This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: o8q+RlQJDre9QRb9DFqKYvmIl+aR2grNWo+hQdZY8iU= Subject key identifier: E5:1C:1A:04:55:05:4D:D2:95:2F:86:4D:89:D9:F0:CD:AA:DF:97:0A Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 620C67ED156951045F1A53EB67CE85DDB57AE76C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 01CC Signing time: Tue 02 Dec 2025 20:11:52 +0000 Manifest this update: Tue 02 Dec 2025 20:06:52 +0000 Manifest next update: Sat 06 Dec 2025 06:14:52 +0000 Files and hashes: 1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) 2: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: k7HdPbUCo3By8/wp+KiizNRlqnXMRpLWB7+9ih/i6xg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0c:67:ed:15:69:51:04:5f:1a:53:eb:67:ce:85:dd:b5:7a:e7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Dec 2 20:06:52 2025 GMT Not After : Dec 6 06:14:52 2025 GMT Subject: CN=E51C1A0455054DD2952F864D89D9F0CDAADF970A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3b:11:12:5c:9d:46:d7:d4:15:32:dd:ce:55: e5:e2:0e:52:fb:c1:42:cb:e0:49:9f:ca:66:30:4d: be:ff:38:94:c4:53:2f:47:a6:ca:8f:ba:c2:0d:65: 03:6f:ac:06:46:d0:6c:4d:54:1a:9c:86:e2:7e:73: 65:55:c5:e7:85:62:d5:37:3b:13:54:d2:57:27:e9: 1f:72:cd:3b:ef:d0:d8:53:55:6b:d3:9f:f5:77:a1: bc:23:dc:f0:97:7f:8a:9b:ae:e8:d4:ba:94:bd:b6: 5e:c9:1c:fc:2b:b6:ea:1f:b0:e1:f9:e5:b4:50:ed: 5b:88:29:f3:08:6c:8a:b3:cb:7d:06:cf:21:d2:3a: d0:34:bf:37:3d:a4:f3:51:db:ac:45:f6:f1:e2:f1: de:0a:5e:bb:c3:8b:69:85:f6:16:3a:01:c1:f9:c0: 89:b6:f8:c0:33:f0:11:62:13:80:1b:93:06:e3:3b: b2:7d:e4:3c:90:01:ad:63:bb:30:a5:19:6a:63:87: 3d:08:38:db:d4:e7:6a:6f:1a:a0:d5:f3:fe:f4:79: 2b:4b:d8:f4:51:87:f4:48:b3:f3:bd:fa:e8:8d:7b: 9e:4c:2b:04:b1:d4:40:28:4f:a3:a5:7f:07:a6:b8: b8:8f:f4:1a:70:6e:1f:5d:9c:6d:72:c6:c7:76:82: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:1A:04:55:05:4D:D2:95:2F:86:4D:89:D9:F0:CD:AA:DF:97:0A X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:87:fe:25:6b:91:6f:ff:8a:f1:41:ef:23:35:4a:b6:a8:c7: be:b1:74:5b:1f:71:66:fc:03:93:01:db:92:d0:f0:8f:2d:ed: 6d:0b:4e:53:f2:d6:a4:dd:94:72:62:df:61:03:cf:40:55:ad: cd:c3:b8:87:ef:52:e7:ba:f7:69:e8:5d:48:78:b4:90:50:c5: 8d:16:66:87:bf:d7:63:fc:43:36:ce:93:5f:7f:71:20:4a:a0: 02:54:b5:8e:8e:b7:34:20:3e:31:9c:20:4e:73:e4:63:48:d7: 3c:7f:50:1e:48:4b:d9:1c:3e:2d:7b:c4:b9:f4:76:a3:7c:c5: 0b:2a:f5:ae:9e:18:81:fa:21:39:9e:b4:fe:49:b7:3f:da:e2: 99:1d:7f:f9:f0:3d:e5:14:e4:1b:d1:c9:3b:74:3f:5d:da:35: 18:58:43:76:4a:a3:10:63:4f:ca:60:32:a8:c2:55:c2:23:0d: db:9d:ea:93:d2:d3:70:7b:79:5a:d2:bc:05:7c:15:de:d4:06: 5c:87:27:eb:56:df:5f:44:1f:61:e3:cd:1c:10:af:27:9e:fe: 83:9f:d6:0f:49:ba:16:6b:e6:54:3d:88:13:6e:40:3b:d7:a7: f5:90:2c:a3:93:d5:90:c7:6a:34:60:8c:04:3d:96:f0:b3:bc: c4:06:d7:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgxn7RVpUQRfGlPrZ86F3bV652wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTEyMDIyMDA2NTJaFw0yNTEyMDYwNjE0NTJaMDMxMTAvBgNV BAMTKEU1MUMxQTA0NTUwNTRERDI5NTJGODY0RDg5RDlGMENEQUFERjk3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCROxESXJ1G19QVMt3OVeXiDlL7 wULL4EmfymYwTb7/OJTEUy9HpsqPusINZQNvrAZG0GxNVBqchuJ+c2VVxeeFYtU3 OxNU0lcn6R9yzTvv0NhTVWvTn/V3obwj3PCXf4qbrujUupS9tl7JHPwrtuofsOH5 5bRQ7VuIKfMIbIqzy30GzyHSOtA0vzc9pPNR26xF9vHi8d4KXrvDi2mF9hY6AcH5 wIm2+MAz8BFiE4AbkwbjO7J95DyQAa1juzClGWpjhz0IONvU52pvGqDV8/70eStL 2PRRh/RIs/O9+uiNe55MKwSx1EAoT6OlfwemuLiP9Bpwbh9dnG1yxsd2gkdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RwaBFUFTdKVL4ZNidnwzarflwowHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+H/iVrkW//ivFB7yM1Sraox76xdFsfcWb8 A5MB25LQ8I8t7W0LTlPy1qTdlHJi32EDz0BVrc3DuIfvUue692noXUh4tJBQxY0W Zoe/12P8QzbOk19/cSBKoAJUtY6OtzQgPjGcIE5z5GNI1zx/UB5IS9kcPi17xLn0 dqN8xQsq9a6eGIH6ITmetP5Jtz/a4pkdf/nwPeUU5BvRyTt0P13aNRhYQ3ZKoxBj T8pgMqjCVcIjDdud6pPS03B7eVrSvAV8Fd7UBlyHJ+tW319EH2HjzRwQryee/oOf 1g9JuhZr5lQ9iBNuQDvXp/WQLKOT1ZDHajRgjAQ9lvCzvMQG1w4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:13 2025 by rpki-client