This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: GDhPEs3w7BGPe3Op1hbzOTA2TsWeLlfWdLyeGI9r1Qc= Subject key identifier: 68:15:CD:48:D2:46:3B:37:97:B9:0F:5A:7B:39:F0:5E:FE:88:51:7F Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 4ADD602A51D3BB37726B59140F0901E2730002C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01DE Signing time: Thu 18 Dec 2025 21:00:49 +0000 Manifest this update: Thu 18 Dec 2025 20:55:49 +0000 Manifest next update: Mon 22 Dec 2025 01:13:49 +0000 Files and hashes: 1: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: fdWkldCBnG47DLuzYWaF1GmlTBW3O6A6A0I8l6TvPxM=) 2: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dd:60:2a:51:d3:bb:37:72:6b:59:14:0f:09:01:e2:73:00:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Dec 18 20:55:49 2025 GMT Not After : Dec 22 01:13:49 2025 GMT Subject: CN=6815CD48D2463B3797B90F5A7B39F05EFE88517F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:5f:0e:91:24:5a:59:07:62:20:92:29:24: e7:46:71:e6:e2:f5:50:cf:e8:c7:04:7a:8c:e8:85: 5d:71:6e:b6:64:41:d2:86:db:24:03:f2:7e:36:15: 0b:21:7d:47:a6:20:e8:ca:33:7d:c3:04:a5:22:77: 32:68:2a:28:a1:c1:5e:00:b0:51:fd:9d:e5:dd:52: 9a:8b:d1:90:a1:ef:6b:3b:b4:1d:e2:e8:a8:08:2c: ba:bf:2b:a1:1e:d4:00:27:cb:03:91:15:f4:2c:81: 14:97:6b:36:c8:6b:3a:1b:d6:3d:7b:51:fd:ab:b5: a0:13:d4:b3:4d:53:9c:53:a2:47:a0:19:ed:a6:76: e1:b8:7c:22:8a:24:4a:2a:52:ce:b7:2c:45:a6:22: fe:22:72:ba:37:0e:52:73:30:1e:d8:a8:e2:0c:e2: 56:4e:df:93:fe:38:ac:12:e7:9c:e6:12:f3:7b:4c: ec:52:13:59:93:ab:07:b0:8b:6d:df:f0:a6:e4:b6: 34:ff:38:f9:0e:71:5b:4a:c1:a0:c3:89:de:1c:bc: 94:97:b3:25:f4:3e:b1:2b:9d:45:74:df:ee:49:d2: 83:4b:83:b5:87:93:ad:1c:c4:ca:32:84:57:ff:46: da:9e:79:99:e4:df:c1:1d:f6:69:bd:19:d0:89:0f: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:CD:48:D2:46:3B:37:97:B9:0F:5A:7B:39:F0:5E:FE:88:51:7F X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:20:72:21:2d:27:f6:d9:84:63:cd:7c:8c:64:01:5c:d8:b1: f8:d1:5a:e7:69:73:74:ad:ee:50:d3:c1:07:9a:c0:df:b2:64: 35:ae:48:16:2a:73:71:d4:d6:58:ee:0b:ab:74:59:e5:12:24: e5:b6:94:08:25:e1:54:01:b2:f7:0d:71:3a:11:76:18:e9:7d: 8d:d4:43:0d:9e:ba:4c:48:63:f4:ba:8e:ac:6a:3d:27:58:bb: b4:b4:2f:8f:7b:95:9a:2e:99:8c:7e:7f:28:05:fa:4c:1a:30: 1f:b0:45:f7:8d:96:a3:a9:56:cb:9b:4c:f9:a8:af:38:4a:7f: 82:04:3b:c7:1e:d4:f3:25:19:e0:f5:4b:9a:6e:12:82:e5:a9: 1d:96:e8:1f:95:d1:0c:68:53:05:83:46:7c:72:d1:d5:b0:0c: 36:df:ab:63:cc:4c:e1:77:53:73:54:df:3b:34:ee:86:ad:54: e2:6f:9a:a4:d4:4e:84:89:f0:17:46:b1:ea:64:e0:a1:b4:2f: 03:a9:bd:5b:c3:d8:67:7a:27:89:70:a7:eb:d0:57:7f:eb:71: 7a:2f:6f:66:0c:10:75:87:d4:aa:5e:63:14:23:3a:04:89:2d: 73:17:a9:44:ed:d9:0b:37:67:cb:a8:17:eb:d2:f9:5a:f7:d1: ff:37:a9:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSt1gKlHTuzdya1kUDwkB4nMAAsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTEyMTgyMDU1NDlaFw0yNTEyMjIwMTEzNDlaMDMxMTAvBgNV BAMTKDY4MTVDRDQ4RDI0NjNCMzc5N0I5MEY1QTdCMzlGMDVFRkU4ODUxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDitl8OkSRaWQdiIJIpJOdGcebi 9VDP6McEeozohV1xbrZkQdKG2yQD8n42FQshfUemIOjKM33DBKUidzJoKiihwV4A sFH9neXdUpqL0ZCh72s7tB3i6KgILLq/K6Ee1AAnywORFfQsgRSXazbIazob1j17 Uf2rtaAT1LNNU5xTokegGe2mduG4fCKKJEoqUs63LEWmIv4icro3DlJzMB7YqOIM 4lZO35P+OKwS55zmEvN7TOxSE1mTqwewi23f8KbktjT/OPkOcVtKwaDDid4cvJSX syX0PrErnUV03+5J0oNLg7WHk60cxMoyhFf/RtqeeZnk38Ed9mm9GdCJD/U3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBXNSNJGOzeXuQ9aeznwXv6IUX8wHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkgciEtJ/bZhGPNfIxkAVzYsfjRWudpc3St 7lDTwQeawN+yZDWuSBYqc3HU1ljuC6t0WeUSJOW2lAgl4VQBsvcNcToRdhjpfY3U Qw2eukxIY/S6jqxqPSdYu7S0L497lZoumYx+fygF+kwaMB+wRfeNlqOpVsubTPmo rzhKf4IEO8ce1PMlGeD1S5puEoLlqR2W6B+V0QxoUwWDRnxy0dWwDDbfq2PMTOF3 U3NU3zs07oatVOJvmqTUToSJ8BdGsepk4KG0LwOpvVvD2Gd6J4lwp+vQV3/rcXov b2YMEHWH1KpeYxQjOgSJLXMXqUTt2Qs3Z8uoF+vS+Vr30f83qVA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:02 2025 by rpki-client