This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: yxPWI08R7pud7Nr6Sd1olZD1sUJeUNoL4zzLk7mjL/w= Subject key identifier: D0:B9:1B:F6:39:60:DC:4C:B7:73:7E:D2:6E:40:50:6E:A8:FA:6C:FD Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 53066948F25D8B62471DA0015B5641971CEC3574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 01C5 Signing time: Fri 05 Dec 2025 03:02:31 +0000 Manifest this update: Fri 05 Dec 2025 02:57:31 +0000 Manifest next update: Mon 08 Dec 2025 12:48:31 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: 07phHicjhGUg4U5q8GdG6InGfKjhnRXGrTHodOkYjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:06:69:48:f2:5d:8b:62:47:1d:a0:01:5b:56:41:97:1c:ec:35:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Dec 5 02:57:31 2025 GMT Not After : Dec 8 12:48:31 2025 GMT Subject: CN=D0B91BF63960DC4CB7737ED26E40506EA8FA6CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:98:84:d0:5b:f2:67:d9:54:92:63:58:fe:a3: ba:3c:33:dd:6a:dd:9e:43:e9:42:15:13:e3:75:8d: 87:73:e9:e8:d9:c5:26:d4:70:da:e4:13:52:67:f8: ec:af:82:5e:c7:0f:03:63:53:0a:8a:97:4c:25:d4: a7:0a:aa:be:44:32:ac:1b:cc:04:c4:74:ce:07:d5: 3f:06:fe:e9:60:ef:2b:e4:9e:00:68:ad:6d:73:ad: ff:0a:2f:02:5f:76:84:f5:11:04:96:7c:c9:74:5a: ff:83:ea:6c:7f:41:20:94:d3:0d:c6:77:69:35:d1: 0d:fa:e8:e0:01:8b:ca:a7:b7:e1:f6:bf:07:be:ed: 23:87:d9:56:32:ac:45:66:47:bc:85:3c:38:8d:cf: fe:e4:f1:4d:5e:49:1b:85:ae:1a:c8:fd:93:43:1c: 1c:8d:11:45:18:8a:1d:71:1b:6f:f7:f1:a8:39:e6: 40:a8:07:ba:27:68:17:6a:1f:70:f1:ce:e5:be:4a: 86:1a:88:84:96:5a:b6:02:04:66:7a:c6:60:b6:e2: a4:bb:83:23:ac:35:2a:8c:5a:2b:9e:a4:dd:99:ae: dc:22:ee:ba:43:67:29:d8:7d:96:d7:bd:06:9e:49: 24:3a:d0:ac:72:9d:fd:eb:18:e8:d2:bc:83:37:c4: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:1B:F6:39:60:DC:4C:B7:73:7E:D2:6E:40:50:6E:A8:FA:6C:FD X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:07:8d:b2:53:81:5d:6e:09:58:61:15:3e:f7:8d:01:a6: 49:cf:23:9b:de:f6:c9:10:81:eb:14:a1:89:2f:47:dd:63:78: 5a:aa:e3:bf:14:34:17:3a:43:da:e0:b4:54:92:60:7e:6c:6a: 56:6e:3a:fb:9d:5c:b3:78:f9:14:36:68:73:60:49:b9:30:47: 91:52:bc:90:ab:45:48:b7:4d:a6:ae:fc:7c:c5:92:e8:99:71: 64:1d:48:c5:d9:29:36:a0:96:e7:9a:fd:d4:e9:07:19:58:c9: 93:e7:80:da:46:2f:90:0c:1f:c1:56:f7:89:d7:3f:71:90:66: f5:1b:8d:d8:82:29:bd:3b:3b:3d:48:f6:b2:89:b5:b0:1a:a4: b2:f9:bf:9e:2b:1b:e3:af:4d:b1:df:4d:db:16:9d:f2:47:a9: 31:59:40:5e:69:97:8d:d4:67:34:e5:f4:58:bb:d8:6a:f8:0f: 56:ab:49:49:e7:f7:a8:5b:e7:5a:3f:79:c8:51:c0:9e:db:ef: 76:0a:e7:66:df:3f:40:ec:76:87:04:1b:99:91:fd:9c:b9:ec: 97:ed:b4:89:12:4b:7c:08:9f:45:3a:1c:c7:68:aa:97:cb:ca: 83:79:b1:e9:29:8b:e5:c1:6f:5b:07:c4:a2:c9:bd:f8:68:74: 30:4c:95:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwZpSPJdi2JHHaABW1ZBlxzsNXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTEyMDUwMjU3MzFaFw0yNTEyMDgxMjQ4MzFaMDMxMTAvBgNV BAMTKEQwQjkxQkY2Mzk2MERDNENCNzczN0VEMjZFNDA1MDZFQThGQTZDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmITQW/Jn2VSSY1j+o7o8M91q 3Z5D6UIVE+N1jYdz6ejZxSbUcNrkE1Jn+Oyvgl7HDwNjUwqKl0wl1KcKqr5EMqwb zATEdM4H1T8G/ulg7yvkngBorW1zrf8KLwJfdoT1EQSWfMl0Wv+D6mx/QSCU0w3G d2k10Q366OABi8qnt+H2vwe+7SOH2VYyrEVmR7yFPDiNz/7k8U1eSRuFrhrI/ZND HByNEUUYih1xG2/38ag55kCoB7onaBdqH3DxzuW+SoYaiISWWrYCBGZ6xmC24qS7 gyOsNSqMWiuepN2Zrtwi7rpDZynYfZbXvQaeSSQ60Kxynf3rGOjSvIM3xE09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Lkb9jlg3Ey3c37SbkBQbqj6bP0wHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHFB42yU4FdbglYYRU+940BpknPI5ve9skQ gesUoYkvR91jeFqq478UNBc6Q9rgtFSSYH5salZuOvudXLN4+RQ2aHNgSbkwR5FS vJCrRUi3Taau/HzFkuiZcWQdSMXZKTagluea/dTpBxlYyZPngNpGL5AMH8FW94nX P3GQZvUbjdiCKb07Oz1I9rKJtbAapLL5v54rG+OvTbHfTdsWnfJHqTFZQF5pl43U ZzTl9Fi72Gr4D1arSUnn96hb51o/echRwJ7b73YK52bfP0DsdocEG5mR/Zy57Jft tIkSS3wIn0U6HMdoqpfLyoN5sekpi+XBb1sHxKLJvfhodDBMlcg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:43 2025 by rpki-client