This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: LOgRmsI3e13c3IpLSkrGxJIgkWItC6bg0ATWQmuYTgQ= Subject key identifier: 9F:B7:7E:0B:2E:8B:04:F3:E4:93:37:60:56:38:63:E4:7A:90:9F:E0 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 6CEC5AE620D9506AD2ADBB4D645D8E0C70118B5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 01C3 Signing time: Mon 01 Dec 2025 21:20:45 +0000 Manifest this update: Mon 01 Dec 2025 21:15:45 +0000 Manifest next update: Fri 05 Dec 2025 02:16:45 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: FvYoEoUXwukk9NubJ3bdIw3L0w5M2WDYfrL28A0BrWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ec:5a:e6:20:d9:50:6a:d2:ad:bb:4d:64:5d:8e:0c:70:11:8b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Dec 1 21:15:45 2025 GMT Not After : Dec 5 02:16:45 2025 GMT Subject: CN=9FB77E0B2E8B04F3E4933760563863E47A909FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:66:f5:13:24:af:fd:96:99:93:99:0e:62: cf:86:66:a0:a4:ad:55:10:ee:a4:51:ee:06:7d:3f: fd:c8:6b:fa:46:e6:77:9a:4c:e0:2f:4b:96:8d:ad: 17:d2:5f:56:a0:b9:b6:3e:42:c3:aa:d6:97:29:c6: f4:d1:c3:31:f1:7c:09:0e:56:ef:03:ca:13:da:23: 4a:58:d0:e9:80:3d:81:05:40:62:92:f5:0b:26:f0: 4e:7d:19:b1:a3:f3:ac:ed:6c:1b:52:30:28:11:33: 88:c4:92:e0:dc:c7:9d:65:b6:c0:60:aa:db:72:5f: a9:c0:8d:7c:9f:c9:53:49:60:3a:c2:6d:0a:2d:9c: 76:56:ee:b0:39:18:c1:32:fe:33:a8:d3:58:b0:a8: ff:a6:c7:26:25:7c:92:9e:97:a8:db:3a:a0:9b:1e: 94:61:3e:78:3d:d9:8f:1f:61:2c:57:e4:64:52:7e: 8e:50:08:ea:9b:43:a3:0b:e1:a3:eb:63:f2:87:35: c5:30:2a:f0:77:9b:00:64:f0:38:77:c7:1b:d9:e3: 6f:72:11:5e:69:a3:2c:ae:2e:0c:91:3c:46:b7:79: c0:95:e0:7c:f6:ab:c3:07:28:b4:8e:34:73:b1:4b: 69:13:4a:e2:4b:99:c0:88:03:bd:23:24:0c:a5:bc: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:7E:0B:2E:8B:04:F3:E4:93:37:60:56:38:63:E4:7A:90:9F:E0 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:f3:ea:ae:83:65:d1:f3:f4:19:df:f5:b1:31:77:f6:32: 33:0f:7a:70:42:8b:41:38:f4:c5:93:07:a6:92:82:b6:c2:8a: b6:fc:0c:5b:55:c0:87:aa:cb:8f:9a:84:d5:32:3d:8a:eb:75: 5b:fd:be:21:34:ac:48:25:1f:05:0f:d8:ac:6e:27:c3:b4:5c: 0d:87:bc:57:69:e3:c6:ed:b0:33:a6:fa:95:c5:21:ce:ed:f3: bb:40:5a:0f:61:f7:d8:70:1e:fb:81:18:7f:0e:11:a0:b7:05: 9e:e6:d8:aa:de:5d:76:82:10:39:e1:f3:15:bd:b2:f0:b1:97: 3b:49:1f:03:37:06:00:23:33:de:21:cb:25:2c:69:0d:9f:26: 35:78:64:67:51:16:18:34:9d:bf:5e:f9:d1:b7:da:e4:a0:44: 77:72:99:5f:47:1d:a4:af:db:dd:b2:9e:d7:e7:45:07:89:ae: b0:5d:2e:1d:d3:83:0c:1b:d8:6d:89:e6:d5:f1:5b:77:bd:ab: ac:5f:ed:bc:9d:e9:4d:f7:d0:d2:a6:2f:c9:d9:63:fc:80:81: 07:ef:c0:16:bf:48:0d:a7:32:65:9c:38:11:b8:44:8f:96:aa: c6:04:ed:d8:f0:fc:b1:70:d8:34:4f:7a:e1:f6:8d:c2:2e:a8: aa:88:82:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOxa5iDZUGrSrbtNZF2ODHARi10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTEyMDEyMTE1NDVaFw0yNTEyMDUwMjE2NDVaMDMxMTAvBgNV BAMTKDlGQjc3RTBCMkU4QjA0RjNFNDkzMzc2MDU2Mzg2M0U0N0E5MDlGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu12b1EySv/ZaZk5kOYs+GZqCk rVUQ7qRR7gZ9P/3Ia/pG5neaTOAvS5aNrRfSX1agubY+QsOq1pcpxvTRwzHxfAkO Vu8DyhPaI0pY0OmAPYEFQGKS9Qsm8E59GbGj86ztbBtSMCgRM4jEkuDcx51ltsBg qttyX6nAjXyfyVNJYDrCbQotnHZW7rA5GMEy/jOo01iwqP+mxyYlfJKel6jbOqCb HpRhPng92Y8fYSxX5GRSfo5QCOqbQ6ML4aPrY/KHNcUwKvB3mwBk8Dh3xxvZ429y EV5poyyuLgyRPEa3ecCV4Hz2q8MHKLSONHOxS2kTSuJLmcCIA70jJAylvCDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7d+Cy6LBPPkkzdgVjhj5HqQn+AwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQS8+qug2XR8/QZ3/WxMXf2MjMPenBCi0E4 9MWTB6aSgrbCirb8DFtVwIeqy4+ahNUyPYrrdVv9viE0rEglHwUP2KxuJ8O0XA2H vFdp48btsDOm+pXFIc7t87tAWg9h99hwHvuBGH8OEaC3BZ7m2KreXXaCEDnh8xW9 svCxlztJHwM3BgAjM94hyyUsaQ2fJjV4ZGdRFhg0nb9e+dG32uSgRHdymV9HHaSv 292yntfnRQeJrrBdLh3Tgwwb2G2J5tXxW3e9q6xf7byd6U330NKmL8nZY/yAgQfv wBa/SA2nMmWcOBG4RI+WqsYE7djw/LFw2DRPeuH2jcIuqKqIgnA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:21 2025 by rpki-client