This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: 7PYDOMO4Wnt2ZoRrKS++GMccHsQYoieod25PwiIH8nM= Subject key identifier: 03:8F:2D:7D:C8:1B:09:C5:4B:B7:C2:5C:22:7E:F2:BB:E9:57:67:25 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 6220B88D82D0EAE1CD07C2876D1DF042BA735ADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03E6 Signing time: Wed 03 Dec 2025 08:11:16 +0000 Manifest this update: Wed 03 Dec 2025 08:06:16 +0000 Manifest next update: Sat 06 Dec 2025 13:20:16 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: cexpfWhJTCk1Uxu3b40I9QifjWVBxo/ZiWCRRLDXO58=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:b8:8d:82:d0:ea:e1:cd:07:c2:87:6d:1d:f0:42:ba:73:5a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Dec 3 08:06:16 2025 GMT Not After : Dec 6 13:20:16 2025 GMT Subject: CN=038F2D7DC81B09C54BB7C25C227EF2BBE9576725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:23:4b:06:20:c0:5a:aa:a6:8b:1c:3f:ac: d1:0e:74:55:e2:04:fc:a9:83:90:99:d7:ae:28:5d: 39:6c:89:6a:16:42:bf:42:14:0a:7b:9a:bd:ba:f9: a1:73:64:ce:14:0f:54:7d:c8:4c:f3:4f:5b:b1:b3: b0:30:89:01:3f:db:ff:02:bd:1a:e2:a4:4c:9b:39: 22:fb:4b:98:db:a1:ba:34:8e:86:49:bf:2d:da:df: 67:1e:4f:e8:a0:5a:d7:43:ba:06:17:be:ac:a8:dc: 46:82:84:df:a0:34:fe:5d:7b:42:62:40:b1:b0:ec: bf:03:bf:04:a3:e7:fb:49:e9:fc:bf:cd:91:c3:1f: dd:cc:3f:18:d9:ee:ba:a9:32:b6:5f:80:75:d2:e5: 70:87:b1:a5:7a:85:ee:b8:5c:c6:e8:df:63:40:74: b6:16:66:08:b8:3b:4c:81:85:e1:8e:c8:1a:40:2b: a0:cb:c0:ec:3d:aa:f7:1c:7d:8b:c9:42:2c:2c:8f: d7:b2:00:bf:24:15:a8:64:ed:e0:0b:6d:43:46:a7: ff:e2:d2:c5:c6:73:d4:fb:1b:cf:ab:7b:e0:4f:ad: a5:f1:ac:60:1c:e3:37:d1:14:df:08:b7:7e:67:c8: 4b:66:a6:d3:af:f7:55:7a:36:0d:17:5a:cf:fe:0a: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:2D:7D:C8:1B:09:C5:4B:B7:C2:5C:22:7E:F2:BB:E9:57:67:25 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ae:64:b7:3a:9b:98:3e:b0:81:99:62:71:cd:6b:29:df:ba: 64:19:dd:ca:f6:4f:6e:57:63:b8:37:88:a7:a7:12:6a:6c:63: e2:74:a1:8e:3e:e3:a7:aa:22:36:67:dc:20:0f:fe:03:b5:09: fd:a2:e9:e9:c6:83:0f:fe:51:ef:56:9d:7a:9a:f3:00:9c:18: 25:16:47:9c:65:51:ca:5c:b9:c1:7e:35:19:76:ca:3a:58:ec: 04:77:c3:5f:d0:b2:f1:3c:05:55:80:3d:6d:d7:15:c4:6f:62: 9a:68:c6:15:6e:9d:b2:29:71:fc:1a:a3:43:56:c0:46:ba:7d: e6:3e:42:d8:3e:bb:1e:ec:7f:40:2d:a1:14:3a:2d:fd:58:2c: 6c:93:2a:a6:15:61:01:da:8c:3c:61:96:4a:6d:4f:5f:56:cc: 60:3f:2a:f4:7c:65:51:95:f3:51:bd:d7:8b:a5:79:ee:70:29: a8:c0:4d:f2:86:d0:9c:e9:3c:ea:ae:ed:06:26:27:20:8e:8e: 07:21:9d:f8:a8:91:64:9b:13:a6:85:eb:24:bc:fa:1b:69:8c: 91:d8:42:c1:c7:60:9c:60:d2:ab:0f:b7:15:5f:a2:5d:eb:7b: a6:cc:b4:0e:a8:8e:31:c0:38:6b:55:7b:28:a5:91:39:44:d9: 04:93:b9:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiC4jYLQ6uHNB8KHbR3wQrpzWt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTEyMDMwODA2MTZaFw0yNTEyMDYxMzIwMTZaMDMxMTAvBgNV BAMTKDAzOEYyRDdEQzgxQjA5QzU0QkI3QzI1QzIyN0VGMkJCRTk1NzY3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JiNLBiDAWqqmixw/rNEOdFXi BPypg5CZ164oXTlsiWoWQr9CFAp7mr26+aFzZM4UD1R9yEzzT1uxs7AwiQE/2/8C vRripEybOSL7S5jbobo0joZJvy3a32ceT+igWtdDugYXvqyo3EaChN+gNP5de0Ji QLGw7L8DvwSj5/tJ6fy/zZHDH93MPxjZ7rqpMrZfgHXS5XCHsaV6he64XMbo32NA dLYWZgi4O0yBheGOyBpAK6DLwOw9qvccfYvJQiwsj9eyAL8kFahk7eALbUNGp//i 0sXGc9T7G8+re+BPraXxrGAc4zfRFN8It35nyEtmptOv91V6Ng0XWs/+Co2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA48tfcgbCcVLt8JcIn7yu+lXZyUwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyuZLc6m5g+sIGZYnHNaynfumQZ3cr2T25X Y7g3iKenEmpsY+J0oY4+46eqIjZn3CAP/gO1Cf2i6enGgw/+Ue9WnXqa8wCcGCUW R5xlUcpcucF+NRl2yjpY7AR3w1/QsvE8BVWAPW3XFcRvYppoxhVunbIpcfwao0NW wEa6feY+Qtg+ux7sf0AtoRQ6Lf1YLGyTKqYVYQHajDxhlkptT19WzGA/KvR8ZVGV 81G914ulee5wKajATfKG0JzpPOqu7QYmJyCOjgchnfiokWSbE6aF6yS8+htpjJHY QsHHYJxg0qsPtxVfol3re6bMtA6ojjHAOGtVeyilkTlE2QSTuRI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:07 2025 by rpki-client