This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: nFiBodUibDx43DUJ+ozfg0mG8T0gbE0CRmf3+OuaOtM= Subject key identifier: CC:0F:4B:DB:46:27:A6:F9:1B:41:85:BA:30:56:DE:79:6D:8F:18:61 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 72D0F6C4119E87944BF70CCA7F6605CF46D09B02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01D8 Signing time: Fri 05 Dec 2025 09:10:48 +0000 Manifest this update: Fri 05 Dec 2025 09:05:48 +0000 Manifest next update: Mon 08 Dec 2025 15:01:48 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: MfGI1CgGwaJaP6rTG0ptdwjlDjUAzGuIBhzdUAmcXMU=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d0:f6:c4:11:9e:87:94:4b:f7:0c:ca:7f:66:05:cf:46:d0:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Dec 5 09:05:48 2025 GMT Not After : Dec 8 15:01:48 2025 GMT Subject: CN=CC0F4BDB4627A6F91B4185BA3056DE796D8F1861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:20:4d:ed:3f:c5:14:5b:8f:08:70:13:e1: f9:49:3a:7e:c2:ae:9e:c8:50:d9:87:40:53:2f:7a: b1:2e:0d:2d:19:e6:9f:3d:cb:25:08:60:e6:b0:af: 22:07:9f:36:99:02:2c:5d:cf:ec:3d:71:ce:bf:3c: 05:f9:d6:77:b1:83:a1:98:e5:ce:1f:5c:94:e4:46: 79:62:8d:a7:0d:28:37:70:1a:dd:e9:9c:68:71:fa: 3c:08:7e:82:c3:70:66:4f:e3:fc:2b:60:21:af:12: ef:1c:42:f3:e7:88:67:e0:dd:5c:54:95:ed:b2:9d: de:c1:93:3f:2c:95:f7:07:63:e0:69:fb:f4:b7:39: a6:b7:b1:cc:7a:91:3a:4e:b1:a7:e6:61:2d:65:97: b4:1b:d5:a5:b2:7c:f5:57:5b:3b:85:87:75:af:d0: 22:b0:06:87:32:2f:82:c4:df:dd:ca:6d:c5:29:15: 7d:66:8c:e6:e1:ec:4b:db:97:7d:c0:31:b6:31:17: 09:f1:8e:f1:5d:6f:89:20:48:bf:8e:13:99:da:cd: 1f:fe:e8:56:4e:fb:4f:b8:be:01:7d:99:2a:52:84: 54:34:92:ef:85:35:fc:03:86:8a:d9:8b:aa:30:94: 66:b8:47:22:01:42:15:7b:08:17:34:32:5b:d4:55: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0F:4B:DB:46:27:A6:F9:1B:41:85:BA:30:56:DE:79:6D:8F:18:61 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:07:f9:eb:8f:85:b4:0b:cf:d9:72:41:62:be:0d:d9:be: 15:46:83:9e:e9:39:4c:92:fa:1a:be:62:b4:4c:c0:7d:28:2c: e7:67:38:6e:01:ed:2d:d7:74:05:c8:70:fc:22:26:2a:78:93: 39:22:2a:e2:41:41:8d:fd:c3:b4:b3:37:ad:1d:91:0b:53:bb: b1:74:f2:87:46:4d:e5:59:b6:ca:f3:98:9b:5c:0f:f4:71:db: 7c:83:51:26:88:e4:fe:a1:1a:59:8e:f3:60:4f:61:b1:50:34: b7:93:ee:d1:8f:92:c6:09:8a:94:5a:70:38:ec:a0:b7:b9:2f: 73:ae:7b:ab:48:c3:a7:2f:b2:55:1b:4f:78:50:3e:72:a4:e5: 23:30:10:4b:3f:5c:b4:49:29:3b:33:72:97:dc:96:c2:5e:c3: d5:f3:8c:c2:2f:02:05:32:d2:10:b6:e4:f4:2d:6e:19:4e:9c: 07:fd:d2:39:6d:7c:7f:30:ed:50:96:6d:92:7a:0e:4c:6e:20: 33:0a:05:0d:e3:86:4f:e0:ef:f0:d9:76:07:15:0a:ce:ee:1e: b4:92:71:c0:10:dc:b8:11:6e:ef:46:eb:8a:f2:15:77:2d:4f: da:42:ea:de:f6:99:40:9f:f2:18:22:99:38:f5:83:10:e5:48: 05:a0:df:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctD2xBGeh5RL9wzKf2YFz0bQmwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTEyMDUwOTA1NDhaFw0yNTEyMDgxNTAxNDhaMDMxMTAvBgNV BAMTKENDMEY0QkRCNDYyN0E2RjkxQjQxODVCQTMwNTZERTc5NkQ4RjE4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiCBN7T/FFFuPCHAT4flJOn7C rp7IUNmHQFMverEuDS0Z5p89yyUIYOawryIHnzaZAixdz+w9cc6/PAX51nexg6GY 5c4fXJTkRnlijacNKDdwGt3pnGhx+jwIfoLDcGZP4/wrYCGvEu8cQvPniGfg3VxU le2ynd7Bkz8slfcHY+Bp+/S3Oaa3scx6kTpOsafmYS1ll7Qb1aWyfPVXWzuFh3Wv 0CKwBocyL4LE393KbcUpFX1mjObh7Evbl33AMbYxFwnxjvFdb4kgSL+OE5nazR/+ 6FZO+0+4vgF9mSpShFQ0ku+FNfwDhorZi6owlGa4RyIBQhV7CBc0MlvUVRwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzA9L20YnpvkbQYW6MFbeeW2PGGEwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsfB/nrj4W0C8/ZckFivg3ZvhVGg57pOUyS +hq+YrRMwH0oLOdnOG4B7S3XdAXIcPwiJip4kzkiKuJBQY39w7SzN60dkQtTu7F0 8odGTeVZtsrzmJtcD/Rx23yDUSaI5P6hGlmO82BPYbFQNLeT7tGPksYJipRacDjs oLe5L3Oue6tIw6cvslUbT3hQPnKk5SMwEEs/XLRJKTszcpfclsJew9XzjMIvAgUy 0hC25PQtbhlOnAf90jltfH8w7VCWbZJ6DkxuIDMKBQ3jhk/g7/DZdgcVCs7uHrSS ccAQ3LgRbu9G64ryFXctT9pC6t72mUCf8hgimTj1gxDlSAWg324= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:22 2025 by rpki-client