This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: Y8DTrYhpO4BJR15i+6x6CL+qbI9ZcDya3/cZH5BAH5c= Subject key identifier: 4E:3A:87:8E:3C:6F:46:BE:49:CC:7D:14:48:17:B1:32:EF:38:57:32 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 5204327A6BB79A8EE940ED7E804AB1DF0648E08B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: E5 Signing time: Sun 07 Dec 2025 08:21:22 +0000 Manifest this update: Sun 07 Dec 2025 08:16:22 +0000 Manifest next update: Wed 10 Dec 2025 15:47:22 +0000 Files and hashes: 1: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: 9zRtqFvxwWFEPRXtk5ekc2hXgfAAdEpVvoHkwD06h2k=) 2: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) 3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 4: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:04:32:7a:6b:b7:9a:8e:e9:40:ed:7e:80:4a:b1:df:06:48:e0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Dec 7 08:16:22 2025 GMT Not After : Dec 10 15:47:22 2025 GMT Subject: CN=4E3A878E3C6F46BE49CC7D144817B132EF385732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:8b:99:5a:8a:8c:be:d0:77:5e:b5:f3:82: c8:7d:79:44:40:d2:e6:a1:34:f7:fc:d8:55:21:8e: 12:bd:df:8f:bc:d9:90:5b:bb:c7:bf:b1:80:b1:fd: d1:24:8f:87:d2:b9:76:2b:92:53:9d:55:e2:3f:dc: 9d:2a:50:a7:38:3b:b1:f0:2d:46:9e:61:84:c0:36: a5:9d:cf:59:13:7b:57:0a:a6:2a:8b:cc:3a:d8:d8: 28:28:25:51:d1:8b:38:13:97:4d:82:fa:39:ab:fd: 60:59:f9:b8:75:ab:50:00:6e:ca:f4:dd:6c:cb:0a: c5:bc:4c:14:04:84:ab:b4:02:a7:13:e3:51:1c:e2: a3:ac:85:cd:d8:22:c9:0d:aa:fc:be:52:9f:7d:90: 35:34:89:97:1d:ba:9a:03:0b:7d:a5:67:94:1a:44: 4b:00:ca:5b:ef:ab:53:3d:81:68:b2:fe:20:8d:b2: 73:4b:c2:49:e4:ce:b9:78:bf:dc:a9:cf:b9:d7:bd: db:24:f0:b1:0b:e6:35:86:f8:a1:50:cc:82:e3:ed: a8:7c:2e:d4:5f:d6:a2:2d:1d:bb:fe:15:08:49:78: 5f:c4:cd:77:7d:e1:43:26:75:d8:21:de:6b:3b:f6: b3:16:1e:2e:06:be:04:91:64:1b:9f:f3:5e:ca:57: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:87:8E:3C:6F:46:BE:49:CC:7D:14:48:17:B1:32:EF:38:57:32 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d5:f8:8b:17:28:32:16:c5:79:82:f6:e7:89:89:95:f5:ae: 62:56:b6:2e:bc:4e:6b:03:d6:79:02:bf:a5:51:f6:fd:ae:15: 6c:6f:e7:bd:59:0a:d4:84:bd:68:44:57:4f:24:26:f4:a2:e4: d0:72:50:a7:07:5e:7a:be:73:e9:b3:55:5e:f2:8a:ff:ad:5d: 67:58:3d:c2:e5:50:af:f8:70:7f:02:a1:99:d5:80:b9:5c:4e: f2:3d:b6:aa:a6:de:5a:a2:07:a0:d1:17:b1:2b:92:b9:4d:ca: 99:84:e8:7b:19:6d:d6:eb:42:31:15:8a:5a:78:a8:a4:67:3c: 0c:83:95:81:7c:6b:78:b8:03:9b:5a:95:94:68:a6:ce:56:6f: 3e:fc:f5:9f:78:f4:71:f3:c7:6a:2e:df:47:05:71:6c:7f:38: 41:76:e7:c2:0f:8a:00:ed:63:09:14:6c:77:07:74:f0:63:5d: 66:58:00:d4:eb:41:c1:e6:cb:e9:a3:48:26:b8:d2:05:26:0f: a6:dd:2b:40:b7:8c:ca:d2:55:ca:6e:d7:a3:28:5b:57:1d:de: ac:58:10:c2:da:05:10:8e:da:0d:01:e3:2b:bb:6e:38:07:89: 7f:ac:49:79:49:cc:b9:48:b2:18:9f:5b:a6:31:a1:db:aa:42: 1e:9d:49:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgQyemu3mo7pQO1+gEqx3wZI4IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTEyMDcwODE2MjJaFw0yNTEyMTAxNTQ3MjJaMDMxMTAvBgNV BAMTKDRFM0E4NzhFM0M2RjQ2QkU0OUNDN0QxNDQ4MTdCMTMyRUYzODU3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaIuZWoqMvtB3XrXzgsh9eURA 0uahNPf82FUhjhK934+82ZBbu8e/sYCx/dEkj4fSuXYrklOdVeI/3J0qUKc4O7Hw LUaeYYTANqWdz1kTe1cKpiqLzDrY2CgoJVHRizgTl02C+jmr/WBZ+bh1q1AAbsr0 3WzLCsW8TBQEhKu0AqcT41Ec4qOshc3YIskNqvy+Up99kDU0iZcdupoDC32lZ5Qa REsAylvvq1M9gWiy/iCNsnNLwknkzrl4v9ypz7nXvdsk8LEL5jWG+KFQzILj7ah8 LtRf1qItHbv+FQhJeF/EzXd94UMmddgh3ms79rMWHi4GvgSRZBuf817KV7fnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjqHjjxvRr5JzH0USBexMu84VzIwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3V+IsXKDIWxXmC9ueJiZX1rmJWti68TmsD 1nkCv6VR9v2uFWxv571ZCtSEvWhEV08kJvSi5NByUKcHXnq+c+mzVV7yiv+tXWdY PcLlUK/4cH8CoZnVgLlcTvI9tqqm3lqiB6DRF7ErkrlNypmE6HsZbdbrQjEVilp4 qKRnPAyDlYF8a3i4A5talZRops5Wbz789Z949HHzx2ou30cFcWx/OEF258IPigDt YwkUbHcHdPBjXWZYANTrQcHmy+mjSCa40gUmD6bdK0C3jMrSVcpu16MoW1cd3qxY EMLaBRCO2g0B4yu7bjgHiX+sSXlJzLlIshifW6YxoduqQh6dSSA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:07 2025 by rpki-client