This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: 4qyF1MPOfitfFjg2SQrQgZHGcRWw6WaK41ZJmcGBDK4= Subject key identifier: C0:D1:38:00:65:EC:F4:08:67:81:7F:00:F3:3B:50:61:AA:46:3E:28 Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 0C2015777108A9A3FEC135A4477E987DD3C997C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 5D Signing time: Sat 06 Dec 2025 06:32:19 +0000 Manifest this update: Sat 06 Dec 2025 06:27:19 +0000 Manifest next update: Tue 09 Dec 2025 13:21:19 +0000 Files and hashes: 1: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=) 2: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: Hreg8BocQgXRttSHwoopgE/L5xv9Mnv/BftPeT4qMsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:20:15:77:71:08:a9:a3:fe:c1:35:a4:47:7e:98:7d:d3:c9:97:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Dec 6 06:27:19 2025 GMT Not After : Dec 9 13:21:19 2025 GMT Subject: CN=C0D1380065ECF40867817F00F33B5061AA463E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:cf:42:cc:8e:67:68:ff:a0:a6:19:b5:51: a5:1e:70:f1:d8:36:9a:95:4a:9a:3c:07:5d:29:f4: a2:18:51:73:22:c4:13:dd:16:69:f7:66:bd:03:44: 10:5c:83:e7:1d:e3:a9:f7:59:d4:04:55:e5:c8:6f: 7d:5f:62:3e:d5:83:cb:50:6b:bc:1c:c3:13:04:0b: 1c:2b:ec:c6:43:a0:b1:91:30:d0:53:1b:a0:4b:a4: 0b:0a:d6:89:80:5c:5d:50:4e:0d:a0:ab:39:95:81: 64:15:11:39:79:01:fd:75:b0:99:60:e8:25:fa:0e: 12:d8:b6:47:9b:9f:14:3b:d3:a0:c8:ba:ce:d6:7b: ba:91:b4:6c:9e:57:7e:b4:e8:20:a7:ce:b9:a9:d8: 9b:af:26:4c:6c:58:1e:53:c5:9b:7d:54:94:fc:8e: 45:ac:70:b3:f8:c1:e3:27:f4:25:db:3f:12:93:e9: 0e:2a:b1:08:b3:37:13:9d:07:03:75:5f:7b:dd:9c: f3:0c:a4:7d:61:c1:7d:80:c6:6e:5e:33:fb:f2:81: 1b:c4:a2:68:8b:03:be:7d:8d:01:ea:be:bf:eb:53: 7b:0d:16:94:91:93:76:ec:8c:ec:80:1d:81:c4:7c: d6:d1:d3:85:85:84:11:a8:fe:61:31:ac:e9:21:34: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:38:00:65:EC:F4:08:67:81:7F:00:F3:3B:50:61:AA:46:3E:28 X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6e:b6:e5:fb:63:23:3d:28:67:ad:09:c0:dc:be:dc:df:f2: 03:c7:fd:70:bd:e0:e7:1c:22:3c:be:07:f9:04:b8:42:44:e9: 54:f2:2b:86:48:70:57:26:cb:9b:8a:07:15:eb:ef:ae:1a:99: 53:e4:cd:87:b5:75:67:5d:9d:c0:29:65:9d:24:28:1a:53:16: 3c:fe:00:f4:21:7e:be:a4:ee:26:f9:a4:23:df:c9:9c:5a:fe: b3:5d:b0:81:fe:ae:28:93:bf:59:f2:f7:49:e0:5b:5c:5d:21: e6:04:c8:15:c0:2f:04:ec:38:81:1b:21:2b:72:fe:ba:09:76: 29:40:17:e8:03:28:f8:2a:7a:a2:33:0f:ea:38:6b:f9:eb:b5: 1d:7c:9a:d0:4b:e0:c8:bf:38:d7:98:d4:4f:29:0f:4e:11:bb: 60:b5:57:ec:c2:cf:82:71:ff:0c:a6:81:5d:a4:d4:88:4e:63: 48:fd:eb:55:21:80:93:68:1d:75:eb:09:eb:66:7c:69:6e:5b: 23:00:fe:c4:e5:e5:f0:03:75:df:b9:3e:0b:61:b4:69:c3:de: d9:82:55:51:b0:eb:af:1e:7d:2e:09:d6:fe:70:11:16:10:18: 6f:99:a6:ef:44:13:8c:be:f1:2f:38:d4:0c:d3:16:1f:1e:34: c6:41:11:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCAVd3EIqaP+wTWkR36YfdPJl8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNTEyMDYwNjI3MTlaFw0yNTEyMDkxMzIxMTlaMDMxMTAvBgNV BAMTKEMwRDEzODAwNjVFQ0Y0MDg2NzgxN0YwMEYzM0I1MDYxQUE0NjNFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEf89CzI5naP+gphm1UaUecPHY NpqVSpo8B10p9KIYUXMixBPdFmn3Zr0DRBBcg+cd46n3WdQEVeXIb31fYj7Vg8tQ a7wcwxMECxwr7MZDoLGRMNBTG6BLpAsK1omAXF1QTg2gqzmVgWQVETl5Af11sJlg 6CX6DhLYtkebnxQ706DIus7We7qRtGyeV3606CCnzrmp2JuvJkxsWB5TxZt9VJT8 jkWscLP4weMn9CXbPxKT6Q4qsQizNxOdBwN1X3vdnPMMpH1hwX2Axm5eM/vygRvE omiLA759jQHqvr/rU3sNFpSRk3bsjOyAHYHEfNbR04WFhBGo/mExrOkhNHTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNE4AGXs9AhngX8A8ztQYapGPigwHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1utuX7YyM9KGetCcDcvtzf8gPH/XC94Occ Ijy+B/kEuEJE6VTyK4ZIcFcmy5uKBxXr764amVPkzYe1dWddncApZZ0kKBpTFjz+ APQhfr6k7ib5pCPfyZxa/rNdsIH+riiTv1ny90ngW1xdIeYEyBXALwTsOIEbISty /roJdilAF+gDKPgqeqIzD+o4a/nrtR18mtBL4Mi/ONeY1E8pD04Ru2C1V+zCz4Jx /wymgV2k1IhOY0j961UhgJNoHXXrCetmfGluWyMA/sTl5fADdd+5PgthtGnD3tmC VVGw668efS4J1v5wERYQGG+Zpu9EE4y+8S841AzTFh8eNMZBEe8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:31 2025 by rpki-client