This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: eBxYi3VuNz88PlYSHAdwE5R1mNoa4SKjnzwJf/TcKTY= Subject key identifier: A9:04:D8:E6:0F:8F:C6:3B:EA:B2:0F:72:0E:FA:50:5C:61:5C:1E:4C Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 65567916831FF9055A6F06A25B0F8421ACD51950 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: BB Signing time: Fri 19 Dec 2025 16:41:12 +0000 Manifest this update: Fri 19 Dec 2025 16:36:12 +0000 Manifest next update: Mon 22 Dec 2025 23:19:12 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: 2PbYhRAoqA6IydyiOxDOaSrkj1hn/NZxR95gaf0tNvc=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:56:79:16:83:1f:f9:05:5a:6f:06:a2:5b:0f:84:21:ac:d5:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Dec 19 16:36:12 2025 GMT Not After : Dec 22 23:19:12 2025 GMT Subject: CN=A904D8E60F8FC63BEAB20F720EFA505C615C1E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:3d:e0:b0:d8:ca:41:f9:39:6a:0b:2e:02: dc:76:ec:c6:39:31:a5:dd:59:bd:0c:07:6c:00:5c: f2:47:73:d4:d9:67:a7:47:ce:4c:19:58:9e:6d:a0: 55:3e:64:65:4f:bd:02:96:b4:c0:b3:6d:7a:2c:b7: ea:d9:73:f4:64:71:ee:91:17:78:d5:a8:b7:71:e5: f4:5b:23:8e:58:e3:93:bc:f3:3e:74:df:db:f4:c2: cf:09:d0:f0:f8:76:1c:c7:dd:ef:d4:27:25:49:21: ba:aa:32:5f:e5:ae:ea:35:c0:8d:8b:c4:ac:7a:a1: d2:4c:6a:ff:09:84:eb:4e:72:49:ae:fe:cc:d3:9a: 3c:ab:85:98:97:e4:39:ec:5a:75:7c:29:ea:db:15: a8:12:76:c6:a8:ee:02:f9:ba:1e:0d:e0:ea:d2:6e: 61:2c:0e:8b:b8:cd:89:33:e6:51:ad:95:c9:c9:f6: 3d:4d:d3:1f:ec:fa:77:9f:11:50:4f:55:e0:5f:93: 14:c6:ef:a7:6d:e9:5d:1d:dd:34:8b:68:f7:6f:c8: a9:2e:96:b7:4f:8f:b0:9e:a3:5d:4f:92:ba:04:ef: 74:ff:f0:aa:f7:0c:a4:af:00:c7:1b:cc:f7:32:7a: 84:32:5c:41:2c:1b:c7:bd:9b:31:5d:dc:8f:6c:ed: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:04:D8:E6:0F:8F:C6:3B:EA:B2:0F:72:0E:FA:50:5C:61:5C:1E:4C X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:22:4b:47:5d:4b:f5:5c:78:53:79:b9:7f:ea:66:ce:2d:c3: 1d:5d:8b:d2:f5:94:ed:92:37:3d:83:90:ce:1d:81:30:53:0a: d9:b3:87:8b:05:31:bc:1b:e5:d3:21:90:28:c4:e4:b7:68:d5: 58:28:7e:f6:df:cc:f9:55:f4:c3:ff:62:a0:d3:13:f1:1b:32: 94:22:8e:d9:f1:29:9a:c0:30:12:1b:86:83:21:a0:42:c0:3d: 24:d2:31:4d:44:7a:b8:d8:69:cd:57:48:52:4e:4c:34:00:87: 6d:d1:07:4e:43:1b:03:2a:cf:53:0c:e7:19:15:7a:04:97:fa: 89:07:40:73:6c:b8:49:36:37:28:b1:91:a1:94:ed:bf:c2:a5: 13:25:dd:2f:dc:a2:52:2f:cd:7f:6e:db:0d:d3:2e:93:e6:f4: 6e:85:51:29:7e:e7:dd:87:56:da:2c:5a:a5:57:4b:18:dd:9f: 8c:ac:6e:60:cc:4a:19:a2:11:1f:c5:ce:0b:c1:0b:dc:71:bd: 50:5c:b9:03:3f:b0:49:fa:d0:0e:2e:f4:63:94:e7:e2:f6:36: f7:a4:ae:fd:5d:69:1a:5d:60:6c:18:90:2d:df:7e:f1:b2:da: 1f:b4:59:43:59:3c:23:39:65:58:b9:cc:0f:39:55:eb:94:b4: 3e:8f:da:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVZ5FoMf+QVabwaiWw+EIazVGVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTEyMTkxNjM2MTJaFw0yNTEyMjIyMzE5MTJaMDMxMTAvBgNV BAMTKEE5MDREOEU2MEY4RkM2M0JFQUIyMEY3MjBFRkE1MDVDNjE1QzFFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxCj3gsNjKQfk5agsuAtx27MY5 MaXdWb0MB2wAXPJHc9TZZ6dHzkwZWJ5toFU+ZGVPvQKWtMCzbXost+rZc/Rkce6R F3jVqLdx5fRbI45Y45O88z5039v0ws8J0PD4dhzH3e/UJyVJIbqqMl/lruo1wI2L xKx6odJMav8JhOtOckmu/szTmjyrhZiX5DnsWnV8KerbFagSdsao7gL5uh4N4OrS bmEsDou4zYkz5lGtlcnJ9j1N0x/s+nefEVBPVeBfkxTG76dt6V0d3TSLaPdvyKku lrdPj7Ceo11PkroE73T/8Kr3DKSvAMcbzPcyeoQyXEEsG8e9mzFd3I9s7VJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQTY5g+Pxjvqsg9yDvpQXGFcHkwwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4iS0ddS/VceFN5uX/qZs4twx1di9L1lO2S Nz2DkM4dgTBTCtmzh4sFMbwb5dMhkCjE5Ldo1VgofvbfzPlV9MP/YqDTE/EbMpQi jtnxKZrAMBIbhoMhoELAPSTSMU1EerjYac1XSFJOTDQAh23RB05DGwMqz1MM5xkV egSX+okHQHNsuEk2NyixkaGU7b/CpRMl3S/colIvzX9u2w3TLpPm9G6FUSl+592H VtosWqVXSxjdn4ysbmDMShmiER/FzgvBC9xxvVBcuQM/sEn60A4u9GOU5+L2Nvek rv1daRpdYGwYkC3ffvGy2h+0WUNZPCM5ZVi5zA85VeuUtD6P2v0= -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:56 2025 by rpki-client