This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: /Vn2C6w5jr1sQ9sUotCDrDt2dnqPJK9AuvKiTCEMU64= Subject key identifier: 16:8B:BC:CF:EF:39:47:D9:B9:4F:FA:DC:3A:02:06:4A:C3:C0:A0:30 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 3B1ED5961D1574CD73E4838F0B42B0D5FED926E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: E6 Signing time: Sun 07 Dec 2025 11:02:10 +0000 Manifest this update: Sun 07 Dec 2025 10:57:10 +0000 Manifest next update: Wed 10 Dec 2025 20:29:10 +0000 Files and hashes: 1: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) 3: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: SdVoKiRYsAWUwAeeNqyJq5dj2zbFQYF1o/VJ8rUFjo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1e:d5:96:1d:15:74:cd:73:e4:83:8f:0b:42:b0:d5:fe:d9:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Dec 7 10:57:10 2025 GMT Not After : Dec 10 20:29:10 2025 GMT Subject: CN=168BBCCFEF3947D9B94FFADC3A02064AC3C0A030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:00:36:79:cf:cd:f6:78:c2:25:50:50:0c: 96:55:77:7a:21:77:d7:0c:84:08:e0:dd:ba:e0:55: a7:22:50:8c:e9:b7:8f:a2:87:78:26:cb:9a:89:28: 65:39:91:cb:3e:d6:1a:6a:11:e5:6b:74:f2:1b:6f: b2:89:79:d9:e3:a3:63:10:c8:d6:07:99:d2:13:ff: fe:f9:29:1a:f2:7a:0b:89:1a:03:5f:6d:04:ef:ca: c3:30:ad:df:88:0b:2e:40:1d:2d:3b:81:d3:73:89: 63:69:2d:8d:63:a7:ec:39:6c:5e:20:c5:70:af:9e: f1:0d:f5:36:44:8e:23:d3:01:e9:c5:72:c0:6a:43: 00:e8:4b:4a:de:09:d8:e2:00:e7:c2:17:b7:fb:50: 08:4b:43:1f:72:e9:13:4a:51:0c:d6:3c:1b:d7:62: a5:a5:00:4f:8d:bb:19:21:cb:74:65:33:64:4e:86: ce:5e:e3:39:e0:31:a4:f0:e2:9c:18:0f:0c:69:a0: 93:62:4a:d9:e9:bc:1f:de:47:cc:6f:80:f2:2f:b8: df:76:db:e9:d8:6a:bf:71:c1:c5:90:de:27:04:d0: a1:1f:6c:56:78:41:d0:32:d6:fb:50:0e:4d:3b:9e: 09:d6:62:b3:01:c0:02:14:f5:b3:41:3a:69:26:19: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8B:BC:CF:EF:39:47:D9:B9:4F:FA:DC:3A:02:06:4A:C3:C0:A0:30 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:34:fd:23:15:af:03:a7:62:49:ad:e7:ae:1b:ac:1e:3e:44: a3:34:6e:4b:70:22:e9:a6:02:f1:bc:18:74:2f:b3:61:00:18: 29:ca:42:e0:eb:d3:19:da:9c:97:d9:f9:16:f9:49:79:50:7a: 9e:c3:30:a1:83:9d:e1:08:bb:7e:19:61:eb:25:2b:ba:f6:7c: 70:2b:22:66:02:c2:49:ee:e6:2f:43:c5:81:32:1d:57:d7:1a: 2c:8f:ba:0e:ce:12:76:6e:b7:0c:eb:9f:6d:97:7d:66:b5:0d: 52:6c:f2:6e:68:74:be:ed:05:d4:b1:9c:46:26:11:eb:59:0a: 90:07:a5:6e:2f:b3:8f:75:23:65:4c:3a:9d:f1:97:03:53:b4: 27:8b:6b:a0:51:bf:b5:b2:1b:99:76:fb:ac:bb:94:6f:a9:8b: ef:7f:8a:5b:b8:3c:6c:fe:19:1f:6f:d7:22:c6:96:da:45:be: aa:07:ac:08:62:d8:04:ef:c5:3e:fe:a9:eb:c7:d8:c0:ae:32: e2:b0:41:15:de:3c:90:97:c4:22:26:f4:00:00:4d:b9:0f:cb: 07:57:87:a3:49:0c:95:3a:43:89:46:ad:15:71:ba:62:a4:0a: 93:94:eb:a2:b3:61:ac:18:ea:e9:6d:83:52:9e:06:63:6e:07: b1:83:ab:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOx7Vlh0VdM1z5IOPC0Kw1f7ZJuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTEyMDcxMDU3MTBaFw0yNTEyMTAyMDI5MTBaMDMxMTAvBgNV BAMTKDE2OEJCQ0NGRUYzOTQ3RDlCOTRGRkFEQzNBMDIwNjRBQzNDMEEwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3AA2ec/N9njCJVBQDJZVd3oh d9cMhAjg3brgVaciUIzpt4+ih3gmy5qJKGU5kcs+1hpqEeVrdPIbb7KJednjo2MQ yNYHmdIT//75KRryeguJGgNfbQTvysMwrd+ICy5AHS07gdNziWNpLY1jp+w5bF4g xXCvnvEN9TZEjiPTAenFcsBqQwDoS0reCdjiAOfCF7f7UAhLQx9y6RNKUQzWPBvX YqWlAE+Nuxkhy3RlM2ROhs5e4zngMaTw4pwYDwxpoJNiStnpvB/eR8xvgPIvuN92 2+nYar9xwcWQ3icE0KEfbFZ4QdAy1vtQDk07ngnWYrMBwAIU9bNBOmkmGTrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFou8z+85R9m5T/rcOgIGSsPAoDAwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw0/SMVrwOnYkmt564brB4+RKM0bktwIumm AvG8GHQvs2EAGCnKQuDr0xnanJfZ+Rb5SXlQep7DMKGDneEIu34ZYeslK7r2fHAr ImYCwknu5i9DxYEyHVfXGiyPug7OEnZutwzrn22XfWa1DVJs8m5odL7tBdSxnEYm EetZCpAHpW4vs491I2VMOp3xlwNTtCeLa6BRv7WyG5l2+6y7lG+pi+9/ilu4PGz+ GR9v1yLGltpFvqoHrAhi2ATvxT7+qevH2MCuMuKwQRXePJCXxCIm9AAATbkPywdX h6NJDJU6Q4lGrRVxumKkCpOU66KzYawY6ultg1KeBmNuB7GDqyk= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:09 2025 by rpki-client