This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: vl9QF61K6Pw0vDTeupmwj6SLpNE0nhFqyG6Up46Wj0c= Subject key identifier: 29:A6:DA:B6:19:37:74:E2:2D:35:AD:5F:F0:6D:74:77:97:F8:07:6B Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 7BD4CA998E1B1418C5F6BAC9D2713AD95CD38E06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 0160 Signing time: Thu 04 Dec 2025 21:41:49 +0000 Manifest this update: Thu 04 Dec 2025 21:36:49 +0000 Manifest next update: Sun 07 Dec 2025 23:23:49 +0000 Files and hashes: 1: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: L1QXmmmYL7avongM7Z18LqYgTBveJl41ce19oTEBc90=) 2: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 0CJAWZ02vSckzRoE57ZpZjjAeFM8kHecSgDHcs3TTPQ=) 3: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: YOGZVl1pxBeHfHLB3kw7JsNB/ueNC1i2F+bIqbAKZQY=) 4: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: DIjj3AxtTuURXBu6TRUH9P3TmVI3I0FbRThhuLFZ5K0=) 5: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: AGikL5mf3R6SUcLntlNendJ/c7wVC1wVAVxWd0F74Ys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d4:ca:99:8e:1b:14:18:c5:f6:ba:c9:d2:71:3a:d9:5c:d3:8e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Dec 4 21:36:49 2025 GMT Not After : Dec 7 23:23:49 2025 GMT Subject: CN=29A6DAB6193774E22D35AD5FF06D747797F8076B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:b0:52:b0:13:da:33:33:3f:1c:85:ce:d4: d0:ec:80:96:fa:8a:6d:6f:0b:08:62:dd:b8:7f:08: 53:3c:7d:49:c3:c5:df:81:2c:c2:c7:98:17:c4:f6: de:4a:61:6a:c4:73:c7:f6:2d:4d:4d:d5:9c:1c:9e: ab:f8:41:83:c0:96:ef:24:46:1e:97:7a:f2:d3:03: 79:a2:2d:fb:93:dc:27:00:62:f8:3e:d1:18:1b:3c: 38:cc:58:95:8c:c2:47:c8:04:ed:08:dd:ba:57:11: 83:78:2d:ff:d1:19:48:97:a0:c7:1c:69:c7:b7:34: 62:e7:52:d7:ee:54:d3:e2:6d:2e:70:ca:56:47:13: aa:c4:12:ba:d1:df:98:bd:14:dd:3f:87:14:84:fd: 36:36:21:62:81:0e:33:31:7b:1e:d6:7f:ff:b6:b2: 93:99:42:42:13:2e:67:f3:34:5d:d6:bf:14:2f:47: c0:f4:34:4b:78:a6:e9:13:9e:27:cb:ba:2a:5e:31: f8:65:79:97:42:b0:95:39:44:50:29:ad:37:c2:49: 54:d4:5c:92:77:db:39:32:0f:b0:68:5c:02:21:e6: 6d:af:82:27:e6:69:63:37:7f:0a:41:fe:4a:a0:3c: 5a:9b:df:93:1a:33:a2:b9:5a:c1:42:77:66:92:44: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:DA:B6:19:37:74:E2:2D:35:AD:5F:F0:6D:74:77:97:F8:07:6B X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:85:b5:61:19:63:37:5b:ac:35:11:72:c8:6a:97:d4:d2:57: 86:90:46:bb:75:7e:b9:52:05:c4:0d:0f:4c:95:16:95:e6:e1: 2d:c3:3d:e1:e4:16:12:89:18:ca:57:5a:00:ba:98:6d:81:50: 73:a3:48:c1:87:31:40:68:74:c9:35:8b:da:b5:d0:3b:05:3c: 1d:f6:83:1d:73:cc:27:12:01:59:58:bd:4e:73:f2:07:19:f2: 10:24:25:56:b7:4e:bd:86:6d:01:36:b2:d1:f5:13:cf:34:d4: d1:c1:26:33:20:36:7c:32:c8:c9:79:db:15:c2:a8:72:f6:4f: 6b:4e:55:67:16:97:75:c0:68:c2:4a:f3:a4:ba:cb:4a:ba:6a: 6d:08:4b:8b:ba:cf:09:d6:a8:17:2e:7e:27:c1:be:c0:e8:0c: 06:73:7c:9e:61:ec:c8:c4:f8:d8:98:ba:df:c9:59:5c:e2:fb: ad:77:18:39:be:96:e3:30:73:96:7b:43:81:3d:f1:48:b2:1c: dc:8d:b6:94:b1:99:dc:30:b1:4e:45:5b:d4:c0:57:8b:0b:57: a5:ec:90:32:fe:74:f4:8e:a0:69:59:06:c7:0c:4f:34:36:12: df:cb:4d:bb:b2:63:29:1f:e4:8a:1d:e7:d4:45:74:92:6d:6c: ff:e0:3a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9TKmY4bFBjF9rrJ0nE62VzTjgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNTEyMDQyMTM2NDlaFw0yNTEyMDcyMzIzNDlaMDMxMTAvBgNV BAMTKDI5QTZEQUI2MTkzNzc0RTIyRDM1QUQ1RkYwNkQ3NDc3OTdGODA3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZrBSsBPaMzM/HIXO1NDsgJb6 im1vCwhi3bh/CFM8fUnDxd+BLMLHmBfE9t5KYWrEc8f2LU1N1Zwcnqv4QYPAlu8k Rh6XevLTA3miLfuT3CcAYvg+0RgbPDjMWJWMwkfIBO0I3bpXEYN4Lf/RGUiXoMcc ace3NGLnUtfuVNPibS5wylZHE6rEErrR35i9FN0/hxSE/TY2IWKBDjMxex7Wf/+2 spOZQkITLmfzNF3WvxQvR8D0NEt4pukTnifLuipeMfhleZdCsJU5RFAprTfCSVTU XJJ32zkyD7BoXAIh5m2vgifmaWM3fwpB/kqgPFqb35MaM6K5WsFCd2aSRKctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKabathk3dOItNa1f8G10d5f4B2swHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGFtWEZYzdbrDURcshql9TSV4aQRrt1frlS BcQND0yVFpXm4S3DPeHkFhKJGMpXWgC6mG2BUHOjSMGHMUBodMk1i9q10DsFPB32 gx1zzCcSAVlYvU5z8gcZ8hAkJVa3Tr2GbQE2stH1E8801NHBJjMgNnwyyMl52xXC qHL2T2tOVWcWl3XAaMJK86S6y0q6am0IS4u6zwnWqBcufifBvsDoDAZzfJ5h7MjE +NiYut/JWVzi+613GDm+luMwc5Z7Q4E98UiyHNyNtpSxmdwwsU5FW9TAV4sLV6Xs kDL+dPSOoGlZBscMTzQ2Et/LTbuyYykf5Iod59RFdJJtbP/gOgo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:45 2025 by rpki-client