This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: SpHuqiCY4hLWwLubX96xLPShsnEbR7KV0N09snw4dVE= Subject key identifier: 02:DB:96:22:C6:5E:35:76:CA:40:06:9D:BC:F5:12:6F:7B:71:D3:45 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 73FF2FD3E7C1F5BEDE37307D71F85CD234B9F001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 12:21:35 +0000 Manifest this update: Sat 06 Dec 2025 12:16:35 +0000 Manifest next update: Tue 09 Dec 2025 23:14:35 +0000 Files and hashes: 1: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) 2: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: UEVLMr+V9cjbwcBP9shom1eyG3rUbbt4TVPj54gpcMc=) 3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 4: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ff:2f:d3:e7:c1:f5:be:de:37:30:7d:71:f8:5c:d2:34:b9:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Dec 6 12:16:35 2025 GMT Not After : Dec 9 23:14:35 2025 GMT Subject: CN=02DB9622C65E3576CA40069DBCF5126F7B71D345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:2b:cc:06:2b:3a:be:da:51:f0:f5:c5:cf: af:72:a9:34:aa:e2:d3:17:45:0a:40:1d:a1:7d:4e: b6:7a:49:6d:03:3a:c3:50:a4:17:fb:8f:7c:cf:e0: 10:a9:e8:8f:27:f6:3c:b4:23:e4:f0:e0:01:83:72: 19:e2:0f:23:9a:ab:30:77:d5:cd:6f:6e:5b:05:03: 09:d7:5f:db:41:69:bb:87:2b:e7:b6:e5:4b:5d:14: 7d:81:44:56:d3:65:ba:ba:ca:a1:98:d3:93:58:44: 44:86:66:31:cd:24:ef:75:77:4a:a4:84:2d:14:c0: bd:7c:b9:5a:78:85:ee:ba:6f:5b:b1:83:9e:e3:11: 34:e1:5c:c0:f0:7a:5e:41:75:c7:af:2f:9b:c8:c2: ca:5d:4b:d4:67:02:06:e0:6e:73:2b:af:5d:8d:92: c0:9e:c8:b8:98:32:d3:c2:7b:ad:ca:36:2d:f3:1e: 65:10:20:84:83:5e:54:42:8d:3e:04:5b:1d:a6:ef: 4e:8b:d4:e4:49:f1:c3:54:9d:45:f1:ac:ac:95:f6: f1:82:bc:de:7f:f9:31:04:40:35:3f:c6:f2:e2:98: 5f:5e:87:3b:98:ce:03:30:d0:d7:b4:4b:64:51:e8: d2:41:1d:6b:6d:8b:9b:b4:51:46:e7:2b:c8:bb:7a: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:96:22:C6:5E:35:76:CA:40:06:9D:BC:F5:12:6F:7B:71:D3:45 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c5:fa:dd:ee:50:44:45:20:68:eb:d4:c2:a6:77:7b:10:10: d2:4d:2d:4c:17:ed:5b:b8:8a:d4:4c:3f:a5:a5:5e:9d:c8:32: 50:13:33:78:50:02:a8:ea:d7:62:65:3e:05:32:a9:2f:13:f6: d7:a7:1e:ee:86:f8:b0:6b:99:b0:19:ae:ef:58:58:28:30:80: c9:cd:cc:88:8a:1f:1a:69:84:ce:30:a1:4c:e5:5e:62:b8:d5: aa:9e:c4:05:83:71:56:0a:09:10:a0:9f:91:6d:65:78:67:80: 62:36:29:fb:7f:f0:d3:2d:3d:a5:14:ea:e3:f2:fc:09:5f:c9: ae:35:0f:75:93:71:e7:17:28:62:d4:a7:5a:4e:21:6a:2d:fb: 1b:1b:4c:05:61:42:9a:2e:0d:62:d1:c6:30:34:3c:38:9b:c2: 34:7e:8f:35:86:d9:06:be:6c:50:63:a7:98:c9:85:02:21:4c: 80:97:0c:0b:c7:c0:24:85:28:06:8f:e0:72:9d:79:d5:ff:63: 76:8d:80:e7:3c:53:4a:de:77:6b:61:68:76:b5:c8:72:78:bf: 15:18:6f:1d:8c:6e:c7:59:ae:ee:4a:8a:76:d0:02:4c:d9:50: 8a:da:6b:49:6f:e7:f3:8c:2f:13:16:c0:ce:ab:74:e6:83:ed: 79:11:87:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/8v0+fB9b7eNzB9cfhc0jS58AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTEyMDYxMjE2MzVaFw0yNTEyMDkyMzE0MzVaMDMxMTAvBgNV BAMTKDAyREI5NjIyQzY1RTM1NzZDQTQwMDY5REJDRjUxMjZGN0I3MUQzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKyvMBis6vtpR8PXFz69yqTSq 4tMXRQpAHaF9TrZ6SW0DOsNQpBf7j3zP4BCp6I8n9jy0I+Tw4AGDchniDyOaqzB3 1c1vblsFAwnXX9tBabuHK+e25UtdFH2BRFbTZbq6yqGY05NYRESGZjHNJO91d0qk hC0UwL18uVp4he66b1uxg57jETThXMDwel5BdcevL5vIwspdS9RnAgbgbnMrr12N ksCeyLiYMtPCe63KNi3zHmUQIISDXlRCjT4EWx2m706L1ORJ8cNUnUXxrKyV9vGC vN5/+TEEQDU/xvLimF9ehzuYzgMw0Ne0S2RR6NJBHWtti5u0UUbnK8i7eiCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtuWIsZeNXbKQAadvPUSb3tx00UwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHF+t3uUERFIGjr1MKmd3sQENJNLUwX7Vu4 itRMP6WlXp3IMlATM3hQAqjq12JlPgUyqS8T9tenHu6G+LBrmbAZru9YWCgwgMnN zIiKHxpphM4woUzlXmK41aqexAWDcVYKCRCgn5FtZXhngGI2Kft/8NMtPaUU6uPy /Alfya41D3WTcecXKGLUp1pOIWot+xsbTAVhQpouDWLRxjA0PDibwjR+jzWG2Qa+ bFBjp5jJhQIhTICXDAvHwCSFKAaP4HKdedX/Y3aNgOc8U0red2thaHa1yHJ4vxUY bx2MbsdZru5KinbQAkzZUIraa0lv5/OMLxMWwM6rdOaD7XkRh6c= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:17 2025 by rpki-client