This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: u/GMj9zjYKCs+KuKHbSo9sYChwJWo4t3rfCID176HY0= Subject key identifier: 52:7B:9A:0C:73:C0:8E:57:AE:18:E1:33:74:A9:2B:81:3A:38:FC:8D Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 38D20062D110D92835D83F7E2A17ED9D3DEDE11F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02EC Signing time: Fri 05 Dec 2025 20:22:22 +0000 Manifest this update: Fri 05 Dec 2025 20:17:22 +0000 Manifest next update: Tue 09 Dec 2025 06:08:22 +0000 Files and hashes: 1: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 2: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 3: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: KBv9mKGpuyBd4KIL9FAFbMuSLLfKQ18SR6DRtZwvLsk=) 4: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 5: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 6: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 7: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 8: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 9: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 10: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d2:00:62:d1:10:d9:28:35:d8:3f:7e:2a:17:ed:9d:3d:ed:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Dec 5 20:17:22 2025 GMT Not After : Dec 9 06:08:22 2025 GMT Subject: CN=527B9A0C73C08E57AE18E13374A92B813A38FC8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:6c:cb:d5:86:41:5d:6e:d8:6f:41:c6:26: a9:bb:24:88:b8:0f:ac:94:1e:9b:19:84:6c:e9:49: 01:36:b6:7a:3c:8b:f2:59:d8:e5:4b:25:7c:2c:0b: a1:60:e2:f4:4d:cf:3d:d4:38:88:f1:70:e1:e2:f9: 18:e5:34:fd:b4:63:44:8f:40:53:c0:45:63:da:7f: 3f:37:49:24:2a:d2:24:10:10:60:f5:ae:6d:26:b3: ac:b0:91:af:a9:1f:e0:63:23:62:b7:b4:4e:cd:c6: 9c:75:aa:d4:2e:5f:7a:aa:a5:40:34:e3:09:30:a1: e1:a3:7f:10:97:a7:1c:19:46:82:1b:a4:7a:3b:fa: 21:c9:d4:dc:55:f9:db:34:45:76:af:d5:5a:44:45: 5e:d6:a1:b6:2e:dd:5b:b1:e9:c4:3f:63:7c:15:93: 0c:d0:fc:18:fb:ef:66:94:70:ce:71:02:cb:d5:23: a5:9c:64:40:6b:f7:88:91:b0:b9:c8:3f:29:81:5f: 1d:b9:bd:86:44:e8:76:47:b3:c9:7c:b8:5b:46:b2: 6e:96:8b:76:c3:ed:62:c7:0e:d5:51:42:ee:08:da: 80:03:ae:58:8c:f9:e4:91:68:6f:ae:30:d7:28:e8: 55:6a:39:11:35:d5:53:67:7a:58:6d:03:8f:ba:6f: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7B:9A:0C:73:C0:8E:57:AE:18:E1:33:74:A9:2B:81:3A:38:FC:8D X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:80:69:11:65:8c:e3:e8:fe:7c:c4:24:fe:4e:1e:5f:d6:5a: a7:86:ba:ce:e4:44:45:ad:65:66:6f:c1:66:ef:4b:6e:12:db: c0:7f:a7:47:63:f7:d6:a8:60:5a:65:28:a7:f6:92:4c:cc:8e: 91:60:38:b8:09:a4:b7:af:f2:20:c2:29:5a:29:4c:2a:b7:99: 8d:87:db:d4:6a:d7:20:47:f6:9a:93:00:be:f4:9e:82:cb:c8: e8:d0:02:59:cb:b0:60:3e:d5:41:18:1a:78:02:44:5c:5e:4b: 81:7b:1f:1f:82:e1:66:a5:fc:fe:92:9f:97:7e:b9:72:af:04: 0b:60:34:44:6d:a6:07:53:cb:a1:f6:63:62:9e:d8:c4:54:f8: 5d:24:7f:fb:35:27:c2:89:22:40:01:1d:54:12:c2:84:46:b5: fe:9d:c7:24:8d:9a:09:e8:50:37:6f:b5:5e:b3:36:96:da:db: 42:e2:89:e9:4c:59:f3:09:94:cb:cb:6c:53:24:c3:59:3c:10: 14:36:bf:ee:26:bf:78:fe:76:21:2f:a9:30:5d:e3:39:ca:92: 9e:fd:f3:e2:b4:11:8c:f7:19:dd:c9:51:5e:66:fb:77:c4:51: 25:f8:49:04:de:4a:d5:12:57:c2:00:55:38:48:c2:45:4c:b2: 2c:90:61:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONIAYtEQ2Sg12D9+KhftnT3t4R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTEyMDUyMDE3MjJaFw0yNTEyMDkwNjA4MjJaMDMxMTAvBgNV BAMTKDUyN0I5QTBDNzNDMDhFNTdBRTE4RTEzMzc0QTkyQjgxM0EzOEZDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUmzL1YZBXW7Yb0HGJqm7JIi4 D6yUHpsZhGzpSQE2tno8i/JZ2OVLJXwsC6Fg4vRNzz3UOIjxcOHi+RjlNP20Y0SP QFPARWPafz83SSQq0iQQEGD1rm0ms6ywka+pH+BjI2K3tE7Nxpx1qtQuX3qqpUA0 4wkwoeGjfxCXpxwZRoIbpHo7+iHJ1NxV+ds0RXav1VpERV7WobYu3Vux6cQ/Y3wV kwzQ/Bj772aUcM5xAsvVI6WcZEBr94iRsLnIPymBXx25vYZE6HZHs8l8uFtGsm6W i3bD7WLHDtVRQu4I2oADrliM+eSRaG+uMNco6FVqORE11VNnelhtA4+6b2JNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnuaDHPAjleuGOEzdKkrgTo4/I0wHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqAaRFljOPo/nzEJP5OHl/WWqeGus7kREWt ZWZvwWbvS24S28B/p0dj99aoYFplKKf2kkzMjpFgOLgJpLev8iDCKVopTCq3mY2H 29Rq1yBH9pqTAL70noLLyOjQAlnLsGA+1UEYGngCRFxeS4F7Hx+C4Wal/P6Sn5d+ uXKvBAtgNERtpgdTy6H2Y2Ke2MRU+F0kf/s1J8KJIkABHVQSwoRGtf6dxySNmgno UDdvtV6zNpba20LiielMWfMJlMvLbFMkw1k8EBQ2v+4mv3j+diEvqTBd4znKkp79 8+K0EYz3Gd3JUV5m+3fEUSX4SQTeStUSV8IAVThIwkVMsiyQYYE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:45 2025 by rpki-client