This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: Yr8xKebS9ojeXEU3oVAe7feJQaUZXTDnQuuUvDxf9zY= Subject key identifier: D4:0E:33:75:A6:F4:E0:D6:54:CB:51:8C:B4:8B:AE:8D:8F:65:A9:85 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 6FBF72264336A188D80AC4830EF00F9740945F10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 021F Signing time: Sat 06 Dec 2025 05:51:05 +0000 Manifest this update: Sat 06 Dec 2025 05:46:05 +0000 Manifest next update: Tue 09 Dec 2025 13:29:05 +0000 Files and hashes: 1: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: rp//DrFpON6IwrlgYm9QjPXFbLzfM8YXSNHrjjGCRTM=) 2: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 4: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bf:72:26:43:36:a1:88:d8:0a:c4:83:0e:f0:0f:97:40:94:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Dec 6 05:46:05 2025 GMT Not After : Dec 9 13:29:05 2025 GMT Subject: CN=D40E3375A6F4E0D654CB518CB48BAE8D8F65A985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:6c:9d:ba:05:64:a0:44:6d:5d:81:25:60: a3:4e:91:6f:8e:18:3f:95:f8:11:0e:97:2a:e1:ba: 09:dc:c2:4b:e8:25:ee:40:5b:40:32:23:8a:9f:85: 74:2f:31:0d:1a:97:2e:8b:6e:a4:ba:12:78:89:e8: bc:56:c2:6a:76:54:2e:f4:3c:be:27:fb:30:f1:82: 67:6a:9e:3b:0b:9f:db:70:c7:17:10:29:43:64:8e: 7b:36:e8:f8:1e:63:64:5d:36:3b:e2:75:3e:8e:51: 50:73:f4:42:3b:76:9d:35:5b:46:56:e8:81:f6:a3: df:e4:7f:5f:e7:26:78:34:df:bb:14:ec:50:21:55: 43:4d:cb:35:74:a7:41:9e:46:d3:4f:e0:ca:b7:6c: f4:ba:19:06:7f:30:61:3a:16:6c:8e:de:0b:20:db: 22:ab:1b:7e:1a:7c:4d:6a:0c:d8:04:14:73:b6:3d: d0:65:19:2a:91:51:0f:4a:c1:4c:4b:23:67:62:17: b1:b3:65:ff:25:aa:59:43:f0:86:5e:98:4b:37:98: a4:6c:f8:f0:7e:f3:f5:8b:9b:25:00:7f:57:95:cd: c4:fe:45:5d:64:19:f3:84:66:07:e9:79:e1:df:5d: 9e:9c:5c:65:16:31:ba:a1:4f:6c:be:a5:c7:ce:18: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:33:75:A6:F4:E0:D6:54:CB:51:8C:B4:8B:AE:8D:8F:65:A9:85 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d1:52:d2:43:3b:d9:82:01:0c:44:15:bd:a3:47:4b:b6:91: 6b:b4:82:0f:cf:bd:b5:6e:28:8b:fd:81:b0:a6:f8:f4:93:33: 6b:ca:6a:81:d0:05:6d:71:e2:2d:7f:95:31:90:b7:e3:a9:47: d4:25:c0:0f:22:7f:08:6d:00:2c:2a:c4:5b:16:a3:ab:50:8d: 1b:c3:89:0d:f7:11:bb:32:71:11:b2:24:11:2c:0b:bb:4e:08: 35:e0:50:60:a1:9d:ed:a6:3c:f5:c1:c1:d4:c2:b0:fa:a7:e4: aa:6e:c2:98:42:ca:27:f0:6b:37:ca:4e:94:d5:9d:a2:9c:2c: bb:c4:a4:df:a1:1f:ac:8e:ad:1a:ea:59:5a:4e:7b:67:90:3c: d3:7e:5c:40:a3:9a:cd:90:ff:df:87:86:a6:5e:a9:4e:f1:9d: f7:86:6f:a8:0e:72:33:15:55:b6:8a:56:57:99:4a:ac:23:cf: a1:1e:17:0e:d5:67:82:d0:b6:66:f1:b7:05:29:43:b7:9b:f6: 64:a6:47:83:ab:73:fd:cd:f2:28:f3:21:b6:89:96:39:aa:2d: 10:b2:8d:05:62:7e:fd:1a:6d:b8:80:fb:97:b4:32:63:23:ef: a5:40:73:a7:c4:2c:2b:79:c0:23:3b:41:36:0f:48:39:3e:d6: 29:7a:8b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb79yJkM2oYjYCsSDDvAPl0CUXxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTEyMDYwNTQ2MDVaFw0yNTEyMDkxMzI5MDVaMDMxMTAvBgNV BAMTKEQ0MEUzMzc1QTZGNEUwRDY1NENCNTE4Q0I0OEJBRThEOEY2NUE5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGymydugVkoERtXYElYKNOkW+O GD+V+BEOlyrhugncwkvoJe5AW0AyI4qfhXQvMQ0aly6LbqS6EniJ6LxWwmp2VC70 PL4n+zDxgmdqnjsLn9twxxcQKUNkjns26PgeY2RdNjvidT6OUVBz9EI7dp01W0ZW 6IH2o9/kf1/nJng037sU7FAhVUNNyzV0p0GeRtNP4Mq3bPS6GQZ/MGE6FmyO3gsg 2yKrG34afE1qDNgEFHO2PdBlGSqRUQ9KwUxLI2diF7GzZf8lqllD8IZemEs3mKRs +PB+8/WLmyUAf1eVzcT+RV1kGfOEZgfpeeHfXZ6cXGUWMbqhT2y+pcfOGKOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1A4zdab04NZUy1GMtIuujY9lqYUwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/RUtJDO9mCAQxEFb2jR0u2kWu0gg/PvbVu KIv9gbCm+PSTM2vKaoHQBW1x4i1/lTGQt+OpR9QlwA8ifwhtACwqxFsWo6tQjRvD iQ33EbsycRGyJBEsC7tOCDXgUGChne2mPPXBwdTCsPqn5KpuwphCyifwazfKTpTV naKcLLvEpN+hH6yOrRrqWVpOe2eQPNN+XECjms2Q/9+HhqZeqU7xnfeGb6gOcjMV VbaKVleZSqwjz6EeFw7VZ4LQtmbxtwUpQ7eb9mSmR4Orc/3N8ijzIbaJljmqLRCy jQVifv0abbiA+5e0MmMj76VAc6fELCt5wCM7QTYPSDk+1il6i40= -----END CERTIFICATE-----Generated at Sun Dec 7 08:36:30 2025 by rpki-client