This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: wrnZtAG+PSCcunqHSp9z2z4FmsegZI96TwkTFuCmESM= Subject key identifier: 98:F3:83:32:76:B2:3C:03:5D:50:85:DF:0F:5D:14:2A:AB:FC:92:56 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 11DEC9A4BF724DF37523F5C8A059BB4454DB6787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: C9 Signing time: Wed 17 Dec 2025 02:51:08 +0000 Manifest this update: Wed 17 Dec 2025 02:46:08 +0000 Manifest next update: Sat 20 Dec 2025 09:14:08 +0000 Files and hashes: 1: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: 4G/1BkTCjyEG1+w9LZFsGqCuJgrd0LF75oVbED5hmUI=) 3: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) 4: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:de:c9:a4:bf:72:4d:f3:75:23:f5:c8:a0:59:bb:44:54:db:67:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Dec 17 02:46:08 2025 GMT Not After : Dec 20 09:14:08 2025 GMT Subject: CN=98F3833276B23C035D5085DF0F5D142AABFC9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:0e:f4:21:5d:ad:45:ef:8c:0e:17:87:9c: 0b:92:5c:5f:6c:d2:eb:a3:03:74:2a:1e:c7:ff:78: 06:ab:4c:f2:44:20:3a:01:1d:11:3d:a7:a2:57:f4: c2:6b:10:35:34:77:d4:78:dd:e8:06:f1:56:72:ee: e2:76:3d:ad:cf:49:68:17:6d:2c:4b:1a:08:88:69: 13:11:b0:9d:4a:a2:14:3e:b6:b6:82:c7:c0:da:d9: 90:ef:cf:17:1e:dc:82:6b:54:a8:0b:d5:72:16:49: d1:0a:d9:2f:ea:3d:b0:ac:0c:12:87:6c:ba:47:be: 40:33:1f:a2:15:d1:7e:b1:38:ac:24:7c:c6:7b:e1: 26:f7:a9:f7:fd:f3:a1:6b:8c:e2:21:58:1e:28:89: 3b:69:2f:5b:c9:97:f6:e2:4b:75:ad:8d:ca:11:fb: e3:95:8c:0e:1d:de:1f:6d:54:1d:5f:4d:66:fc:fc: 3f:19:d7:be:87:a0:44:6b:49:2e:88:2b:aa:bf:c5: 5b:ed:59:47:5f:b3:50:5c:e0:85:1a:e7:44:62:ea: c7:bb:fa:a7:06:f1:c6:33:fa:89:78:ba:97:04:f8: 8e:50:bd:29:fe:b3:ca:6b:f9:51:fa:d2:c2:17:10: 41:c9:09:12:d4:68:bc:75:43:2c:ee:89:a3:e6:e5: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F3:83:32:76:B2:3C:03:5D:50:85:DF:0F:5D:14:2A:AB:FC:92:56 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7f:41:1c:d8:94:1e:7c:60:53:0b:f1:6a:90:f1:88:40:f9: dd:e1:35:77:90:66:18:33:bd:0e:0b:0b:69:c7:13:66:bb:c2: aa:c6:ce:e3:8b:c2:01:82:c5:e0:5c:7b:ae:6f:5c:21:f3:1c: cb:77:d2:db:f5:d4:bc:e8:4d:02:c9:86:95:45:c2:20:26:9c: 46:ad:39:19:cd:c4:03:9b:5e:62:cc:e0:6d:f5:7e:74:da:06: 76:d5:f2:76:14:19:45:79:b5:ef:3b:5c:e8:c2:0a:b4:c4:2a: c6:4b:8b:f3:a6:a5:7b:2b:33:bc:39:bd:47:61:48:80:39:36: 93:99:cf:7b:74:a7:d5:dc:ff:e5:73:75:de:2f:48:d9:5d:1d: 69:d2:1e:9e:7b:44:a2:20:4e:13:18:70:68:69:f5:95:7b:70: 88:e6:11:58:f1:51:9c:26:22:e5:65:11:eb:b4:bb:33:0f:78: 8b:8a:52:24:38:bd:59:60:1d:f3:0b:5b:ee:99:25:c5:90:f0: fb:41:ef:dc:a6:bc:84:0c:c2:45:66:c2:61:61:d4:a4:bf:88: bf:87:f1:df:99:67:96:e5:d7:5b:5a:43:9e:94:83:76:4e:29: 7c:35:f2:fd:e2:dc:a2:dc:2a:ee:84:46:d9:a8:ae:f2:57:b5: 77:7d:e2:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEd7JpL9yTfN1I/XIoFm7RFTbZ4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTEyMTcwMjQ2MDhaFw0yNTEyMjAwOTE0MDhaMDMxMTAvBgNV BAMTKDk4RjM4MzMyNzZCMjNDMDM1RDUwODVERjBGNUQxNDJBQUJGQzkyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCg70IV2tRe+MDheHnAuSXF9s 0uujA3QqHsf/eAarTPJEIDoBHRE9p6JX9MJrEDU0d9R43egG8VZy7uJ2Pa3PSWgX bSxLGgiIaRMRsJ1KohQ+traCx8Da2ZDvzxce3IJrVKgL1XIWSdEK2S/qPbCsDBKH bLpHvkAzH6IV0X6xOKwkfMZ74Sb3qff986FrjOIhWB4oiTtpL1vJl/biS3WtjcoR ++OVjA4d3h9tVB1fTWb8/D8Z176HoERrSS6IK6q/xVvtWUdfs1Bc4IUa50Ri6se7 +qcG8cYz+ol4upcE+I5QvSn+s8pr+VH60sIXEEHJCRLUaLx1QyzuiaPm5RPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmPODMnayPANdUIXfD10UKqv8klYwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB/QRzYlB58YFML8WqQ8YhA+d3hNXeQZhgz vQ4LC2nHE2a7wqrGzuOLwgGCxeBce65vXCHzHMt30tv11LzoTQLJhpVFwiAmnEat ORnNxAObXmLM4G31fnTaBnbV8nYUGUV5te87XOjCCrTEKsZLi/OmpXsrM7w5vUdh SIA5NpOZz3t0p9Xc/+Vzdd4vSNldHWnSHp57RKIgThMYcGhp9ZV7cIjmEVjxUZwm IuVlEeu0uzMPeIuKUiQ4vVlgHfMLW+6ZJcWQ8PtB79ymvIQMwkVmwmFh1KS/iL+H 8d+ZZ5bl11taQ56Ug3ZOKXw18v3i3KLcKu6ERtmorvJXtXd94rc= -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:08 2025 by rpki-client