This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: eWNbWdWwUjPuaUAaBHhN1w+RNlZGw0KxHobDldaxxC4= Subject key identifier: 93:12:0F:CB:C3:53:79:CC:77:E0:9A:A5:34:1D:A6:C9:F6:6A:E2:F6 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 692346B7BA8424E1C64D66234042506E3C7D5F5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 0533 Signing time: Wed 24 Dec 2025 03:31:43 +0000 Manifest this update: Wed 24 Dec 2025 03:26:43 +0000 Manifest next update: Sat 27 Dec 2025 09:20:43 +0000 Files and hashes: 1: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: XRF/AAx509ZIjlBuhoXV9/WFUKmkJcIteJaTOBwA3ZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:23:46:b7:ba:84:24:e1:c6:4d:66:23:40:42:50:6e:3c:7d:5f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Dec 24 03:26:43 2025 GMT Not After : Dec 27 09:20:43 2025 GMT Subject: CN=93120FCBC35379CC77E09AA5341DA6C9F66AE2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:6e:26:1b:56:26:52:ec:4b:62:a9:bf:25: 35:82:a7:be:41:39:7b:31:63:ef:51:8e:f0:45:fb: b4:b0:28:8c:b5:38:3a:84:88:14:2c:43:4b:da:12: fd:97:b4:1e:55:69:d6:a7:d2:4f:51:97:32:e9:70: 1b:77:13:60:70:d7:0d:62:20:5d:92:5c:38:c0:b2: 4c:99:f1:40:79:39:e8:10:fa:ba:bc:a0:50:fc:21: ea:03:6e:6e:27:fc:e1:54:3a:83:55:a0:9c:c1:41: 06:5e:a1:31:41:07:8b:50:55:1e:2d:69:3f:4a:97: 02:44:82:16:80:86:e0:17:07:87:6e:77:cc:2a:cf: 90:dd:cd:a2:44:a0:cd:37:c1:56:38:9d:77:cb:42: 8d:70:a7:66:4a:9a:cf:48:01:7c:d8:5e:e8:7c:49: 47:a9:7a:57:ff:b7:a8:4f:0c:4a:77:cf:ab:2b:70: 8e:f3:41:59:c5:e4:b8:2c:e0:a4:e3:82:2f:1b:e6: 1a:5c:5f:5f:1a:cb:1f:21:a1:f5:0b:07:29:f4:88: 7f:8c:da:d2:f8:92:35:7c:c2:2c:ab:37:f0:a2:e8: bb:7d:bb:d1:91:15:bc:8a:d6:d4:99:26:fb:81:46: b6:b2:8c:b5:f3:cf:ea:2e:c2:a6:62:5e:4e:98:69: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:12:0F:CB:C3:53:79:CC:77:E0:9A:A5:34:1D:A6:C9:F6:6A:E2:F6 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:53:44:40:03:02:bc:96:79:5f:41:2e:fb:8e:c7:a0:fb:5e: b1:5d:4c:fe:5f:dd:1b:35:92:6e:69:8d:d4:55:45:3a:22:58: 9f:46:f3:56:1b:34:2f:41:8f:4c:26:2b:5a:4f:5e:02:68:12: 17:ce:0e:8e:b4:bf:1e:ee:2b:5f:2e:2a:3c:ac:08:84:72:5a: 90:9d:0c:2a:0e:b9:d0:2f:5f:b9:d7:2a:e4:2b:8e:07:b5:b0: 16:0b:e1:8e:c3:b3:e0:2c:17:86:37:c5:af:a6:e6:fb:9b:05: 46:e3:54:4e:04:b3:86:87:66:94:a6:69:db:0e:7c:01:9f:9d: 85:a5:dc:ee:de:7a:34:fe:dc:73:0e:49:5f:e1:87:e8:45:b9: 82:77:69:0b:7e:0f:b3:c2:48:1b:ac:ab:1c:89:fe:7d:63:65: 14:21:c6:27:bd:8b:0a:c8:3b:fb:b8:5b:01:6d:d5:19:79:26: 1d:dd:9e:4e:be:35:17:84:40:94:d6:f5:01:a6:7d:aa:53:03: dd:7c:07:37:00:5c:13:0b:08:e5:a1:74:8a:95:8d:d1:2a:4c: 47:84:c8:53:95:ea:c7:68:e7:6e:8b:94:14:d5:6d:66:7d:e8: 2d:7f:0b:3c:d5:36:4f:92:30:cd:53:85:44:75:10:49:78:c0: 27:44:f7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSNGt7qEJOHGTWYjQEJQbjx9X1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTEyMjQwMzI2NDNaFw0yNTEyMjcwOTIwNDNaMDMxMTAvBgNV BAMTKDkzMTIwRkNCQzM1Mzc5Q0M3N0UwOUFBNTM0MURBNkM5RjY2QUUyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8G4mG1YmUuxLYqm/JTWCp75B OXsxY+9RjvBF+7SwKIy1ODqEiBQsQ0vaEv2XtB5Vadan0k9RlzLpcBt3E2Bw1w1i IF2SXDjAskyZ8UB5OegQ+rq8oFD8IeoDbm4n/OFUOoNVoJzBQQZeoTFBB4tQVR4t aT9KlwJEghaAhuAXB4dud8wqz5DdzaJEoM03wVY4nXfLQo1wp2ZKms9IAXzYXuh8 SUepelf/t6hPDEp3z6srcI7zQVnF5Lgs4KTjgi8b5hpcX18ayx8hofULByn0iH+M 2tL4kjV8wiyrN/Ci6Lt9u9GRFbyK1tSZJvuBRrayjLXzz+ouwqZiXk6YaehHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxIPy8NTecx34JqlNB2myfZq4vYwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhTREADAryWeV9BLvuOx6D7XrFdTP5f3Rs1 km5pjdRVRToiWJ9G81YbNC9Bj0wmK1pPXgJoEhfODo60vx7uK18uKjysCIRyWpCd DCoOudAvX7nXKuQrjge1sBYL4Y7Ds+AsF4Y3xa+m5vubBUbjVE4Es4aHZpSmadsO fAGfnYWl3O7eejT+3HMOSV/hh+hFuYJ3aQt+D7PCSBusqxyJ/n1jZRQhxie9iwrI O/u4WwFt1Rl5Jh3dnk6+NReEQJTW9QGmfapTA918BzcAXBMLCOWhdIqVjdEqTEeE yFOV6sdo526LlBTVbWZ96C1/CzzVNk+SMM1ThUR1EEl4wCdE92c= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:20 2025 by rpki-client