This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: bhGZrRchuEqAKd4PH5ym9UgCJjQbYlnxiLOPIDZ+8Fc= Subject key identifier: 56:CF:A2:B3:75:2E:E1:73:7A:2A:28:10:75:49:36:66:44:5A:11:8F Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 622F6B6B5EFE3FFBE83A5D43F920C166C8C4AF27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: E2 Signing time: Sun 07 Dec 2025 12:11:08 +0000 Manifest this update: Sun 07 Dec 2025 12:06:08 +0000 Manifest next update: Wed 10 Dec 2025 19:42:08 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: Y3NWg/RgzGpjN1zqHSbS4+Nd/24vJR2IXDt4mQ8Ms2s=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2f:6b:6b:5e:fe:3f:fb:e8:3a:5d:43:f9:20:c1:66:c8:c4:af:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Dec 7 12:06:08 2025 GMT Not After : Dec 10 19:42:08 2025 GMT Subject: CN=56CFA2B3752EE1737A2A281075493666445A118F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fc:b0:de:ef:28:a1:9d:ad:1e:03:8f:b0:e5: 5d:9b:fc:66:67:0b:4e:00:f5:c4:3a:f3:ab:ab:4a: ee:f7:e1:e9:7e:3f:ef:c3:a8:d2:0a:fb:74:60:6f: 77:89:b8:84:24:8c:41:95:8c:6c:43:ba:36:91:33: 72:31:45:46:a9:bf:3d:83:dd:99:8f:3c:fa:67:18: f4:04:8b:06:c3:6a:77:6d:bb:af:94:c2:ad:5f:58: 55:3a:66:1f:99:08:0e:47:52:d7:74:00:f2:99:a7: fc:5c:33:e2:4f:96:1c:d2:de:60:a2:37:b1:c9:c9: 65:3c:07:49:c1:6b:fe:8b:2d:0c:e8:4d:af:4a:e5: c9:56:d8:c5:04:4e:7d:e2:53:c7:2c:b5:55:18:74: 0f:be:cb:d3:b9:7d:18:df:73:bf:60:de:57:9d:47: c9:6f:42:f7:b4:b1:ae:74:37:4e:27:98:27:0f:f7: 6b:a2:af:58:6a:01:8b:c1:f2:9d:7a:cd:29:0c:54: cc:47:28:d6:fd:e2:9d:1f:48:2e:d9:d6:a3:ab:28: f7:ee:82:3a:e0:aa:6e:b6:00:92:85:03:0c:dc:75: 17:01:16:7d:86:3a:10:0a:95:b7:6e:48:55:ba:53: e5:19:da:98:da:d4:1b:45:e6:61:af:13:ff:0a:ef: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CF:A2:B3:75:2E:E1:73:7A:2A:28:10:75:49:36:66:44:5A:11:8F X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d0:a0:af:dd:5f:2c:fc:f0:d7:88:f0:76:2f:1f:9b:71:cf: a2:57:7a:ad:f5:7b:c2:de:2b:c5:15:09:87:f1:36:29:e4:3a: f0:ba:3a:9f:b3:cb:9b:ec:53:7b:f0:5f:94:fd:07:e9:dc:2c: e0:ab:8d:01:2f:20:17:f5:78:ca:33:1d:40:ed:8e:59:bf:de: 83:8e:e1:55:da:c8:64:5f:ce:7f:c6:2f:3c:fb:ca:c4:40:e5: 81:c7:37:58:8b:23:e1:ef:73:e6:d0:12:17:99:ac:3c:59:a5: 94:1f:84:c1:c5:94:86:fd:10:05:da:ca:a3:a3:34:c4:0d:68: 0d:57:24:da:fe:5f:ce:ff:f5:6c:8d:93:cf:a0:de:40:c4:a2: 64:44:85:a8:d7:65:f4:b2:aa:3a:c6:e8:ad:15:7a:91:47:79: 00:a4:3a:9e:23:84:30:a9:d4:02:3f:4b:c9:96:0b:c8:f5:43: c1:88:1a:33:a4:1a:c9:dc:e9:26:e6:2b:be:be:6e:b9:c7:30: 4e:ee:c4:88:20:15:a6:cd:2b:44:1e:2c:06:c8:54:0c:87:d9: 9b:b0:82:b8:33:0a:62:89:ac:b6:54:3b:d5:16:e0:1c:e1:e1: a7:6e:19:7d:9d:ac:cb:7a:ee:2a:38:25:04:77:09:cd:58:5a: aa:d1:0c:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYi9ra17+P/voOl1D+SDBZsjErycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTEyMDcxMjA2MDhaFw0yNTEyMTAxOTQyMDhaMDMxMTAvBgNV BAMTKDU2Q0ZBMkIzNzUyRUUxNzM3QTJBMjgxMDc1NDkzNjY2NDQ1QTExOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv/LDe7yihna0eA4+w5V2b/GZn C04A9cQ686urSu734el+P+/DqNIK+3Rgb3eJuIQkjEGVjGxDujaRM3IxRUapvz2D 3ZmPPPpnGPQEiwbDandtu6+Uwq1fWFU6Zh+ZCA5HUtd0APKZp/xcM+JPlhzS3mCi N7HJyWU8B0nBa/6LLQzoTa9K5clW2MUETn3iU8cstVUYdA++y9O5fRjfc79g3led R8lvQve0sa50N04nmCcP92uir1hqAYvB8p16zSkMVMxHKNb94p0fSC7Z1qOrKPfu gjrgqm62AJKFAwzcdRcBFn2GOhAKlbduSFW6U+UZ2pja1BtF5mGvE/8K7++/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVs+is3Uu4XN6KigQdUk2ZkRaEY8wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLQoK/dXyz88NeI8HYvH5txz6JXeq31e8Le K8UVCYfxNinkOvC6Op+zy5vsU3vwX5T9B+ncLOCrjQEvIBf1eMozHUDtjlm/3oOO 4VXayGRfzn/GLzz7ysRA5YHHN1iLI+Hvc+bQEheZrDxZpZQfhMHFlIb9EAXayqOj NMQNaA1XJNr+X87/9WyNk8+g3kDEomREhajXZfSyqjrG6K0VepFHeQCkOp4jhDCp 1AI/S8mWC8j1Q8GIGjOkGsnc6SbmK76+brnHME7uxIggFabNK0QeLAbIVAyH2Zuw grgzCmKJrLZUO9UW4Bzh4aduGX2drMt67io4JQR3Cc1YWqrRDII= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:48 2025 by rpki-client