This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: vyU5ObZeWff+xgvyqGd3d2jFz4HeQ/a1KUrCxhbIWUE= Subject key identifier: E2:56:62:DA:92:C8:83:E7:51:77:C6:28:A4:36:CF:9F:90:BE:8D:69 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 3AECD24ED531379A901C726767015E3E59AB5A2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: CA Signing time: Fri 26 Dec 2025 23:00:59 +0000 Manifest this update: Fri 26 Dec 2025 22:55:59 +0000 Manifest next update: Tue 30 Dec 2025 04:14:59 +0000 Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: DkaD62yPmgT3rL8vnnIbnI/XVBv8VoP+g+l6Q15s5Ng=) 2: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: kLkJCScXhomd28pij3dYNYLgA9IM71pxyyWIoVmfWp8=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: ddc27gBMr3OYby+60rTsFN4jTsnZf0K6QpQ3U8AJvJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ec:d2:4e:d5:31:37:9a:90:1c:72:67:67:01:5e:3e:59:ab:5a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Dec 26 22:55:59 2025 GMT Not After : Dec 30 04:14:59 2025 GMT Subject: CN=E25662DA92C883E75177C628A436CF9F90BE8D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:92:01:18:be:69:a7:ca:6f:ce:4c:c9:b9: df:9c:ea:65:5b:a5:7c:82:fc:79:1b:64:4f:85:58: 1e:2c:05:a2:df:99:c9:bd:07:e0:9d:03:e3:58:d5: 88:db:0d:15:4b:a2:34:c0:02:d0:38:00:e3:6b:d1: fa:fe:c0:11:0c:6d:28:32:0b:49:ca:3f:a3:ce:4a: b6:a6:23:09:59:b8:ea:57:a1:b5:97:5c:04:80:1d: 99:3b:d9:51:a0:12:7b:ca:0d:16:1f:b7:c2:d2:ac: f1:5f:e4:c8:1a:4a:21:a3:76:b9:d0:5c:fe:25:54: fa:57:1d:50:89:67:f5:54:c0:9c:d5:8b:8b:1f:7d: 31:d4:af:8e:fb:24:48:1c:ef:e3:76:09:91:30:0e: 25:51:a3:47:04:96:8b:5b:f8:bc:b0:28:c8:b5:88: 8b:6f:d5:db:13:a1:dd:9f:61:e2:3e:08:d5:07:4b: c5:ae:47:02:5e:77:31:9e:cc:3e:e0:0f:b3:99:ee: af:04:e6:df:da:39:e4:7b:f2:aa:c0:e3:3b:ac:4b: 50:03:7d:22:61:66:13:6f:37:48:e1:50:9f:14:d7: b6:20:9c:22:d4:e7:e8:0c:e4:5c:b1:f3:e5:23:c4: a4:07:81:b2:06:8b:bb:4c:2a:cc:6c:17:ec:51:9f: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:62:DA:92:C8:83:E7:51:77:C6:28:A4:36:CF:9F:90:BE:8D:69 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5a:2a:c4:1f:aa:36:25:d0:c1:be:2a:5a:9b:21:3f:4f:48: 5c:29:d8:08:17:98:f9:23:91:23:04:95:ec:79:7b:0a:4d:4c: 3b:84:08:7e:ac:be:fa:6f:a3:b4:fc:f6:8d:67:ed:99:28:76: 93:39:d3:9f:03:21:86:30:f7:1e:d8:c0:bd:95:1d:ae:11:56: 3a:40:c2:ff:fd:be:91:5a:d9:3d:9c:b9:2e:c6:53:3a:b3:d7: 0c:c5:c7:54:9f:7f:8b:85:35:20:6e:bf:63:45:85:f9:53:2f: a2:e4:ea:a8:51:23:00:44:b7:d1:c3:5c:20:22:82:d7:ca:1e: 2f:1b:b1:fb:31:4e:ea:4f:7d:bc:6c:98:51:85:e3:59:b5:01: 10:b6:6b:1f:2d:f6:ce:97:81:fc:04:0b:69:bb:f4:2c:f0:ba: 74:1e:b3:72:75:f8:8b:04:c9:e6:cf:31:a3:5a:c7:74:56:f3: bd:14:fc:c9:19:73:94:fa:a7:9d:8d:60:4b:e5:26:08:45:ba: 08:82:b1:5a:57:ca:0d:c3:a4:2a:57:81:18:56:5a:e8:f4:86: 06:f9:33:97:96:db:c0:8c:07:c0:e9:4d:c4:29:53:f0:60:10: 01:7e:bc:bc:56:47:ae:51:3f:67:ce:43:3b:88:47:d8:41:5c: 0a:48:f7:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuzSTtUxN5qQHHJnZwFePlmrWi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTEyMjYyMjU1NTlaFw0yNTEyMzAwNDE0NTlaMDMxMTAvBgNV BAMTKEUyNTY2MkRBOTJDODgzRTc1MTc3QzYyOEE0MzZDRjlGOTBCRThENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVZIBGL5pp8pvzkzJud+c6mVb pXyC/HkbZE+FWB4sBaLfmcm9B+CdA+NY1YjbDRVLojTAAtA4AONr0fr+wBEMbSgy C0nKP6POSramIwlZuOpXobWXXASAHZk72VGgEnvKDRYft8LSrPFf5MgaSiGjdrnQ XP4lVPpXHVCJZ/VUwJzVi4sffTHUr477JEgc7+N2CZEwDiVRo0cElotb+LywKMi1 iItv1dsTod2fYeI+CNUHS8WuRwJedzGezD7gD7OZ7q8E5t/aOeR78qrA4zusS1AD fSJhZhNvN0jhUJ8U17YgnCLU5+gM5Fyx8+UjxKQHgbIGi7tMKsxsF+xRn4GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lZi2pLIg+dRd8YopDbPn5C+jWkwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1aKsQfqjYl0MG+KlqbIT9PSFwp2AgXmPkj kSMElex5ewpNTDuECH6svvpvo7T89o1n7ZkodpM5058DIYYw9x7YwL2VHa4RVjpA wv/9vpFa2T2cuS7GUzqz1wzFx1Sff4uFNSBuv2NFhflTL6Lk6qhRIwBEt9HDXCAi gtfKHi8bsfsxTupPfbxsmFGF41m1ARC2ax8t9s6XgfwEC2m79CzwunQes3J1+IsE yebPMaNax3RW870U/MkZc5T6p52NYEvlJghFugiCsVpXyg3DpCpXgRhWWuj0hgb5 M5eW28CMB8DpTcQpU/BgEAF+vLxWR65RP2fOQzuIR9hBXApI95Y= -----END CERTIFICATE-----Generated at Sat Dec 27 04:04:35 2025 by rpki-client