This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: nwnc4OXbYYx9/h0Pi/CSvmdPurljG+IfNsoRBvo9dZc= Subject key identifier: FF:0C:30:7D:C2:85:2D:AE:8D:3D:75:BD:BF:9A:FC:B8:91:93:38:01 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 7A9D4E9768FD85D55048E8B44714387355726A75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03EF Signing time: Tue 23 Dec 2025 03:31:28 +0000 Manifest this update: Tue 23 Dec 2025 03:26:28 +0000 Manifest next update: Fri 26 Dec 2025 05:56:28 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: qFVh4vteLSxxK2mGZYG3NgtjYXkfb6djcCZvwmFdGPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9d:4e:97:68:fd:85:d5:50:48:e8:b4:47:14:38:73:55:72:6a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Dec 23 03:26:28 2025 GMT Not After : Dec 26 05:56:28 2025 GMT Subject: CN=FF0C307DC2852DAE8D3D75BDBF9AFCB891933801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:f0:0f:86:03:f4:bf:f7:fc:be:cf:9e:18: 8e:fb:77:95:4e:0a:83:e7:3f:1a:76:4c:42:28:be: f2:ef:0f:9d:56:15:38:0b:1d:8d:8f:d8:0c:0f:36: 66:1a:b2:90:2f:b6:14:35:74:03:1e:0f:68:9d:45: 40:58:99:c1:08:94:16:1d:b6:8f:1d:5d:b5:4a:d0: fd:9c:a4:f2:06:17:32:39:c6:5f:e1:77:f7:63:12: 04:7b:50:13:b8:e6:fb:d3:e2:29:14:5b:7f:14:ca: 00:0b:17:0b:8a:6b:ae:22:7d:9a:67:b1:81:ad:0f: 58:41:b8:0a:53:27:11:b6:83:e2:59:05:68:46:c4: e5:3e:34:27:ed:3a:c1:69:50:c9:c6:c1:d7:c7:40: 24:ef:20:95:49:ae:04:9a:79:b1:b8:0c:0a:3b:88: 2b:32:10:f1:97:e9:42:66:d6:9a:47:ef:c1:74:89: 4f:ff:41:7e:cc:18:1c:3f:45:24:79:ea:9f:8f:4d: 17:28:62:57:15:73:27:5c:cd:98:16:e8:46:bc:11: cc:f3:dd:f3:8e:85:e5:c9:5f:37:5b:26:da:d6:4f: 76:49:c5:68:cb:f1:f5:35:e5:51:9d:d5:ca:3d:ed: 79:50:d2:0c:90:10:59:f9:74:5d:e3:79:7b:b0:95: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0C:30:7D:C2:85:2D:AE:8D:3D:75:BD:BF:9A:FC:B8:91:93:38:01 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:37:57:10:47:6c:ac:b9:7e:8a:74:e4:6b:40:cb:8b:90:b1: 1c:07:c2:d7:cf:94:8d:ab:5b:fd:57:2e:2b:cb:e2:3c:c0:52: 23:b6:0d:e3:cb:5f:d1:2c:4a:0b:b8:bf:ae:53:90:d9:35:81: b1:c2:78:d2:ec:1c:60:55:dd:ef:da:1b:90:f9:e9:51:8b:f4: d8:47:4f:ae:68:8b:23:b0:c2:5b:ae:21:5a:4b:1e:b4:11:7c: ba:c4:4d:c9:16:7f:4a:9b:a9:bc:f3:23:2f:b8:27:5a:2e:33: 2d:3e:0c:46:24:56:1c:f8:0d:3d:8b:dc:a0:ce:89:2d:08:5f: 6a:e0:f4:3e:5b:a6:fc:63:27:ae:aa:12:bd:e7:b7:d7:61:c4: af:89:32:a9:a6:3c:f9:7b:5b:e1:f2:47:96:35:4a:36:6c:30: 57:d3:3a:07:cf:d7:e0:ac:51:00:a8:6f:36:c9:97:95:55:8c: c4:62:4f:3f:7c:01:4e:e9:24:94:5f:61:b9:89:7a:ff:5f:06: 27:dc:57:a8:e8:44:f8:18:44:bf:d8:9d:8a:b2:da:fe:c9:3c: c9:f3:17:89:99:b1:03:be:f7:85:1c:ff:21:c4:47:02:fb:ac: fe:4f:3d:05:86:66:9e:f4:dd:c8:40:36:a4:75:fc:de:ab:b7: 82:44:d8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUep1Ol2j9hdVQSOi0RxQ4c1VyanUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTEyMjMwMzI2MjhaFw0yNTEyMjYwNTU2MjhaMDMxMTAvBgNV BAMTKEZGMEMzMDdEQzI4NTJEQUU4RDNENzVCREJGOUFGQ0I4OTE5MzM4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYn/APhgP0v/f8vs+eGI77d5VO CoPnPxp2TEIovvLvD51WFTgLHY2P2AwPNmYaspAvthQ1dAMeD2idRUBYmcEIlBYd to8dXbVK0P2cpPIGFzI5xl/hd/djEgR7UBO45vvT4ikUW38UygALFwuKa64ifZpn sYGtD1hBuApTJxG2g+JZBWhGxOU+NCftOsFpUMnGwdfHQCTvIJVJrgSaebG4DAo7 iCsyEPGX6UJm1ppH78F0iU//QX7MGBw/RSR56p+PTRcoYlcVcydczZgW6Ea8Eczz 3fOOheXJXzdbJtrWT3ZJxWjL8fU15VGd1co97XlQ0gyQEFn5dF3jeXuwldDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wwwfcKFLa6NPXW9v5r8uJGTOAEwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA3VxBHbKy5fop05GtAy4uQsRwHwtfPlI2r W/1XLivL4jzAUiO2DePLX9EsSgu4v65TkNk1gbHCeNLsHGBV3e/aG5D56VGL9NhH T65oiyOwwluuIVpLHrQRfLrETckWf0qbqbzzIy+4J1ouMy0+DEYkVhz4DT2L3KDO iS0IX2rg9D5bpvxjJ66qEr3nt9dhxK+JMqmmPPl7W+HyR5Y1SjZsMFfTOgfP1+Cs UQCobzbJl5VVjMRiTz98AU7pJJRfYbmJev9fBifcV6joRPgYRL/YnYqy2v7JPMnz F4mZsQO+94Uc/yHERwL7rP5PPQWGZp703chANqR1/N6rt4JE2Bo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:12 2025 by rpki-client