This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: tRjCAw60fo9+wwx6Y2Ff3Wp1UPyXF83DZyt3u0pBM/Y= Subject key identifier: 8A:F0:42:60:DA:1B:5F:84:DC:34:2C:7C:DA:FF:E9:3D:20:EB:86:CE Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 19678C2A4503EC7E0B7CA1A39081A43A540D38B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: BF Signing time: Tue 02 Dec 2025 23:50:58 +0000 Manifest this update: Tue 02 Dec 2025 23:45:58 +0000 Manifest next update: Sat 06 Dec 2025 08:37:58 +0000 Files and hashes: 1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=) 3: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: sEMCPxHt1bWu4JIdNyOdCew0v1sIWOOW/HaFKOtOTE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:67:8c:2a:45:03:ec:7e:0b:7c:a1:a3:90:81:a4:3a:54:0d:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Dec 2 23:45:58 2025 GMT Not After : Dec 6 08:37:58 2025 GMT Subject: CN=8AF04260DA1B5F84DC342C7CDAFFE93D20EB86CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:86:52:94:fa:97:da:ed:68:b6:cf:bc:88: 12:a9:50:4b:8c:a7:98:7c:f5:a1:fb:ae:6a:3b:fc: 37:d2:44:20:aa:19:78:cd:1d:d7:e9:2d:83:d2:55: 9b:c4:5f:9b:29:ca:05:36:27:75:5c:87:98:62:43: 2c:74:28:3b:69:dc:57:44:8d:cb:a4:36:44:12:1e: 73:79:9b:64:db:5e:19:7f:f1:c3:68:93:7e:c5:3b: 73:5f:1e:e4:ca:fe:bc:db:e2:7e:47:58:39:2f:23: 33:ff:e6:8a:8f:dd:60:1e:a6:62:da:7d:9a:c0:e8: a4:eb:11:82:32:bc:73:18:1e:6d:85:6c:dd:78:fa: d8:6d:cf:6d:2d:20:f7:ff:e9:87:ce:d4:52:07:5a: 01:c9:9a:14:c5:cb:4d:9f:4a:be:c4:2b:7f:1b:1f: fa:64:75:43:89:55:63:77:46:c6:45:6e:c2:27:ee: 7c:18:14:d4:fd:e0:90:b3:3b:e8:b7:96:7c:4c:4c: f1:c5:60:b1:70:84:11:ab:d5:4f:a3:6e:24:a9:64: 16:c3:1e:19:3b:b0:45:d7:2c:07:7a:10:3d:56:8f: 54:d5:83:4d:70:1e:35:00:aa:e8:74:52:0d:82:db: 66:06:01:35:23:87:e8:56:e1:db:99:d1:26:ac:8c: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:42:60:DA:1B:5F:84:DC:34:2C:7C:DA:FF:E9:3D:20:EB:86:CE X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:1d:a7:a3:ef:3a:b4:d3:93:f6:cc:da:5b:e4:9c:e7:96: 0e:bd:6f:42:4b:9a:d1:b0:45:a8:e4:68:53:52:51:3a:2e:89: 2f:60:97:9f:5b:46:aa:a5:0a:95:f5:a4:57:da:73:3c:8f:a6: a0:69:de:b9:79:e7:d2:83:31:29:13:b4:52:9d:8c:19:33:4e: 0d:b7:17:e6:fc:d9:5a:29:89:f5:55:d5:d6:2c:e3:be:9d:35: 19:67:b2:6d:11:f8:21:2d:dd:65:51:27:90:a4:8e:d6:cc:e0: f5:8e:70:88:55:c0:8f:08:ca:27:a0:25:47:e9:bf:ba:f1:6b: 28:4e:f9:f8:e0:f8:ab:27:b3:8f:af:d9:6e:ba:d4:5e:91:d9: bf:6e:d6:7e:1f:8c:22:2e:d5:29:bc:d3:c0:77:5e:75:a2:39: 9b:38:b1:ee:a9:a8:81:46:38:14:a3:8f:ab:14:46:c7:0e:f5: 44:99:23:ce:11:72:13:7e:18:2b:a9:34:dc:f5:bc:81:c7:ba: c5:0e:c0:6d:a7:1b:3c:4e:46:5f:c4:33:17:3f:05:db:e6:96: 82:2a:b6:52:a2:e4:ca:26:a2:82:ef:3e:83:51:bd:ee:dc:7c: f7:9e:a7:c1:64:51:3e:05:88:94:60:f1:54:8d:66:b1:6f:9a: de:4c:74:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWeMKkUD7H4LfKGjkIGkOlQNOLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNTEyMDIyMzQ1NThaFw0yNTEyMDYwODM3NThaMDMxMTAvBgNV BAMTKDhBRjA0MjYwREExQjVGODREQzM0MkM3Q0RBRkZFOTNEMjBFQjg2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QIZSlPqX2u1ots+8iBKpUEuM p5h89aH7rmo7/DfSRCCqGXjNHdfpLYPSVZvEX5spygU2J3Vch5hiQyx0KDtp3FdE jcukNkQSHnN5m2TbXhl/8cNok37FO3NfHuTK/rzb4n5HWDkvIzP/5oqP3WAepmLa fZrA6KTrEYIyvHMYHm2FbN14+thtz20tIPf/6YfO1FIHWgHJmhTFy02fSr7EK38b H/pkdUOJVWN3RsZFbsIn7nwYFNT94JCzO+i3lnxMTPHFYLFwhBGr1U+jbiSpZBbD Hhk7sEXXLAd6ED1Wj1TVg01wHjUAquh0Ug2C22YGATUjh+hW4duZ0SasjHwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivBCYNobX4TcNCx82v/pPSDrhs4wHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJQHaej7zq005P2zNpb5Jznlg69b0JLmtGw RajkaFNSUTouiS9gl59bRqqlCpX1pFfaczyPpqBp3rl559KDMSkTtFKdjBkzTg23 F+b82VopifVV1dYs476dNRlnsm0R+CEt3WVRJ5CkjtbM4PWOcIhVwI8IyiegJUfp v7rxayhO+fjg+Ksns4+v2W661F6R2b9u1n4fjCIu1Sm808B3XnWiOZs4se6pqIFG OBSjj6sURscO9USZI84RchN+GCupNNz1vIHHusUOwG2nGzxORl/EMxc/BdvmloIq tlKi5MomooLvPoNRve7cfPeep8FkUT4FiJRg8VSNZrFvmt5MdDA= -----END CERTIFICATE-----Generated at Wed Dec 3 18:16:50 2025 by rpki-client