This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: P7lvMZ8ro6arbZlg3P0zvSiKzuoMFcZtRZlbf7efpzo= Subject key identifier: D1:3F:8F:47:42:7D:18:56:52:A7:F2:F6:FB:08:ED:3F:67:FD:41:69 Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 1A99800279C6911E49DE1896879928D2D08D08A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02E5 Signing time: Thu 04 Dec 2025 23:31:13 +0000 Manifest this update: Thu 04 Dec 2025 23:26:13 +0000 Manifest next update: Mon 08 Dec 2025 11:01:13 +0000 Files and hashes: 1: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: xRBssnf/JOJ0oEu5/rbz/fZ/V3US7YlgC09n0xTfCXc=) 2: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:99:80:02:79:c6:91:1e:49:de:18:96:87:99:28:d2:d0:8d:08:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Dec 4 23:26:13 2025 GMT Not After : Dec 8 11:01:13 2025 GMT Subject: CN=D13F8F47427D185652A7F2F6FB08ED3F67FD4169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:9f:14:c9:36:33:94:53:ae:6a:90:98:fc: e4:9b:24:55:93:5d:66:64:3f:f5:73:6b:4e:f1:9e: 15:73:9e:7c:4e:f3:e4:c5:cf:de:4b:ed:53:97:f6: 55:ae:41:7b:a4:1f:b5:13:ea:f6:f6:53:8f:65:5b: b8:7e:bd:cb:87:03:a3:84:64:54:ac:e3:9c:a9:1b: 27:70:36:00:3a:15:26:98:7a:64:e8:ba:ab:a7:75: 9f:07:1c:f4:38:23:04:36:4d:38:a6:c2:1a:ce:e9: db:ad:f0:8a:10:ac:ba:4c:d0:8e:27:f2:86:b5:b1: 47:68:a9:c4:88:42:79:06:4a:16:b8:63:3b:ee:8d: 86:e1:88:37:16:60:ee:1f:48:c8:fd:c1:52:d1:8a: 6c:7d:1e:59:ea:4e:b3:99:36:bf:a3:e4:4b:1e:2f: 62:e5:40:de:55:0f:b2:fe:62:27:cf:35:51:76:a4: a1:01:71:c9:59:1e:0e:f9:4b:df:e6:4c:c6:be:64: 3f:11:d8:4c:9d:e9:cd:1d:57:41:52:08:6b:3c:51: 6b:d0:6d:6f:a9:7e:52:d1:8f:6b:56:da:88:79:13: 19:7a:ee:bd:39:85:73:23:6a:dd:c7:6f:15:f6:d5: b2:9c:19:59:f3:17:6d:33:e9:1d:30:0e:52:83:be: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:8F:47:42:7D:18:56:52:A7:F2:F6:FB:08:ED:3F:67:FD:41:69 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d6:2a:60:78:b7:4f:28:74:04:4c:5a:a4:0d:7b:52:4f:05: 25:a6:49:72:16:ba:4d:89:0f:f6:c8:b0:8e:8d:0e:88:2d:d0: 9c:00:1c:a4:d5:69:73:66:55:75:14:8f:89:7d:15:d7:c7:55: 42:3c:9f:92:00:d3:4d:c2:70:7c:e4:28:a3:a5:84:4a:39:c0: 67:e6:1b:d1:50:43:ed:54:f5:bf:b8:01:68:db:84:e5:ea:e9: d4:e2:f1:a0:26:1e:45:ef:24:14:37:c1:46:07:07:26:a6:99: 8a:d3:45:e3:a6:11:51:5b:79:98:c2:9a:9d:ff:e1:ac:06:80: 0a:8a:52:8a:94:69:9e:77:4d:ec:94:4f:10:56:3b:70:8e:0c: 6e:45:37:07:cf:e5:06:71:ad:a1:af:ec:95:66:df:35:62:68: fb:93:d7:50:42:82:0f:6f:82:b3:3f:37:9a:a3:5f:f1:99:b8: 49:8e:02:e0:a3:a3:6e:b7:ec:0a:17:27:f0:90:24:99:63:bd: 52:24:43:d5:70:48:18:dd:49:a9:1e:4d:34:4d:60:d9:3a:51: 7c:c2:9e:57:63:61:ed:52:01:98:11:e3:7a:4f:f0:3a:72:ad: a1:da:c0:d3:fe:da:d6:76:cd:7c:84:6c:81:88:c2:da:68:1e: 8e:c1:9c:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpmAAnnGkR5J3hiWh5ko0tCNCKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTEyMDQyMzI2MTNaFw0yNTEyMDgxMTAxMTNaMDMxMTAvBgNV BAMTKEQxM0Y4RjQ3NDI3RDE4NTY1MkE3RjJGNkZCMDhFRDNGNjdGRDQxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEZ8UyTYzlFOuapCY/OSbJFWT XWZkP/Vza07xnhVznnxO8+TFz95L7VOX9lWuQXukH7UT6vb2U49lW7h+vcuHA6OE ZFSs45ypGydwNgA6FSaYemTouqundZ8HHPQ4IwQ2TTimwhrO6dut8IoQrLpM0I4n 8oa1sUdoqcSIQnkGSha4YzvujYbhiDcWYO4fSMj9wVLRimx9HlnqTrOZNr+j5Ese L2LlQN5VD7L+YifPNVF2pKEBcclZHg75S9/mTMa+ZD8R2Eyd6c0dV0FSCGs8UWvQ bW+pflLRj2tW2oh5Exl67r05hXMjat3HbxX21bKcGVnzF20z6R0wDlKDvhvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0T+PR0J9GFZSp/L2+wjtP2f9QWkwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvWKmB4t08odARMWqQNe1JPBSWmSXIWuk2J D/bIsI6NDogt0JwAHKTVaXNmVXUUj4l9FdfHVUI8n5IA003CcHzkKKOlhEo5wGfm G9FQQ+1U9b+4AWjbhOXq6dTi8aAmHkXvJBQ3wUYHByammYrTReOmEVFbeZjCmp3/ 4awGgAqKUoqUaZ53TeyUTxBWO3CODG5FNwfP5QZxraGv7JVm3zViaPuT11BCgg9v grM/N5qjX/GZuEmOAuCjo2637AoXJ/CQJJljvVIkQ9VwSBjdSakeTTRNYNk6UXzC nldjYe1SAZgR43pP8DpyraHawNP+2tZ2zXyEbIGIwtpoHo7BnNQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:00 2025 by rpki-client