This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: ZsoDO6lQt4zt04mi/kuzG8Q1Yb3CQmI57LkYh0ZNVzQ= Subject key identifier: A5:B1:24:F2:43:D7:29:AE:93:B0:15:ED:B6:E2:AE:15:0A:3C:77:CC Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 0FBF623F187AE7E752C791DCDC8A7E72632E99A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 052A Signing time: Tue 02 Dec 2025 17:10:57 +0000 Manifest this update: Tue 02 Dec 2025 17:05:57 +0000 Manifest next update: Fri 05 Dec 2025 22:01:57 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: 9OcDuWO3AGR0sYqjZ7oK9Z+sjb7IYL1CnKxhf4aavQI=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bf:62:3f:18:7a:e7:e7:52:c7:91:dc:dc:8a:7e:72:63:2e:99:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Dec 2 17:05:57 2025 GMT Not After : Dec 5 22:01:57 2025 GMT Subject: CN=A5B124F243D729AE93B015EDB6E2AE150A3C77CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:9b:52:08:3c:cf:36:0f:66:9e:70:14:c9: 71:ef:97:bc:eb:58:90:e2:81:78:20:ab:26:1b:1c: b1:e2:3b:f8:ce:74:b1:9d:f0:75:e9:55:84:a1:ce: 76:7b:97:83:d9:34:7e:22:74:9c:19:9e:c8:e8:21: 4a:c8:71:e3:1e:96:15:6f:5e:ed:93:98:e2:7d:a2: d8:74:eb:03:c2:e4:1e:51:b9:af:c9:f6:7e:d6:a6: b9:38:6b:ec:b3:01:f3:13:ca:3c:4c:79:bc:34:59: 8f:54:21:70:e5:46:ac:bd:f4:a6:8b:6b:68:42:ce: c1:c4:a3:06:5a:8e:a8:32:e9:9a:44:b9:26:c9:1f: 4c:7a:83:a3:9b:9e:de:45:2a:e1:72:ac:1d:0b:0f: 5c:1d:ef:b2:f0:f8:13:e2:06:f2:eb:3a:ed:90:22: 50:0b:6d:37:06:b1:49:40:50:cc:6f:23:48:86:29: ba:27:66:f6:b6:c7:dc:21:e1:3d:dc:88:cb:fb:07: 4c:67:ee:c6:50:86:07:c4:90:77:03:46:04:8a:41: 53:43:93:d2:a1:ce:07:86:98:22:2c:a6:24:33:5c: c6:85:7b:c7:49:63:67:1b:03:c2:e2:2c:90:0c:aa: 43:d1:91:61:4d:40:e3:f1:f0:34:42:8e:56:3b:23: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B1:24:F2:43:D7:29:AE:93:B0:15:ED:B6:E2:AE:15:0A:3C:77:CC X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:46:ba:11:3d:69:88:74:b5:b7:91:07:ae:50:06:83:f9:ec: 82:f4:f6:b7:10:21:0e:c3:30:60:e4:a5:6e:01:de:22:91:79: 50:5e:ad:e2:b7:fb:fc:4e:7b:ab:58:c4:e4:b7:88:af:90:8c: 70:db:3c:58:9c:7d:fb:42:d8:cd:c3:d9:0a:64:1f:ea:5e:8c: e5:6f:f0:71:2b:9c:42:33:c4:8b:a4:42:db:7e:c9:63:4e:f5: 20:bc:03:49:1a:cb:49:67:35:13:6f:95:60:7b:a1:25:6b:59: 78:38:b7:ed:b6:0b:9e:af:e1:9b:4c:2d:e2:d5:66:ce:6b:76: f0:4b:54:4a:2f:3d:5f:47:15:fb:02:66:9e:2d:ca:4d:f5:c4: 7e:1f:ab:db:cc:fa:bb:23:cc:11:7f:48:3e:23:0b:72:81:0b: a3:51:bd:90:59:fd:e5:00:a1:a4:67:0e:ad:28:29:6d:5c:05: 5f:66:c4:18:60:8b:22:41:9c:70:87:4c:dc:bc:aa:6e:db:98: 25:27:c1:08:64:7d:2a:ef:1d:5c:7a:a4:c4:70:e8:b1:a2:11: d0:89:23:93:ae:20:66:21:6c:1a:ef:33:d7:b8:d8:39:ef:a7: 23:72:ff:83:8c:f8:39:eb:d5:cf:e6:dd:3f:fd:95:78:46:80: fb:d7:6d:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD79iPxh65+dSx5Hc3Ip+cmMumaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTEyMDIxNzA1NTdaFw0yNTEyMDUyMjAxNTdaMDMxMTAvBgNV BAMTKEE1QjEyNEYyNDNENzI5QUU5M0IwMTVFREI2RTJBRTE1MEEzQzc3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLJtSCDzPNg9mnnAUyXHvl7zr WJDigXggqyYbHLHiO/jOdLGd8HXpVYShznZ7l4PZNH4idJwZnsjoIUrIceMelhVv Xu2TmOJ9oth06wPC5B5Rua/J9n7Wprk4a+yzAfMTyjxMebw0WY9UIXDlRqy99KaL a2hCzsHEowZajqgy6ZpEuSbJH0x6g6Obnt5FKuFyrB0LD1wd77Lw+BPiBvLrOu2Q IlALbTcGsUlAUMxvI0iGKbonZva2x9wh4T3ciMv7B0xn7sZQhgfEkHcDRgSKQVND k9KhzgeGmCIspiQzXMaFe8dJY2cbA8LiLJAMqkPRkWFNQOPx8DRCjlY7I/8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbEk8kPXKa6TsBXttuKuFQo8d8wwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5GuhE9aYh0tbeRB65QBoP57IL09rcQIQ7D MGDkpW4B3iKReVBereK3+/xOe6tYxOS3iK+QjHDbPFicfftC2M3D2QpkH+pejOVv 8HErnEIzxIukQtt+yWNO9SC8A0kay0lnNRNvlWB7oSVrWXg4t+22C56v4ZtMLeLV Zs5rdvBLVEovPV9HFfsCZp4tyk31xH4fq9vM+rsjzBF/SD4jC3KBC6NRvZBZ/eUA oaRnDq0oKW1cBV9mxBhgiyJBnHCHTNy8qm7bmCUnwQhkfSrvHVx6pMRw6LGiEdCJ I5OuIGYhbBrvM9e42DnvpyNy/4OM+Dnr1c/m3T/9lXhGgPvXbUg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:58 2025 by rpki-client