This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: PNasUKWxGmVEHD6bylvQV7IDeQbI8GQuRyiP9gbKTqc= Subject key identifier: D4:F3:CB:0C:9C:AA:0B:62:A3:FA:A2:3C:4F:0B:1E:04:A5:AA:CC:D6 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 77C3B6043722CAFC82F696D8D5DB83D98B1793C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0185 Signing time: Fri 05 Dec 2025 11:02:24 +0000 Manifest this update: Fri 05 Dec 2025 10:57:24 +0000 Manifest next update: Mon 08 Dec 2025 18:59:24 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: 0YNVvDtB2LsgIkd/zTJUIKbL4IreB++2Q2DXe+RRkQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c3:b6:04:37:22:ca:fc:82:f6:96:d8:d5:db:83:d9:8b:17:93:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Dec 5 10:57:24 2025 GMT Not After : Dec 8 18:59:24 2025 GMT Subject: CN=D4F3CB0C9CAA0B62A3FAA23C4F0B1E04A5AACCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:f0:01:23:37:d3:a1:7c:19:e1:5a:7a:a7: a8:a5:b8:08:b8:bd:ef:94:d0:a8:fc:1a:30:34:d8: 00:89:c0:7d:84:f4:ba:1d:11:33:52:60:c1:0f:70: c2:4b:58:76:0b:44:fd:a7:a0:f9:61:5d:f9:2a:70: 36:75:2a:fb:8d:2c:a4:95:d9:60:13:dc:bf:0c:80: b0:aa:f9:16:87:b1:d7:4f:1b:0c:8b:cb:5c:47:07: 71:5b:48:42:d0:1c:de:88:91:ba:6d:76:66:d7:3f: ed:32:53:3b:89:6e:dc:4a:d2:55:f9:ee:e2:c9:e3: 2b:b1:33:fd:5c:e0:7a:f6:b8:6f:7c:3b:f6:de:20: 97:91:f1:ce:63:7b:7d:0c:40:88:7d:1f:d7:3a:28: 0e:2b:af:a4:03:0c:a5:dc:84:6a:63:06:a7:8a:ab: 21:00:21:e6:ed:4b:1a:0f:84:69:98:8a:5b:14:8b: a1:23:61:c8:bc:76:01:0c:fc:74:e1:12:6e:43:2f: 32:33:2a:15:c3:9d:9e:f3:13:90:9a:78:d4:32:69: 70:ac:fb:69:1e:97:ed:9a:72:7f:e0:af:2c:00:e2: 88:24:88:7d:62:4c:c5:67:b8:5a:82:79:e6:ce:87: 8c:fc:52:60:15:40:4c:73:fd:a2:45:07:4c:82:60: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:CB:0C:9C:AA:0B:62:A3:FA:A2:3C:4F:0B:1E:04:A5:AA:CC:D6 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:28:f4:14:9a:a4:4d:0b:65:55:74:cd:4e:97:f4:ae:62: 90:36:aa:58:49:1d:e7:cb:0e:d1:12:5a:a6:57:4e:73:e6:b7: 0e:71:4a:40:7b:e3:0a:f5:da:13:f5:39:f8:b3:be:11:6b:8a: 25:ac:66:93:2a:c4:c6:fd:63:04:56:3d:60:25:f3:d6:e1:88: 03:d9:86:40:d5:af:b3:21:06:d0:ab:c8:36:14:06:24:9e:eb: d1:a5:0b:a9:d3:ed:4b:9c:db:ef:0b:ba:29:dd:8d:f7:9f:1c: 44:cc:48:32:05:a5:5e:db:33:10:56:0e:9e:57:cf:56:0e:aa: fd:db:a2:89:02:35:c4:b9:15:c8:4b:9f:51:09:ef:9f:42:97: 7e:ff:4d:5f:3b:06:13:39:b4:82:31:83:02:bb:49:9a:28:10: d2:2e:74:97:c7:ec:e3:50:57:0d:7e:ce:ac:71:63:4c:bf:d7: a2:22:91:90:4a:f1:c4:6b:9c:2b:be:bc:17:33:76:ba:37:e3: da:f6:6e:e8:8b:3a:f6:71:87:09:0d:15:8e:b3:83:c9:b3:23: be:3a:fb:93:3f:3a:bc:ce:19:d4:23:d4:9a:87:63:d6:02:c7: c4:7f:db:98:ec:d1:09:8d:db:cf:f9:45:86:29:1b:de:58:9b: 10:85:70:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8O2BDciyvyC9pbY1duD2YsXk8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTEyMDUxMDU3MjRaFw0yNTEyMDgxODU5MjRaMDMxMTAvBgNV BAMTKEQ0RjNDQjBDOUNBQTBCNjJBM0ZBQTIzQzRGMEIxRTA0QTVBQUNDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrvABIzfToXwZ4Vp6p6iluAi4 ve+U0Kj8GjA02ACJwH2E9LodETNSYMEPcMJLWHYLRP2noPlhXfkqcDZ1KvuNLKSV 2WAT3L8MgLCq+RaHsddPGwyLy1xHB3FbSELQHN6IkbptdmbXP+0yUzuJbtxK0lX5 7uLJ4yuxM/1c4Hr2uG98O/beIJeR8c5je30MQIh9H9c6KA4rr6QDDKXchGpjBqeK qyEAIebtSxoPhGmYilsUi6EjYci8dgEM/HThEm5DLzIzKhXDnZ7zE5CaeNQyaXCs +2kel+2acn/grywA4ogkiH1iTMVnuFqCeebOh4z8UmAVQExz/aJFB0yCYLBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PPLDJyqC2Kj+qI8TwseBKWqzNYwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPVKPQUmqRNC2VVdM1Ol/SuYpA2qlhJHefL DtESWqZXTnPmtw5xSkB74wr12hP1OfizvhFriiWsZpMqxMb9YwRWPWAl89bhiAPZ hkDVr7MhBtCryDYUBiSe69GlC6nT7Uuc2+8LuindjfefHETMSDIFpV7bMxBWDp5X z1YOqv3bookCNcS5FchLn1EJ759Cl37/TV87BhM5tIIxgwK7SZooENIudJfH7ONQ Vw1+zqxxY0y/16IikZBK8cRrnCu+vBczdro349r2buiLOvZxhwkNFY6zg8mzI746 +5M/OrzOGdQj1JqHY9YCx8R/25js0QmN28/5RYYpG95YmxCFcEc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:20 2025 by rpki-client