2:0d:fc:89:90: 89:80:c5:49:ac:18:20:37:30:63:e1:73:82:fa:c5: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:B5:9B:45:B2:BE:5B:AD:E1:02:FA:66:0F:A4:7B:E7:D9:23:D6 X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2f:3c:52:df:85:55:6d:68:84:da:ed:24:5d:7f:59:31:af: f1:6c:66:3e:ad:46:a4:21:1a:f5:a3:bc:58:36:14:61:1d:20: d3:73:0e:41:d9:cd:a6:9d:9d:da:48:85:95:e4:e1:b9:4d:c8: c6:d5:76:b6:29:2f:83:86:58:aa:e7:29:8c:32:6e:2e:6b:72: 2d:2f:bf:b3:7d:d9:81:55:26:6c:d5:42:fc:56:6f:23:2b:e3: 85:b1:bc:7a:7c:53:14:e2:0c:f6:92:66:34:28:f4:0d:d4:c5: 6b:3f:26:85:2a:4a:4e:68:7a:3a:d7:2c:92:0d:8c:b5:1b:5c: ff:9b:e5:01:ea:a8:3c:1c:69:e0:ca:ab:b8:34:c3:d7:bb:99: 96:1a:10:04:2f:40:cd:12:ff:ff:90:a7:3f:27:63:cc:b9:29: af:a9:c2:75:61:e9:31:7d:dd:14:cc:73:e2:c8:a4:33:da:5d: f1:25:5e:c5:d7:65:9f:23:ae:5f:f5:b5:41:d2:2c:5d:4c:de: ae:d5:ba:03:65:82:92:e9:9c:9e:4a:e7:da:b0:23:0f:d6:71: f9:65:53:5c:48:05:bd:62:e3:75:87:05:1b:e7:10:d8:ed:6d: 1b:b8:ad:2e:fe:a5:ef:92:6d:bb:66:69:5b:f7:53:2a:5e:80: 2c:85:6d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/tj8bCyyrwKu/otDpfcyk2/bq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTEyMjUwNjA2MjZaFw0yNTEyMjgwOTIzMjZaMDMxMTAvBgNV BAMTKDM0OEJCNTlCNDVCMkJFNUJBREUxMDJGQTY2MEZBNDdCRTdEOTIzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6r1axfVoLRGl1D/ASpfb1A7YL CaUGHZIYSFwHeht6SgA6VwgtxSdKNQqUWqoTmu90adDIqqTCzmU/XcGhncqgPPbh OD+if3TQl3zFwGwZwjmEZQd6R0ODgmZUixz6GVH8ulhmn5aOs91iXH1+aofRh34d 65j9VzUgjLOAw8t7QnfRqZehC6EWZUZc6cygiKpAoyaoIZJ2K4w3OwnEdJbWjCId d6PXagpp5nxwHd8qrMFI6r7ggD6h/Ix1XWgQRkwSe3JYKkfUFXaoIAf95oYoAoAz i0l+XdKUU0F1yQ6sbWOxrZOLhn9eLLriDfyJkImAxUmsGCA3MGPhc4L6xVgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNIu1m0Wyvlut4QL6Zg+ke+fZI9YwHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMvPFLfhVVtaITa7SRdf1kxr/FsZj6tRqQh GvWjvFg2FGEdINNzDkHZzaadndpIhZXk4blNyMbVdrYpL4OGWKrnKYwybi5rci0v v7N92YFVJmzVQvxWbyMr44WxvHp8UxTiDPaSZjQo9A3UxWs/JoUqSk5oejrXLJIN jLUbXP+b5QHqqDwcaeDKq7g0w9e7mZYaEAQvQM0S//+Qpz8nY8y5Ka+pwnVh6TF9 3RTMc+LIpDPaXfElXsXXZZ8jrl/1tUHSLF1M3q7VugNlgpLpnJ5K59qwIw/Wcfll U1xIBb1i43WHBRvnENjtbRu4rS7+pe+SbbtmaVv3UypegCyFbT8= -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:42 2025 by rpki-client