This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: 02va61Mpz85WmR5GXbeISah1J74A0MfnpzHY3QQet5I= Subject key identifier: EA:0B:BB:10:64:32:8B:E9:4B:5D:54:74:AE:32:BE:2C:18:1C:14:99 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 3FC062C15D707CD3D7C6A617571D94ED551CCBBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 021D Signing time: Fri 05 Dec 2025 22:21:35 +0000 Manifest this update: Fri 05 Dec 2025 22:16:35 +0000 Manifest next update: Tue 09 Dec 2025 04:32:35 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: zKdBycjxCoGfCw3i903jRM1w87kSo3egbc0+WIBGGjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c0:62:c1:5d:70:7c:d3:d7:c6:a6:17:57:1d:94:ed:55:1c:cb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Dec 5 22:16:35 2025 GMT Not After : Dec 9 04:32:35 2025 GMT Subject: CN=EA0BBB1064328BE94B5D5474AE32BE2C181C1499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:2f:84:ef:9a:e2:86:3e:57:42:b5:df:2e: 96:58:91:c4:13:e7:61:6d:75:9f:d9:ef:ba:bb:e9: 24:1f:5d:5e:1f:01:f7:da:e6:9c:9f:66:43:ec:67: 86:1e:fb:e0:96:ff:b4:22:b8:62:ea:79:5b:81:70: 31:40:87:2f:c3:99:aa:9b:ab:60:fc:ed:6d:d9:a9: 1f:d9:1d:17:16:51:54:2c:ba:89:c9:97:3b:7f:f2: a8:67:a5:55:ca:34:0d:a6:60:33:35:4b:fb:58:75: df:97:54:04:11:73:41:e0:4e:ff:0d:67:16:78:f5: d5:b6:39:4a:be:c7:b0:83:a8:44:5b:3c:3a:e0:18: d8:67:ed:b8:3e:f5:cf:56:38:32:04:e4:59:58:0a: 5c:13:77:d9:8e:4b:2c:d7:76:52:80:92:55:27:7f: 0f:f3:e9:ef:42:42:9d:9d:45:52:0b:2e:a4:e7:27: e0:cd:fe:4a:91:21:5c:c1:95:d1:29:7f:27:be:41: e3:db:84:8f:d7:4e:1a:a3:55:70:9a:6e:e4:4b:40: 40:e1:d9:2f:39:c3:c3:dd:9d:58:22:2f:e1:2d:cc: c7:a5:78:4f:fa:2d:56:9a:65:6f:54:cd:1e:69:0b: 40:37:57:f9:0a:c0:91:cc:82:49:e3:11:b9:04:e0: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:BB:10:64:32:8B:E9:4B:5D:54:74:AE:32:BE:2C:18:1C:14:99 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:13:58:2e:c6:ff:f7:22:cb:1c:f7:89:3e:fc:63:84:7c: 3b:01:67:7e:f9:65:3b:b0:e9:b6:8d:33:07:02:cc:2a:f5:3d: cd:6b:fb:16:6a:60:b7:44:12:37:c3:7b:97:01:9c:94:36:2d: 67:6f:66:e3:f5:86:1a:79:b9:23:c2:0f:bc:b4:38:95:44:48: ff:ed:e2:1f:fc:56:5a:a9:ad:30:08:a9:f5:cf:70:0e:6e:92: 29:df:18:a7:d3:d2:73:1d:6b:17:ae:60:44:63:02:cb:11:98: e4:8c:9d:0a:9a:e7:ea:ca:34:9f:4d:54:96:55:39:e8:a2:e4: 17:fe:61:a1:77:9d:ba:aa:14:d2:02:68:7a:a2:be:37:3e:3e: 5a:fe:62:0d:ee:0d:5f:05:75:b4:0a:53:2b:7e:be:81:92:9a: 57:fc:87:11:6c:6c:2f:ce:c0:08:44:7f:9c:33:f4:6a:f8:2d: 43:b7:c8:32:70:91:af:19:50:95:8e:c6:60:8e:85:c4:23:35: d3:1e:66:14:ff:63:5a:c5:02:e4:a1:b8:4a:1b:f0:29:1b:cb: 49:ff:80:e3:87:18:70:ee:88:88:27:df:8f:85:c4:3b:04:37: f0:a0:27:37:7d:20:87:8a:d9:63:a4:8c:b0:64:cf:79:77:4b: e7:d7:6a:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8BiwV1wfNPXxqYXVx2U7VUcy70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTEyMDUyMjE2MzVaFw0yNTEyMDkwNDMyMzVaMDMxMTAvBgNV BAMTKEVBMEJCQjEwNjQzMjhCRTk0QjVENTQ3NEFFMzJCRTJDMTgxQzE0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMi+E75rihj5XQrXfLpZYkcQT 52FtdZ/Z77q76SQfXV4fAffa5pyfZkPsZ4Ye++CW/7QiuGLqeVuBcDFAhy/Dmaqb q2D87W3ZqR/ZHRcWUVQsuonJlzt/8qhnpVXKNA2mYDM1S/tYdd+XVAQRc0HgTv8N ZxZ49dW2OUq+x7CDqERbPDrgGNhn7bg+9c9WODIE5FlYClwTd9mOSyzXdlKAklUn fw/z6e9CQp2dRVILLqTnJ+DN/kqRIVzBldEpfye+QePbhI/XThqjVXCabuRLQEDh 2S85w8PdnVgiL+EtzMeleE/6LVaaZW9UzR5pC0A3V/kKwJHMgknjEbkE4Cl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gu7EGQyi+lLXVR0rjK+LBgcFJkwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx8E1guxv/3Issc94k+/GOEfDsBZ375ZTuw 6baNMwcCzCr1Pc1r+xZqYLdEEjfDe5cBnJQ2LWdvZuP1hhp5uSPCD7y0OJVESP/t 4h/8VlqprTAIqfXPcA5ukinfGKfT0nMdaxeuYERjAssRmOSMnQqa5+rKNJ9NVJZV Oeii5Bf+YaF3nbqqFNICaHqivjc+Plr+Yg3uDV8FdbQKUyt+voGSmlf8hxFsbC/O wAhEf5wz9Gr4LUO3yDJwka8ZUJWOxmCOhcQjNdMeZhT/Y1rFAuShuEob8Ckby0n/ gOOHGHDuiIgn34+FxDsEN/CgJzd9IIeK2WOkjLBkz3l3S+fXapg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:17 2025 by rpki-client