This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: /9AuB/xYjXcLglXRruy3xQjxO/FHyZFypq7hRSCypTM= Subject key identifier: C8:8A:92:82:8C:03:52:50:74:3F:89:1D:1B:36:DF:B1:A6:FB:D3:4C Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 7FB31557AC3F988527AC612F25D40E1C2E6C4053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 010B Signing time: Wed 24 Dec 2025 08:13:31 +0000 Manifest this update: Wed 24 Dec 2025 08:08:31 +0000 Manifest next update: Sat 27 Dec 2025 14:06:31 +0000 Files and hashes: 1: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: GaQSvJlctBSgZE0F8OZTfAA2xCafLh6i/e0Z5Mw5KIY=) 2: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 3: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 4: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 5: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 6: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b3:15:57:ac:3f:98:85:27:ac:61:2f:25:d4:0e:1c:2e:6c:40:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Dec 24 08:08:31 2025 GMT Not After : Dec 27 14:06:31 2025 GMT Subject: CN=C88A92828C035250743F891D1B36DFB1A6FBD34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:a7:ca:af:bb:bd:23:61:a5:7a:d4:6d:a3: 03:43:49:d7:7a:39:64:45:1d:46:0e:32:14:9c:d7: 0d:3d:5f:3f:a8:17:77:b9:ce:2e:55:4d:96:a7:5b: 17:6a:88:39:98:1e:74:6e:df:a9:04:bf:00:00:2c: f6:53:7d:f0:ae:19:3c:db:68:91:04:71:5b:7a:06: 17:1f:c0:7e:60:47:ec:90:82:ad:bd:e8:41:b7:21: 26:d3:e6:f1:04:a6:e2:99:ab:ea:e6:b6:7d:cf:b0: 26:fc:93:a0:cb:a3:0d:47:c8:07:36:8c:b8:b8:74: 64:5d:a8:bd:2e:44:6e:79:b7:51:f8:c6:a7:86:ec: 67:d5:95:a3:3d:92:9d:63:2e:c9:ae:09:c1:88:47: 37:5f:b3:2e:ac:52:d5:34:de:ae:a7:20:43:41:c2: 56:5e:46:13:b8:dd:45:cb:46:3f:05:5c:78:f1:b4: 7c:ab:7a:56:13:77:3b:1f:ad:da:31:38:66:9d:f0: 49:b9:66:ef:ff:95:b0:e2:ef:12:af:a2:e8:15:90: d7:f9:ed:46:f9:08:b3:34:da:a9:f9:27:20:06:12: 46:5f:1c:ac:44:81:c6:63:1d:8f:b2:2d:3f:b5:41: b5:bb:a5:40:a3:ab:38:9a:73:65:71:4c:a1:b5:d8: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:92:82:8C:03:52:50:74:3F:89:1D:1B:36:DF:B1:A6:FB:D3:4C X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:64:8e:62:c4:22:02:18:08:a9:5c:a9:5c:0d:cd:45:e3: 6d:f5:18:fc:eb:69:b1:0d:ce:48:72:ef:98:fb:23:13:5b:54: a1:d7:b6:23:52:76:83:ce:03:b3:59:a4:59:46:c0:8f:7f:f7: af:e4:af:82:cd:3b:46:da:7f:74:7e:a5:db:52:84:aa:e2:89: 76:dc:57:bb:c8:a7:a7:8a:4c:45:33:2a:1c:02:4c:00:48:cd: b0:b3:89:c0:cd:ca:05:0c:39:4e:c4:3a:94:b6:41:8b:18:37: 11:fc:5f:57:af:12:21:6d:cd:31:f2:db:99:bd:ef:91:ee:3b: 81:20:60:09:d0:f1:14:5e:ba:04:c6:02:a0:1b:82:85:e7:17: bf:1f:76:3e:d2:69:27:e2:10:14:34:a8:79:f5:8a:66:fb:49: 8d:8d:12:46:78:4b:78:9f:c6:22:db:80:f0:75:df:4c:d3:6d: 10:c0:44:86:81:d2:e6:8e:8c:05:97:f7:3b:50:ac:69:6f:86: b9:46:ba:c3:b2:cd:2a:d3:d6:22:29:e5:00:c1:f4:ce:6f:bb: 40:ba:57:7c:c6:b1:77:e9:aa:a5:0c:ae:95:20:23:86:b3:fb: 5e:a5:3c:1e:47:db:fe:61:ba:1f:9f:9e:fc:60:6a:32:4c:f2: a4:da:2d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7MVV6w/mIUnrGEvJdQOHC5sQFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTEyMjQwODA4MzFaFw0yNTEyMjcxNDA2MzFaMDMxMTAvBgNV BAMTKEM4OEE5MjgyOEMwMzUyNTA3NDNGODkxRDFCMzZERkIxQTZGQkQzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuafKr7u9I2GletRtowNDSdd6 OWRFHUYOMhSc1w09Xz+oF3e5zi5VTZanWxdqiDmYHnRu36kEvwAALPZTffCuGTzb aJEEcVt6BhcfwH5gR+yQgq296EG3ISbT5vEEpuKZq+rmtn3PsCb8k6DLow1HyAc2 jLi4dGRdqL0uRG55t1H4xqeG7GfVlaM9kp1jLsmuCcGIRzdfsy6sUtU03q6nIENB wlZeRhO43UXLRj8FXHjxtHyrelYTdzsfrdoxOGad8Em5Zu//lbDi7xKvougVkNf5 7Ub5CLM02qn5JyAGEkZfHKxEgcZjHY+yLT+1QbW7pUCjqziac2VxTKG12GunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIqSgowDUlB0P4kdGzbfsab700wwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFinZI5ixCICGAipXKlcDc1F4231GPzrabEN zkhy75j7IxNbVKHXtiNSdoPOA7NZpFlGwI9/96/kr4LNO0baf3R+pdtShKriiXbc V7vIp6eKTEUzKhwCTABIzbCzicDNygUMOU7EOpS2QYsYNxH8X1evEiFtzTHy25m9 75HuO4EgYAnQ8RReugTGAqAbgoXnF78fdj7SaSfiEBQ0qHn1imb7SY2NEkZ4S3if xiLbgPB130zTbRDARIaB0uaOjAWX9ztQrGlvhrlGusOyzSrT1iIp5QDB9M5vu0C6 V3zGsXfpqqUMrpUgI4az+16lPB5H2/5huh+fnvxgajJM8qTaLfs= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:08 2025 by rpki-client