This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: wM2sYcuCO2CVU6CV0jh8BKE2FIpzFnh6w9unio+LzPQ= Subject key identifier: DE:DD:31:01:33:61:B6:BF:FB:B9:DE:D9:89:1C:89:F6:07:DB:77:66 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 5BE1A43723D822CAF3A4961C1EE523C2AA8C3D8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04F4 Signing time: Sat 06 Dec 2025 07:20:04 +0000 Manifest this update: Sat 06 Dec 2025 07:15:04 +0000 Manifest next update: Tue 09 Dec 2025 09:21:04 +0000 Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) 2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: uk27ac9oH92jxnpJzGmKb7NeN729paOzzm24ISTm+Ac=) 3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e1:a4:37:23:d8:22:ca:f3:a4:96:1c:1e:e5:23:c2:aa:8c:3d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Dec 6 07:15:04 2025 GMT Not After : Dec 9 09:21:04 2025 GMT Subject: CN=DEDD31013361B6BFFBB9DED9891C89F607DB7766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:5f:3f:03:74:01:9e:27:52:b6:6c:8c:40: 84:79:b6:a7:92:ba:3a:23:ed:19:b7:d5:d3:ab:62: 25:b2:d2:d0:88:9d:b0:64:fb:46:18:b8:8d:ab:79: 18:74:38:e3:a9:a5:9f:67:22:6c:dd:a6:fa:a9:2b: 3f:aa:3e:d0:15:50:97:14:ca:0a:9e:a7:5b:c2:70: ce:6c:51:b1:85:1f:e8:83:aa:d8:a3:3c:9d:49:9d: 68:19:c2:6c:3b:a5:ed:3c:e6:b8:6d:4d:b5:34:18: 96:c1:38:78:57:c3:f1:1c:bb:b2:0b:fc:4e:76:4b: ed:c3:39:64:f8:3f:66:3b:37:eb:dd:0d:fe:ab:d8: 21:21:78:dc:77:9c:30:01:62:35:d8:60:97:9e:f4: 1d:a3:20:6d:6a:e2:2f:fe:7b:b7:ee:f2:15:27:12: 3e:24:c1:48:6c:e3:96:33:78:9e:f6:7b:80:07:64: 5c:cf:5b:02:e4:94:68:e2:6e:66:00:89:f0:ff:ed: 52:e4:7e:55:99:61:aa:08:d8:1f:af:93:25:df:2f: cd:3a:65:d3:ff:c3:c9:df:a0:b0:69:c6:a6:bf:7d: bd:71:d0:4f:91:50:f3:bb:c5:d5:d7:d2:6c:fd:17: 36:2d:b2:b3:f3:aa:f3:36:13:4b:fd:28:fe:bd:57: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:31:01:33:61:B6:BF:FB:B9:DE:D9:89:1C:89:F6:07:DB:77:66 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:27:03:0a:27:32:ff:95:14:ba:ed:17:49:ba:35:9d:fc:5a: 33:66:8f:90:fb:06:b2:85:0d:e2:11:db:e7:b7:47:25:93:bd: ab:b5:2b:80:49:a8:43:79:24:7e:fa:8c:40:9e:f5:ba:e7:fc: 26:ed:24:a6:b8:a2:37:d4:d1:1f:ef:23:42:dc:02:f3:62:a0: 64:62:f3:3f:12:0d:74:95:d9:ce:b9:b6:09:a2:62:9c:37:f9: 54:62:82:1b:25:e4:27:6b:38:f3:39:ca:b6:10:9a:ca:75:9c: 30:3e:27:ea:f9:99:a8:34:5a:af:1a:a4:dc:84:89:66:1c:1e: 34:6d:83:53:79:9e:3e:80:50:4e:6e:9a:39:fd:54:a2:ad:e2: 32:0c:98:f5:cf:57:4e:8b:10:6e:28:79:ba:b8:29:67:d4:84: 05:c1:47:09:3c:66:13:f7:25:b2:06:e7:6f:db:41:2a:25:97: bd:9f:b8:02:56:4b:fb:17:7b:80:f6:69:22:ed:c2:aa:3f:71: e4:95:9f:04:fd:c4:2c:65:70:3f:ef:3f:4e:70:92:fd:e0:34: ae:7d:41:bc:fd:5a:68:e1:c6:b0:f0:ce:87:ec:4e:10:7a:1d: ae:4e:8b:72:fd:e4:bd:cd:05:33:6d:43:e0:c7:3c:35:45:16: 54:08:95:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+GkNyPYIsrzpJYcHuUjwqqMPY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTEyMDYwNzE1MDRaFw0yNTEyMDkwOTIxMDRaMDMxMTAvBgNV BAMTKERFREQzMTAxMzM2MUI2QkZGQkI5REVEOTg5MUM4OUY2MDdEQjc3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosF8/A3QBnidStmyMQIR5tqeS ujoj7Rm31dOrYiWy0tCInbBk+0YYuI2reRh0OOOppZ9nImzdpvqpKz+qPtAVUJcU ygqep1vCcM5sUbGFH+iDqtijPJ1JnWgZwmw7pe085rhtTbU0GJbBOHhXw/Ecu7IL /E52S+3DOWT4P2Y7N+vdDf6r2CEheNx3nDABYjXYYJee9B2jIG1q4i/+e7fu8hUn Ej4kwUhs45YzeJ72e4AHZFzPWwLklGjibmYAifD/7VLkflWZYaoI2B+vkyXfL806 ZdP/w8nfoLBpxqa/fb1x0E+RUPO7xdXX0mz9FzYtsrPzqvM2E0v9KP69V/xlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3t0xATNhtr/7ud7ZiRyJ9gfbd2YwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcnAwonMv+VFLrtF0m6NZ38WjNmj5D7BrKF DeIR2+e3RyWTvau1K4BJqEN5JH76jECe9brn/CbtJKa4ojfU0R/vI0LcAvNioGRi 8z8SDXSV2c65tgmiYpw3+VRighsl5CdrOPM5yrYQmsp1nDA+J+r5mag0Wq8apNyE iWYcHjRtg1N5nj6AUE5umjn9VKKt4jIMmPXPV06LEG4oebq4KWfUhAXBRwk8ZhP3 JbIG52/bQSoll72fuAJWS/sXe4D2aSLtwqo/ceSVnwT9xCxlcD/vP05wkv3gNK59 Qbz9WmjhxrDwzofsThB6Ha5Oi3L95L3NBTNtQ+DHPDVFFlQIldI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:11 2025 by rpki-client