This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: 2WzicvFWqZG5zRH4wHpRFU5BytI4+8ab88xr8Feshj8= Subject key identifier: 45:A3:B7:D6:8F:C1:63:B0:4D:8C:50:75:5F:93:99:CA:15:D1:5C:C2 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 0CB521A303D707554750044BBF974294087AA2DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 0103 Signing time: Sat 06 Dec 2025 18:21:50 +0000 Manifest this update: Sat 06 Dec 2025 18:16:50 +0000 Manifest next update: Tue 09 Dec 2025 21:53:50 +0000 Files and hashes: 1: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 2: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 3: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: iA8Ihpeu9OxtUuqHuXB7p8g34AJrgk8jIlqatvxzkXM=) 4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 6: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b5:21:a3:03:d7:07:55:47:50:04:4b:bf:97:42:94:08:7a:a2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Dec 6 18:16:50 2025 GMT Not After : Dec 9 21:53:50 2025 GMT Subject: CN=45A3B7D68FC163B04D8C50755F9399CA15D15CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:f9:de:e4:cc:46:c7:fb:e0:2c:39:da:b2: 81:0d:20:01:6e:76:79:05:c8:6b:e4:49:29:c8:25: 0b:3d:6e:ba:3c:4e:58:f2:ab:90:fe:2c:b7:f4:89: ca:c2:35:5d:89:6f:b3:5d:f2:08:f2:92:9a:30:3b: d0:c9:60:46:8e:45:70:2e:72:72:6c:ce:58:ba:10: f8:82:54:02:c1:f0:ca:99:75:93:d4:75:56:09:cc: 49:fa:6a:34:dc:a2:80:cf:42:e3:e1:5d:7d:4b:54: b5:2a:06:b4:05:c5:75:bb:6a:f7:8e:ef:80:8f:3d: 76:a2:47:d5:63:a6:5a:04:b4:e3:d8:9d:c7:a0:92: d5:77:80:1a:b9:2a:e5:53:65:bb:b2:d0:a3:fe:bb: 76:16:06:0c:58:e0:1b:b4:71:16:cd:4c:bb:e8:03: c9:e8:83:ca:d0:dc:ac:cd:d7:ef:d7:85:38:0c:00: ea:36:0e:cc:b2:a7:48:51:30:5f:a2:ad:32:8a:2b: a3:f0:a7:21:c9:24:07:bc:56:5d:6a:b4:91:9d:de: a0:4a:45:c1:08:08:af:f4:20:49:49:9f:5d:71:6d: 13:b0:e2:ac:dd:01:0b:6b:6e:c7:d5:1d:99:bf:2e: d5:03:48:9a:33:f4:27:08:02:38:3e:5a:f4:d6:65: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:B7:D6:8F:C1:63:B0:4D:8C:50:75:5F:93:99:CA:15:D1:5C:C2 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:21:1c:a3:42:d5:f1:b1:20:37:44:45:64:4a:97:36:ee: 78:bb:fb:6d:cd:6b:e0:5d:f7:99:44:9b:79:ef:6a:a3:e1:4d: 77:65:1a:ce:b9:e4:d7:e4:34:b8:83:96:63:60:a7:b8:f4:88: a2:b5:87:4d:b4:4c:80:4d:ce:26:df:11:3e:ee:42:3d:d6:b5: b6:a0:2e:8f:e8:cc:b3:fd:16:a7:d9:e2:4b:46:c0:f7:31:d2: f3:c4:42:24:60:97:b8:11:96:5e:fe:18:bd:36:74:b7:47:7e: b8:4e:08:f5:d3:47:05:b0:7d:b3:e0:79:db:3b:d4:79:68:2e: b6:32:6a:21:e7:68:73:61:cc:0f:d7:ba:e2:f3:bf:d6:0e:e2: a1:ee:52:40:90:95:ef:3a:40:bb:3d:1a:34:d6:1b:58:69:a7: cc:3f:72:c9:58:4b:e0:b4:c6:6b:65:3f:d8:53:0d:9c:31:cc: 20:14:d0:cd:8d:f6:a4:93:9c:29:69:ea:bf:db:2f:17:23:d6: 6b:6c:72:2b:a1:a8:1b:5b:0a:2f:e9:a8:08:2b:fd:d2:a4:e5: ae:94:de:f4:cd:2c:91:25:f4:96:ee:f1:73:e0:07:f0:35:35: 70:3d:ec:3a:43:85:1c:0c:e9:02:4b:2b:74:bf:a8:9d:54:2e: 50:1b:ba:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLUhowPXB1VHUARLv5dClAh6ot8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTEyMDYxODE2NTBaFw0yNTEyMDkyMTUzNTBaMDMxMTAvBgNV BAMTKDQ1QTNCN0Q2OEZDMTYzQjA0RDhDNTA3NTVGOTM5OUNBMTVEMTVDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUvne5MxGx/vgLDnasoENIAFu dnkFyGvkSSnIJQs9bro8Tljyq5D+LLf0icrCNV2Jb7Nd8gjykpowO9DJYEaORXAu cnJszli6EPiCVALB8MqZdZPUdVYJzEn6ajTcooDPQuPhXX1LVLUqBrQFxXW7aveO 74CPPXaiR9VjploEtOPYncegktV3gBq5KuVTZbuy0KP+u3YWBgxY4Bu0cRbNTLvo A8nog8rQ3KzN1+/XhTgMAOo2Dsyyp0hRMF+irTKKK6PwpyHJJAe8Vl1qtJGd3qBK RcEICK/0IElJn11xbROw4qzdAQtrbsfVHZm/LtUDSJoz9CcIAjg+WvTWZbgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaO31o/BY7BNjFB1X5OZyhXRXMIwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdwIRyjQtXxsSA3REVkSpc27ni7+23Na+Bd 95lEm3nvaqPhTXdlGs655NfkNLiDlmNgp7j0iKK1h020TIBNzibfET7uQj3Wtbag Lo/ozLP9FqfZ4ktGwPcx0vPEQiRgl7gRll7+GL02dLdHfrhOCPXTRwWwfbPgeds7 1HloLrYyaiHnaHNhzA/XuuLzv9YO4qHuUkCQle86QLs9GjTWG1hpp8w/cslYS+C0 xmtlP9hTDZwxzCAU0M2N9qSTnClp6r/bLxcj1mtsciuhqBtbCi/pqAgr/dKk5a6U 3vTNLJEl9Jbu8XPgB/A1NXA97DpDhRwM6QJLK3S/qJ1ULlAbugY= -----END CERTIFICATE-----Generated at Sun Dec 7 11:52:12 2025 by rpki-client