This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: wAGeObwFrQp6MG7SJtJ9YPOXSdcE+IF3KNDIQ1krgxQ= Subject key identifier: DF:34:AC:4B:90:28:55:35:67:A1:29:08:8F:29:7F:B2:12:DC:31:D6 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2B651D998E9A77CB0A7EC39DF32882E40687AB1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: B5 Signing time: Sat 06 Dec 2025 02:40:40 +0000 Manifest this update: Sat 06 Dec 2025 02:35:40 +0000 Manifest next update: Tue 09 Dec 2025 09:53:40 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: fzN3EweHXFZZkv0hPuiIAnqpfDWXH1wGU5VEn9KUAsM=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:65:1d:99:8e:9a:77:cb:0a:7e:c3:9d:f3:28:82:e4:06:87:ab:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Dec 6 02:35:40 2025 GMT Not After : Dec 9 09:53:40 2025 GMT Subject: CN=DF34AC4B9028553567A129088F297FB212DC31D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:f3:b4:b4:18:a3:4b:5d:97:f7:7d:cf:c4: 7e:06:c7:7b:3b:1e:03:5c:80:4f:67:bd:e6:b1:0d: 3e:c4:4a:4e:b9:e7:1b:52:e6:7e:b2:61:cc:ba:78: d6:7a:fa:a1:0c:98:a2:1a:f3:5c:13:65:71:ae:ea: 1f:7e:85:07:95:cb:fd:3c:3e:47:7d:f2:a1:c6:a5: 7a:03:5c:1c:b6:8c:41:67:4b:47:64:43:59:f3:de: 0e:95:40:02:4a:a6:02:88:33:1c:9f:f5:48:8c:45: eb:22:24:51:63:d3:d6:ee:f8:70:07:f3:4b:7d:a5: 91:44:8d:74:cb:0d:6d:6c:c4:23:8a:25:74:62:ad: 8e:21:8f:c5:3d:78:03:f2:fe:0b:ba:94:c9:5f:c4: 4c:67:1f:77:ce:b9:3a:c6:13:af:f6:06:ba:7e:d3: 2a:ce:17:3c:76:e2:61:d2:f9:4a:e7:61:f0:c1:b8: 4e:6d:b6:9c:13:c1:95:e3:0a:86:21:27:df:0f:b2: 21:26:26:ea:4b:a8:0f:d7:32:35:9e:1b:99:27:2c: d1:70:3a:34:4a:26:cc:90:7e:fc:05:6b:24:f9:71: d1:f3:bb:c9:56:d1:f9:f2:57:a0:62:70:37:f4:0e: 6b:1d:12:22:c7:42:d9:3c:7c:40:47:d6:a9:1a:b3: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:AC:4B:90:28:55:35:67:A1:29:08:8F:29:7F:B2:12:DC:31:D6 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:07:a7:11:43:cf:30:3e:73:dc:2c:43:d1:ea:a9:fd:2f: db:e4:a9:b8:21:9d:ce:2c:3b:04:8f:02:23:03:4a:f7:8f:b1: f0:e9:94:0f:ef:5b:47:e3:db:47:8e:35:01:9d:23:3d:c3:94: 18:2b:73:9a:f6:22:31:f5:52:16:95:cf:4b:4e:c1:80:e1:77: 83:59:f5:d4:f6:35:8f:48:a9:b0:e8:33:e9:7b:c8:ea:36:6e: 63:26:0b:df:8c:c2:5a:81:a4:62:63:b8:77:8d:7c:bf:80:e0: 13:86:b8:06:9b:dc:ac:02:60:0a:d8:11:cb:fa:c4:7a:41:f5: 00:8a:b2:c3:94:f7:30:f2:d6:81:91:99:17:ab:24:b6:6b:48: d1:51:a3:e7:e0:80:37:a8:b6:9b:a7:8e:c9:39:c3:8c:74:fc: 22:9c:49:7e:be:ad:40:03:4d:01:29:f6:d1:38:19:7b:5c:53: d8:b8:16:46:4a:0b:d2:26:aa:fb:38:58:7e:a8:1a:6c:33:e7: 2d:ce:ef:0a:1c:4b:64:8a:13:4d:a1:62:10:9a:71:a3:5a:27: f7:f2:45:8c:1e:6a:cf:5c:32:b9:c5:41:4c:ed:cb:6b:74:7c: 03:37:fa:f0:2a:7e:e5:03:da:76:3d:8a:f8:01:43:1d:5d:a5: b4:f0:fb:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2UdmY6ad8sKfsOd8yiC5AaHqx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTEyMDYwMjM1NDBaFw0yNTEyMDkwOTUzNDBaMDMxMTAvBgNV BAMTKERGMzRBQzRCOTAyODU1MzU2N0ExMjkwODhGMjk3RkIyMTJEQzMxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFfO0tBijS12X933PxH4Gx3s7 HgNcgE9nveaxDT7ESk655xtS5n6yYcy6eNZ6+qEMmKIa81wTZXGu6h9+hQeVy/08 Pkd98qHGpXoDXBy2jEFnS0dkQ1nz3g6VQAJKpgKIMxyf9UiMResiJFFj09bu+HAH 80t9pZFEjXTLDW1sxCOKJXRirY4hj8U9eAPy/gu6lMlfxExnH3fOuTrGE6/2Brp+ 0yrOFzx24mHS+UrnYfDBuE5ttpwTwZXjCoYhJ98PsiEmJupLqA/XMjWeG5knLNFw OjRKJsyQfvwFayT5cdHzu8lW0fnyV6BicDf0DmsdEiLHQtk8fEBH1qkas7eNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zSsS5AoVTVnoSkIjyl/shLcMdYwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL0B6cRQ88wPnPcLEPR6qn9L9vkqbghnc4s OwSPAiMDSvePsfDplA/vW0fj20eONQGdIz3DlBgrc5r2IjH1UhaVz0tOwYDhd4NZ 9dT2NY9IqbDoM+l7yOo2bmMmC9+MwlqBpGJjuHeNfL+A4BOGuAab3KwCYArYEcv6 xHpB9QCKssOU9zDy1oGRmRerJLZrSNFRo+fggDeotpunjsk5w4x0/CKcSX6+rUAD TQEp9tE4GXtcU9i4FkZKC9Imqvs4WH6oGmwz5y3O7wocS2SKE02hYhCacaNaJ/fy RYweas9cMrnFQUzty2t0fAM3+vAqfuUD2nY9ivgBQx1dpbTw+0g= -----END CERTIFICATE-----Generated at Sat Dec 6 21:22:22 2025 by rpki-client