This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: FgMvpyVq1jE2SAsomkzyuIj38TWEBsX8DMkooDzlY0k= Subject key identifier: F7:54:CB:0C:3D:3D:2D:FB:8D:AE:04:EA:31:A0:AF:FE:70:36:AE:77 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 69E8F16111FBC3C3DA164A850A1391C7AD29B643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 0533 Signing time: Mon 22 Dec 2025 12:42:00 +0000 Manifest this update: Mon 22 Dec 2025 12:37:00 +0000 Manifest next update: Thu 25 Dec 2025 19:24:00 +0000 Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) 2: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: YD8UEktZ/ajGVsfSkA+Uuy8IZXatYTK3CsWn+GQxrZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e8:f1:61:11:fb:c3:c3:da:16:4a:85:0a:13:91:c7:ad:29:b6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Dec 22 12:37:00 2025 GMT Not After : Dec 25 19:24:00 2025 GMT Subject: CN=F754CB0C3D3D2DFB8DAE04EA31A0AFFE7036AE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:74:ab:47:40:b7:25:2e:03:c8:9d:8e:40: f0:2c:2f:ce:84:fa:8d:45:8a:81:f6:91:66:6d:16: 3e:8c:9e:ec:c9:b6:1c:c1:b9:d3:8f:fd:9b:cb:85: f0:ab:b0:ec:6d:ba:15:81:5e:5d:87:88:5f:9c:35: f4:1b:5d:96:d6:e1:9e:f9:1b:78:31:bb:d2:58:b3: 08:51:58:f4:3f:bb:96:34:1e:73:08:d1:86:db:d0: 39:1c:94:a7:2d:90:18:06:24:4e:ed:6d:62:4c:8f: e9:e5:d9:73:1a:2f:ee:7b:9d:e8:58:4b:88:80:6f: 6b:4d:8d:e7:fd:ef:c0:22:dc:c5:fd:18:bc:9e:27: 62:32:52:4f:c8:8b:96:aa:6b:8c:a5:aa:84:0b:46: e9:ad:39:7a:5d:47:0c:f5:84:59:e1:35:b0:78:ac: a6:d5:e7:9f:08:5e:fd:e7:2c:2e:15:d3:e1:87:94: 34:16:a7:75:e0:53:93:ab:0a:78:54:f7:4a:0c:2d: 4d:3a:bf:27:35:11:83:5f:2c:dd:51:41:07:c5:e5: c1:07:72:70:52:7a:19:6a:d5:b3:7d:fe:92:c7:4c: 2e:fa:0d:1e:46:c8:98:e6:ac:eb:de:23:74:1d:91: 26:f2:6e:4a:d5:1e:50:b8:a4:df:88:c1:c0:25:de: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:54:CB:0C:3D:3D:2D:FB:8D:AE:04:EA:31:A0:AF:FE:70:36:AE:77 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:89:41:29:b2:14:04:bd:c7:bc:0a:e2:6c:ff:6f:73:fc:ae: 99:97:8c:a0:5a:cf:bc:80:20:27:61:a7:9f:6e:6a:69:5d:7d: ee:92:4a:ee:59:1a:7a:4e:5f:8e:5e:36:f1:11:0a:6e:ae:18: 74:d1:7a:8d:0a:3b:50:01:16:95:14:8b:b3:2e:e0:2e:13:44: 2a:55:08:48:cd:e2:35:d6:07:be:28:11:a5:01:a0:3d:8d:b1: 4f:f8:6b:af:11:f1:a7:40:19:40:4c:ef:d5:09:4d:30:92:07: 1a:ea:65:b4:57:5f:11:d6:90:64:00:a5:2b:3b:97:cb:d2:54: 73:c0:65:84:5f:5b:ed:17:cc:c9:85:12:80:93:c8:26:af:b4: 39:37:10:7b:7d:46:97:21:06:92:68:c7:d4:49:4d:0f:ea:be: fa:29:53:76:03:90:2e:b2:ca:7c:b8:c9:11:66:b3:cb:a3:bd: 52:c7:fc:f7:73:c2:0c:1b:8f:1e:e5:75:35:97:e6:75:bb:a6: 5f:ce:66:b4:eb:5a:a7:54:ce:c9:a7:0f:9d:97:26:03:6a:4c: a2:ea:6c:fe:1d:4c:5c:f9:f5:51:7e:43:c9:6a:fe:d9:41:bc: 3b:2d:f0:f8:6b:95:12:8b:35:33:43:2a:03:51:3a:2d:be:bb: 3e:47:47:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaejxYRH7w8PaFkqFChORx60ptkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTEyMjIxMjM3MDBaFw0yNTEyMjUxOTI0MDBaMDMxMTAvBgNV BAMTKEY3NTRDQjBDM0QzRDJERkI4REFFMDRFQTMxQTBBRkZFNzAzNkFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAnSrR0C3JS4DyJ2OQPAsL86E +o1FioH2kWZtFj6MnuzJthzBudOP/ZvLhfCrsOxtuhWBXl2HiF+cNfQbXZbW4Z75 G3gxu9JYswhRWPQ/u5Y0HnMI0Ybb0DkclKctkBgGJE7tbWJMj+nl2XMaL+57nehY S4iAb2tNjef978Ai3MX9GLyeJ2IyUk/Ii5aqa4ylqoQLRumtOXpdRwz1hFnhNbB4 rKbV558IXv3nLC4V0+GHlDQWp3XgU5OrCnhU90oMLU06vyc1EYNfLN1RQQfF5cEH cnBSehlq1bN9/pLHTC76DR5GyJjmrOveI3QdkSbybkrVHlC4pN+IwcAl3oCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU91TLDD09LfuNrgTqMaCv/nA2rncwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmJQSmyFAS9x7wK4mz/b3P8rpmXjKBaz7yA ICdhp59uamldfe6SSu5ZGnpOX45eNvERCm6uGHTReo0KO1ABFpUUi7Mu4C4TRCpV CEjN4jXWB74oEaUBoD2NsU/4a68R8adAGUBM79UJTTCSBxrqZbRXXxHWkGQApSs7 l8vSVHPAZYRfW+0XzMmFEoCTyCavtDk3EHt9RpchBpJox9RJTQ/qvvopU3YDkC6y yny4yRFms8ujvVLH/Pdzwgwbjx7ldTWX5nW7pl/OZrTrWqdUzsmnD52XJgNqTKLq bP4dTFz59VF+Q8lq/tlBvDst8PhrlRKLNTNDKgNROi2+uz5HR1Q= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:38 2025 by rpki-client