This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: JN/sP4ZHJxhEz/OXQ8YHZrUPslle01rGT+0mxDhm3Hc= Subject key identifier: 5F:05:75:95:31:F0:CA:31:13:15:43:D6:3A:FC:8E:62:98:89:70:E9 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 7DD4B8D94C70F4ED9CA3C19AC31E9CC790957C29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 02A4 Signing time: Tue 02 Dec 2025 13:11:15 +0000 Manifest this update: Tue 02 Dec 2025 13:06:15 +0000 Manifest next update: Fri 05 Dec 2025 14:45:15 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: gOrQOeK2rGE/y+rZe55LwByzXGWI2zvCp+EutsrLKTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d4:b8:d9:4c:70:f4:ed:9c:a3:c1:9a:c3:1e:9c:c7:90:95:7c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Dec 2 13:06:15 2025 GMT Not After : Dec 5 14:45:15 2025 GMT Subject: CN=5F05759531F0CA31131543D63AFC8E62988970E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:11:dd:8e:7d:4d:fc:21:0a:a0:f1:08:3d: a4:16:a6:ca:1b:4a:a1:f5:6f:9a:17:f1:6e:74:f0: 3b:75:64:d1:80:fc:cc:74:28:c6:ca:c0:fb:c9:72: e8:87:c6:b3:20:80:f9:20:8e:a0:54:d8:4c:68:cc: 16:0a:64:12:4b:8e:35:4e:a1:1b:95:c7:7c:c8:b6: d6:d8:82:7e:bb:45:00:51:49:e4:1a:b1:6b:33:95: 87:25:fe:f1:9d:d5:32:cf:d1:28:fe:56:59:30:7a: d2:3b:47:6f:75:15:1c:f9:f3:1c:57:00:5c:4f:c8: 30:be:cb:76:ff:18:19:eb:97:c0:97:96:53:c9:5d: 11:70:ae:68:32:0a:fb:30:70:67:ad:be:dd:d5:5d: 6b:32:25:61:89:10:6a:c3:3e:cd:72:39:c6:a0:5e: fe:52:16:59:64:b3:82:79:5c:5a:2b:21:28:30:94: f2:d6:0a:81:2e:3f:c6:07:60:92:c7:c2:7e:9c:ba: 7f:61:70:2a:55:61:ed:61:dd:5b:3f:d7:13:2c:f7: 83:b4:27:dc:f5:48:68:c7:8c:b2:df:b2:96:21:54: ef:a9:3e:66:63:0f:6d:37:5c:25:c8:07:69:fb:9d: b6:82:6d:8d:0c:68:46:f0:0a:d9:5a:bd:08:2f:15: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:75:95:31:F0:CA:31:13:15:43:D6:3A:FC:8E:62:98:89:70:E9 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d0:31:c1:32:66:4c:78:97:9b:b8:0a:94:c8:cf:37:ec:cb: 98:91:ee:b3:ec:d9:57:2e:5d:07:bb:bc:69:2e:59:51:f7:ac: 94:e9:3d:eb:4f:e6:80:32:44:c2:a4:ef:23:68:f1:38:fd:a6: b7:e4:10:cf:8e:ee:7a:0f:8b:47:bc:7f:19:51:94:f7:9a:87: 1a:dd:ab:28:a6:d2:79:89:49:81:64:5a:32:b0:46:a9:09:7c: 72:36:c8:e5:21:5d:15:43:72:29:46:1d:12:08:d1:73:ae:a2: 2e:b3:8c:a4:4c:fb:81:1a:30:5c:8e:66:52:69:5b:e8:71:79: 02:5f:20:e6:bf:0c:13:9c:cc:27:9c:fa:b3:74:4c:91:e0:f7: de:50:0d:10:c4:1f:39:4c:78:ab:f0:6f:12:a1:6c:f9:9c:f8: 43:6f:85:b6:ba:ae:82:eb:94:35:89:9d:ae:89:43:42:b8:4a: c8:bd:52:90:06:07:71:56:2a:a3:e6:ca:dd:b7:01:88:3f:cd: c4:57:f1:ff:df:98:85:c4:63:ad:c4:bd:f5:3d:d6:14:d2:4b: e2:8e:89:db:b7:b5:a6:27:49:f1:0d:cd:82:4d:ef:24:77:2f: e5:de:35:38:67:ee:9d:43:85:2f:3d:09:7c:a4:b7:7f:9c:09: fd:1d:a1:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdS42Uxw9O2co8Gawx6cx5CVfCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTEyMDIxMzA2MTVaFw0yNTEyMDUxNDQ1MTVaMDMxMTAvBgNV BAMTKDVGMDU3NTk1MzFGMENBMzExMzE1NDNENjNBRkM4RTYyOTg4OTcwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0xHdjn1N/CEKoPEIPaQWpsob SqH1b5oX8W508Dt1ZNGA/Mx0KMbKwPvJcuiHxrMggPkgjqBU2ExozBYKZBJLjjVO oRuVx3zIttbYgn67RQBRSeQasWszlYcl/vGd1TLP0Sj+VlkwetI7R291FRz58xxX AFxPyDC+y3b/GBnrl8CXllPJXRFwrmgyCvswcGetvt3VXWsyJWGJEGrDPs1yOcag Xv5SFllks4J5XForISgwlPLWCoEuP8YHYJLHwn6cun9hcCpVYe1h3Vs/1xMs94O0 J9z1SGjHjLLfspYhVO+pPmZjD203XCXIB2n7nbaCbY0MaEbwCtlavQgvFa2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwV1lTHwyjETFUPWOvyOYpiJcOkwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7QMcEyZkx4l5u4CpTIzzfsy5iR7rPs2Vcu XQe7vGkuWVH3rJTpPetP5oAyRMKk7yNo8Tj9prfkEM+O7noPi0e8fxlRlPeahxrd qyim0nmJSYFkWjKwRqkJfHI2yOUhXRVDcilGHRII0XOuoi6zjKRM+4EaMFyOZlJp W+hxeQJfIOa/DBOczCec+rN0TJHg995QDRDEHzlMeKvwbxKhbPmc+ENvhba6roLr lDWJna6JQ0K4Ssi9UpAGB3FWKqPmyt23AYg/zcRX8f/fmIXEY63EvfU91hTSS+KO idu3taYnSfENzYJN7yR3L+XeNThn7p1DhS89CXykt3+cCf0doVg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:27 2025 by rpki-client