This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: jFP1gNJJctxjDX7DTqsW9nQGGoJWLm6T6IbV6nOn4F8= Subject key identifier: 05:EF:E2:EB:8C:DF:2A:CC:8E:C6:C8:4C:19:B2:CB:D9:25:4A:BD:43 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 7A89418C6690D08FC0D0D32191B06B6E720178FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 01CA Signing time: Tue 16 Dec 2025 17:20:45 +0000 Manifest this update: Tue 16 Dec 2025 17:15:45 +0000 Manifest next update: Sat 20 Dec 2025 01:59:45 +0000 Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: g3tI+iYqIwSb8RJwa7u3LMbUM6tRlWD7/NFujmlCbzQ=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:89:41:8c:66:90:d0:8f:c0:d0:d3:21:91:b0:6b:6e:72:01:78:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Dec 16 17:15:45 2025 GMT Not After : Dec 20 01:59:45 2025 GMT Subject: CN=05EFE2EB8CDF2ACC8EC6C84C19B2CBD9254ABD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:62:7d:2c:ea:54:29:90:02:dd:63:a6:97: 44:9d:bb:a2:2f:00:79:bc:05:6b:81:bb:81:61:1e: 54:51:05:34:3b:f4:7f:3a:cf:25:7e:1e:12:7f:b3: 37:c7:ca:9c:7b:3e:5a:9e:f5:10:29:da:29:dc:f1: 10:f3:af:c3:a3:98:63:c0:74:43:8f:b3:c4:41:a0: 46:5b:c9:34:a7:bd:27:34:f4:d6:5b:f8:52:8b:1e: c5:07:7d:ce:ae:b9:e4:fb:20:57:e5:2a:6b:cc:35: 19:8f:ea:37:9a:bd:91:1a:50:ea:46:4e:ac:ac:8d: 37:6a:3e:3a:af:dc:3f:3b:82:25:2e:23:02:25:39: 7f:52:d7:88:f5:c0:4b:4d:17:26:af:3c:4e:f9:64: 5c:9d:84:74:7f:52:4f:a8:ef:d0:c3:71:94:94:29: 3c:09:cb:fc:6d:fa:da:88:99:bb:4e:ed:b8:60:72: 26:f7:d9:1e:e3:15:78:c8:47:3e:de:bf:aa:07:d7: 02:6c:87:52:78:dd:4c:a4:6e:f7:a2:63:08:ed:58: 4c:06:db:38:01:2a:62:9a:84:e4:69:05:8b:4c:9d: 29:4e:95:d0:57:5a:91:56:19:4c:47:c9:1d:8a:e1: c7:17:61:58:17:e8:be:30:be:8d:c9:74:ac:b6:c4: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EF:E2:EB:8C:DF:2A:CC:8E:C6:C8:4C:19:B2:CB:D9:25:4A:BD:43 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:33:01:45:13:7c:1b:8a:53:8f:c0:ba:5f:9c:cc:4b:8d: 9a:eb:b9:50:24:c4:f3:99:2c:ce:a5:99:6a:2d:01:4f:ff:8c: d4:7e:46:ab:41:a6:a7:68:87:79:be:0b:12:92:04:f5:df:ef: 79:26:52:07:1c:36:86:d6:f7:b1:af:3c:1d:f3:b8:0f:b8:a0: 0a:ec:da:9e:37:d2:0e:11:03:03:25:5a:85:87:20:0b:11:52: 4e:72:62:11:6d:1f:e2:1f:a0:6d:fd:90:66:93:66:99:ec:2c: de:0f:cd:ec:01:c9:f8:1d:78:e3:e3:f9:ae:31:82:0f:c7:7f: 47:70:e0:5f:8d:68:b6:77:55:fa:bd:f3:15:ec:25:fb:53:ba: 3d:a0:77:92:04:00:f6:ea:62:07:15:54:78:f6:a6:4e:de:29: fd:70:b9:bb:b0:2d:f5:83:58:18:9f:72:8e:34:75:dc:6c:46: 96:81:77:ba:a8:5d:bb:a0:82:cd:ae:a3:20:e3:e5:d3:4d:82: 4f:9a:df:d2:63:cf:83:55:41:40:96:4f:a9:b0:74:dd:47:ed: ba:c6:5f:f8:81:5e:44:75:35:05:53:9a:57:c2:be:1f:18:0b: 6a:e7:dc:2a:1f:84:a5:02:bf:03:78:b7:61:ca:32:fa:9d:4e: ef:d2:f3:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeolBjGaQ0I/A0NMhkbBrbnIBePowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTEyMTYxNzE1NDVaFw0yNTEyMjAwMTU5NDVaMDMxMTAvBgNV BAMTKDA1RUZFMkVCOENERjJBQ0M4RUM2Qzg0QzE5QjJDQkQ5MjU0QUJENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvWJ9LOpUKZAC3WOml0Sdu6Iv AHm8BWuBu4FhHlRRBTQ79H86zyV+HhJ/szfHypx7Plqe9RAp2inc8RDzr8OjmGPA dEOPs8RBoEZbyTSnvSc09NZb+FKLHsUHfc6uueT7IFflKmvMNRmP6jeavZEaUOpG TqysjTdqPjqv3D87giUuIwIlOX9S14j1wEtNFyavPE75ZFydhHR/Uk+o79DDcZSU KTwJy/xt+tqImbtO7bhgcib32R7jFXjIRz7ev6oH1wJsh1J43UykbveiYwjtWEwG 2zgBKmKahORpBYtMnSlOldBXWpFWGUxHyR2K4ccXYVgX6L4wvo3JdKy2xMSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBe/i64zfKsyOxshMGbLL2SVKvUMwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvFMwFFE3wbilOPwLpfnMxLjZrruVAkxPOZ LM6lmWotAU//jNR+RqtBpqdoh3m+CxKSBPXf73kmUgccNobW97GvPB3zuA+4oArs 2p430g4RAwMlWoWHIAsRUk5yYhFtH+IfoG39kGaTZpnsLN4PzewByfgdeOPj+a4x gg/Hf0dw4F+NaLZ3Vfq98xXsJftTuj2gd5IEAPbqYgcVVHj2pk7eKf1wubuwLfWD WBifco40ddxsRpaBd7qoXbuggs2uoyDj5dNNgk+a39Jjz4NVQUCWT6mwdN1H7brG X/iBXkR1NQVTmlfCvh8YC2rn3CofhKUCvwN4t2HKMvqdTu/S81E= -----END CERTIFICATE-----Generated at Thu Dec 18 14:08:21 2025 by rpki-client