This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: s0p8tK7sBfq01NHL5nb6vrKp8HSUy/tQtK4W5Y7jJQ4= Subject key identifier: 80:79:0A:CB:92:01:EF:31:A3:4A:F8:2C:3C:F7:AA:1E:C7:AB:B9:CD Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 27ED818A4B28CE7A048E755136D17E1AAA9B8D4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 0531 Signing time: Fri 19 Dec 2025 12:52:19 +0000 Manifest this update: Fri 19 Dec 2025 12:47:18 +0000 Manifest next update: Tue 23 Dec 2025 00:10:18 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: ALfo/qRwWyUch7neHm/5oeJsHy5madik8HnrT/Oz9Hk=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ed:81:8a:4b:28:ce:7a:04:8e:75:51:36:d1:7e:1a:aa:9b:8d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Dec 19 12:47:18 2025 GMT Not After : Dec 23 00:10:18 2025 GMT Subject: CN=80790ACB9201EF31A34AF82C3CF7AA1EC7ABB9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:c6:c3:35:b6:d9:c9:b9:1f:05:be:d5:c7: f2:01:9f:65:24:70:58:52:57:18:c9:13:de:50:c5: 2d:27:20:69:5c:0e:0a:54:4d:09:99:e0:79:8a:e3: 1c:d1:14:03:14:5a:30:88:0e:28:cb:ee:c1:d1:f9: 58:d8:38:ff:46:6f:59:36:6c:8b:da:72:39:6f:10: 7a:93:49:d1:1f:9d:4f:c8:55:b0:5a:65:3c:9b:37: 56:91:69:1b:41:47:84:f8:f6:20:23:d4:0b:5c:e6: 6b:66:2b:20:a8:2a:46:cb:f2:91:7a:e3:8e:33:a2: 40:d7:58:27:44:f1:0c:93:86:6e:c4:e0:8d:5a:7a: 2a:fa:6c:f4:e5:56:ae:0e:8a:ab:31:4f:b4:ef:c7: a6:51:1a:de:1b:0b:25:52:7a:19:15:12:6e:b9:2b: 40:7c:9e:bf:3e:c6:a6:e8:80:37:00:1a:e6:bc:e9: e0:20:00:15:2a:1f:e2:6e:ac:6b:df:7b:b6:58:6b: a5:c7:bc:5d:79:a1:92:40:8b:1f:c8:9e:b9:88:a1: 6d:38:ad:82:70:e5:7d:c7:79:4a:b5:b9:91:fd:d0: 54:eb:ff:1a:63:b3:b1:a6:96:5f:1d:db:b8:45:4a: 9b:4e:22:09:a5:63:2c:06:11:ff:0a:69:44:40:a2: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:0A:CB:92:01:EF:31:A3:4A:F8:2C:3C:F7:AA:1E:C7:AB:B9:CD X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:83:ec:be:84:a1:d6:5f:4b:8d:01:91:82:0a:f5:07:27:4c: cf:b1:53:75:fe:fa:b4:ed:dc:79:43:91:ef:6d:c8:88:29:8e: 81:f0:fe:de:de:f5:23:93:2d:db:03:a8:4e:4f:cf:2d:20:4e: 90:65:35:fa:bc:5c:ff:41:a1:88:11:ba:82:07:0c:64:7a:31: 24:3f:98:17:7e:39:38:63:10:ee:17:60:db:bb:19:7d:6d:a1: 7c:e0:ac:11:2e:b7:b5:22:2f:d9:34:57:53:70:83:d2:15:b7: 1c:df:6f:5f:af:0f:be:55:b5:9e:e1:a9:ca:e6:52:59:9b:e1: b7:83:3c:b0:75:43:86:c2:a1:28:3b:22:a8:40:3e:89:56:03: 07:c0:77:05:6f:31:8d:b3:cd:b7:8a:61:9a:2f:3a:96:71:0c: aa:0f:85:e8:7f:bc:da:db:68:34:03:f8:fb:26:8f:7f:19:87: 05:4b:3f:a7:57:45:6b:2e:60:ed:50:36:c3:7b:90:5e:60:5a: a2:59:76:0f:06:55:e6:aa:2a:21:bc:67:55:fe:50:89:38:33: 2e:ca:76:c5:cc:a1:4f:d8:53:75:66:92:f7:40:93:c8:48:8a: f2:b5:7d:83:03:89:a9:e8:36:e3:bc:2f:75:f1:36:4a:21:b8: 96:09:65:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+2BiksoznoEjnVRNtF+GqqbjUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTEyMTkxMjQ3MThaFw0yNTEyMjMwMDEwMThaMDMxMTAvBgNV BAMTKDgwNzkwQUNCOTIwMUVGMzFBMzRBRjgyQzNDRjdBQTFFQzdBQkI5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQcbDNbbZybkfBb7Vx/IBn2Uk cFhSVxjJE95QxS0nIGlcDgpUTQmZ4HmK4xzRFAMUWjCIDijL7sHR+VjYOP9Gb1k2 bIvacjlvEHqTSdEfnU/IVbBaZTybN1aRaRtBR4T49iAj1Atc5mtmKyCoKkbL8pF6 444zokDXWCdE8QyThm7E4I1aeir6bPTlVq4OiqsxT7Tvx6ZRGt4bCyVSehkVEm65 K0B8nr8+xqbogDcAGua86eAgABUqH+JurGvfe7ZYa6XHvF15oZJAix/InrmIoW04 rYJw5X3HeUq1uZH90FTr/xpjs7Gmll8d27hFSptOIgmlYywGEf8KaURAos1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHkKy5IB7zGjSvgsPPeqHseruc0wHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmD7L6EodZfS40BkYIK9QcnTM+xU3X++rTt 3HlDke9tyIgpjoHw/t7e9SOTLdsDqE5Pzy0gTpBlNfq8XP9BoYgRuoIHDGR6MSQ/ mBd+OThjEO4XYNu7GX1toXzgrBEut7UiL9k0V1Nwg9IVtxzfb1+vD75VtZ7hqcrm Ulmb4beDPLB1Q4bCoSg7IqhAPolWAwfAdwVvMY2zzbeKYZovOpZxDKoPheh/vNrb aDQD+Psmj38ZhwVLP6dXRWsuYO1QNsN7kF5gWqJZdg8GVeaqKiG8Z1X+UIk4My7K dsXMoU/YU3VmkvdAk8hIivK1fYMDianoNuO8L3XxNkohuJYJZbw= -----END CERTIFICATE-----Generated at Sat Dec 20 11:26:13 2025 by rpki-client