This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: EUlM8crj3n9uunzpKXackpYbqCuvIi68yvjqEW0pRKc= Subject key identifier: BB:9D:42:AA:70:6A:3F:35:AA:3D:31:50:CE:C8:8B:55:96:B6:B3:F0 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 7261B1830A384665ECC83FC2158D636B9A609BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01D8 Signing time: Fri 05 Dec 2025 02:20:05 +0000 Manifest this update: Fri 05 Dec 2025 02:15:05 +0000 Manifest next update: Mon 08 Dec 2025 08:26:05 +0000 Files and hashes: 1: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: J14o2qLg+0o6GARw29+flMr3ee8BY5nPO3BZxVZrN40=) 2: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:61:b1:83:0a:38:46:65:ec:c8:3f:c2:15:8d:63:6b:9a:60:9b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Dec 5 02:15:05 2025 GMT Not After : Dec 8 08:26:05 2025 GMT Subject: CN=BB9D42AA706A3F35AA3D3150CEC88B5596B6B3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:8b:16:16:d3:c0:bc:e3:28:9d:c9:2c:da: c6:c6:d8:ea:2a:92:49:e7:4d:d9:34:3a:2a:6c:bd: f5:0d:7c:a5:fa:fd:8c:83:48:81:99:70:df:37:8a: 71:81:04:8d:ea:79:7b:0f:58:b6:89:71:d0:0e:79: 60:75:f5:93:59:25:d2:93:3b:dd:10:46:98:ef:99: f6:cf:69:79:5f:9c:57:ba:b4:f5:ba:1d:90:dd:b7: 1f:5b:98:7e:27:de:24:6e:c2:dd:07:66:6b:44:dc: e9:cc:ab:7b:0e:02:d5:b7:f8:15:0e:7f:f7:71:09: b3:fb:62:b0:b0:68:76:a3:66:fc:d3:d7:4e:78:10: 25:63:66:c8:87:23:69:d1:5f:de:a6:e2:23:de:f0: 07:29:a5:d7:98:b8:e0:cb:45:e5:92:6e:57:cd:99: 82:cc:4e:9c:1d:2b:6a:4a:63:ae:e1:fd:85:9f:3d: 1f:97:27:0c:e6:0c:7c:31:30:e1:9b:61:69:64:2b: ff:cc:da:e3:62:55:45:6a:3c:ad:3c:b5:f5:68:df: fa:1a:b3:f7:48:32:64:d2:19:df:3d:61:75:4f:c3: 9c:d6:6f:ae:6b:3f:fd:7a:2b:90:da:34:48:7e:97: 8b:db:f4:91:d1:a4:b9:99:e0:7c:08:cf:83:50:65: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:42:AA:70:6A:3F:35:AA:3D:31:50:CE:C8:8B:55:96:B6:B3:F0 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:33:d1:bd:cd:9b:49:88:4d:a4:8a:9f:2a:4d:31:32:c0: 7b:3b:8e:d2:95:3e:dc:0f:36:9d:ce:67:92:f4:95:b4:12:4e: f7:6c:0c:f0:99:a1:33:18:b0:b3:23:ae:4f:d5:65:3f:ba:8b: ab:33:df:39:96:87:3b:3d:28:f8:3d:1c:b7:b7:22:81:a0:94: 86:5c:08:c5:9c:af:7f:24:af:7e:c6:e9:03:bd:2e:1c:bd:be: 06:d2:4f:c0:45:35:b8:b1:7d:c0:db:ff:cb:1a:08:36:87:2e: 86:a5:42:26:a6:f2:4c:71:c2:2e:82:58:61:5a:8c:4e:89:fd: 82:35:cc:fa:f9:79:9b:bb:fd:49:eb:85:60:9c:9e:c2:d0:33: a5:99:48:d5:0e:52:06:67:f3:27:ae:95:38:37:c2:d4:b7:79: a7:a2:a3:92:71:f6:1b:fb:f1:dc:32:af:2e:d1:4c:5a:8f:60: 6e:49:ac:80:5d:cb:d3:df:40:3a:21:b9:48:43:db:09:55:ac: 51:2c:b9:63:8f:86:71:a4:ec:c6:26:46:c6:0c:09:e7:c1:bc: 4e:83:b2:fb:83:14:bd:6d:59:e9:dc:1d:db:fc:72:fd:96:6c: 19:95:cc:c4:ec:75:4a:25:7c:71:86:99:6a:72:db:e5:fc:74: 41:30:1d:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmGxgwo4RmXsyD/CFY1ja5pgm7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTEyMDUwMjE1MDVaFw0yNTEyMDgwODI2MDVaMDMxMTAvBgNV BAMTKEJCOUQ0MkFBNzA2QTNGMzVBQTNEMzE1MENFQzg4QjU1OTZCNkIzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIy4sWFtPAvOMoncks2sbG2Ooq kknnTdk0OipsvfUNfKX6/YyDSIGZcN83inGBBI3qeXsPWLaJcdAOeWB19ZNZJdKT O90QRpjvmfbPaXlfnFe6tPW6HZDdtx9bmH4n3iRuwt0HZmtE3OnMq3sOAtW3+BUO f/dxCbP7YrCwaHajZvzT1054ECVjZsiHI2nRX96m4iPe8AcppdeYuODLReWSblfN mYLMTpwdK2pKY67h/YWfPR+XJwzmDHwxMOGbYWlkK//M2uNiVUVqPK08tfVo3/oa s/dIMmTSGd89YXVPw5zWb65rP/16K5DaNEh+l4vb9JHRpLmZ4HwIz4NQZYQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu51CqnBqPzWqPTFQzsiLVZa2s/AwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJpM9G9zZtJiE2kip8qTTEywHs7jtKVPtwP Np3OZ5L0lbQSTvdsDPCZoTMYsLMjrk/VZT+6i6sz3zmWhzs9KPg9HLe3IoGglIZc CMWcr38kr37G6QO9Lhy9vgbST8BFNbixfcDb/8saCDaHLoalQiam8kxxwi6CWGFa jE6J/YI1zPr5eZu7/UnrhWCcnsLQM6WZSNUOUgZn8yeulTg3wtS3eaeio5Jx9hv7 8dwyry7RTFqPYG5JrIBdy9PfQDohuUhD2wlVrFEsuWOPhnGk7MYmRsYMCefBvE6D svuDFL1tWencHdv8cv2WbBmVzMTsdUolfHGGmWpy2+X8dEEwHUQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:00 2025 by rpki-client