This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: QSd46+2jWkSRx/a68MuJuy/tyJ6/qg+hYg3T/LWTKaU= Subject key identifier: B8:78:8A:35:7F:39:09:EE:69:1D:68:CE:25:0E:7F:7E:42:EE:F9:D5 Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 020D8BE1802F4C42ABD514F6DC8EAAC33E94B420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04F2 Signing time: Fri 05 Dec 2025 09:51:43 +0000 Manifest this update: Fri 05 Dec 2025 09:46:43 +0000 Manifest next update: Mon 08 Dec 2025 20:23:43 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) 2: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: lT557+jfRVpmzk/DgtciGl3vKNFS1Z5ancA+QhrRhHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0d:8b:e1:80:2f:4c:42:ab:d5:14:f6:dc:8e:aa:c3:3e:94:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Dec 5 09:46:43 2025 GMT Not After : Dec 8 20:23:43 2025 GMT Subject: CN=B8788A357F3909EE691D68CE250E7F7E42EEF9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:50:19:3b:ab:60:e9:e8:3e:7d:88:10:43: c4:c1:c5:e4:e3:ab:26:90:b2:2f:20:26:59:ab:02: c7:91:52:ca:9a:a3:2e:08:7b:99:ca:3b:b2:91:90: 18:ba:c0:df:10:89:4b:ea:f3:53:a7:08:6e:62:d2: e5:69:40:51:a6:b8:e2:e3:ef:9e:47:f1:61:07:a4: f3:93:b8:f0:e0:a5:07:ad:9c:dd:a4:e3:ef:db:ff: 2c:77:9b:6d:7d:68:6c:fe:2f:a6:41:db:f6:93:a8: 1a:ce:7d:ef:0d:21:f8:ed:db:52:b0:31:cf:61:36: 88:d5:9d:14:be:4e:68:38:58:a6:79:23:4c:85:a5: 3f:e5:b6:f4:b2:d7:90:90:5e:14:af:79:08:23:a8: 09:39:f7:d1:13:52:39:77:5a:ec:b8:60:1c:ad:97: 1d:37:10:6d:8b:0b:b6:d2:71:32:1c:17:99:01:1e: fd:82:c6:af:ad:f9:de:34:21:ef:79:5d:36:08:f6: 78:3f:3a:44:b5:6d:46:59:f4:3b:50:45:d4:64:fe: 06:14:a0:81:2a:4d:e6:9b:6d:69:16:de:2a:97:96: a9:ee:53:ba:da:f5:6e:18:a7:a4:8e:88:1d:d9:e1: a1:1d:8e:3b:76:5b:2a:d1:89:58:da:33:26:12:34: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:78:8A:35:7F:39:09:EE:69:1D:68:CE:25:0E:7F:7E:42:EE:F9:D5 X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e4:5d:37:16:59:a6:fc:35:dd:66:68:1d:8d:f7:12:80:a3: 83:57:af:2f:37:e3:52:8f:0c:c3:87:f3:73:68:f9:f5:91:f0: 23:de:65:7a:25:f4:29:26:09:c2:c9:a0:b3:47:63:84:ae:bd: e7:20:04:a9:f1:ee:c7:34:90:ac:11:80:9f:55:7a:3b:82:0b: f7:19:b6:43:b4:e6:7e:74:ad:d3:d1:13:77:98:66:24:2d:c1: 03:21:43:92:0e:99:4e:7d:8c:29:eb:0a:9d:b8:a7:7d:78:eb: 36:ff:ec:fe:25:83:bc:48:a7:ab:90:42:83:bc:79:2e:a5:11: 5e:4a:4c:0e:b1:fc:89:a8:21:e5:dd:ba:19:36:ff:2a:ac:9e: eb:ff:6e:1f:28:63:73:4d:d7:37:87:bd:ef:43:f9:c6:15:52: 02:6c:7c:0f:66:d7:6c:5c:2e:9c:23:24:a1:02:f8:1f:bb:c3: 4b:a4:92:42:0b:04:7d:a7:3a:f1:8a:21:ac:73:b8:4e:a3:49: 3c:14:da:b8:6b:8f:e0:4e:1d:9f:1f:31:60:fb:06:b3:01:44: c4:af:c5:30:08:3a:25:07:88:72:48:37:7b:a0:52:eb:1e:87: 8e:fc:b6:5f:c1:eb:cd:db:ae:c6:a9:55:b4:36:69:c2:8a:b4: 59:eb:12:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAg2L4YAvTEKr1RT23I6qwz6UtCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTEyMDUwOTQ2NDNaFw0yNTEyMDgyMDIzNDNaMDMxMTAvBgNV BAMTKEI4Nzg4QTM1N0YzOTA5RUU2OTFENjhDRTI1MEU3RjdFNDJFRUY5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd41AZO6tg6eg+fYgQQ8TBxeTj qyaQsi8gJlmrAseRUsqaoy4Ie5nKO7KRkBi6wN8QiUvq81OnCG5i0uVpQFGmuOLj 755H8WEHpPOTuPDgpQetnN2k4+/b/yx3m219aGz+L6ZB2/aTqBrOfe8NIfjt21Kw Mc9hNojVnRS+Tmg4WKZ5I0yFpT/ltvSy15CQXhSveQgjqAk599ETUjl3Wuy4YByt lx03EG2LC7bScTIcF5kBHv2Cxq+t+d40Ie95XTYI9ng/OkS1bUZZ9DtQRdRk/gYU oIEqTeabbWkW3iqXlqnuU7ra9W4Yp6SOiB3Z4aEdjjt2WyrRiVjaMyYSNHPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuHiKNX85Ce5pHWjOJQ5/fkLu+dUwHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrkXTcWWab8Nd1maB2N9xKAo4NXry8341KP DMOH83No+fWR8CPeZXol9CkmCcLJoLNHY4SuvecgBKnx7sc0kKwRgJ9VejuCC/cZ tkO05n50rdPRE3eYZiQtwQMhQ5IOmU59jCnrCp24p3146zb/7P4lg7xIp6uQQoO8 eS6lEV5KTA6x/ImoIeXduhk2/yqsnuv/bh8oY3NN1zeHve9D+cYVUgJsfA9m12xc LpwjJKEC+B+7w0ukkkILBH2nOvGKIaxzuE6jSTwU2rhrj+BOHZ8fMWD7BrMBRMSv xTAIOiUHiHJIN3ugUuseh478tl/B683brsapVbQ2acKKtFnrEpw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:12 2025 by rpki-client