This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: 0Xo6xGQ8sbO9rVaipsz5wXcUbxY2Y5/2TjPcB0mLmG8= Subject key identifier: 3D:A1:64:AC:9E:7E:DF:43:1B:C3:0F:48:3C:5F:17:1C:CA:DB:C2:C1 Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 3C6588FFB5F32BE02E2D344993A00CBFD1FAE090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 02A6 Signing time: Sat 06 Dec 2025 19:01:15 +0000 Manifest this update: Sat 06 Dec 2025 18:56:15 +0000 Manifest next update: Wed 10 Dec 2025 01:56:15 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) 2: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: 4zPWKwscctsWJ5sEnTFJ25qKo5FHc4ANTbOK0uBhtJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:65:88:ff:b5:f3:2b:e0:2e:2d:34:49:93:a0:0c:bf:d1:fa:e0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Dec 6 18:56:15 2025 GMT Not After : Dec 10 01:56:15 2025 GMT Subject: CN=3DA164AC9E7EDF431BC30F483C5F171CCADBC2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:b6:e7:36:72:f4:89:5f:bc:e1:c1:82:d7: cb:d7:f9:4e:4b:9d:5d:be:dc:58:2a:8a:d6:e0:c0: 10:01:29:b3:f0:74:9e:d9:9c:ac:78:5d:8c:c2:02: 0e:c3:6a:af:32:35:3c:f9:b8:03:ac:fe:e9:b7:14: a4:03:1a:c2:65:dd:9f:82:91:d6:ce:d6:04:39:7f: a2:9f:28:b1:86:31:8e:a8:50:63:a0:3b:f5:95:2c: 42:b6:84:b2:21:6e:e2:20:9a:15:d2:7d:37:91:b2: c0:14:48:68:2e:de:6d:7b:bc:0f:1e:4c:a9:32:45: 41:ad:1d:2c:71:d4:b3:2f:00:8e:dd:22:ca:b9:41: 8c:0a:e8:7e:87:ab:5d:b0:85:8a:f3:f8:10:a3:cd: 67:4b:96:eb:26:20:38:63:68:ee:3f:bc:65:35:79: 18:56:dc:1d:ef:76:d5:b8:8f:d5:53:93:4c:f6:74: f7:d3:ca:56:b2:38:2a:e5:f5:9d:d4:89:30:c6:8b: bd:a5:c8:ab:6d:c2:1a:f2:24:d1:97:61:67:c4:b8: bd:ce:49:c3:49:d8:76:c9:3a:ef:a3:d7:b3:46:60: f5:71:d9:a7:0f:1f:4a:30:48:6b:7b:cc:a2:db:7e: 9b:dc:a1:ca:a6:ef:55:39:0e:32:d9:26:f4:6d:f1: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A1:64:AC:9E:7E:DF:43:1B:C3:0F:48:3C:5F:17:1C:CA:DB:C2:C1 X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a1:5c:7b:76:f1:b4:cc:75:b1:bd:55:ce:22:06:99:1e:25: 40:57:90:c7:d9:fb:ef:0a:4a:f1:d2:0c:4d:5f:e2:a5:ec:dc: 02:e2:0b:df:31:20:4f:e6:18:a5:2c:8e:8a:94:8e:05:84:ba: cd:4f:0f:5c:0e:e5:e3:4f:61:c1:16:9a:3b:62:26:71:f1:90: c0:eb:c6:32:60:d7:0b:8c:1b:03:4c:68:ac:45:fc:2e:e4:d8: f5:4a:f6:ba:71:3b:83:95:ed:55:e3:62:47:1b:33:28:82:72: f5:33:59:a8:e3:13:78:13:f1:02:34:ff:1e:16:2b:03:c3:67: b5:b8:30:2e:80:48:84:3b:c0:d1:9f:a7:80:ac:51:2b:9c:32: db:01:03:d4:f8:be:00:49:47:67:f5:dc:a0:ef:2e:57:0e:d7: 8f:90:38:48:5b:e6:e4:e1:6c:4b:c9:ce:ba:4d:8f:76:df:bb: 20:dc:42:05:ba:6c:20:af:67:36:b1:82:97:73:5e:7c:13:38: 10:62:8d:c8:d7:ab:59:fd:d4:af:19:10:12:df:bd:2d:0d:54: 38:f9:2e:34:2e:6a:53:d9:43:52:5c:be:77:16:3e:91:fd:13: 54:ef:f8:f0:ff:7c:eb:de:9b:e2:63:44:91:6e:a3:94:5f:21: 0f:fa:3e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGWI/7XzK+AuLTRJk6AMv9H64JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNTEyMDYxODU2MTVaFw0yNTEyMTAwMTU2MTVaMDMxMTAvBgNV BAMTKDNEQTE2NEFDOUU3RURGNDMxQkMzMEY0ODNDNUYxNzFDQ0FEQkMyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJLbnNnL0iV+84cGC18vX+U5L nV2+3FgqitbgwBABKbPwdJ7ZnKx4XYzCAg7Daq8yNTz5uAOs/um3FKQDGsJl3Z+C kdbO1gQ5f6KfKLGGMY6oUGOgO/WVLEK2hLIhbuIgmhXSfTeRssAUSGgu3m17vA8e TKkyRUGtHSxx1LMvAI7dIsq5QYwK6H6Hq12whYrz+BCjzWdLlusmIDhjaO4/vGU1 eRhW3B3vdtW4j9VTk0z2dPfTylayOCrl9Z3UiTDGi72lyKttwhryJNGXYWfEuL3O ScNJ2HbJOu+j17NGYPVx2acPH0owSGt7zKLbfpvcocqm71U5DjLZJvRt8TcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaFkrJ5+30Mbww9IPF8XHMrbwsEwHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABahXHt28bTMdbG9Vc4iBpkeJUBXkMfZ++8K SvHSDE1f4qXs3ALiC98xIE/mGKUsjoqUjgWEus1PD1wO5eNPYcEWmjtiJnHxkMDr xjJg1wuMGwNMaKxF/C7k2PVK9rpxO4OV7VXjYkcbMyiCcvUzWajjE3gT8QI0/x4W KwPDZ7W4MC6ASIQ7wNGfp4CsUSucMtsBA9T4vgBJR2f13KDvLlcO14+QOEhb5uTh bEvJzrpNj3bfuyDcQgW6bCCvZzaxgpdzXnwTOBBijcjXq1n91K8ZEBLfvS0NVDj5 LjQualPZQ1JcvncWPpH9E1Tv+PD/fOvem+JjRJFuo5RfIQ/6PuQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:37 2025 by rpki-client