This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: BV+fePo2xxvPLhT5MDsalrgzyBSo1q8M3vWDy7STwWY= Subject key identifier: 2C:60:62:80:9C:85:40:A0:13:FE:F1:3D:E3:36:07:3B:48:A2:75:80 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 0ED0A4DFC88665DA9F6938A991DD693D2E109C8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 01D5 Signing time: Mon 22 Dec 2025 23:41:56 +0000 Manifest this update: Mon 22 Dec 2025 23:36:56 +0000 Manifest next update: Fri 26 Dec 2025 03:47:56 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: Qrnls0WINb2ZweQo7LkMa5VgqFkh1/cNS6bIRPWzk0Q=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d0:a4:df:c8:86:65:da:9f:69:38:a9:91:dd:69:3d:2e:10:9c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Dec 22 23:36:56 2025 GMT Not After : Dec 26 03:47:56 2025 GMT Subject: CN=2C6062809C8540A013FEF13DE336073B48A27580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:85:87:e5:de:d7:33:37:db:41:47:dc:3b: 20:df:a3:da:71:fd:12:58:b2:24:a4:33:84:16:72: e6:eb:09:8c:99:b4:29:2a:64:fa:37:13:49:d4:05: 1a:ae:0e:22:2c:b8:6d:b6:90:65:e5:6e:02:cf:37: 70:92:62:da:26:d0:79:39:dd:0e:fa:74:43:73:11: ca:ba:ba:22:6b:9a:8b:81:37:e3:7b:68:f6:32:4c: 57:89:79:46:7b:1f:dd:48:05:f4:78:50:6e:23:40: 64:d1:16:cc:fa:74:dd:f1:94:99:cd:2d:9c:89:ec: 43:ff:de:06:c2:a7:84:2e:39:91:a6:33:7e:eb:5b: 5d:6d:05:f2:39:57:9c:31:a4:c7:0f:74:97:74:3e: a1:1a:dc:74:02:b9:28:91:a3:ad:c8:cf:75:a1:c1: 78:37:f6:3a:c3:21:5f:fb:c4:7f:51:7f:44:c9:f7: 7c:22:ee:9a:38:2d:17:fe:09:3d:20:84:31:66:8e: b2:bb:58:53:c3:8d:e3:c5:57:a2:1d:16:7c:00:80: 06:84:99:64:a2:3b:b7:d1:54:6e:c7:42:45:0f:3f: 62:6e:de:48:da:10:86:91:b9:70:14:98:e5:ce:99: 33:de:23:7f:41:aa:b0:02:f1:16:86:08:0d:1d:c2: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:60:62:80:9C:85:40:A0:13:FE:F1:3D:E3:36:07:3B:48:A2:75:80 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4b:da:41:6c:cc:ce:80:2c:88:41:45:1e:86:c1:a9:db:11: e5:08:0e:59:12:00:ce:0b:d3:18:0a:49:37:f9:42:72:1c:b6: 47:fd:33:ef:93:d2:e9:2b:ae:6d:36:2e:61:f7:c8:d4:a2:48: 75:38:97:f5:f1:17:0a:93:c0:6e:60:0e:03:fd:79:4b:25:4f: 75:77:45:65:5f:18:c8:5d:7b:d2:5f:88:81:89:8f:fb:82:98: 03:90:62:b5:58:ab:e0:26:fc:78:e7:44:88:f7:7b:b6:cf:83: 12:64:13:be:99:92:3d:0c:d1:80:a0:0c:15:16:c9:4d:08:8b: 2f:fb:1d:08:e3:73:7a:6d:09:b9:2c:41:a7:fd:5e:3f:51:f5: d1:29:8f:47:3b:e9:18:68:bb:a2:73:86:68:ca:52:b6:66:e7: 8a:15:59:ef:fd:fa:29:36:43:be:62:79:be:2a:b6:52:14:50: ae:5c:80:e1:da:80:bf:93:61:35:63:fe:8e:b3:2c:c6:76:8a: 7b:fe:1c:13:4f:b9:e9:0f:70:b3:13:6d:4f:35:57:67:3b:1a: 7d:01:e2:91:c7:f6:16:c4:e2:9b:89:3e:c9:da:8c:c4:f1:c8: 4f:f9:1f:07:0b:55:a1:d1:b7:96:84:81:e9:ac:11:ab:f8:21: 00:2c:cf:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtCk38iGZdqfaTipkd1pPS4QnI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTEyMjIyMzM2NTZaFw0yNTEyMjYwMzQ3NTZaMDMxMTAvBgNV BAMTKDJDNjA2MjgwOUM4NTQwQTAxM0ZFRjEzREUzMzYwNzNCNDhBMjc1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHoWH5d7XMzfbQUfcOyDfo9px /RJYsiSkM4QWcubrCYyZtCkqZPo3E0nUBRquDiIsuG22kGXlbgLPN3CSYtom0Hk5 3Q76dENzEcq6uiJrmouBN+N7aPYyTFeJeUZ7H91IBfR4UG4jQGTRFsz6dN3xlJnN LZyJ7EP/3gbCp4QuOZGmM37rW11tBfI5V5wxpMcPdJd0PqEa3HQCuSiRo63Iz3Wh wXg39jrDIV/7xH9Rf0TJ93wi7po4LRf+CT0ghDFmjrK7WFPDjePFV6IdFnwAgAaE mWSiO7fRVG7HQkUPP2Ju3kjaEIaRuXAUmOXOmTPeI39BqrAC8RaGCA0dwlzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGBigJyFQKAT/vE94zYHO0iidYAwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdL2kFszM6ALIhBRR6GwanbEeUIDlkSAM4L 0xgKSTf5QnIctkf9M++T0ukrrm02LmH3yNSiSHU4l/XxFwqTwG5gDgP9eUslT3V3 RWVfGMhde9JfiIGJj/uCmAOQYrVYq+Am/HjnRIj3e7bPgxJkE76Zkj0M0YCgDBUW yU0Iiy/7HQjjc3ptCbksQaf9Xj9R9dEpj0c76Rhou6JzhmjKUrZm54oVWe/9+ik2 Q75ieb4qtlIUUK5cgOHagL+TYTVj/o6zLMZ2inv+HBNPuekPcLMTbU81V2c7Gn0B 4pHH9hbE4puJPsnajMTxyE/5HwcLVaHRt5aEgemsEav4IQAsz3Q= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:16 2025 by rpki-client