This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: DPORbcB2KBcVPTutRoX88scySSoc84YQXg0Z+9E4YWo= Subject key identifier: 57:14:59:08:C5:57:42:B9:0D:D9:4C:C9:9B:9F:20:87:A0:42:10:96 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 2237E2401C51789CEC9F4276D593B6E070E3273C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0250 Signing time: Fri 05 Dec 2025 16:50:02 +0000 Manifest this update: Fri 05 Dec 2025 16:45:02 +0000 Manifest next update: Mon 08 Dec 2025 23:56:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 2: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 4: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: k9BF3n1kATYEvlzlnQY5IrOdOhw7U7iIPG/GjsakDsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:37:e2:40:1c:51:78:9c:ec:9f:42:76:d5:93:b6:e0:70:e3:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Dec 5 16:45:02 2025 GMT Not After : Dec 8 23:56:02 2025 GMT Subject: CN=57145908C55742B90DD94CC99B9F2087A0421096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:b1:a2:53:9d:99:2d:2f:5d:92:fb:5b:cf: 8e:ac:59:dc:82:a4:06:3b:ff:a6:a3:22:7f:f8:f1: f3:11:90:1e:ea:8b:74:86:d6:b1:d6:bf:07:7d:24: fa:9c:75:85:08:6c:40:aa:ad:99:95:f0:91:0e:f1: 7d:00:61:bb:4c:a9:12:a8:23:48:c4:d1:6d:87:9e: 61:ea:c0:46:a3:ce:18:eb:b2:e7:ad:cd:7f:70:8b: c8:71:5c:3b:d0:e0:aa:18:2a:5e:4a:f9:9a:6e:00: 22:04:07:00:b2:0a:1c:4a:71:02:2c:69:42:43:2c: f3:55:45:64:ea:7c:16:32:ac:62:ea:c5:99:4a:74: 6d:36:bd:db:d2:89:49:78:b3:d7:6b:ab:7f:83:2b: a9:65:65:fc:c1:ac:96:e9:c1:69:26:28:e4:ff:55: 91:29:00:be:5e:16:ca:41:2c:b1:6b:b8:56:f5:84: 67:70:93:f8:98:4c:44:ac:2d:c1:80:56:0b:01:39: 7c:1f:21:99:3a:5c:d1:a1:30:4a:28:e0:e3:d6:0c: 95:ba:3d:33:fe:c4:8d:ae:f2:ae:8a:1c:1b:0f:95: e5:e7:26:32:bc:33:43:d4:ca:ba:2d:34:49:cd:87: 7a:2b:39:3e:98:c9:c9:a7:d6:6d:04:b6:72:9a:44: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:14:59:08:C5:57:42:B9:0D:D9:4C:C9:9B:9F:20:87:A0:42:10:96 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:4d:ba:b8:30:2d:0d:2f:ba:96:8f:a0:fd:06:36:f7:a1: 66:e3:e2:fc:a5:05:67:30:91:4b:6c:43:1e:a2:71:20:cf:4e: cf:0b:0b:24:a4:6c:07:2d:b5:36:f9:3b:b0:65:76:2e:97:b8: fe:0f:f0:7d:af:d8:ba:de:fe:5e:e8:ac:57:65:49:20:31:58: 85:4d:79:81:74:60:c7:66:16:1b:15:af:81:b2:58:db:3f:54: 59:33:71:ee:04:70:ad:98:fe:f2:96:19:b9:a8:cd:2f:ac:cb: 18:3c:61:19:c5:d0:c8:af:a5:b0:98:8c:27:d4:1c:71:89:02: d3:3d:44:79:61:aa:02:b4:6c:32:aa:52:9e:e8:20:ed:16:e2: 13:b2:bc:17:c7:89:85:2c:5b:70:28:3b:90:8c:e0:ca:d5:bf: 83:9d:9e:a3:fd:b4:af:b9:87:4d:e3:0d:f0:19:78:c5:9a:47: 4f:96:85:2e:a4:50:02:0d:39:56:56:87:eb:09:de:97:54:02: a8:82:de:34:c8:70:48:3a:fe:e2:5e:97:2d:c5:fe:c6:71:c2: 15:ed:29:16:c1:21:72:b4:c3:c9:ea:db:75:89:2c:00:df:db: 8d:e5:39:7e:12:02:4c:80:0d:d6:21:92:96:b5:53:0f:8f:d7: 2c:98:c2:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjfiQBxReJzsn0J21ZO24HDjJzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTEyMDUxNjQ1MDJaFw0yNTEyMDgyMzU2MDJaMDMxMTAvBgNV BAMTKDU3MTQ1OTA4QzU1NzQyQjkwREQ5NENDOTlCOUYyMDg3QTA0MjEwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ILGiU52ZLS9dkvtbz46sWdyC pAY7/6ajIn/48fMRkB7qi3SG1rHWvwd9JPqcdYUIbECqrZmV8JEO8X0AYbtMqRKo I0jE0W2HnmHqwEajzhjrsuetzX9wi8hxXDvQ4KoYKl5K+ZpuACIEBwCyChxKcQIs aUJDLPNVRWTqfBYyrGLqxZlKdG02vdvSiUl4s9drq3+DK6llZfzBrJbpwWkmKOT/ VZEpAL5eFspBLLFruFb1hGdwk/iYTESsLcGAVgsBOXwfIZk6XNGhMEoo4OPWDJW6 PTP+xI2u8q6KHBsPleXnJjK8M0PUyrotNEnNh3orOT6Yycmn1m0EtnKaRHD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxRZCMVXQrkN2UzJm58gh6BCEJYwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1nTbq4MC0NL7qWj6D9Bjb3oWbj4vylBWcw kUtsQx6icSDPTs8LCySkbActtTb5O7Bldi6XuP4P8H2v2Lre/l7orFdlSSAxWIVN eYF0YMdmFhsVr4GyWNs/VFkzce4EcK2Y/vKWGbmozS+syxg8YRnF0MivpbCYjCfU HHGJAtM9RHlhqgK0bDKqUp7oIO0W4hOyvBfHiYUsW3AoO5CM4MrVv4OdnqP9tK+5 h03jDfAZeMWaR0+WhS6kUAINOVZWh+sJ3pdUAqiC3jTIcEg6/uJely3F/sZxwhXt KRbBIXK0w8nq23WJLADf243lOX4SAkyADdYhkpa1Uw+P1yyYwqM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:22 2025 by rpki-client