This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: F38q9oBhl22GoMpfMUamoiyZEMTXFCz1iOry+vtmlGo= Subject key identifier: 0D:92:10:39:8C:4C:D7:7C:49:6E:C7:FB:60:B8:4A:85:D2:57:33:3F Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 079D4A45BB5439AA84428ACADFF762867E1D9F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: AF Signing time: Fri 05 Dec 2025 20:42:26 +0000 Manifest this update: Fri 05 Dec 2025 20:37:26 +0000 Manifest next update: Tue 09 Dec 2025 03:06:26 +0000 Files and hashes: 1: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: dekCceJwxoMHrCNXPb6hna7INilU+TJHCgrX5gvEk3s=) 2: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9d:4a:45:bb:54:39:aa:84:42:8a:ca:df:f7:62:86:7e:1d:9f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Dec 5 20:37:26 2025 GMT Not After : Dec 9 03:06:26 2025 GMT Subject: CN=0D9210398C4CD77C496EC7FB60B84A85D257333F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:26:37:c0:64:0b:cf:c5:01:38:79:83:5a: c5:91:a5:a0:cf:c3:24:76:ca:3d:9f:1c:a4:13:a9: ed:01:79:71:d9:bd:b0:81:15:32:6a:26:97:e6:78: 52:4b:d4:b7:3e:e3:50:b0:81:67:b4:51:e5:24:2b: d7:a1:b8:4f:09:7e:fe:76:15:3b:80:8d:11:85:8c: 82:53:b3:b3:7c:9d:60:61:90:d8:d7:37:e8:e9:6d: bf:90:ea:93:df:bc:7e:f7:0f:be:0c:b4:92:37:1b: 5a:68:11:99:51:42:de:64:1e:9b:0d:7f:0e:8e:c3: 59:ce:89:bd:48:b9:47:50:c3:5f:e9:f3:7e:e5:76: 7a:fb:c1:0d:0e:5c:13:f8:36:19:f8:4a:98:94:4f: c9:b5:3c:bc:4b:07:f1:dd:5e:d0:96:bd:9a:6a:c9: 2a:1c:dc:b3:6f:6f:3d:8e:b5:a4:08:bc:ef:83:aa: 38:8f:c2:fc:5d:ea:b4:7b:fc:3a:73:b4:e3:8c:51: 39:04:b3:4b:cd:f1:5c:54:d8:12:02:b0:80:8f:d9: e9:39:bc:a6:f8:ec:e8:65:35:6b:53:82:f0:2a:44: 1b:eb:5d:ae:9c:86:f4:ed:64:54:51:81:27:75:39: 1f:9b:e8:9a:f5:f6:a6:f6:51:b9:5d:ef:c6:2f:e6: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:92:10:39:8C:4C:D7:7C:49:6E:C7:FB:60:B8:4A:85:D2:57:33:3F X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:dc:18:ab:df:ef:09:3e:85:4a:2f:d1:5e:fc:c6:52:e1:7d: 09:e0:61:a9:e3:c6:7c:ca:45:23:07:00:01:ae:74:22:d1:01: 31:ba:4f:65:71:38:a7:8f:d1:f7:d1:1f:4b:ab:b1:c0:c9:55: 04:f5:f7:b9:db:d4:77:68:9a:d1:81:4a:e8:13:80:2b:3c:b6: 09:c5:d7:61:46:22:72:d6:d8:16:64:a9:53:be:59:45:d5:23: dc:ed:53:46:fd:25:c5:f7:9e:e7:c7:f6:c8:85:e6:80:0f:d7: 35:81:69:28:2d:ac:91:1d:88:0e:74:45:07:68:eb:d9:72:b4: f1:9e:f2:4e:b8:6c:b9:92:e3:5a:70:f0:32:82:b2:34:f3:5c: 46:6f:65:6a:4b:35:77:08:b0:a9:aa:d6:0a:06:af:9d:c6:db: 32:7f:16:0f:3e:65:02:c1:87:1c:02:ac:8a:78:6f:5b:d2:51: dd:1b:0b:01:fe:4d:0a:70:cd:6d:6d:4b:43:56:30:29:c0:9f: 41:d3:4d:40:3b:ab:0d:29:9d:4a:5d:e0:45:d7:cb:b7:cf:8d: 16:04:ac:45:24:8e:3a:84:55:36:57:dc:94:fa:d3:71:15:d6: b3:96:b3:0b:c8:d7:ad:19:e2:73:69:9a:d8:09:65:08:b6:e3: fb:5a:75:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB51KRbtUOaqEQorK3/dihn4dn0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTEyMDUyMDM3MjZaFw0yNTEyMDkwMzA2MjZaMDMxMTAvBgNV BAMTKDBEOTIxMDM5OEM0Q0Q3N0M0OTZFQzdGQjYwQjg0QTg1RDI1NzMzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRyY3wGQLz8UBOHmDWsWRpaDP wyR2yj2fHKQTqe0BeXHZvbCBFTJqJpfmeFJL1Lc+41CwgWe0UeUkK9ehuE8Jfv52 FTuAjRGFjIJTs7N8nWBhkNjXN+jpbb+Q6pPfvH73D74MtJI3G1poEZlRQt5kHpsN fw6Ow1nOib1IuUdQw1/p837ldnr7wQ0OXBP4Nhn4SpiUT8m1PLxLB/HdXtCWvZpq ySoc3LNvbz2OtaQIvO+DqjiPwvxd6rR7/DpztOOMUTkEs0vN8VxU2BICsICP2ek5 vKb47OhlNWtTgvAqRBvrXa6chvTtZFRRgSd1OR+b6Jr19qb2Ubld78Yv5pwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZIQOYxM13xJbsf7YLhKhdJXMz8wHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfcGKvf7wk+hUov0V78xlLhfQngYanjxnzK RSMHAAGudCLRATG6T2VxOKeP0ffRH0urscDJVQT197nb1HdomtGBSugTgCs8tgnF 12FGInLW2BZkqVO+WUXVI9ztU0b9JcX3nufH9siF5oAP1zWBaSgtrJEdiA50RQdo 69lytPGe8k64bLmS41pw8DKCsjTzXEZvZWpLNXcIsKmq1goGr53G2zJ/Fg8+ZQLB hxwCrIp4b1vSUd0bCwH+TQpwzW1tS0NWMCnAn0HTTUA7qw0pnUpd4EXXy7fPjRYE rEUkjjqEVTZX3JT603EV1rOWswvI160Z4nNpmtgJZQi24/tadcA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:53 2025 by rpki-client