This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: mFSRhQxTpHvtDYSOjAx0k9HWiQ3o1wTa76iLJVxaBcI= Subject key identifier: 84:67:25:F6:22:C9:74:99:B1:68:1E:08:3A:13:25:C6:4B:78:62:21 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 594E2CA34D32A66AE61E62C8BDE5DB846BA1D12A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: DB Signing time: Tue 16 Dec 2025 22:10:59 +0000 Manifest this update: Tue 16 Dec 2025 22:05:59 +0000 Manifest next update: Sat 20 Dec 2025 06:17:59 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) 2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: gXaIJXu66DHYshFEInLLdBJk0DxTMXmgBVtZdjxfIDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4e:2c:a3:4d:32:a6:6a:e6:1e:62:c8:bd:e5:db:84:6b:a1:d1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Dec 16 22:05:59 2025 GMT Not After : Dec 20 06:17:59 2025 GMT Subject: CN=846725F622C97499B1681E083A1325C64B786221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:5c:8e:15:cf:fa:51:37:ed:ae:6b:d8:bc: 21:a4:55:7d:fb:6b:63:3c:f4:14:e2:22:27:f6:7f: 36:2b:44:32:4c:82:b5:3e:a8:a5:a6:e1:19:09:64: 55:fa:6e:03:dc:1c:09:62:06:00:1e:d5:1c:77:e8: b8:c5:ee:8a:22:5e:73:19:e1:e1:39:96:cc:ee:89: ef:4b:d3:a9:41:06:ae:9d:cb:1d:ff:1f:77:00:4c: 0d:95:5d:62:87:f6:10:88:e0:d6:3b:87:63:89:c9: 2e:55:fd:c0:6b:92:9e:2d:b6:50:67:2c:da:89:d1: 77:f6:f0:ce:01:40:45:1d:c0:06:f9:68:c3:90:cc: 97:f2:3d:2c:0d:d2:9c:1f:9b:de:e9:b5:a8:7e:bc: 4a:94:95:a3:77:56:c9:4c:c6:3e:c7:ee:1c:80:51: 3f:e3:3d:52:49:b4:de:10:ed:a2:e7:c0:34:a2:93: 6e:f4:66:60:52:e1:0f:87:66:0e:8d:bc:5c:d9:60: b9:1e:43:03:0c:10:06:18:36:3c:84:d8:61:7c:05: 47:04:b8:89:75:c7:12:e4:60:b4:d7:dd:ea:d5:5c: d1:00:c0:89:8c:5e:3c:25:28:40:c9:b1:6e:5a:0d: bb:b5:5c:46:c3:34:89:7f:01:14:c1:8d:91:c9:19: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:25:F6:22:C9:74:99:B1:68:1E:08:3A:13:25:C6:4B:78:62:21 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:56:12:25:81:0e:59:ae:21:c0:03:3f:1b:9d:f6:43:80:06: be:81:9a:66:43:38:8e:05:1d:c2:6e:f7:7b:76:83:f2:fc:24: b0:e7:e6:e3:13:ca:6b:cc:f7:0c:bf:d2:e6:a5:ad:3e:a7:03: 80:7f:e9:b3:02:13:36:6e:91:a9:3d:44:b6:f5:fe:42:88:8e: 18:98:ac:f1:f3:2b:ab:83:12:68:78:d6:bb:83:79:4b:21:87: 57:84:1a:88:ae:96:c0:1f:5c:59:ac:c7:ef:2b:95:90:ab:1c: a7:78:91:aa:d5:1c:bd:77:3c:19:df:0a:81:77:5d:f3:6f:8a: 03:80:31:bd:ac:af:f6:9d:3c:4b:4f:af:97:c0:ee:3a:d9:0f: bf:cb:87:67:8e:a4:2c:76:58:31:23:12:30:5b:fb:54:ee:45: 89:a2:f4:31:69:c9:6a:86:3f:2b:b1:72:32:dd:1b:23:71:61: 2a:5b:5c:24:1d:bf:54:05:10:ff:bd:ba:c0:5e:30:44:3e:b3: e2:25:34:cb:1e:9d:23:b2:03:d2:a7:73:b1:b7:33:29:43:16: 9f:0a:70:50:f7:04:55:d0:5d:c0:bb:75:8c:14:55:9a:49:ec: 7a:f7:94:e6:3f:b3:c2:e8:75:37:58:6f:b8:dd:19:55:63:2f: c1:e2:63:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWU4so00ypmrmHmLIveXbhGuh0SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTEyMTYyMjA1NTlaFw0yNTEyMjAwNjE3NTlaMDMxMTAvBgNV BAMTKDg0NjcyNUY2MjJDOTc0OTlCMTY4MUUwODNBMTMyNUM2NEI3ODYyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodlyOFc/6UTftrmvYvCGkVX37 a2M89BTiIif2fzYrRDJMgrU+qKWm4RkJZFX6bgPcHAliBgAe1Rx36LjF7ooiXnMZ 4eE5lszuie9L06lBBq6dyx3/H3cATA2VXWKH9hCI4NY7h2OJyS5V/cBrkp4ttlBn LNqJ0Xf28M4BQEUdwAb5aMOQzJfyPSwN0pwfm97ptah+vEqUlaN3VslMxj7H7hyA UT/jPVJJtN4Q7aLnwDSik270ZmBS4Q+HZg6NvFzZYLkeQwMMEAYYNjyE2GF8BUcE uIl1xxLkYLTX3erVXNEAwImMXjwlKEDJsW5aDbu1XEbDNIl/ARTBjZHJGW83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGcl9iLJdJmxaB4IOhMlxkt4YiEwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1WEiWBDlmuIcADPxud9kOABr6BmmZDOI4F HcJu93t2g/L8JLDn5uMTymvM9wy/0ualrT6nA4B/6bMCEzZukak9RLb1/kKIjhiY rPHzK6uDEmh41ruDeUshh1eEGoiulsAfXFmsx+8rlZCrHKd4karVHL13PBnfCoF3 XfNvigOAMb2sr/adPEtPr5fA7jrZD7/Lh2eOpCx2WDEjEjBb+1TuRYmi9DFpyWqG PyuxcjLdGyNxYSpbXCQdv1QFEP+9usBeMEQ+s+IlNMsenSOyA9Knc7G3MylDFp8K cFD3BFXQXcC7dYwUVZpJ7Hr3lOY/s8LodTdYb7jdGVVjL8HiY8g= -----END CERTIFICATE-----Generated at Wed Dec 17 21:57:54 2025 by rpki-client