This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: xboYdH06dFv5qf5HB45xnuFPpGGiZEidgiCx6xMizVE= Subject key identifier: 9A:AF:7D:41:5E:8A:C8:C2:97:A0:AE:B7:F7:F9:1D:6F:B3:3F:0C:DB Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 0FE4C87C65265F698E07C4F84F2BC55834DDFE1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 031D Signing time: Thu 04 Dec 2025 21:21:15 +0000 Manifest this update: Thu 04 Dec 2025 21:16:15 +0000 Manifest next update: Mon 08 Dec 2025 04:58:15 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) 2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: ke+6/98AU772Nd9nb+OQzHUkrc9GqhupkfNtlYIPAJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e4:c8:7c:65:26:5f:69:8e:07:c4:f8:4f:2b:c5:58:34:dd:fe:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Dec 4 21:16:15 2025 GMT Not After : Dec 8 04:58:15 2025 GMT Subject: CN=9AAF7D415E8AC8C297A0AEB7F7F91D6FB33F0CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:3c:9f:70:fe:28:26:b4:83:d6:29:5b:46: 61:f5:8f:00:4b:31:75:16:90:9e:c4:dd:16:f0:09: 05:e7:ab:bb:35:de:18:42:0b:a5:d1:83:03:e5:0b: 30:7f:cb:cc:46:a8:5c:7d:6c:bc:f9:39:cd:7c:75: 03:e8:f3:15:3b:63:89:d6:87:b2:08:ef:3a:a9:e0: 05:04:29:a8:02:5e:0c:4e:db:9c:34:6e:d2:be:d1: 42:2e:c6:37:8d:f7:2c:9c:4c:27:66:0d:c3:c2:51: 94:75:22:86:85:c2:82:3b:c3:7b:b5:0a:bc:b1:09: 3f:65:45:67:16:15:4c:2a:9b:99:68:eb:b0:a6:af: 47:8a:19:d4:a3:09:92:42:f3:c1:95:bc:e7:a1:01: d3:ce:5e:95:23:8b:ff:be:a9:0a:f8:9f:bc:40:b3: 3d:60:69:6a:6d:85:86:e5:74:07:87:15:f3:67:5a: 26:04:98:5d:af:00:4d:a7:cc:ce:1a:3b:43:5b:af: 51:9a:00:80:20:49:80:5e:e2:f5:f7:8a:ef:93:47: ab:38:0e:6c:40:a6:ac:0e:c9:d0:19:f4:51:ea:e6: 96:ef:7a:a9:3a:a0:80:a5:84:a9:35:9c:ea:c8:ec: 18:20:9c:84:f9:28:75:83:7d:78:ed:2d:50:d1:25: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:7D:41:5E:8A:C8:C2:97:A0:AE:B7:F7:F9:1D:6F:B3:3F:0C:DB X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:b4:47:a6:6e:ff:97:7a:2a:91:2f:a9:35:3a:d0:81:6b:5e: c5:d5:59:57:e7:43:97:5b:88:fb:ee:ce:d7:ec:8e:8e:c9:97: 4a:52:4b:63:43:78:0a:a0:e2:8d:40:68:13:7d:0d:b6:c6:d4: e1:4e:d0:3f:84:3c:3d:64:cc:06:bc:e7:75:bd:a0:25:d6:07: 7f:6c:ae:e8:d3:e0:24:f0:3f:a1:5b:1b:23:1d:b1:fc:7d:5c: 04:24:cd:4a:a7:89:9f:12:b8:2e:6e:ed:c1:83:d4:99:97:50: 8b:ad:29:c6:52:12:21:6f:47:5c:95:46:09:39:69:7f:3a:dd: bd:9d:8d:d5:15:21:4a:5a:26:87:2b:14:e6:d1:9c:d5:8f:2c: ad:6a:b5:16:c8:87:1d:05:66:31:a3:93:fc:6d:1f:e1:52:33: 3f:a3:e3:1e:cd:e3:e6:b5:74:24:3a:71:6f:d6:98:9f:bd:15: 40:b0:54:c9:91:f1:7a:aa:9f:fc:42:22:c0:fd:0f:e7:e9:53: 3b:5f:0e:00:bc:63:13:d8:22:00:50:70:3b:9b:67:7d:3c:25: 74:67:37:20:9b:4a:9d:6d:c0:5e:97:2f:f0:a6:ae:59:cb:71: d1:79:f1:87:63:19:ba:90:5f:a2:27:8c:26:01:96:96:7e:a4: 19:76:aa:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+TIfGUmX2mOB8T4TyvFWDTd/h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTEyMDQyMTE2MTVaFw0yNTEyMDgwNDU4MTVaMDMxMTAvBgNV BAMTKDlBQUY3RDQxNUU4QUM4QzI5N0EwQUVCN0Y3RjkxRDZGQjMzRjBDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaATyfcP4oJrSD1ilbRmH1jwBL MXUWkJ7E3RbwCQXnq7s13hhCC6XRgwPlCzB/y8xGqFx9bLz5Oc18dQPo8xU7Y4nW h7II7zqp4AUEKagCXgxO25w0btK+0UIuxjeN9yycTCdmDcPCUZR1IoaFwoI7w3u1 CryxCT9lRWcWFUwqm5lo67Cmr0eKGdSjCZJC88GVvOehAdPOXpUji/++qQr4n7xA sz1gaWpthYbldAeHFfNnWiYEmF2vAE2nzM4aO0Nbr1GaAIAgSYBe4vX3iu+TR6s4 DmxApqwOydAZ9FHq5pbveqk6oIClhKk1nOrI7BggnIT5KHWDfXjtLVDRJf5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmq99QV6KyMKXoK639/kdb7M/DNswHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOe0R6Zu/5d6KpEvqTU60IFrXsXVWVfnQ5db iPvuztfsjo7Jl0pSS2NDeAqg4o1AaBN9DbbG1OFO0D+EPD1kzAa853W9oCXWB39s rujT4CTwP6FbGyMdsfx9XAQkzUqniZ8SuC5u7cGD1JmXUIutKcZSEiFvR1yVRgk5 aX863b2djdUVIUpaJocrFObRnNWPLK1qtRbIhx0FZjGjk/xtH+FSMz+j4x7N4+a1 dCQ6cW/WmJ+9FUCwVMmR8Xqqn/xCIsD9D+fpUztfDgC8YxPYIgBQcDubZ308JXRn NyCbSp1twF6XL/CmrlnLcdF58YdjGbqQX6InjCYBlpZ+pBl2qkE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:32 2025 by rpki-client