This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: OBbGKmPfF+Gjft3n57LWrNtm0A+0Um9lBLWz7kjeEik= Subject key identifier: 37:55:6B:AA:B0:57:8D:BF:98:BD:92:A2:E6:11:2B:FC:D9:D8:F5:9A Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 0B8D898878B2381894B014CFA90BAB18810330FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01E4 Signing time: Sun 07 Dec 2025 04:01:36 +0000 Manifest this update: Sun 07 Dec 2025 03:56:36 +0000 Manifest next update: Wed 10 Dec 2025 09:13:36 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 2: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: h0zWd77O8xyOZ85plx8KAttLKSNweHwHg9ps9qT7X2Q=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8d:89:88:78:b2:38:18:94:b0:14:cf:a9:0b:ab:18:81:03:30:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Dec 7 03:56:36 2025 GMT Not After : Dec 10 09:13:36 2025 GMT Subject: CN=37556BAAB0578DBF98BD92A2E6112BFCD9D8F59A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:2a:31:0c:a0:21:30:d4:12:c6:3c:a0:14: b4:fb:b2:b4:61:55:1a:40:52:3b:4d:a3:a4:f3:4f: 61:79:8e:34:44:0f:90:d4:c6:fe:6c:45:6e:75:a4: 48:a8:26:18:b9:a8:b6:e9:c8:2d:50:52:5e:12:57: dc:cf:72:5c:d4:cb:61:33:46:83:7c:03:cf:eb:73: 5d:1e:84:a2:f5:39:5c:9e:ea:3a:33:b4:06:c2:83: 33:7a:43:9e:54:10:3d:ca:15:1d:48:31:9e:37:23: 4d:28:a9:56:ab:6c:b4:0d:05:e1:a7:42:85:4d:95: c9:0f:a4:64:77:f4:d2:42:3a:8b:64:0b:20:d1:6e: 91:01:ba:45:0e:d4:c5:39:8f:bb:2c:14:18:5a:ad: 61:29:a9:01:c7:4a:1e:4b:ba:50:77:99:5b:dd:d0: 9e:37:88:49:a3:67:1a:00:1a:dd:74:04:c8:73:cc: 39:21:fb:52:be:27:09:2a:18:13:ec:6a:d3:74:38: 03:72:6e:8f:66:93:45:60:4a:8f:41:6a:25:3e:8b: aa:71:80:65:6d:b6:da:fd:d6:6d:70:99:85:0e:98: 89:a3:e1:c2:05:8d:00:c3:d7:31:2b:86:3b:74:dd: 4a:68:c2:f3:de:b6:73:98:38:cc:e6:ca:dd:6f:0f: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:6B:AA:B0:57:8D:BF:98:BD:92:A2:E6:11:2B:FC:D9:D8:F5:9A X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a1:b7:ef:e8:3a:54:2f:b2:21:9c:06:eb:d1:f8:1b:7e:36: 62:a6:05:81:33:6f:5c:bf:4f:82:8b:28:0e:91:1d:9d:ae:4c: cd:2c:3a:11:36:b7:80:9d:92:d8:53:9f:44:77:e0:0f:ed:50: 2c:54:4c:d8:5c:47:24:a2:4c:5f:5f:dc:34:ab:b3:8f:c7:f7: c5:24:80:8d:10:0e:b8:a9:21:87:45:57:a7:5c:70:fb:58:63: 1d:d9:28:5d:57:40:a7:87:01:f3:d1:51:1e:66:18:4a:a1:c9: e0:a9:24:e1:ae:03:c2:02:c0:13:99:80:14:af:47:2e:c1:cb: 3e:25:61:be:cf:a4:77:a9:9b:38:b2:f0:bc:fc:e8:20:b2:46: c4:50:6f:f4:d3:11:5b:b6:09:e4:1a:c3:fc:41:02:0c:24:f6: 3e:82:9c:c9:c5:ae:eb:bc:cf:12:ed:17:fb:a0:71:15:8b:03: 4e:59:a8:c9:b6:66:a7:60:3a:10:59:d6:e9:1c:95:f0:dd:b4: 76:7b:04:59:93:d7:a8:59:0c:4e:e3:66:13:ed:a9:8f:cf:19: 50:a2:68:6e:95:89:25:fd:d0:7f:e6:b5:d4:73:e1:03:70:c2: 47:16:9a:c3:57:bd:5a:86:b2:3b:ac:19:0e:95:53:dd:c9:b1: 28:2f:2b:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC42JiHiyOBiUsBTPqQurGIEDMP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTEyMDcwMzU2MzZaFw0yNTEyMTAwOTEzMzZaMDMxMTAvBgNV BAMTKDM3NTU2QkFBQjA1NzhEQkY5OEJEOTJBMkU2MTEyQkZDRDlEOEY1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpCoxDKAhMNQSxjygFLT7srRh VRpAUjtNo6TzT2F5jjRED5DUxv5sRW51pEioJhi5qLbpyC1QUl4SV9zPclzUy2Ez RoN8A8/rc10ehKL1OVye6joztAbCgzN6Q55UED3KFR1IMZ43I00oqVarbLQNBeGn QoVNlckPpGR39NJCOotkCyDRbpEBukUO1MU5j7ssFBharWEpqQHHSh5LulB3mVvd 0J43iEmjZxoAGt10BMhzzDkh+1K+JwkqGBPsatN0OANybo9mk0VgSo9BaiU+i6px gGVtttr91m1wmYUOmImj4cIFjQDD1zErhjt03UpowvPetnOYOMzmyt1vD/EVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1VrqrBXjb+YvZKi5hEr/NnY9ZowHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyht+/oOlQvsiGcBuvR+Bt+NmKmBYEzb1y/ T4KLKA6RHZ2uTM0sOhE2t4CdkthTn0R34A/tUCxUTNhcRySiTF9f3DSrs4/H98Uk gI0QDripIYdFV6dccPtYYx3ZKF1XQKeHAfPRUR5mGEqhyeCpJOGuA8ICwBOZgBSv Ry7Byz4lYb7PpHepmziy8Lz86CCyRsRQb/TTEVu2CeQaw/xBAgwk9j6CnMnFruu8 zxLtF/ugcRWLA05ZqMm2ZqdgOhBZ1ukclfDdtHZ7BFmT16hZDE7jZhPtqY/PGVCi aG6ViSX90H/mtdRz4QNwwkcWmsNXvVqGsjusGQ6VU93JsSgvKyY= -----END CERTIFICATE-----Generated at Sun Dec 7 09:26:34 2025 by rpki-client