This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: xMEs/9w2bVrshTDBYASddjCjVea+X3SuMBlpyrmx1YE= Subject key identifier: 9F:9E:1F:8F:E1:71:AA:EE:60:AF:6E:44:E0:CB:EB:85:5E:8F:99:96 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 2D9143C278580E1A4C9084304E7DB981CAA3081A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 02B0 Signing time: Tue 02 Dec 2025 17:21:46 +0000 Manifest this update: Tue 02 Dec 2025 17:16:46 +0000 Manifest next update: Fri 05 Dec 2025 18:36:46 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: 0QQpcsHjxaBIpBuW+u4qd9JrB0QJSqnuk7dHv8d/Tbc=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:91:43:c2:78:58:0e:1a:4c:90:84:30:4e:7d:b9:81:ca:a3:08:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Dec 2 17:16:46 2025 GMT Not After : Dec 5 18:36:46 2025 GMT Subject: CN=9F9E1F8FE171AAEE60AF6E44E0CBEB855E8F9996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:47:e7:26:58:84:61:6f:c4:52:df:4f:6e:57: c0:f0:ef:75:61:a7:06:ff:9d:68:4f:fa:02:63:6f: 86:58:d6:52:be:fa:a4:79:ec:b9:51:af:ec:41:dd: a5:e2:2a:54:f6:60:22:6a:47:de:96:8a:7c:56:92: 5f:d6:a1:5e:fa:e8:60:2d:d5:7f:64:10:6c:f4:0b: dd:e4:5c:fe:7d:09:a5:58:20:09:c6:7f:ab:df:b2: 1f:7d:07:80:28:4d:3f:b6:2c:d6:ec:f2:84:36:ac: 44:aa:59:29:4c:0b:bb:77:0f:9d:4f:df:c7:36:8f: 65:47:68:f0:5a:a2:54:14:3e:1a:ae:73:30:0a:e7: 4b:cc:bd:9b:ca:dd:c9:4b:38:87:2f:5c:7e:ec:47: 6a:20:63:98:3c:23:9e:49:83:0e:58:93:85:15:fa: 28:98:1b:a8:0d:f4:8e:df:3e:03:78:84:89:42:80: a7:a2:3a:2a:ba:cd:f6:4e:55:0f:07:ba:4f:27:2d: 13:2b:d7:2d:d3:79:0f:1f:c8:cc:eb:ad:ba:0c:b8: bc:05:48:3a:c9:df:b2:5c:12:1a:fe:4c:d9:b4:70: 03:5d:3d:d8:d8:64:39:3a:71:84:af:28:88:f6:d3: 68:ee:66:ea:0a:4c:00:7d:c6:40:a9:fb:09:ae:1f: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:1F:8F:E1:71:AA:EE:60:AF:6E:44:E0:CB:EB:85:5E:8F:99:96 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c1:09:98:b1:4a:f2:16:be:c9:f1:fb:8e:0b:53:65:d2:b2: a1:36:e2:56:d4:49:de:10:4d:6e:d3:57:6d:82:28:ad:8d:6f: 39:fc:07:b7:12:3d:15:6a:27:4c:8b:f7:25:a5:65:5e:71:9c: 31:32:55:6e:1b:fb:a6:ca:e5:4d:ba:ef:62:9d:b5:c0:52:13: 7e:bf:83:92:3c:a2:ae:97:cd:29:32:38:2c:71:aa:9c:81:4c: 1f:d6:b1:bf:23:41:8c:8f:6d:26:b4:7b:5b:6b:b2:2d:1c:e4: a4:40:5a:2a:83:3b:ac:8a:18:72:36:ce:a9:4b:27:0e:73:0c: 05:fe:73:78:85:49:4c:56:39:f2:91:23:d8:57:be:e6:37:3b: 93:40:1f:39:4a:22:63:b5:b1:dd:4d:af:9c:85:33:a1:b1:33: b6:ff:5a:61:de:62:65:7d:28:9f:61:33:33:41:5b:0d:f5:85: 8e:4a:9d:73:f0:ed:7e:94:61:a1:e5:8a:e8:96:6a:a1:09:3d: 9d:98:4a:ee:ac:8d:49:61:03:5f:ed:25:b0:8b:44:f7:8e:2b: e6:cb:ce:7b:fc:6c:fc:1b:85:2b:79:3e:63:bd:c1:ec:a5:cd: 5f:20:03:99:a2:f8:1b:60:c7:ee:fd:84:bf:1a:51:08:50:0b: 97:4c:d1:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZFDwnhYDhpMkIQwTn25gcqjCBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNTEyMDIxNzE2NDZaFw0yNTEyMDUxODM2NDZaMDMxMTAvBgNV BAMTKDlGOUUxRjhGRTE3MUFBRUU2MEFGNkU0NEUwQ0JFQjg1NUU4Rjk5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcR+cmWIRhb8RS309uV8Dw73Vh pwb/nWhP+gJjb4ZY1lK++qR57LlRr+xB3aXiKlT2YCJqR96WinxWkl/WoV766GAt 1X9kEGz0C93kXP59CaVYIAnGf6vfsh99B4AoTT+2LNbs8oQ2rESqWSlMC7t3D51P 38c2j2VHaPBaolQUPhquczAK50vMvZvK3clLOIcvXH7sR2ogY5g8I55Jgw5Yk4UV +iiYG6gN9I7fPgN4hIlCgKeiOiq6zfZOVQ8Huk8nLRMr1y3TeQ8fyMzrrboMuLwF SDrJ37JcEhr+TNm0cANdPdjYZDk6cYSvKIj202juZuoKTAB9xkCp+wmuH3tHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn54fj+Fxqu5gr25E4MvrhV6PmZYwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrBCZixSvIWvsnx+44LU2XSsqE24lbUSd4Q TW7TV22CKK2Nbzn8B7cSPRVqJ0yL9yWlZV5xnDEyVW4b+6bK5U2672KdtcBSE36/ g5I8oq6XzSkyOCxxqpyBTB/Wsb8jQYyPbSa0e1trsi0c5KRAWiqDO6yKGHI2zqlL Jw5zDAX+c3iFSUxWOfKRI9hXvuY3O5NAHzlKImO1sd1Nr5yFM6GxM7b/WmHeYmV9 KJ9hMzNBWw31hY5KnXPw7X6UYaHliuiWaqEJPZ2YSu6sjUlhA1/tJbCLRPeOK+bL znv8bPwbhSt5PmO9weylzV8gA5mi+Btgx+79hL8aUQhQC5dM0Rs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:29 2025 by rpki-client