This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: lP0fulUA0+vo3iRE2y+sb/PmEi4+Tbleir2HzdSl+CU= Subject key identifier: 5C:8E:45:58:FB:B0:5B:C4:A6:93:0B:A3:4F:93:CF:8D:BE:11:28:8F Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 384D6F592B193D0BA1FC15350D1A9CFCA5C330C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 028A Signing time: Sat 06 Dec 2025 14:11:45 +0000 Manifest this update: Sat 06 Dec 2025 14:06:45 +0000 Manifest next update: Tue 09 Dec 2025 20:21:45 +0000 Files and hashes: 1: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 4: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: 1inbdnIbQENJoGH4Dw72NPz20aaDtctAhdCTe175OQA=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4d:6f:59:2b:19:3d:0b:a1:fc:15:35:0d:1a:9c:fc:a5:c3:30:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Dec 6 14:06:45 2025 GMT Not After : Dec 9 20:21:45 2025 GMT Subject: CN=5C8E4558FBB05BC4A6930BA34F93CF8DBE11288F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:e4:97:db:65:c0:0a:2e:62:9f:a1:98:32: d3:90:f1:52:33:db:7f:ed:65:0c:f8:38:cb:db:f1: 43:93:ee:83:db:46:2e:8c:a9:30:ed:09:a1:e5:b5: 21:67:95:c6:ab:c5:c6:61:fe:e9:be:11:b0:71:60: ce:81:f7:75:9e:3b:d6:7a:b4:87:c2:00:06:f2:d0: b4:ea:d4:f7:00:a4:02:66:e3:4b:04:94:cb:e8:27: a7:56:d2:58:5b:dc:b6:22:e8:2d:22:e5:99:f6:fc: ef:58:c9:20:26:2b:73:9b:6a:b2:4a:a4:14:09:b4: 86:1e:e5:2a:f2:7d:07:8b:a0:e2:e3:65:0a:eb:38: fd:da:ac:b6:a3:cc:71:d6:3b:19:ca:47:2e:ef:37: cf:61:e0:d4:2c:96:ab:1b:87:49:0c:a4:39:2a:1a: 19:46:5a:97:b3:1d:38:e1:7f:3d:42:4c:cb:e4:57: b6:da:ce:0f:41:6f:ba:40:d3:6f:81:29:e9:30:f3: ea:ff:ba:61:a0:cd:2e:29:7f:1f:2f:3a:7a:9a:05: 45:64:1a:16:8d:0f:82:e6:b7:47:0d:9c:3c:e9:56: ec:d2:e9:47:3c:94:1f:7b:c4:9f:48:39:b3:c1:32: 28:c5:9c:1c:3e:77:ff:5d:4c:40:60:72:fe:89:9e: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8E:45:58:FB:B0:5B:C4:A6:93:0B:A3:4F:93:CF:8D:BE:11:28:8F X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:d1:c9:3f:91:47:7f:ad:86:29:41:d0:ac:c0:cf:c9:8a:39: b9:67:d5:59:83:9b:d3:78:25:dc:14:7e:c7:56:50:70:cb:c5: 3e:c2:57:d8:4f:b2:f5:3c:53:39:93:f2:33:91:11:63:2b:22: 4f:d7:a6:44:11:19:37:79:29:4e:a1:f8:97:34:d2:76:f4:10: 1d:e7:f7:cb:81:a4:6d:45:1e:0b:f0:2d:33:ff:42:bd:e5:d6: 4a:e8:ef:3c:bb:52:46:ad:83:2b:14:30:5f:74:28:6c:e9:45: 0f:9a:2f:3e:50:b7:eb:4a:13:33:9b:98:d2:d5:14:96:26:67: c4:33:db:fb:18:3b:fc:6d:ea:f8:c4:72:f7:72:04:dc:60:98: f1:b9:c2:be:a6:b3:6f:9b:cd:6d:4f:66:92:1e:37:0b:75:3b: e7:76:f6:da:8d:7f:9f:c6:cf:c6:68:08:86:b3:db:6b:c2:67: 01:99:29:22:0d:d8:96:39:b1:86:7b:e3:5c:ff:c2:a4:76:c8: bf:bd:13:57:c9:7a:30:73:16:5f:14:d8:0d:16:bd:17:a4:78: 9f:26:02:d1:42:7b:29:a6:c9:90:02:54:da:ab:89:57:21:00: 59:bd:4e:f3:e2:cc:b4:13:eb:3a:43:e8:51:0f:e7:a1:1c:82: b6:d5:04:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOE1vWSsZPQuh/BU1DRqc/KXDMMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTEyMDYxNDA2NDVaFw0yNTEyMDkyMDIxNDVaMDMxMTAvBgNV BAMTKDVDOEU0NTU4RkJCMDVCQzRBNjkzMEJBMzRGOTNDRjhEQkUxMTI4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j+SX22XACi5in6GYMtOQ8VIz 23/tZQz4OMvb8UOT7oPbRi6MqTDtCaHltSFnlcarxcZh/um+EbBxYM6B93WeO9Z6 tIfCAAby0LTq1PcApAJm40sElMvoJ6dW0lhb3LYi6C0i5Zn2/O9YySAmK3ObarJK pBQJtIYe5SryfQeLoOLjZQrrOP3arLajzHHWOxnKRy7vN89h4NQslqsbh0kMpDkq GhlGWpezHTjhfz1CTMvkV7bazg9Bb7pA02+BKekw8+r/umGgzS4pfx8vOnqaBUVk GhaND4Lmt0cNnDzpVuzS6Uc8lB97xJ9IObPBMijFnBw+d/9dTEBgcv6JnkXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI5FWPuwW8SmkwujT5PPjb4RKI8wHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXRyT+RR3+thilB0KzAz8mKObln1VmDm9N4 JdwUfsdWUHDLxT7CV9hPsvU8UzmT8jOREWMrIk/XpkQRGTd5KU6h+Jc00nb0EB3n 98uBpG1FHgvwLTP/Qr3l1kro7zy7UkatgysUMF90KGzpRQ+aLz5Qt+tKEzObmNLV FJYmZ8Qz2/sYO/xt6vjEcvdyBNxgmPG5wr6ms2+bzW1PZpIeNwt1O+d29tqNf5/G z8ZoCIaz22vCZwGZKSIN2JY5sYZ741z/wqR2yL+9E1fJejBzFl8U2A0WvRekeJ8m AtFCeymmyZACVNqriVchAFm9TvPizLQT6zpD6FEP56EcgrbVBBQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:52 2025 by rpki-client