This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: hObB1LZmXrxQF+ZDj/6fqXFjNeRNzXGTB4qumLIkNQw= Subject key identifier: 16:82:61:AE:98:A1:22:F0:B2:EB:39:5A:7E:1F:A3:D2:BF:2D:DE:5A Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 50B1FAED59A4042AB1D950DA73E7F651A8387329 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03E7 Signing time: Fri 05 Dec 2025 13:21:17 +0000 Manifest this update: Fri 05 Dec 2025 13:16:17 +0000 Manifest next update: Mon 08 Dec 2025 18:47:17 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: bTQXhU1dAE1M2kTARdAWephmOjRpslvy4l8KddfBtjo=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b1:fa:ed:59:a4:04:2a:b1:d9:50:da:73:e7:f6:51:a8:38:73:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Dec 5 13:16:17 2025 GMT Not After : Dec 8 18:47:17 2025 GMT Subject: CN=168261AE98A122F0B2EB395A7E1FA3D2BF2DDE5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:2f:44:97:bc:ea:65:44:9f:ec:4c:49:57: 38:56:df:f0:a9:03:56:d0:65:d6:5a:5f:01:f0:e9: 9f:80:03:eb:9a:51:77:1a:96:a0:68:ec:95:73:25: 1e:d5:fe:17:54:c4:1e:4b:e8:d7:e6:02:87:bc:7b: d9:27:bc:00:7c:bc:4e:31:5d:c5:8e:9e:11:cb:c1: ac:13:e5:0a:01:ed:44:a8:af:f3:c4:bd:3f:4b:c8: 32:da:34:fa:21:ca:1d:9b:f1:8f:1c:6a:4d:1e:de: 9b:a0:75:9d:d1:78:93:ec:87:f8:cb:2f:1a:3d:9f: b0:43:89:cf:bb:74:67:e5:1e:6a:25:f1:0b:6a:9a: 9d:7c:ca:23:0e:83:3e:97:72:2e:43:39:a2:cd:91: ae:c5:8a:70:1c:cf:94:76:4e:ae:6d:ee:cc:98:05: 34:90:1b:f6:dd:e1:8c:fc:3c:77:27:b9:43:79:46: f4:b0:ed:a7:ef:d5:ad:28:d1:fe:53:c1:b4:3c:2e: fc:e3:43:74:4a:d8:5f:cc:f7:59:25:32:52:fa:32: a6:ed:2a:43:2f:64:0a:1d:ba:33:9a:6c:bd:c1:85: ec:3a:8f:c4:ee:e9:d7:d5:20:4a:e2:c1:4b:e7:c6: 76:6d:ec:7f:94:a8:e7:2e:61:8f:3a:75:6a:ee:dc: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:61:AE:98:A1:22:F0:B2:EB:39:5A:7E:1F:A3:D2:BF:2D:DE:5A X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a9:67:6c:07:d7:89:bd:c3:d2:2b:e7:ec:ef:b1:d3:1c:cd: f4:48:f4:ce:50:7e:cf:b5:81:86:e8:77:a9:60:cb:ac:67:bd: e3:9b:ca:33:94:e5:72:8b:8d:e5:45:9f:84:8e:ee:0b:ca:fa: 2c:07:25:82:c0:fe:90:76:bb:62:99:d6:54:4e:52:a7:76:09: 90:ee:d9:40:0a:7f:35:fc:34:8d:89:0f:1f:d8:93:90:01:d4: c7:db:15:02:1e:9d:35:c6:85:1a:eb:2c:0b:25:74:7e:8f:d6: a5:0d:59:17:5c:55:ea:ba:40:47:42:d1:39:2f:4b:c0:cd:fe: 88:5d:5b:65:2d:6f:9f:81:46:a6:ea:b7:7c:0b:00:9f:6b:1d: f4:95:d8:b5:96:90:6e:1a:0c:9e:32:f1:3b:af:58:1c:4c:cd: d6:5c:8e:39:21:69:b2:33:14:0e:50:48:82:90:a6:b0:43:54: 57:d5:f7:d7:f8:93:cb:e5:b1:f7:86:7f:18:2f:bf:3d:01:cf: 7e:13:25:58:d3:4c:6f:4a:3c:55:30:91:13:f6:d8:0f:2a:ad: 87:1e:ef:4a:cd:b7:70:a8:b3:2c:66:3d:a4:fd:60:e7:ff:a3: e3:ef:28:7c:d0:40:8d:2d:42:f0:c5:59:ed:8d:bf:30:dd:fc: 78:3e:ca:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULH67VmkBCqx2VDac+f2Uag4cykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTEyMDUxMzE2MTdaFw0yNTEyMDgxODQ3MTdaMDMxMTAvBgNV BAMTKDE2ODI2MUFFOThBMTIyRjBCMkVCMzk1QTdFMUZBM0QyQkYyRERFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefC9El7zqZUSf7ExJVzhW3/Cp A1bQZdZaXwHw6Z+AA+uaUXcalqBo7JVzJR7V/hdUxB5L6NfmAoe8e9knvAB8vE4x XcWOnhHLwawT5QoB7USor/PEvT9LyDLaNPohyh2b8Y8cak0e3pugdZ3ReJPsh/jL Lxo9n7BDic+7dGflHmol8Qtqmp18yiMOgz6Xci5DOaLNka7FinAcz5R2Tq5t7syY BTSQG/bd4Yz8PHcnuUN5RvSw7afv1a0o0f5TwbQ8LvzjQ3RK2F/M91klMlL6Mqbt KkMvZAodujOabL3Bhew6j8Tu6dfVIEriwUvnxnZt7H+UqOcuYY86dWru3ExBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoJhrpihIvCy6zlafh+j0r8t3lowHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6pZ2wH14m9w9Ir5+zvsdMczfRI9M5Qfs+1 gYbod6lgy6xnveObyjOU5XKLjeVFn4SO7gvK+iwHJYLA/pB2u2KZ1lROUqd2CZDu 2UAKfzX8NI2JDx/Yk5AB1MfbFQIenTXGhRrrLAsldH6P1qUNWRdcVeq6QEdC0Tkv S8DN/ohdW2Utb5+BRqbqt3wLAJ9rHfSV2LWWkG4aDJ4y8TuvWBxMzdZcjjkhabIz FA5QSIKQprBDVFfV99f4k8vlsfeGfxgvvz0Bz34TJVjTTG9KPFUwkRP22A8qrYce 70rNt3CosyxmPaT9YOf/o+PvKHzQQI0tQvDFWe2NvzDd/Hg+yv8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:17 2025 by rpki-client