This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: JPFjQbcd/k40ivuAwYiI5AYOCSlgQzLqRyCU96Z537I= Subject key identifier: D7:02:31:7A:2B:29:C0:80:BE:95:29:ED:B7:F1:07:C3:80:16:7A:E7 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 4CD6533B96839B23F44059473A0F7E9A384EAA27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 019A Signing time: Mon 22 Dec 2025 22:42:33 +0000 Manifest this update: Mon 22 Dec 2025 22:37:33 +0000 Manifest next update: Fri 26 Dec 2025 05:44:33 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: kjE/xkEp/Z291wsDJ+FMCBgjRRL1SfrFlLpBk/9n6Qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d6:53:3b:96:83:9b:23:f4:40:59:47:3a:0f:7e:9a:38:4e:aa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Dec 22 22:37:33 2025 GMT Not After : Dec 26 05:44:33 2025 GMT Subject: CN=D702317A2B29C080BE9529EDB7F107C380167AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:7b:7d:9e:9d:69:7a:8f:76:b9:bf:a8:10: 43:50:39:35:bf:24:96:48:70:3f:71:ae:99:46:8c: ce:96:89:a4:ca:f9:ae:85:ab:47:f9:17:e9:27:f3: af:1b:eb:a0:75:92:e4:7d:b7:1b:35:a3:5c:50:b4: 1a:6a:87:70:84:2f:67:85:f7:ca:f1:37:44:2a:fc: 52:75:24:1c:a6:25:82:b8:d0:2e:1b:5f:e5:37:23: d1:47:ce:4a:18:91:61:a7:09:b6:3a:fe:57:83:e9: ff:12:61:3b:3b:7c:80:15:54:f0:aa:86:be:e8:2f: 03:df:eb:c0:01:86:0c:40:42:36:15:f2:1c:8b:da: ee:27:bf:e7:2b:0a:ad:e1:b1:1b:e9:a8:d6:33:61: 0f:25:13:38:09:4b:5e:48:d2:61:e3:c0:2e:ff:f8: 84:8c:dd:e1:13:0f:ff:47:bb:09:af:2c:c0:40:7c: d3:3d:fb:58:48:0d:02:1d:ae:10:d1:e2:0d:58:40: 53:60:d0:4c:99:29:6d:22:ef:4a:a7:39:b8:45:91: 5c:df:38:0d:7f:ce:5c:23:9f:f4:76:2a:ab:4b:ce: 53:48:7b:da:42:25:96:51:00:22:52:8c:b1:b3:df: b7:5c:5e:3b:97:9c:1c:fa:58:f2:ba:b8:27:a4:5d: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:02:31:7A:2B:29:C0:80:BE:95:29:ED:B7:F1:07:C3:80:16:7A:E7 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a3:a6:ce:52:39:54:af:8e:bd:9d:ea:b2:5d:8a:63:e8:1a: 57:4f:78:2a:b9:aa:a7:8c:e6:87:82:f9:b6:42:25:a9:c0:60: 09:27:73:96:b8:8e:8c:f6:6b:b4:e7:a9:a7:b0:ca:c8:70:1e: fb:cf:85:af:58:5b:a3:93:e0:c0:39:72:96:4e:89:ef:6f:e0: fa:cd:b8:72:00:09:09:fc:7c:78:ea:aa:d8:86:ec:c2:0b:d2: e8:fe:7e:f2:0b:87:c6:7b:ee:9e:56:ea:3d:8c:cf:eb:d4:85: b4:07:da:6c:97:43:11:3f:f6:8f:1f:04:c5:3a:3b:62:fe:74: 0b:24:95:52:c0:50:1c:64:7c:3a:f8:b9:41:10:4f:fa:cc:2c: 53:e1:d1:c6:dd:8b:44:d8:09:c0:38:ee:a2:2b:11:b3:ea:65: 88:d8:83:60:00:14:92:c6:e5:9e:47:c5:69:64:e2:50:2e:d3: a5:16:df:a8:ed:d2:c2:63:57:c9:a4:9a:f0:82:8e:ad:92:9f: 2b:f4:f8:b4:f3:a6:3f:bd:95:ac:1e:42:5f:23:27:7d:b7:47: c5:00:f0:bd:dc:38:c9:6f:ca:94:db:bf:80:88:87:54:b4:90: fa:e4:0f:89:3c:44:2f:cc:0e:10:e1:a3:98:79:69:61:e1:b3: a5:45:af:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNZTO5aDmyP0QFlHOg9+mjhOqicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTEyMjIyMjM3MzNaFw0yNTEyMjYwNTQ0MzNaMDMxMTAvBgNV BAMTKEQ3MDIzMTdBMkIyOUMwODBCRTk1MjlFREI3RjEwN0MzODAxNjdBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWx3t9np1peo92ub+oEENQOTW/ JJZIcD9xrplGjM6WiaTK+a6Fq0f5F+kn868b66B1kuR9txs1o1xQtBpqh3CEL2eF 98rxN0Qq/FJ1JBymJYK40C4bX+U3I9FHzkoYkWGnCbY6/leD6f8SYTs7fIAVVPCq hr7oLwPf68ABhgxAQjYV8hyL2u4nv+crCq3hsRvpqNYzYQ8lEzgJS15I0mHjwC7/ +ISM3eETD/9HuwmvLMBAfNM9+1hIDQIdrhDR4g1YQFNg0EyZKW0i70qnObhFkVzf OA1/zlwjn/R2KqtLzlNIe9pCJZZRACJSjLGz37dcXjuXnBz6WPK6uCekXcd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wIxeispwIC+lSntt/EHw4AWeucwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIijps5SOVSvjr2d6rJdimPoGldPeCq5qqeM 5oeC+bZCJanAYAknc5a4joz2a7TnqaewyshwHvvPha9YW6OT4MA5cpZOie9v4PrN uHIACQn8fHjqqtiG7MIL0uj+fvILh8Z77p5W6j2Mz+vUhbQH2myXQxE/9o8fBMU6 O2L+dAsklVLAUBxkfDr4uUEQT/rMLFPh0cbdi0TYCcA47qIrEbPqZYjYg2AAFJLG 5Z5HxWlk4lAu06UW36jt0sJjV8mkmvCCjq2Snyv0+LTzpj+9laweQl8jJ323R8UA 8L3cOMlvypTbv4CIh1S0kPrkD4k8RC/MDhDho5h5aWHhs6VFr5U= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:26 2025 by rpki-client