This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft File: 7ED240749DF73AB541823D94017C578425D757A6.mft (raw, json) Hash identifier: t3OEkFN4Aykpxi1eifUy9sgN4Y+peACmxsb3fLkBVc4= Subject key identifier: CA:38:04:DB:DF:9C:88:7E:F7:87:9A:E0:F4:1C:EC:B2:A3:DD:D4:8D Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6 Certificate serial: 2FF694F5BC7CBF2A373EC2224F155F6E033E1F1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft Manifest number: 04D9 Signing time: Thu 04 Dec 2025 22:11:08 +0000 Manifest this update: Thu 04 Dec 2025 22:06:08 +0000 Manifest next update: Mon 08 Dec 2025 09:37:08 +0000 Files and hashes: 1: 7ED240749DF73AB541823D94017C578425D757A6.crl (hash: bgF0ipyxz0fGF5vKxWE2S881NlxZw8D+iDtgy0s0NOo=) 2: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: yGNy/2jPC7cv3chzLah5sv/C4LaKirTYr+d6U9mSoAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f6:94:f5:bc:7c:bf:2a:37:3e:c2:22:4f:15:5f:6e:03:3e:1f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6 Validity Not Before: Dec 4 22:06:08 2025 GMT Not After : Dec 8 09:37:08 2025 GMT Subject: CN=CA3804DBDF9C887EF7879AE0F41CECB2A3DDD48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:28:8b:78:5a:1b:4b:0c:2a:a5:02:70:9f: b4:53:1f:d4:e8:a0:be:fa:55:f7:97:31:31:71:fc: 47:fe:04:29:3d:9a:0a:02:1c:c8:ea:96:70:4c:c9: e9:2c:a2:fa:c6:d3:36:b1:55:da:b3:a7:83:5f:42: 85:c6:fe:1b:0c:e3:83:96:fd:5b:1b:05:96:65:ed: 75:91:72:8a:0c:3a:2e:ca:e5:bc:05:c5:ed:25:61: 56:bf:28:c8:9a:e5:d1:62:90:cf:57:07:ff:84:7c: 0a:17:4f:d5:90:1f:51:3f:56:07:2c:c9:91:44:9a: 99:ea:4d:8d:a5:7c:ae:c0:ea:c2:e1:17:3f:79:e7: e3:ea:e7:ea:8f:10:48:81:75:b6:c3:d9:b1:19:b2: b0:2c:39:1a:71:4c:b2:e5:b8:3a:b8:5d:21:34:c1: 25:6b:dd:ad:60:cf:e4:1b:f9:4a:0d:ce:13:20:41: 6a:f8:ac:7c:97:df:b6:8f:4c:de:48:d7:8b:df:e8: a2:2b:88:a4:9e:6f:37:c2:44:43:1e:bc:6b:7d:53: 7a:d8:ba:f6:f8:d9:4a:c9:f6:28:ba:93:dc:4a:59: e2:fe:2e:f5:cc:79:4b:01:e4:03:20:7d:0c:82:95: b7:d3:1a:51:5e:93:8b:db:67:f6:13:da:fe:f4:7c: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:04:DB:DF:9C:88:7E:F7:87:9A:E0:F4:1C:EC:B2:A3:DD:D4:8D X509v3 Authority Key Identifier: keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e7:68:36:e4:50:4f:01:69:89:9e:c0:51:24:51:6e:0a:2a: 2d:e9:a4:18:2b:d2:0f:1b:88:5b:00:d2:3a:85:50:82:db:f8: fe:78:b1:55:47:c9:09:ef:9a:8c:72:d6:c3:d8:df:95:b4:5b: d9:50:30:fc:d1:9d:3c:3c:23:d4:31:8e:69:d4:63:5f:53:7a: eb:13:0d:e2:61:de:b6:cd:59:5b:97:bf:b6:98:c9:0e:12:97: e1:f0:72:a1:db:b8:5a:6e:5f:5a:6d:0f:67:7d:aa:aa:3e:d1: e3:95:16:cd:27:dc:d3:3c:27:f9:df:38:7c:6f:a5:a7:7e:a8: 66:92:e0:53:0d:f2:84:65:55:69:06:a6:90:6c:f7:1b:fb:0c: ee:12:d5:7c:ed:fc:9c:e4:10:de:6b:ba:30:33:12:59:c2:47: 83:9d:fb:aa:d3:26:d8:09:88:7f:f4:c1:4d:62:47:b3:5e:7d: d0:d2:cc:ed:6f:52:bf:d9:22:d7:81:c7:18:26:49:b8:82:19: f4:3f:60:d1:ec:c6:22:e7:f3:7d:e3:1c:38:35:14:06:cf:5d: 81:3e:33:6b:9e:58:8b:ec:54:67:b9:cc:9b:62:7c:d3:2b:5e: 26:81:69:7f:8e:3a:72:bd:fa:27:7c:41:4e:d2:1d:29:88:a4: 63:a9:b0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/aU9bx8vyo3PsIiTxVfbgM+Hx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQy NUQ3NTdBNjAeFw0yNTEyMDQyMjA2MDhaFw0yNTEyMDgwOTM3MDhaMDMxMTAvBgNV BAMTKENBMzgwNERCREY5Qzg4N0VGNzg3OUFFMEY0MUNFQ0IyQTNEREQ0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPyiLeFobSwwqpQJwn7RTH9To oL76VfeXMTFx/Ef+BCk9mgoCHMjqlnBMyeksovrG0zaxVdqzp4NfQoXG/hsM44OW /VsbBZZl7XWRcooMOi7K5bwFxe0lYVa/KMia5dFikM9XB/+EfAoXT9WQH1E/Vgcs yZFEmpnqTY2lfK7A6sLhFz955+Pq5+qPEEiBdbbD2bEZsrAsORpxTLLluDq4XSE0 wSVr3a1gz+Qb+UoNzhMgQWr4rHyX37aPTN5I14vf6KIriKSebzfCREMevGt9U3rY uvb42UrJ9ii6k9xKWeL+LvXMeUsB5AMgfQyClbfTGlFek4vbZ/YT2v70fCvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyjgE29+ciH73h5rg9BzssqPd1I0wHwYDVR0j BBgwFoAUftJAdJ33OrVBgj2UAXxXhCXXV6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRhYTdlZi02ZDk1LTRlYmEtYTM1NC1mZDQxODU4YzFiYTcvMC83RUQyNDA3NDlE RjczQUI1NDE4MjNEOTQwMTdDNTc4NDI1RDc1N0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQyNUQ3 NTdBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0YWE3ZWYtNmQ5NS00ZWJhLWEz NTQtZmQ0MTg1OGMxYmE3LzAvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3 ODQyNUQ3NTdBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3naDbkUE8BaYmewFEkUW4KKi3ppBgr0g8b iFsA0jqFUILb+P54sVVHyQnvmoxy1sPY35W0W9lQMPzRnTw8I9QxjmnUY19TeusT DeJh3rbNWVuXv7aYyQ4Sl+HwcqHbuFpuX1ptD2d9qqo+0eOVFs0n3NM8J/nfOHxv pad+qGaS4FMN8oRlVWkGppBs9xv7DO4S1Xzt/JzkEN5rujAzElnCR4Od+6rTJtgJ iH/0wU1iR7NefdDSzO1vUr/ZIteBxxgmSbiCGfQ/YNHsxiLn833jHDg1FAbPXYE+ M2ueWIvsVGe5zJtifNMrXiaBaX+OOnK9+id8QU7SHSmIpGOpsPw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:36 2025 by rpki-client