This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: 3J6QZvocygysoJ/EPB6gjyTrDZc3V5k1g3cozw5KMKk= Subject key identifier: 03:13:26:AC:4C:2F:41:C6:CA:39:7F:6B:D7:42:5B:97:58:2E:CB:AB Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 5D42B18EC94981523F8178254AEE67883EE5FD8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: C6 Signing time: Thu 18 Dec 2025 18:50:58 +0000 Manifest this update: Thu 18 Dec 2025 18:45:58 +0000 Manifest next update: Mon 22 Dec 2025 03:32:58 +0000 Files and hashes: 1: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: mxSZLp/djccUN1WGtVYbsquKHc1A+kbz3uRkWArANJ4=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:42:b1:8e:c9:49:81:52:3f:81:78:25:4a:ee:67:88:3e:e5:fd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Dec 18 18:45:58 2025 GMT Not After : Dec 22 03:32:58 2025 GMT Subject: CN=031326AC4C2F41C6CA397F6BD7425B97582ECBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:1a:a8:15:f2:ad:e2:a8:6d:84:cf:e1:b6: 8b:53:06:ca:45:13:45:75:9c:66:d3:15:1f:04:cb: 80:6d:ca:02:5f:5b:80:d5:c7:ab:c1:a3:0b:5a:a0: cf:b7:96:f6:3f:65:58:e8:f0:30:66:26:ed:8a:9d: f3:a4:0d:73:96:79:91:d2:79:12:1e:ba:c0:e1:f9: 44:ec:75:12:a8:9c:b6:f4:4d:d4:ac:23:74:06:36: b3:eb:4c:5b:70:d7:03:29:39:41:bf:30:5f:93:af: fe:22:86:92:8c:08:17:ef:e7:67:53:2e:e9:e6:f7: 1a:b5:6f:e3:be:d0:31:2c:22:0c:6b:d1:d8:9c:35: 0e:ef:a7:f9:87:b2:ed:12:01:77:38:31:69:65:01: b1:82:62:21:53:3d:59:ab:a3:bd:66:10:ea:a4:b2: 1d:43:ff:96:ab:a2:d6:88:e9:0c:15:a7:9b:33:18: 5b:0f:06:a0:9d:41:57:60:bc:fc:c5:b0:e0:19:e3: 81:7a:39:87:3c:7d:83:59:c5:6c:fb:3e:62:73:ba: fa:5c:72:f5:49:9f:e0:76:7f:7b:9e:48:3b:7a:03: d2:30:fc:80:30:7d:e2:b8:47:4d:1c:c5:bd:e8:3b: c5:bb:70:e5:a0:81:d6:1a:9d:9a:fd:e0:18:c2:7d: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:13:26:AC:4C:2F:41:C6:CA:39:7F:6B:D7:42:5B:97:58:2E:CB:AB X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9c:71:1e:a1:e0:83:45:6b:f9:bc:ff:e4:bd:6f:9e:70:e3: 90:69:8c:25:1d:9a:8b:71:a0:d0:14:6c:85:43:4c:a7:b5:61: 15:a5:ad:13:e2:7b:e9:aa:99:3c:c8:e2:79:88:00:e2:f5:16: d7:8e:70:43:19:18:dc:ef:d2:92:ad:7b:48:f0:12:81:ba:bc: 3c:a0:5a:b8:86:c4:12:d6:a0:f9:da:45:24:03:5f:5f:af:85: 08:8b:bc:2b:47:88:9b:c3:10:c3:fe:37:04:f9:fc:38:f2:ab: cf:43:ea:90:8b:8d:d9:47:fa:54:5e:d7:85:ca:cd:d7:23:83: e9:39:07:da:3a:ac:44:c8:4c:dd:9c:ec:47:cd:ee:9e:77:fb: eb:3b:22:c4:2b:38:34:ce:50:9c:93:02:81:77:58:e9:a4:2f: bc:00:fe:a3:04:62:84:a8:e6:58:2e:f6:06:23:9e:f9:4c:8b: 63:5d:88:ae:58:d8:f4:39:db:6b:0a:f8:84:08:54:0d:d7:ef: c6:b8:5e:a9:21:3e:3b:a8:a3:b6:28:6f:76:76:e8:d3:60:fd: 0f:e9:fc:09:e5:f5:86:d9:39:ef:8f:7e:e3:53:d0:78:4a:62: 7a:2d:df:db:9d:fc:f7:3c:f1:1f:de:3c:c7:2f:b4:2d:06:da: 91:8f:88:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUKxjslJgVI/gXglSu5niD7l/YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTEyMTgxODQ1NThaFw0yNTEyMjIwMzMyNThaMDMxMTAvBgNV BAMTKDAzMTMyNkFDNEMyRjQxQzZDQTM5N0Y2QkQ3NDI1Qjk3NTgyRUNCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCBqoFfKt4qhthM/htotTBspF E0V1nGbTFR8Ey4BtygJfW4DVx6vBowtaoM+3lvY/ZVjo8DBmJu2KnfOkDXOWeZHS eRIeusDh+UTsdRKonLb0TdSsI3QGNrPrTFtw1wMpOUG/MF+Tr/4ihpKMCBfv52dT Lunm9xq1b+O+0DEsIgxr0dicNQ7vp/mHsu0SAXc4MWllAbGCYiFTPVmro71mEOqk sh1D/5arotaI6QwVp5szGFsPBqCdQVdgvPzFsOAZ44F6OYc8fYNZxWz7PmJzuvpc cvVJn+B2f3ueSDt6A9Iw/IAwfeK4R00cxb3oO8W7cOWggdYanZr94BjCfQzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAxMmrEwvQcbKOX9r10Jbl1guy6swHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGccR6h4INFa/m8/+S9b55w45BpjCUdmotx oNAUbIVDTKe1YRWlrRPie+mqmTzI4nmIAOL1FteOcEMZGNzv0pKte0jwEoG6vDyg WriGxBLWoPnaRSQDX1+vhQiLvCtHiJvDEMP+NwT5/Djyq89D6pCLjdlH+lRe14XK zdcjg+k5B9o6rETITN2c7EfN7p53++s7IsQrODTOUJyTAoF3WOmkL7wA/qMEYoSo 5lgu9gYjnvlMi2NdiK5Y2PQ522sK+IQIVA3X78a4XqkhPjuoo7Yob3Z26NNg/Q/p /Anl9YbZOe+PfuNT0HhKYnot39ud/Pc88R/ePMcvtC0G2pGPiGk= -----END CERTIFICATE-----Generated at Sun Dec 21 09:16:13 2025 by rpki-client