This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: Jv/Pc27g9IdxXMK6xupw83eBRW5mNofa5zsMjhwhQV8= Subject key identifier: 87:72:41:8B:7A:F8:65:76:FE:67:91:27:BA:89:52:46:26:88:63:AC Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 27125E9DD77B04E03EE370EC621432BD5AE5CD41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 0101 Signing time: Tue 02 Dec 2025 14:31:52 +0000 Manifest this update: Tue 02 Dec 2025 14:26:52 +0000 Manifest next update: Fri 05 Dec 2025 16:10:52 +0000 Files and hashes: 1: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 2: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 3: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: 3+74+3ICltGOFalWwkdbzb8UTjNoCuNAx2sAkNCKqeg=) 4: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 5: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 6: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:5e:9d:d7:7b:04:e0:3e:e3:70:ec:62:14:32:bd:5a:e5:cd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Dec 2 14:26:52 2025 GMT Not After : Dec 5 16:10:52 2025 GMT Subject: CN=8772418B7AF86576FE679127BA895246268863AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:7a:b5:0b:7b:fc:5a:c1:ea:40:e2:23:73: 93:5a:34:55:bd:86:6f:02:b7:db:73:67:cc:e4:00: c8:e0:f0:3d:d8:1c:19:b1:3b:45:4c:8a:f4:dd:e3: 1b:fa:63:41:be:c5:d6:4f:e8:cc:7c:f4:10:ef:f8: 1f:10:93:18:3e:dd:2b:84:80:ea:56:12:b1:cf:13: 02:8f:32:04:48:9c:3e:f2:0e:33:12:d7:22:c4:16: be:4e:fe:61:74:b2:f3:df:0a:54:eb:b8:11:c8:bd: b6:01:35:03:9f:0a:9a:a2:1d:41:7d:2a:b4:3a:77: c1:43:b1:f1:e1:33:99:6e:ca:42:e1:6f:d2:02:fb: 73:25:94:42:96:dd:7e:c6:52:c1:dc:02:5e:b4:19: 7b:cc:1e:cd:4d:1e:06:10:87:d9:0e:d4:a3:52:a6: ab:ac:ac:75:fb:f6:97:09:1d:3f:09:28:45:d9:05: 37:b1:16:b6:df:11:6d:4d:a9:49:b4:29:c8:49:79: 3d:ee:34:19:0c:36:10:14:10:5e:5e:ee:7a:d9:01: 10:1e:46:3f:d0:09:15:ce:db:51:bd:0d:c3:ed:73: 33:8c:a6:a2:40:7c:35:d9:45:b1:e8:2a:a6:44:b0: e1:dd:2d:16:4f:b8:d4:81:a7:db:06:10:f1:b7:24: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:72:41:8B:7A:F8:65:76:FE:67:91:27:BA:89:52:46:26:88:63:AC X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8f:44:02:dc:27:a9:ba:0c:4a:b7:36:69:59:5c:1c:39:08: 88:ba:c4:2c:57:fc:70:c7:a3:97:85:ca:45:3f:a5:1d:7a:88: a3:d6:af:d8:dd:64:83:42:67:ae:23:a9:f8:df:06:5d:ae:9d: 4c:e9:e9:5b:40:b9:2e:14:7a:fd:ac:c0:8e:22:18:03:8d:a1: 92:7d:de:b1:a3:62:4e:19:9f:c6:36:ae:4c:41:8d:cf:9b:a0: e1:36:57:89:47:66:af:68:10:a9:4d:0d:d3:43:6d:99:7e:3c: 5c:41:8c:98:83:84:0b:e0:a6:68:f2:8d:aa:fd:fc:bb:c1:ed: 27:62:2b:7c:9e:ad:66:e2:7b:a8:a1:a2:ea:39:f9:03:f5:c1: fe:6a:b5:42:26:b3:1f:65:86:57:44:8c:80:a7:4b:67:ce:14: fd:e4:54:55:85:89:cd:35:80:ae:08:1e:e4:53:0a:3e:3a:4e: 26:ba:e5:ff:66:4d:b7:1e:82:df:e9:28:8e:e0:1b:cb:eb:ad: 04:e6:72:23:ba:11:d6:11:16:d4:2a:70:86:66:d1:8d:a8:0b: 50:8b:bf:0b:76:9b:6f:29:10:f6:be:9f:d2:a2:38:65:ae:24: 68:42:9e:e2:e9:21:b7:0c:ca:bf:0e:af:ba:07:b0:43:04:8a: a4:f5:2c:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxJendd7BOA+43DsYhQyvVrlzUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTEyMDIxNDI2NTJaFw0yNTEyMDUxNjEwNTJaMDMxMTAvBgNV BAMTKDg3NzI0MThCN0FGODY1NzZGRTY3OTEyN0JBODk1MjQ2MjY4ODYzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o3q1C3v8WsHqQOIjc5NaNFW9 hm8Ct9tzZ8zkAMjg8D3YHBmxO0VMivTd4xv6Y0G+xdZP6Mx89BDv+B8Qkxg+3SuE gOpWErHPEwKPMgRInD7yDjMS1yLEFr5O/mF0svPfClTruBHIvbYBNQOfCpqiHUF9 KrQ6d8FDsfHhM5luykLhb9IC+3MllEKW3X7GUsHcAl60GXvMHs1NHgYQh9kO1KNS pqusrHX79pcJHT8JKEXZBTexFrbfEW1NqUm0KchJeT3uNBkMNhAUEF5e7nrZARAe Rj/QCRXO21G9DcPtczOMpqJAfDXZRbHoKqZEsOHdLRZPuNSBp9sGEPG3JCF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3JBi3r4ZXb+Z5EnuolSRiaIY6wwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSPRALcJ6m6DEq3NmlZXBw5CIi6xCxX/HDH o5eFykU/pR16iKPWr9jdZINCZ64jqfjfBl2unUzp6VtAuS4Uev2swI4iGAONoZJ9 3rGjYk4Zn8Y2rkxBjc+boOE2V4lHZq9oEKlNDdNDbZl+PFxBjJiDhAvgpmjyjar9 /LvB7SdiK3yerWbie6ihouo5+QP1wf5qtUImsx9lhldEjICnS2fOFP3kVFWFic01 gK4IHuRTCj46Tia65f9mTbcegt/pKI7gG8vrrQTmciO6EdYRFtQqcIZm0Y2oC1CL vwt2m28pEPa+n9KiOGWuJGhCnuLpIbcMyr8Or7oHsEMEiqT1LEY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:38 2025 by rpki-client