This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: tAweL04wVRnltbBqYMhgO000H/bC/oGwkWfat5snyyE= Subject key identifier: 70:7E:23:55:BE:77:4F:F8:31:B7:E2:C2:7A:4E:9A:9C:43:C1:B5:ED Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 54B48A47ACC65661BC060F5752800CF61677C1AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 03AA Signing time: Fri 05 Dec 2025 17:42:02 +0000 Manifest this update: Fri 05 Dec 2025 17:37:02 +0000 Manifest next update: Mon 08 Dec 2025 22:18:02 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) 3: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: y60TFrjBbtv8tmVPDMcCZDEx1EPFmcJZ2LIXB9CloGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b4:8a:47:ac:c6:56:61:bc:06:0f:57:52:80:0c:f6:16:77:c1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Dec 5 17:37:02 2025 GMT Not After : Dec 8 22:18:02 2025 GMT Subject: CN=707E2355BE774FF831B7E2C27A4E9A9C43C1B5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:a6:f9:84:8d:5d:4d:5b:ce:12:9d:da:03: 8f:2d:c6:ae:a9:4f:37:27:bc:0f:23:1b:52:03:e7: b8:28:ea:8e:f6:71:f7:8e:c4:b2:c4:82:55:86:13: cd:11:c9:8d:ff:2f:3f:2e:69:da:df:0f:c3:b9:9d: 8a:e6:91:7c:7d:ef:d8:12:90:85:aa:9e:9d:05:51: ac:bf:ed:d5:82:47:57:f9:65:5e:b4:f4:ae:90:cf: c8:a2:a1:ce:0b:63:08:28:5d:bd:ed:9b:7f:13:f4: a2:40:7f:83:94:ed:16:c7:96:e4:7c:7c:62:d2:1d: 5e:ec:e5:c1:3b:25:2b:c5:a5:98:24:15:1a:6f:6b: 36:53:26:89:7e:41:4e:09:ca:cf:60:e2:97:b5:8b: 3e:93:6b:a7:f5:08:1a:db:b3:30:83:e3:2c:47:a7: e1:45:70:8c:96:a6:86:4b:82:ac:02:f4:bb:a8:4a: ae:46:58:b9:98:f3:74:6d:cd:35:f9:1c:9f:d9:83: 39:9c:df:df:e4:e7:d8:75:12:36:b0:03:ba:3c:ad: 3f:82:c8:e8:1d:aa:f8:98:7e:53:cc:99:40:f3:4b: a4:16:51:93:a0:41:81:ec:9a:ce:85:85:ea:2a:e3: 63:b2:e1:e9:ea:6c:26:57:a8:19:5c:df:d8:4b:58: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:23:55:BE:77:4F:F8:31:B7:E2:C2:7A:4E:9A:9C:43:C1:B5:ED X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:e4:26:1c:29:60:e9:e0:ef:b6:6f:5e:3a:57:88:4c:f9: 16:20:af:91:cd:c6:85:c7:5c:90:8b:25:b2:b6:7d:27:e5:e6: b2:25:ce:d9:3c:b3:07:87:a0:d5:ed:4e:a3:45:35:0c:52:07: ef:7a:4c:6a:8f:58:68:68:b3:91:42:c0:31:f6:f5:ce:4d:bd: 23:58:6d:a2:4f:af:ca:b5:e9:26:c0:a7:21:69:35:b9:49:eb: 96:ef:03:04:cc:1b:15:b3:d0:11:d6:d5:6e:0c:cb:ed:b0:bc: 7f:51:f1:3f:69:18:51:63:77:c8:c5:a9:22:e1:61:69:15:b4: d6:97:d9:83:f8:af:84:86:ec:89:d0:e6:7a:0a:4f:d1:d5:d5: 2e:b5:43:4b:4f:45:b2:bc:61:86:66:fd:4b:b8:78:db:74:c8: d1:84:57:13:0d:30:f7:42:1e:08:5c:f3:cb:31:38:58:da:85: cb:a5:08:72:ab:fa:13:c3:cb:ca:84:33:5a:5c:b6:97:b9:3f: dd:32:cf:53:ee:0c:fa:48:5f:23:c9:cd:c2:17:7d:a5:33:aa: 73:42:e8:db:57:e5:4a:0d:15:f3:50:aa:c2:ca:f2:59:c4:df: 78:25:9f:ec:10:90:b7:fe:ec:26:7c:36:3d:59:45:5c:ef:8f: 19:a0:6d:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLSKR6zGVmG8Bg9XUoAM9hZ3wawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTEyMDUxNzM3MDJaFw0yNTEyMDgyMjE4MDJaMDMxMTAvBgNV BAMTKDcwN0UyMzU1QkU3NzRGRjgzMUI3RTJDMjdBNEU5QTlDNDNDMUI1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiab5hI1dTVvOEp3aA48txq6p TzcnvA8jG1ID57go6o72cfeOxLLEglWGE80RyY3/Lz8uadrfD8O5nYrmkXx979gS kIWqnp0FUay/7dWCR1f5ZV609K6Qz8iioc4LYwgoXb3tm38T9KJAf4OU7RbHluR8 fGLSHV7s5cE7JSvFpZgkFRpvazZTJol+QU4Jys9g4pe1iz6Ta6f1CBrbszCD4yxH p+FFcIyWpoZLgqwC9LuoSq5GWLmY83RtzTX5HJ/Zgzmc39/k59h1EjawA7o8rT+C yOgdqviYflPMmUDzS6QWUZOgQYHsms6Fheoq42Oy4enqbCZXqBlc39hLWGM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcH4jVb53T/gxt+LCek6anEPBte0wHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAQ5CYcKWDp4O+2b146V4hM+RYgr5HNxoXH XJCLJbK2fSfl5rIlztk8sweHoNXtTqNFNQxSB+96TGqPWGhos5FCwDH29c5NvSNY baJPr8q16SbApyFpNblJ65bvAwTMGxWz0BHW1W4My+2wvH9R8T9pGFFjd8jFqSLh YWkVtNaX2YP4r4SG7InQ5noKT9HV1S61Q0tPRbK8YYZm/Uu4eNt0yNGEVxMNMPdC Hghc88sxOFjahculCHKr+hPDy8qEM1pctpe5P90yz1PuDPpIXyPJzcIXfaUzqnNC 6NtX5UoNFfNQqsLK8lnE33gln+wQkLf+7CZ8Nj1ZRVzvjxmgbYM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:58 2025 by rpki-client