This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: +1JzeL6fea3mU0ZsBsT+qkTt1GAgkAZaOmGNQVQxtww= Subject key identifier: B3:54:50:A1:DB:D6:00:00:85:C6:C3:7D:38:4E:D5:12:87:A9:98:A2 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 659FFC09717670A4A995DAFC3FAF7B4FA47D21DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 10:30:54 +0000 Manifest this update: Sat 06 Dec 2025 10:25:54 +0000 Manifest next update: Tue 09 Dec 2025 10:58:54 +0000 Files and hashes: 1: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: 6gAFG6w/ABUv3wPcZrJOjSLsrqdUraiwX9gdLy+xb1E=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 7pJK2Nu09mDb/KW48/x7bS6pMakC4PmiTUB5vEr70Gk=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: U/yDn1W4jZEF4S0Nu+KZGK93oXQkpj5Y66m25j//fks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9f:fc:09:71:76:70:a4:a9:95:da:fc:3f:af:7b:4f:a4:7d:21:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Dec 6 10:25:54 2025 GMT Not After : Dec 9 10:58:54 2025 GMT Subject: CN=B35450A1DBD6000085C6C37D384ED51287A998A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:b0:14:ec:a7:2f:46:85:01:85:53:5f:ad: 3e:8e:50:4d:59:e8:d1:fa:49:27:ab:b0:28:98:05: d2:54:e1:a8:a9:10:04:4d:8f:3e:58:25:87:cb:ec: 82:51:39:b2:a4:96:8b:76:8c:d6:00:b1:bc:9a:90: 80:21:50:cb:8a:3d:e4:f5:e2:a0:97:dc:09:b5:bd: 2c:cd:08:30:b5:e7:9c:0a:ce:53:cc:e2:2c:32:4d: 4d:88:6c:49:44:71:ab:f7:7b:b1:af:54:0b:66:bc: d8:d6:e3:4c:61:78:b6:46:43:af:ac:3d:31:54:ff: 00:23:57:f7:a0:23:cf:13:19:06:28:01:ae:fd:3c: 35:19:40:ec:b3:80:ac:57:c5:c6:53:a8:cb:1e:6b: 05:27:3b:95:bf:02:06:3c:b7:d2:89:41:74:17:97: a7:9a:9d:a9:aa:77:70:77:27:2c:c8:87:29:94:53: 8d:34:43:56:45:67:74:3f:fc:e6:e1:11:db:53:c2: 4a:cb:97:32:f3:fa:3d:5d:09:48:9e:7d:0e:9b:ef: 8a:cd:b2:92:60:77:09:67:a3:d3:3f:28:a9:74:24: bf:b4:9c:e7:1a:35:7d:52:7b:87:d6:83:de:aa:72: 3d:e2:11:a0:94:fe:43:23:93:82:56:21:d2:90:eb: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:54:50:A1:DB:D6:00:00:85:C6:C3:7D:38:4E:D5:12:87:A9:98:A2 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a7:03:90:9b:78:46:a3:cb:3c:5a:d5:65:5f:22:a0:6d:78: 90:5c:98:d7:5f:df:3d:5b:7e:06:8f:03:58:83:1a:e0:c9:c3: 36:fd:01:9e:a4:5c:7c:4c:a3:3e:4a:f0:13:8f:66:6f:c0:6a: f1:7c:1c:75:2f:90:2a:71:5f:98:3d:a6:80:f1:f6:3b:0b:ca: 20:01:5f:de:74:41:01:07:b5:b1:29:ac:50:df:25:b1:74:57: aa:c9:4c:95:93:fe:a5:dc:9c:62:e5:a3:7e:57:d5:47:6e:0b: 03:1c:74:19:4b:dc:3b:1d:1b:ec:45:68:44:17:14:36:9e:59: 27:82:d4:ed:42:d3:2c:4c:4b:51:b3:1e:6f:71:54:a8:fb:81: 38:10:6e:d2:47:9a:75:52:cc:09:ed:6b:f2:3e:fd:39:c9:87: 55:dd:5e:01:a6:34:93:1e:6d:30:97:1b:95:8f:d0:a8:82:a4: 75:d4:b6:9a:db:bf:27:d9:9b:2e:60:69:13:a5:17:83:74:79: f5:16:6b:87:e8:4e:b7:db:7d:3d:08:9f:5d:7b:5f:59:43:18: 9d:dc:1b:c1:3a:0c:a9:5c:58:a9:1e:9d:c8:ac:65:c8:5b:e8: 55:2e:d5:9b:0c:97:71:e9:a3:b1:be:b7:9f:89:f2:23:15:14: 36:a3:c0:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZ/8CXF2cKSpldr8P697T6R9IdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTEyMDYxMDI1NTRaFw0yNTEyMDkxMDU4NTRaMDMxMTAvBgNV BAMTKEIzNTQ1MEExREJENjAwMDA4NUM2QzM3RDM4NEVENTEyODdBOTk4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYW7AU7KcvRoUBhVNfrT6OUE1Z 6NH6SSersCiYBdJU4aipEARNjz5YJYfL7IJRObKklot2jNYAsbyakIAhUMuKPeT1 4qCX3Am1vSzNCDC155wKzlPM4iwyTU2IbElEcav3e7GvVAtmvNjW40xheLZGQ6+s PTFU/wAjV/egI88TGQYoAa79PDUZQOyzgKxXxcZTqMseawUnO5W/AgY8t9KJQXQX l6eanamqd3B3JyzIhymUU400Q1ZFZ3Q//ObhEdtTwkrLlzLz+j1dCUiefQ6b74rN spJgdwlno9M/KKl0JL+0nOcaNX1Se4fWg96qcj3iEaCU/kMjk4JWIdKQ64QtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1RQodvWAACFxsN9OE7VEoepmKIwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGunA5CbeEajyzxa1WVfIqBteJBcmNdf3z1b fgaPA1iDGuDJwzb9AZ6kXHxMoz5K8BOPZm/AavF8HHUvkCpxX5g9poDx9jsLyiAB X950QQEHtbEprFDfJbF0V6rJTJWT/qXcnGLlo35X1UduCwMcdBlL3DsdG+xFaEQX FDaeWSeC1O1C0yxMS1GzHm9xVKj7gTgQbtJHmnVSzAnta/I+/TnJh1XdXgGmNJMe bTCXG5WP0KiCpHXUtprbvyfZmy5gaROlF4N0efUWa4foTrfbfT0In117X1lDGJ3c G8E6DKlcWKkencisZchb6FUu1ZsMl3Hpo7G+t5+J8iMVFDajwFM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:02 2025 by rpki-client