This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: HCOUt912KbPpzP2FOyXsaKO/CT5700hAwbvEEPV4mv4= Subject key identifier: 2A:0D:B9:38:71:E5:EC:B7:B6:3F:BE:9D:83:0E:1E:AF:F0:DF:1E:F0 Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 5B3D84C9CF49CC9B936B00E0D64D5463F4E5E358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 01DC Signing time: Wed 24 Dec 2025 05:01:31 +0000 Manifest this update: Wed 24 Dec 2025 04:56:31 +0000 Manifest next update: Sat 27 Dec 2025 13:44:31 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: YkSJyRjYYzDx8SUrgnQv/ht4IZpHISuUCWAEcxYX164=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3d:84:c9:cf:49:cc:9b:93:6b:00:e0:d6:4d:54:63:f4:e5:e3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Dec 24 04:56:31 2025 GMT Not After : Dec 27 13:44:31 2025 GMT Subject: CN=2A0DB93871E5ECB7B63FBE9D830E1EAFF0DF1EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:79:c6:69:53:4c:e1:88:cc:eb:c4:2e:6b: b6:ef:13:a8:03:19:02:37:6f:61:79:09:58:8f:3c: 89:2b:57:c0:a0:eb:2c:a8:d6:9d:ab:e5:9c:ef:51: 0c:b6:a3:a0:4d:bc:ff:b9:3a:fb:b1:8f:1e:09:0b: 9b:75:43:03:d7:1e:7f:4e:c1:81:4a:a2:77:c7:96: 44:d5:ae:6b:64:b2:74:09:d3:3e:69:5b:8e:e4:dc: 3e:85:28:75:a7:ad:68:48:3e:3a:83:bd:1f:84:da: d2:6d:dd:64:94:8e:40:82:ad:09:90:3c:26:71:df: 73:f6:b8:28:0f:a1:3e:e0:d8:9b:88:f4:1d:b3:68: f3:d3:7f:41:8c:eb:f7:d2:62:1f:29:38:1a:67:73: 58:1b:e6:d9:48:f1:71:c4:19:e2:e7:7b:88:e9:ab: 2b:0f:c7:42:af:41:41:04:80:30:75:85:f4:94:80: 41:22:13:1e:8b:fe:1a:af:d6:56:98:da:4b:e2:a8: 2e:4e:9b:ad:52:71:4c:9c:c8:d9:86:de:97:57:fc: 36:4a:ff:8a:e0:95:00:e8:38:48:ff:91:b4:60:cd: a7:45:c4:a7:ec:a2:b9:b6:62:0b:5b:33:d1:11:3e: 71:a1:8b:f8:19:94:14:bb:59:50:a1:17:5d:38:94: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:B9:38:71:E5:EC:B7:B6:3F:BE:9D:83:0E:1E:AF:F0:DF:1E:F0 X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1c:ea:33:47:57:60:34:52:88:24:73:0b:7d:78:38:13:4a: f5:e8:a4:bd:3d:28:93:c3:5b:57:f5:21:75:88:ac:83:46:bd: 23:26:5d:5b:9b:6c:6a:bb:57:82:fd:d6:27:9f:e5:31:24:70: 3b:b5:a2:85:8d:f7:bf:62:ee:f8:c1:3a:7d:aa:e6:45:06:3b: be:49:b7:84:6e:29:06:aa:89:14:ab:d3:4c:f7:7d:0f:7e:a3: c7:bf:c4:24:ab:f2:68:8b:b2:d8:5a:69:53:47:89:de:32:cc: 51:49:32:c8:32:a9:5e:57:13:f7:5e:e4:17:09:d3:19:a8:ba: 93:b5:93:b1:93:0a:5f:a8:6b:f8:b3:90:94:4d:60:3d:66:af: f2:cb:02:72:b5:4b:82:e5:88:e5:e0:f6:f7:83:9d:8a:86:2d: ad:f9:62:60:04:18:a9:52:ae:24:08:0d:a4:bc:6b:1f:29:df: 75:24:ed:12:61:12:cd:18:83:eb:41:2e:89:98:2a:a6:9a:34: 97:cc:4d:bc:28:1d:e3:7e:d0:65:ad:6f:43:7b:f0:32:85:cd: 48:f3:8d:4c:bd:0c:93:1c:a8:d3:e0:82:07:69:f8:bc:b1:18: a1:45:4d:0d:63:e7:92:25:34:38:14:f2:18:7f:4c:a4:10:0e: 40:8d:2d:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWz2Eyc9JzJuTawDg1k1UY/Tl41gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTEyMjQwNDU2MzFaFw0yNTEyMjcxMzQ0MzFaMDMxMTAvBgNV BAMTKDJBMERCOTM4NzFFNUVDQjdCNjNGQkU5RDgzMEUxRUFGRjBERjFFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbCnnGaVNM4YjM68Qua7bvE6gD GQI3b2F5CViPPIkrV8Cg6yyo1p2r5ZzvUQy2o6BNvP+5Ovuxjx4JC5t1QwPXHn9O wYFKonfHlkTVrmtksnQJ0z5pW47k3D6FKHWnrWhIPjqDvR+E2tJt3WSUjkCCrQmQ PCZx33P2uCgPoT7g2JuI9B2zaPPTf0GM6/fSYh8pOBpnc1gb5tlI8XHEGeLne4jp qysPx0KvQUEEgDB1hfSUgEEiEx6L/hqv1laY2kviqC5Om61ScUycyNmG3pdX/DZK /4rglQDoOEj/kbRgzadFxKfsorm2YgtbM9ERPnGhi/gZlBS7WVChF104lPsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKg25OHHl7Le2P76dgw4er/DfHvAwHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcc6jNHV2A0Uogkcwt9eDgTSvXopL09KJPD W1f1IXWIrINGvSMmXVubbGq7V4L91ief5TEkcDu1ooWN979i7vjBOn2q5kUGO75J t4RuKQaqiRSr00z3fQ9+o8e/xCSr8miLsthaaVNHid4yzFFJMsgyqV5XE/de5BcJ 0xmoupO1k7GTCl+oa/izkJRNYD1mr/LLAnK1S4LliOXg9veDnYqGLa35YmAEGKlS riQIDaS8ax8p33Uk7RJhEs0Yg+tBLomYKqaaNJfMTbwoHeN+0GWtb0N78DKFzUjz jUy9DJMcqNPgggdp+LyxGKFFTQ1j55IlNDgU8hh/TKQQDkCNLTY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:45 2025 by rpki-client