This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: 30FnAkYbE72T8V58mR+HELL0vBntQ6PanokA3RpfVic= Subject key identifier: 51:36:B2:5A:B2:4A:A6:32:09:2D:EB:CE:76:36:E5:AC:D3:F6:7C:EE Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4C04BEC8F5EDC0976EF3BB9D1C3EA2E9FD86FF93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04FA Signing time: Fri 19 Dec 2025 14:40:05 +0000 Manifest this update: Fri 19 Dec 2025 14:35:05 +0000 Manifest next update: Mon 22 Dec 2025 22:07:05 +0000 Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=) 3: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: j/EKNMg+C5J/PRx3oVsGQc3tWKXXlc8ri0oYyqTGk8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:04:be:c8:f5:ed:c0:97:6e:f3:bb:9d:1c:3e:a2:e9:fd:86:ff:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Dec 19 14:35:05 2025 GMT Not After : Dec 22 22:07:05 2025 GMT Subject: CN=5136B25AB24AA632092DEBCE7636E5ACD3F67CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:86:e3:f6:a9:2a:64:f9:dc:bd:9b:fb:c5: 3d:7a:56:04:b3:1d:9b:45:1b:6d:01:f6:e6:75:dc: 7f:af:ba:1b:c7:66:6e:dc:64:2a:b3:99:86:65:93: bb:da:08:3e:f5:e9:4e:f3:dd:de:d9:7b:58:b3:87: 14:71:3b:db:c7:15:ff:d3:20:3c:92:46:10:ad:5e: 38:d9:95:01:cf:1f:c0:df:9b:58:e8:5e:bc:5a:27: e7:b8:61:24:31:58:3e:53:8d:38:b7:fe:64:e6:21: 96:ef:64:4f:c1:cd:fd:82:45:cb:6e:01:b2:a1:48: c3:80:15:a3:ec:7d:fb:83:59:b5:94:9f:00:b0:f6: ff:36:b0:69:8f:14:86:50:d7:80:28:f4:1f:1f:78: 33:b2:a1:44:9a:21:b7:2d:e4:66:0a:a2:51:ed:f9: 51:10:e5:65:9b:cd:84:b3:f9:ad:65:b2:d4:f5:12: 85:21:f4:f5:76:54:dd:11:c3:79:dd:90:66:f1:64: c7:98:c3:41:f6:8f:d7:d4:ce:f6:8d:6b:7c:d1:db: bc:ca:76:d6:2e:dd:4a:c7:e1:f8:60:32:53:1e:df: 9a:14:12:e7:f0:06:2f:eb:5a:f8:21:c7:76:aa:23: 67:ba:0a:b8:68:fb:7c:a2:0d:7a:6e:6d:3e:e8:79: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:36:B2:5A:B2:4A:A6:32:09:2D:EB:CE:76:36:E5:AC:D3:F6:7C:EE X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bc:72:41:d3:51:5b:62:52:fa:4d:a7:25:f0:fc:05:1a:fd: fe:4d:87:3c:fe:91:e7:e8:d0:45:f1:69:db:c3:78:8e:23:de: 1b:d8:be:a5:1b:c9:9a:5c:03:97:5b:1c:ce:f1:c7:f1:93:c1: 15:e0:ec:19:eb:70:38:d4:9d:3f:f0:71:ba:03:16:70:e2:cf: 03:cb:8a:15:90:4a:ac:0c:aa:8c:23:c2:9b:e7:c3:2f:69:38: f8:c6:be:c6:ce:76:25:fc:97:59:1c:e8:02:54:2a:80:1c:c9: 1f:17:cd:08:38:94:3d:8d:fb:f4:36:f6:bc:a0:71:ab:df:83: d5:3e:b7:c8:73:fe:85:66:2a:0f:43:a4:d3:b3:86:f4:f1:25: 54:be:b3:b8:9e:88:5b:3b:4d:42:20:9d:40:6b:24:bc:e6:ab: 53:f2:87:0e:35:a9:91:ce:b0:5d:c6:53:cc:c2:b5:2f:a9:a1: 07:45:e6:68:f6:2d:c9:65:3a:5c:7f:40:26:2b:ee:0e:d3:9e: 79:b9:ec:3d:80:b4:3a:dc:c3:44:d3:16:cb:da:72:30:e1:7f: ac:57:a5:d8:2e:b7:4e:b4:9d:a8:ac:aa:19:98:05:61:c3:73: f4:6b:f5:93:35:ff:49:7d:61:2f:7a:e1:23:e9:0e:8c:52:73: c5:d3:34:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAS+yPXtwJdu87udHD6i6f2G/5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTEyMTkxNDM1MDVaFw0yNTEyMjIyMjA3MDVaMDMxMTAvBgNV BAMTKDUxMzZCMjVBQjI0QUE2MzIwOTJERUJDRTc2MzZFNUFDRDNGNjdDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uIbj9qkqZPncvZv7xT16VgSz HZtFG20B9uZ13H+vuhvHZm7cZCqzmYZlk7vaCD716U7z3d7Ze1izhxRxO9vHFf/T IDySRhCtXjjZlQHPH8Dfm1joXrxaJ+e4YSQxWD5TjTi3/mTmIZbvZE/Bzf2CRctu AbKhSMOAFaPsffuDWbWUnwCw9v82sGmPFIZQ14Ao9B8feDOyoUSaIbct5GYKolHt +VEQ5WWbzYSz+a1lstT1EoUh9PV2VN0Rw3ndkGbxZMeYw0H2j9fUzvaNa3zR27zK dtYu3UrH4fhgMlMe35oUEufwBi/rWvghx3aqI2e6Crho+3yiDXpubT7oeaybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTayWrJKpjIJLevOdjblrNP2fO4wHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK8ckHTUVtiUvpNpyXw/AUa/f5Nhzz+kefo 0EXxadvDeI4j3hvYvqUbyZpcA5dbHM7xx/GTwRXg7BnrcDjUnT/wcboDFnDizwPL ihWQSqwMqowjwpvnwy9pOPjGvsbOdiX8l1kc6AJUKoAcyR8XzQg4lD2N+/Q29ryg cavfg9U+t8hz/oVmKg9DpNOzhvTxJVS+s7ieiFs7TUIgnUBrJLzmq1Pyhw41qZHO sF3GU8zCtS+poQdF5mj2LcllOlx/QCYr7g7Tnnm57D2AtDrcw0TTFsvacjDhf6xX pdgut060naisqhmYBWHDc/Rr9ZM1/0l9YS964SPpDoxSc8XTNIQ= -----END CERTIFICATE-----Generated at Sat Dec 20 12:33:41 2025 by rpki-client