This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: D+ymMWgbVSJtKB0pOQMwnNMdCWgpBJMRjulBF4chAWk= Subject key identifier: 43:3B:ED:49:D7:1A:84:7B:85:F3:37:4D:2D:64:0D:00:1C:2E:4A:C3 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 33B8DC6BA3C3BB013BFC497BDC4BF61C209752BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 024C Signing time: Sat 06 Dec 2025 11:41:10 +0000 Manifest this update: Sat 06 Dec 2025 11:36:10 +0000 Manifest next update: Tue 09 Dec 2025 12:42:10 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 3: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: epvPukV1poL+KG8MNcxPfdCXz3oelHmJegg9nDHIDvE=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:dc:6b:a3:c3:bb:01:3b:fc:49:7b:dc:4b:f6:1c:20:97:52:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Dec 6 11:36:10 2025 GMT Not After : Dec 9 12:42:10 2025 GMT Subject: CN=433BED49D71A847B85F3374D2D640D001C2E4AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:4e:6e:be:64:da:6c:1f:3c:98:ec:78:51: a7:69:8a:b5:51:ad:ef:ef:a9:fb:5e:4f:e8:8a:9c: 49:ea:53:f2:29:28:a5:fa:e1:80:2c:00:a6:78:cd: dc:4c:76:88:63:69:12:70:26:cf:19:ba:a1:28:2d: 12:07:1d:25:80:6e:d1:ba:b7:8a:d8:a6:8d:a3:75: 68:32:ac:c4:70:23:41:a5:00:e6:28:cc:e5:41:ec: b1:9e:8e:76:53:7d:3b:87:88:da:a1:65:a7:14:01: 4e:36:ee:33:ac:6e:27:51:96:2b:15:92:67:c9:85: e8:9b:bd:8a:b0:7b:10:45:6b:4a:54:ec:9c:c9:8e: 74:f0:4a:48:92:5d:95:46:a5:84:40:f7:1e:62:fc: 8f:10:3b:96:8e:b5:98:4a:98:a3:15:12:44:e6:7a: e9:84:f8:16:db:bd:d5:ac:39:a3:22:16:58:ce:9c: 49:3b:bd:7a:f1:ad:6c:42:11:67:3f:30:9d:09:d3: be:26:68:8e:f5:a5:03:2d:47:5c:aa:73:05:57:cd: c8:02:26:fe:c8:8e:46:2a:41:0c:2c:4f:28:f1:32: 35:37:62:ee:75:b5:d4:b5:d6:0d:1e:03:1d:bc:fc: 18:8d:34:ce:c0:85:d7:91:f2:3b:35:80:0a:ca:6a: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3B:ED:49:D7:1A:84:7B:85:F3:37:4D:2D:64:0D:00:1C:2E:4A:C3 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fd:32:6a:09:58:90:61:b8:69:4d:c7:a8:3b:cf:5f:da:bc: 27:36:f7:6c:d3:75:a2:07:3d:ee:ff:e1:06:84:a0:8b:85:b8: 99:d3:1b:c4:ba:cf:91:56:64:4c:9c:46:4c:4a:7e:2c:45:1e: 6a:b3:dc:0f:d1:e5:fc:ec:11:a9:25:54:f8:8b:0d:41:43:63: 8e:f7:12:8d:25:f9:25:95:a3:0b:ee:e9:1f:78:22:1e:cb:87: 3e:a3:de:e6:e5:7f:3c:4f:49:d3:b5:29:28:56:0f:59:e0:b6: 23:ed:07:3b:9a:0b:bb:3b:3b:f7:2e:64:ed:4b:b1:a6:c2:90: 30:19:cc:ba:08:8b:da:68:7c:74:6c:c2:b7:cc:cd:39:87:19: 9e:79:e9:48:d6:ef:01:01:78:d1:92:47:9a:64:45:d8:2b:ac: da:5b:a3:db:e1:d4:80:e7:26:d2:58:c7:0b:02:46:91:f7:f4: b0:9f:a8:03:0e:f4:17:03:c9:11:c0:fc:e5:c6:1b:8e:61:56: b5:35:2e:70:74:54:75:66:ae:9a:cf:e0:51:5e:5f:68:99:aa: eb:fc:1d:dd:bb:be:54:40:02:a4:1a:2b:5f:e0:a4:c2:ec:0c: 7f:46:14:a3:a9:c2:e9:1e:70:64:27:17:b2:8a:f1:b7:36:62: 58:f3:cf:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7jca6PDuwE7/El73Ev2HCCXUrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTEyMDYxMTM2MTBaFw0yNTEyMDkxMjQyMTBaMDMxMTAvBgNV BAMTKDQzM0JFRDQ5RDcxQTg0N0I4NUYzMzc0RDJENjQwRDAwMUMyRTRBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8E5uvmTabB88mOx4UadpirVR re/vqfteT+iKnEnqU/IpKKX64YAsAKZ4zdxMdohjaRJwJs8ZuqEoLRIHHSWAbtG6 t4rYpo2jdWgyrMRwI0GlAOYozOVB7LGejnZTfTuHiNqhZacUAU427jOsbidRlisV kmfJheibvYqwexBFa0pU7JzJjnTwSkiSXZVGpYRA9x5i/I8QO5aOtZhKmKMVEkTm eumE+BbbvdWsOaMiFljOnEk7vXrxrWxCEWc/MJ0J074maI71pQMtR1yqcwVXzcgC Jv7IjkYqQQwsTyjxMjU3Yu51tdS11g0eAx28/BiNNM7AhdeR8js1gArKamlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQzvtSdcahHuF8zdNLWQNABwuSsMwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL9MmoJWJBhuGlNx6g7z1/avCc292zTdaIH Pe7/4QaEoIuFuJnTG8S6z5FWZEycRkxKfixFHmqz3A/R5fzsEaklVPiLDUFDY473 Eo0l+SWVowvu6R94Ih7Lhz6j3ublfzxPSdO1KShWD1ngtiPtBzuaC7s7O/cuZO1L sabCkDAZzLoIi9pofHRswrfMzTmHGZ556UjW7wEBeNGSR5pkRdgrrNpbo9vh1IDn JtJYxwsCRpH39LCfqAMO9BcDyRHA/OXGG45hVrU1LnB0VHVmrprP4FFeX2iZquv8 Hd27vlRAAqQaK1/gpMLsDH9GFKOpwukecGQnF7KK8bc2YljzzwI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:00 2025 by rpki-client