This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: 1nWch8OA0h8EzZkH+SSqYz/9jsTgip3EhoQ1DmRyP5o= Subject key identifier: 85:D6:01:AA:CD:6F:3D:A2:1B:EB:05:C1:6B:36:20:D2:85:C5:13:0C Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 01BE38FA773812EE4A238A3A34141BD62DE81C78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 0225 Signing time: Wed 24 Dec 2025 02:02:23 +0000 Manifest this update: Wed 24 Dec 2025 01:57:23 +0000 Manifest next update: Sat 27 Dec 2025 11:28:23 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: rRGjRs6XP35XbnWZ3iPEsbmdBbUkIu6hXpTn8s7oqbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:be:38:fa:77:38:12:ee:4a:23:8a:3a:34:14:1b:d6:2d:e8:1c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Dec 24 01:57:23 2025 GMT Not After : Dec 27 11:28:23 2025 GMT Subject: CN=85D601AACD6F3DA21BEB05C16B3620D285C5130C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:dd:8f:35:1a:5c:f0:02:c4:10:7b:2d:9a:f2: 8a:57:96:42:78:0b:72:fc:dc:4e:28:b1:29:b3:c7: cd:87:6f:4a:ad:9d:04:ef:6b:a5:c4:34:63:d5:8d: e3:a0:70:33:ae:f7:57:7b:d4:cf:b9:ea:d9:76:67: d0:0c:61:db:15:84:18:fd:5b:01:64:f5:48:bb:32: f7:be:b7:fa:21:3b:0a:dd:81:2a:8e:f3:c5:dd:e4: 8b:bd:8d:73:59:40:37:6c:51:1f:22:4f:ae:32:82: 11:e7:fc:41:74:f2:c6:30:87:2c:a9:a4:6a:2a:4c: 1b:c1:54:79:05:72:77:57:a8:a9:60:32:11:10:09: 33:f3:b1:ca:45:36:c4:fd:f1:6d:d6:4d:63:aa:e7: a9:12:50:dd:15:0a:db:0f:2b:1c:63:d3:13:a0:85: 37:e7:0c:8c:c1:aa:6b:91:44:43:a4:1c:79:dc:88: ec:31:06:f3:ed:e8:a5:25:f7:b3:4b:19:40:a5:e3: e3:06:f6:bc:e4:79:b9:c7:05:c4:cc:7c:41:ad:90: c4:a0:78:0e:ac:de:2d:67:6c:43:0b:f2:67:99:25: 67:d7:68:19:20:f7:83:3b:fe:20:dc:f7:c5:13:09: dd:e0:4d:b9:9d:8a:67:e0:37:45:f7:a3:66:5d:09: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:01:AA:CD:6F:3D:A2:1B:EB:05:C1:6B:36:20:D2:85:C5:13:0C X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:14:94:fd:6e:44:bb:03:09:3f:6c:2c:2e:2d:fe:e1:44:73: 97:d2:81:f6:b8:ce:f8:39:ac:3b:b3:80:4f:7d:66:b1:b0:3b: 18:6d:78:9d:09:e7:5c:fe:20:51:60:ec:6b:b6:e1:2b:4c:b0: 3e:c5:63:99:01:94:8b:30:d0:6d:32:93:b3:ba:7a:f1:a0:0d: b6:21:ad:b5:2c:83:01:a5:c1:33:c9:f7:54:4f:fe:c9:fc:30: 96:48:e2:10:90:f1:ac:1c:52:6d:9f:70:a5:01:9b:d6:72:1b: ae:5f:a9:c7:d3:20:d4:13:5d:68:16:0d:91:3a:49:90:aa:c3: 0a:fc:41:13:dd:6f:91:80:b2:44:66:15:41:46:d8:a4:e2:7e: 63:db:dc:3a:58:29:db:bf:71:2d:03:af:f9:ec:d6:92:b0:f6: 2d:14:b2:09:6a:32:78:95:c1:38:75:15:19:4a:9c:09:cc:ca: ee:2f:55:e3:b8:4a:78:60:06:16:b3:8c:ef:6d:04:2f:26:9e: 5a:69:2d:1c:b7:6a:79:1f:68:e2:2f:f1:3f:02:e0:9e:1c:cf: 10:a5:6c:60:fd:ca:1a:f2:30:03:75:e2:70:9e:bb:cf:6f:cc: fd:eb:70:b1:9c:fc:df:35:05:5a:73:b4:fc:e4:05:77:32:ef: 0a:94:bb:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb44+nc4Eu5KI4o6NBQb1i3oHHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTEyMjQwMTU3MjNaFw0yNTEyMjcxMTI4MjNaMDMxMTAvBgNV BAMTKDg1RDYwMUFBQ0Q2RjNEQTIxQkVCMDVDMTZCMzYyMEQyODVDNTEzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD03Y81GlzwAsQQey2a8opXlkJ4 C3L83E4osSmzx82Hb0qtnQTva6XENGPVjeOgcDOu91d71M+56tl2Z9AMYdsVhBj9 WwFk9Ui7Mve+t/ohOwrdgSqO88Xd5Iu9jXNZQDdsUR8iT64yghHn/EF08sYwhyyp pGoqTBvBVHkFcndXqKlgMhEQCTPzscpFNsT98W3WTWOq56kSUN0VCtsPKxxj0xOg hTfnDIzBqmuRREOkHHnciOwxBvPt6KUl97NLGUCl4+MG9rzkebnHBcTMfEGtkMSg eA6s3i1nbEML8meZJWfXaBkg94M7/iDc98UTCd3gTbmdimfgN0X3o2ZdCWm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdYBqs1vPaIb6wXBazYg0oXFEwwwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkUlP1uRLsDCT9sLC4t/uFEc5fSgfa4zvg5 rDuzgE99ZrGwOxhteJ0J51z+IFFg7Gu24StMsD7FY5kBlIsw0G0yk7O6evGgDbYh rbUsgwGlwTPJ91RP/sn8MJZI4hCQ8awcUm2fcKUBm9ZyG65fqcfTINQTXWgWDZE6 SZCqwwr8QRPdb5GAskRmFUFG2KTifmPb3DpYKdu/cS0Dr/ns1pKw9i0UsglqMniV wTh1FRlKnAnMyu4vVeO4SnhgBhazjO9tBC8mnlppLRy3ankfaOIv8T8C4J4czxCl bGD9yhryMAN14nCeu89vzP3rcLGc/N81BVpztPzkBXcy7wqUu6c= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:20 2025 by rpki-client