This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: iqkg2F/jSeLtwQyMeWi69WDoX7/pX/sSp2UCkOtbwno= Subject key identifier: 43:E2:05:90:B4:0F:21:5C:4E:21:8B:D3:87:CE:2A:0D:C1:60:49:31 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 3C9842C431C72976E58B152CA87F02C2FD4271FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: C4 Signing time: Sat 06 Dec 2025 01:11:08 +0000 Manifest this update: Sat 06 Dec 2025 01:06:08 +0000 Manifest next update: Tue 09 Dec 2025 12:15:08 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 2: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) 3: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: 0uPB1vgj4IDHrJk9Htqn1E+pMNXuB2fu0tR/Uq22QAc=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:98:42:c4:31:c7:29:76:e5:8b:15:2c:a8:7f:02:c2:fd:42:71:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Dec 6 01:06:08 2025 GMT Not After : Dec 9 12:15:08 2025 GMT Subject: CN=43E20590B40F215C4E218BD387CE2A0DC1604931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:5e:07:66:73:73:b8:bf:32:89:7d:f8:f3: 53:e4:9c:bb:58:c1:75:ca:5a:0e:7e:5a:e9:14:96: 6e:41:a7:90:ce:38:d4:cd:e9:ce:f4:69:84:43:95: 7b:9c:84:a0:32:0c:c6:4a:91:79:df:5e:5e:ab:76: 3a:e5:3f:33:13:24:b2:9d:7b:e7:1d:5b:18:2a:b4: b0:ea:55:32:96:42:13:64:24:13:5a:54:23:fc:b6: cc:ff:40:47:b9:2d:9e:16:2a:72:a6:37:83:7f:42: 3d:d3:27:29:7c:8b:dc:45:3f:03:11:c1:1a:8c:10: b0:ee:cc:11:04:30:05:a6:62:6e:11:2d:7d:e5:7b: aa:68:9a:f8:b3:9f:0a:e9:f4:cf:95:1c:be:5d:bf: 28:d9:b7:b8:dd:ee:85:ea:a2:07:b9:14:41:e2:36: e9:f3:0e:24:2e:4e:15:fa:e4:77:96:66:ba:57:c4: 5b:ad:66:16:e0:de:6e:51:63:71:c2:ef:9c:a8:05: b4:8e:22:fb:21:a6:9d:42:e9:9f:3b:9f:55:05:fe: 4d:b3:53:03:16:b6:93:6a:80:71:cc:d3:8e:98:7a: b3:d1:60:31:3e:ee:cd:32:65:3d:a9:9c:22:30:87: 43:11:14:f4:b8:bb:f8:70:de:a9:69:97:ba:5f:64: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:05:90:B4:0F:21:5C:4E:21:8B:D3:87:CE:2A:0D:C1:60:49:31 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:00:71:54:c7:b1:28:19:82:64:35:8a:00:c0:08:d1:d1:a8: fe:7a:41:b4:ad:ab:0b:87:16:99:c6:6d:84:a6:9c:a2:f8:d9: ae:8b:09:da:6d:c2:98:ec:67:33:81:5d:5b:9f:5e:5f:26:1d: 97:3a:25:a5:58:24:99:a1:0e:0d:1b:57:07:91:52:2b:74:20: 1a:61:29:1f:0c:70:af:72:d1:7a:80:c2:55:01:38:16:7b:e9: 4f:a5:5f:4c:81:f1:00:28:36:1c:61:da:34:36:cf:ab:d3:14: d8:ac:1b:e6:ad:86:45:f4:c8:c3:07:e0:32:63:4f:53:6d:f7: b4:17:45:7e:3e:62:6b:36:06:0c:8f:a9:40:94:15:4f:86:ef: df:65:de:cd:dc:0a:16:7d:c8:a3:81:2c:eb:30:ec:3d:06:33: 55:a7:8d:a1:79:98:7c:28:bd:79:0a:69:89:4c:4f:8b:02:5f: 6c:26:8d:c8:06:27:9a:75:27:a8:f1:6b:05:70:c6:76:e0:92: 29:26:7a:d8:69:6f:a3:22:70:e4:a9:49:84:9a:0d:ed:f9:b1: 0c:0f:c5:ed:b0:cc:f2:ea:b1:c1:bd:fb:fb:a3:dd:3e:45:51: 3b:88:38:66:ca:dd:cc:66:1b:1d:52:d9:7a:70:fe:77:6a:89: 6e:d7:ed:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJhCxDHHKXblixUsqH8Cwv1Ccf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTEyMDYwMTA2MDhaFw0yNTEyMDkxMjE1MDhaMDMxMTAvBgNV BAMTKDQzRTIwNTkwQjQwRjIxNUM0RTIxOEJEMzg3Q0UyQTBEQzE2MDQ5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+h14HZnNzuL8yiX3481PknLtY wXXKWg5+WukUlm5Bp5DOONTN6c70aYRDlXuchKAyDMZKkXnfXl6rdjrlPzMTJLKd e+cdWxgqtLDqVTKWQhNkJBNaVCP8tsz/QEe5LZ4WKnKmN4N/Qj3TJyl8i9xFPwMR wRqMELDuzBEEMAWmYm4RLX3le6pomviznwrp9M+VHL5dvyjZt7jd7oXqoge5FEHi NunzDiQuThX65HeWZrpXxFutZhbg3m5RY3HC75yoBbSOIvshpp1C6Z87n1UF/k2z UwMWtpNqgHHM046YerPRYDE+7s0yZT2pnCIwh0MRFPS4u/hw3qlpl7pfZAJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+IFkLQPIVxOIYvTh84qDcFgSTEwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8AcVTHsSgZgmQ1igDACNHRqP56QbStqwuH FpnGbYSmnKL42a6LCdptwpjsZzOBXVufXl8mHZc6JaVYJJmhDg0bVweRUit0IBph KR8McK9y0XqAwlUBOBZ76U+lX0yB8QAoNhxh2jQ2z6vTFNisG+athkX0yMMH4DJj T1Nt97QXRX4+Yms2BgyPqUCUFU+G799l3s3cChZ9yKOBLOsw7D0GM1WnjaF5mHwo vXkKaYlMT4sCX2wmjcgGJ5p1J6jxawVwxnbgkikmethpb6MicOSpSYSaDe35sQwP xe2wzPLqscG9+/uj3T5FUTuIOGbK3cxmGx1S2Xpw/ndqiW7X7Y0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:07 2025 by rpki-client