This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: dXP+ux1D4x4Uf8x2kTGDPFLjE5HkN0uRz6w1SNJw2gE= Subject key identifier: 5F:4C:08:B4:56:9A:99:0B:B9:E3:48:50:CA:C3:CA:C5:2E:8D:AA:AE Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 6556B7FBE4D630838241498DFBC1EC9C1B385404 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: E1 Signing time: Fri 05 Dec 2025 09:11:07 +0000 Manifest this update: Fri 05 Dec 2025 09:06:07 +0000 Manifest next update: Mon 08 Dec 2025 12:02:07 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: anLomOrzFrVesfv+D9i+iFcHJmvBb1/DlPMaU7VBX64=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:56:b7:fb:e4:d6:30:83:82:41:49:8d:fb:c1:ec:9c:1b:38:54:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Dec 5 09:06:07 2025 GMT Not After : Dec 8 12:02:07 2025 GMT Subject: CN=5F4C08B4569A990BB9E34850CAC3CAC52E8DAAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:24:8e:cb:76:65:d9:d0:cf:e8:8d:58:f8: f2:db:3d:ab:31:8f:e3:92:3c:08:4c:22:7f:80:84: 23:02:0d:37:fe:f5:94:ef:d6:30:d9:1e:42:02:47: 65:5e:c8:c2:5e:36:ad:85:86:ad:f4:e8:a0:ed:78: b7:67:b7:e9:88:96:2f:85:4c:6b:05:5e:a0:cf:45: a3:db:72:6b:5c:c3:5a:22:6c:b6:4c:84:f7:6e:59: 7a:55:c7:d7:6a:3b:c2:80:ca:6b:23:fe:46:a8:bd: 75:68:63:4f:cb:f4:9a:35:7d:f5:80:63:30:b6:29: 47:c9:88:42:8b:b7:6f:a4:79:3c:1c:17:bc:7c:ed: 18:31:a7:ff:1d:93:fa:b1:d1:d7:67:e3:dd:37:bf: 47:87:88:5e:41:f0:ba:cc:49:0e:fa:9a:e2:91:2e: 94:05:86:0e:97:e5:b8:29:76:7a:4a:7e:a5:a4:13: 69:7f:5a:1c:ef:7e:e3:20:12:af:0a:75:2a:d2:18: ad:b5:da:d0:af:f2:d9:a1:99:16:b7:a3:f0:98:c2: 2f:d3:5c:39:77:b9:97:23:ff:bd:e0:12:e8:46:a4: 98:93:ef:31:d8:6f:a4:d6:5b:4e:fa:2b:d9:11:42: 58:8e:67:62:69:71:bb:e5:46:b0:4c:24:cb:25:63: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:08:B4:56:9A:99:0B:B9:E3:48:50:CA:C3:CA:C5:2E:8D:AA:AE X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:63:2e:b3:9b:6e:c6:fc:e7:10:b8:f6:65:1e:64:db:fc:e6: ed:ba:8a:28:27:d8:4f:19:94:04:15:da:7f:76:84:88:6d:a3: 21:46:0d:ce:db:e6:f1:53:01:ea:b4:84:14:f1:04:98:05:96: 71:d6:73:d3:0e:68:56:43:db:00:4d:53:87:f0:90:b3:d7:03: 03:d8:90:2c:97:a9:86:c3:73:78:89:00:1d:1b:8f:3c:2a:bc: 89:a9:d5:d2:f7:67:d7:68:d8:be:a8:91:26:1c:38:62:1f:51: 94:95:9a:69:b3:70:da:12:ec:f2:5e:19:72:a2:9a:5b:a1:29: cb:de:9e:6b:9e:e5:92:37:e0:3c:52:92:38:af:49:3b:cf:49: a8:0a:65:b4:71:02:94:59:61:7f:8b:e3:32:0a:6f:72:f6:46: ec:ac:43:95:e6:25:d3:18:73:0f:4b:a1:c2:db:4d:29:96:5b: 2a:d0:da:0c:72:29:4f:d0:a4:31:18:3c:7b:6a:c3:f8:35:68: 99:2f:5a:e9:57:0d:36:d3:4f:83:2b:da:f6:6f:68:60:8a:8a: bf:83:36:e7:db:49:4f:e1:20:81:de:40:6e:8b:31:95:bf:40: b8:75:59:e6:ea:1c:a2:36:36:62:28:55:46:dc:39:72:42:66: 63:03:b2:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVa3++TWMIOCQUmN+8HsnBs4VAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTEyMDUwOTA2MDdaFw0yNTEyMDgxMjAyMDdaMDMxMTAvBgNV BAMTKDVGNEMwOEI0NTY5QTk5MEJCOUUzNDg1MENBQzNDQUM1MkU4REFBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+niSOy3Zl2dDP6I1Y+PLbPasx j+OSPAhMIn+AhCMCDTf+9ZTv1jDZHkICR2VeyMJeNq2Fhq306KDteLdnt+mIli+F TGsFXqDPRaPbcmtcw1oibLZMhPduWXpVx9dqO8KAymsj/kaovXVoY0/L9Jo1ffWA YzC2KUfJiEKLt2+keTwcF7x87Rgxp/8dk/qx0ddn4903v0eHiF5B8LrMSQ76muKR LpQFhg6X5bgpdnpKfqWkE2l/WhzvfuMgEq8KdSrSGK212tCv8tmhmRa3o/CYwi/T XDl3uZcj/73gEuhGpJiT7zHYb6TWW076K9kRQliOZ2JpcbvlRrBMJMslY8DdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0wItFaamQu540hQysPKxS6Nqq4wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALljLrObbsb85xC49mUeZNv85u26iign2E8Z lAQV2n92hIhtoyFGDc7b5vFTAeq0hBTxBJgFlnHWc9MOaFZD2wBNU4fwkLPXAwPY kCyXqYbDc3iJAB0bjzwqvImp1dL3Z9do2L6okSYcOGIfUZSVmmmzcNoS7PJeGXKi mluhKcvenmue5ZI34DxSkjivSTvPSagKZbRxApRZYX+L4zIKb3L2RuysQ5XmJdMY cw9LocLbTSmWWyrQ2gxyKU/QpDEYPHtqw/g1aJkvWulXDTbTT4Mr2vZvaGCKir+D NufbSU/hIIHeQG6LMZW/QLh1WebqHKI2NmIoVUbcOXJCZmMDsoI= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:57 2025 by rpki-client