This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: FX5GHGMv5ztive7EYJ8tRhsI4FV1bgCQxhrE7UdyrO8= Subject key identifier: F1:EE:FE:4E:FF:43:AF:44:47:92:18:32:E7:9B:15:BC:EF:88:F1:5F Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 70AC141751C9FB398109D6F17F29336DBEF21A9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04F9 Signing time: Wed 17 Dec 2025 06:40:04 +0000 Manifest this update: Wed 17 Dec 2025 06:35:04 +0000 Manifest next update: Sat 20 Dec 2025 14:34:04 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=) 2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: b59JujTHvI1OeQWVVmV9ZklB3b5yLxMyC/NQCcZaBRQ=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:14:17:51:c9:fb:39:81:09:d6:f1:7f:29:33:6d:be:f2:1a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Dec 17 06:35:04 2025 GMT Not After : Dec 20 14:34:04 2025 GMT Subject: CN=F1EEFE4EFF43AF4447921832E79B15BCEF88F15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:20:f9:f6:32:67:14:a3:c6:42:f4:c9:0b: 5e:3a:13:3c:1c:14:23:86:f8:5f:70:52:8f:8b:39: 73:c7:7d:6c:09:bf:c4:86:7f:10:5a:ff:77:12:86: da:c1:25:5d:23:a2:8a:6c:3e:3f:e8:c8:3d:bb:03: 1d:cb:e2:21:e2:d3:cf:6c:b6:29:54:0f:54:3a:a1: dd:de:55:c5:37:1e:57:ce:c9:5a:69:1e:95:aa:90: 88:96:5a:55:cf:a6:9d:dd:8f:86:06:a4:d6:8b:55: 41:a3:a8:3d:4d:62:6e:2c:f6:33:cc:24:51:45:19: 57:cc:f9:3c:e6:7f:7e:38:39:9c:2e:43:3c:6a:6d: 7d:63:f0:50:18:12:42:04:ba:3f:a2:b0:de:55:46: 2c:0e:8c:3c:c3:67:b5:8c:86:a6:40:a8:a4:61:a5: d6:57:7a:9d:5e:d3:7d:65:f7:b3:58:0c:a3:24:ea: c0:d0:f1:ab:e6:6a:94:50:bc:c6:bc:0e:89:0c:14: a3:b3:1f:85:98:fc:1b:10:5b:de:ba:ab:f3:82:4a: d7:9e:c6:8a:6e:4d:be:34:31:fd:7a:16:dc:3b:e1: b9:f4:48:cb:b6:c2:4d:ab:99:55:ab:ed:f1:7c:42: 58:31:bf:3a:90:11:49:97:29:00:6e:f0:13:2f:4c: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:FE:4E:FF:43:AF:44:47:92:18:32:E7:9B:15:BC:EF:88:F1:5F X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:39:08:bc:33:2b:0b:9c:6a:96:e5:ca:03:a0:ca:04:16: 19:e1:dc:f2:f1:62:7f:29:21:c8:38:1f:a7:2b:cf:ab:16:9b: d4:af:83:9a:45:c7:17:a6:55:c4:24:5d:63:ea:ae:fb:5b:40: d2:95:86:a6:30:c2:26:b8:1a:41:18:19:10:b6:3e:25:70:6a: 9c:00:10:a4:d0:34:50:6e:71:ce:96:d2:97:11:b2:d9:60:74: 77:66:36:91:62:80:1e:5c:48:8b:6e:41:73:49:e0:52:79:88: 25:3b:1d:9d:31:fd:d0:1c:04:92:3f:bd:93:ee:fe:9b:52:68: 7c:2b:c7:b8:d1:c8:f5:8d:59:0b:a0:b1:d1:58:da:57:f8:0d: 84:7a:0e:39:62:09:37:b5:f2:5c:ec:05:5a:a6:e3:24:f4:5f: 5a:65:ee:06:e7:be:2b:09:a9:8b:d6:1b:10:60:9a:32:9c:92: 98:c9:df:6b:bd:01:d1:18:21:a8:3c:c8:dd:85:08:92:4c:19: 14:37:f8:1b:48:40:43:46:09:f3:4b:85:b3:80:cf:1c:d1:b5: 81:2a:ef:24:64:cd:09:f9:b9:6e:a4:bb:4a:7d:61:7f:81:b1: 21:6e:ad:bc:11:85:a2:ba:9a:49:e2:a4:9d:bd:df:2e:79:dc: 19:6b:41:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKwUF1HJ+zmBCdbxfykzbb7yGp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTEyMTcwNjM1MDRaFw0yNTEyMjAxNDM0MDRaMDMxMTAvBgNV BAMTKEYxRUVGRTRFRkY0M0FGNDQ0NzkyMTgzMkU3OUIxNUJDRUY4OEYxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlSD59jJnFKPGQvTJC146Ezwc FCOG+F9wUo+LOXPHfWwJv8SGfxBa/3cShtrBJV0joopsPj/oyD27Ax3L4iHi089s tilUD1Q6od3eVcU3HlfOyVppHpWqkIiWWlXPpp3dj4YGpNaLVUGjqD1NYm4s9jPM JFFFGVfM+Tzmf344OZwuQzxqbX1j8FAYEkIEuj+isN5VRiwOjDzDZ7WMhqZAqKRh pdZXep1e031l97NYDKMk6sDQ8avmapRQvMa8DokMFKOzH4WY/BsQW966q/OCStee xopuTb40Mf16Ftw74bn0SMu2wk2rmVWr7fF8QlgxvzqQEUmXKQBu8BMvTPUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8e7+Tv9Dr0RHkhgy55sVvO+I8V8wHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHybOQi8MysLnGqW5coDoMoEFhnh3PLxYn8p Icg4H6crz6sWm9Svg5pFxxemVcQkXWPqrvtbQNKVhqYwwia4GkEYGRC2PiVwapwA EKTQNFBucc6W0pcRstlgdHdmNpFigB5cSItuQXNJ4FJ5iCU7HZ0x/dAcBJI/vZPu /ptSaHwrx7jRyPWNWQugsdFY2lf4DYR6DjliCTe18lzsBVqm4yT0X1pl7gbnvisJ qYvWGxBgmjKckpjJ32u9AdEYIag8yN2FCJJMGRQ3+BtIQENGCfNLhbOAzxzRtYEq 7yRkzQn5uW6ku0p9YX+BsSFurbwRhaK6mknipJ293y553BlrQf4= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:48 2025 by rpki-client