This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: noCAqNAiokzWNQO2fo0RHJ5+kg08U2QDrr47a0SsfjI= Subject key identifier: 65:BF:77:C6:F0:B9:79:3A:A5:B1:47:5F:2E:20:5E:97:96:8B:CD:61 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 468E6596E0742E122279E8FD0F14734A41961996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02C6 Signing time: Fri 05 Dec 2025 08:02:04 +0000 Manifest this update: Fri 05 Dec 2025 07:57:04 +0000 Manifest next update: Mon 08 Dec 2025 17:15:04 +0000 Files and hashes: 1: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 3: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 4: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: cSIFi1erTCipzBS1GWYCX4bJQGiJ5AyG7TA/08FPd10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8e:65:96:e0:74:2e:12:22:79:e8:fd:0f:14:73:4a:41:96:19:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Dec 5 07:57:04 2025 GMT Not After : Dec 8 17:15:04 2025 GMT Subject: CN=65BF77C6F0B9793AA5B1475F2E205E97968BCD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:35:c6:4a:3d:c4:9d:09:e1:a1:1f:d1:25: 6c:5d:54:db:43:05:49:a7:a9:79:1b:07:81:c9:e7: 0a:29:99:cd:d0:5f:64:71:00:5b:48:ee:2b:80:ba: e4:e5:7e:bf:87:4b:01:a7:8b:a6:70:5d:19:93:30: d5:ad:8c:d4:81:f7:09:bf:8c:bc:53:2e:f5:72:e7: e8:09:8b:80:8f:d5:60:fe:61:b2:7d:d5:e9:0b:d4: 0e:10:e6:34:25:38:50:d1:52:a9:75:c1:89:4a:d1: c0:a6:93:f5:c5:e9:8c:44:79:f7:7b:39:76:2d:0d: 74:7d:6f:b4:0f:ea:e3:00:99:7d:5e:b4:6c:fc:5f: f8:96:0b:ee:04:86:6f:7c:a4:e0:fd:38:d9:c7:4c: 56:6c:23:ce:29:89:e8:54:e4:43:fd:86:30:79:21: 13:66:d4:2d:fa:12:fd:f2:21:8e:10:e1:db:83:47: 7c:f4:1c:be:fe:5e:fb:11:ec:35:5f:c0:16:02:eb: c3:34:6d:6c:92:95:97:0d:10:7a:0d:4f:bb:93:db: 55:fb:63:38:fc:d6:4c:bd:9a:f4:5f:f2:3b:ea:1f: ba:f3:8a:19:92:45:ff:bc:9b:0f:9f:dc:2e:ba:16: 82:fb:e4:81:2e:67:df:31:91:4b:17:49:0f:cf:46: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BF:77:C6:F0:B9:79:3A:A5:B1:47:5F:2E:20:5E:97:96:8B:CD:61 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:92:45:89:bd:0e:2b:fe:85:30:db:16:fa:ef:89:a7:45:e5: 07:78:76:39:19:c8:1e:d0:d3:70:aa:db:43:25:15:a0:18:07: 2d:5a:ff:1a:b8:93:e2:b8:9d:46:9b:f4:f6:5a:bf:5f:75:15: 8e:0b:06:85:71:b2:71:a9:7b:91:6e:f5:00:bc:10:1c:b4:bc: 4d:d7:8c:85:55:58:08:fa:bf:a9:bc:35:31:a5:f0:46:82:47: 9f:ef:34:02:98:1e:89:18:06:04:5b:59:12:10:6e:b2:99:e3: 21:43:f7:2f:1e:5b:84:8f:4f:33:49:bf:6b:d8:f7:6b:5b:8b: 8e:08:35:11:3e:0a:2b:80:fb:d6:b1:c6:91:39:10:e0:03:c8: b0:75:52:5d:12:be:e1:a0:31:70:42:ac:47:dd:c0:2e:36:d6: 95:cf:f1:80:93:02:70:6b:ba:a7:d7:e4:07:1a:40:5b:2b:75: 33:29:fe:7e:47:5c:62:65:1d:65:0b:45:38:f0:d2:98:0f:3a: 7f:47:7c:b0:6c:f8:8c:0f:e5:e7:40:f6:85:4e:d2:57:f0:41: a7:52:af:6f:94:eb:40:90:68:5c:48:69:24:c2:43:d8:bf:96: b8:b8:40:a0:8b:c6:28:d7:b2:bf:c7:ae:74:ff:40:b2:92:41: 85:d3:8b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURo5lluB0LhIieej9DxRzSkGWGZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTEyMDUwNzU3MDRaFw0yNTEyMDgxNzE1MDRaMDMxMTAvBgNV BAMTKDY1QkY3N0M2RjBCOTc5M0FBNUIxNDc1RjJFMjA1RTk3OTY4QkNENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflDXGSj3EnQnhoR/RJWxdVNtD BUmnqXkbB4HJ5wopmc3QX2RxAFtI7iuAuuTlfr+HSwGni6ZwXRmTMNWtjNSB9wm/ jLxTLvVy5+gJi4CP1WD+YbJ91ekL1A4Q5jQlOFDRUql1wYlK0cCmk/XF6YxEefd7 OXYtDXR9b7QP6uMAmX1etGz8X/iWC+4Ehm98pOD9ONnHTFZsI84piehU5EP9hjB5 IRNm1C36Ev3yIY4Q4duDR3z0HL7+XvsR7DVfwBYC68M0bWySlZcNEHoNT7uT21X7 Yzj81ky9mvRf8jvqH7rzihmSRf+8mw+f3C66FoL75IEuZ98xkUsXSQ/PRlqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZb93xvC5eTqlsUdfLiBel5aLzWEwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6SRYm9Div+hTDbFvrviadF5Qd4djkZyB7Q 03Cq20MlFaAYBy1a/xq4k+K4nUab9PZav191FY4LBoVxsnGpe5Fu9QC8EBy0vE3X jIVVWAj6v6m8NTGl8EaCR5/vNAKYHokYBgRbWRIQbrKZ4yFD9y8eW4SPTzNJv2vY 92tbi44INRE+CiuA+9axxpE5EOADyLB1Ul0SvuGgMXBCrEfdwC421pXP8YCTAnBr uqfX5AcaQFsrdTMp/n5HXGJlHWULRTjw0pgPOn9HfLBs+IwP5edA9oVO0lfwQadS r2+U60CQaFxIaSTCQ9i/lri4QKCLxijXsr/HrnT/QLKSQYXTi1M= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:10 2025 by rpki-client