This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: a7PsUImjV5pSte/57pqiBlFnsI9zqkCXZGfAqQRv8/c= Subject key identifier: 19:4E:A6:64:34:01:97:AA:C3:1D:40:2D:D0:3D:87:B6:D6:52:21:C9 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 0EA2D35FB112B0E57A3F73AFE9995F40C3048946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: D9 Signing time: Sat 06 Dec 2025 14:52:08 +0000 Manifest this update: Sat 06 Dec 2025 14:47:08 +0000 Manifest next update: Wed 10 Dec 2025 01:45:08 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: W/pxiFnzpFUhhpBoahmg5ph0XJpDrcydDkiLu8yUrXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a2:d3:5f:b1:12:b0:e5:7a:3f:73:af:e9:99:5f:40:c3:04:89:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Dec 6 14:47:08 2025 GMT Not After : Dec 10 01:45:08 2025 GMT Subject: CN=194EA664340197AAC31D402DD03D87B6D65221C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:01:58:c5:b6:69:39:fd:a9:65:5e:66:67: e2:6e:12:86:be:81:34:13:b7:4a:80:99:9e:78:a3: a0:2e:d4:59:04:44:85:7f:96:06:f0:cf:f7:a3:6b: 27:ba:3c:59:75:cd:fb:15:b5:92:99:26:20:5c:78: e8:a9:73:15:29:5b:49:de:bf:a3:30:3a:54:21:79: 0b:2c:58:cb:ed:70:24:2e:9e:96:46:47:13:0b:03: 3b:5e:a5:2a:62:95:ac:c7:60:4f:ef:b2:1c:35:bc: 84:f3:70:3a:97:a7:cc:2d:e8:60:e3:f7:9e:1f:76: d2:3b:4c:28:db:e8:41:5e:5d:2e:e6:78:63:c6:27: 2d:ab:98:37:cf:ae:a9:d8:9e:12:b9:11:4f:17:36: 87:8b:5d:04:db:fd:7d:27:4a:dd:b9:ad:0a:3f:fe: 26:28:12:f6:dd:44:b3:a1:04:39:21:8c:8f:0b:ac: 70:8a:7a:52:19:74:b1:f5:86:a1:67:95:dc:2d:10: 6b:52:99:bc:28:15:94:f7:2b:51:4a:13:a1:f5:8e: 4e:66:a3:18:6a:45:47:29:c2:f7:9f:7b:1a:5d:44: 4a:b2:8a:25:80:b5:d2:eb:62:78:ed:0c:24:ab:c7: e2:0e:7d:6b:cf:c0:a5:36:0e:1a:b6:dd:db:22:a9: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4E:A6:64:34:01:97:AA:C3:1D:40:2D:D0:3D:87:B6:D6:52:21:C9 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:14:e1:05:0d:cb:59:b5:4a:68:75:23:03:81:1d:89:e3: 07:6d:d9:81:c2:6d:e4:84:e2:f3:a4:06:98:99:83:1e:69:6c: a2:3c:11:78:50:8a:e3:5c:f2:89:66:a8:3a:fe:c1:49:d6:ce: aa:7b:3a:11:88:20:e6:c9:b7:6b:f5:1a:08:78:7d:ea:4c:0d: e7:35:41:2d:64:70:4b:6e:70:75:d4:e5:2d:6d:5c:62:a3:f9: 6e:a4:0f:75:39:dd:59:e5:67:6f:0c:cd:fc:b6:36:99:15:6c: 29:a7:0f:58:23:5e:05:c0:e5:fa:cb:8f:ea:da:99:ca:04:9b: e1:51:67:17:45:a8:76:8d:de:b2:1e:48:47:38:0e:b5:30:e7: f9:93:70:b5:44:8f:ab:0a:98:d9:df:6c:a6:11:c5:80:b5:b0: 9b:e7:9e:31:29:6b:61:ef:d6:ca:f5:1c:9e:91:1d:3a:77:76: f2:dc:18:dc:9f:20:93:3b:36:f7:d6:8d:0b:1c:ed:63:75:e2: 2f:a6:17:89:53:22:38:0a:aa:14:bc:98:b2:49:20:03:84:5f: 73:69:23:fb:64:4d:97:f8:a6:9a:0a:e4:a3:28:a6:f8:ad:00: 23:b8:eb:0f:4c:d7:a7:54:d7:02:07:ad:66:de:3e:7f:89:94: 18:f8:6f:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqLTX7ESsOV6P3Ov6ZlfQMMEiUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTEyMDYxNDQ3MDhaFw0yNTEyMTAwMTQ1MDhaMDMxMTAvBgNV BAMTKDE5NEVBNjY0MzQwMTk3QUFDMzFENDAyREQwM0Q4N0I2RDY1MjIxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zQFYxbZpOf2pZV5mZ+JuEoa+ gTQTt0qAmZ54o6Au1FkERIV/lgbwz/ejaye6PFl1zfsVtZKZJiBceOipcxUpW0ne v6MwOlQheQssWMvtcCQunpZGRxMLAztepSpilazHYE/vshw1vITzcDqXp8wt6GDj 954fdtI7TCjb6EFeXS7meGPGJy2rmDfPrqnYnhK5EU8XNoeLXQTb/X0nSt25rQo/ /iYoEvbdRLOhBDkhjI8LrHCKelIZdLH1hqFnldwtEGtSmbwoFZT3K1FKE6H1jk5m oxhqRUcpwvefexpdREqyiiWAtdLrYnjtDCSrx+IOfWvPwKU2Dhq23dsiqZ2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGU6mZDQBl6rDHUAt0D2HttZSIckwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyyFOEFDctZtUpodSMDgR2J4wdt2YHCbeSE 4vOkBpiZgx5pbKI8EXhQiuNc8olmqDr+wUnWzqp7OhGIIObJt2v1Ggh4fepMDec1 QS1kcEtucHXU5S1tXGKj+W6kD3U53VnlZ28Mzfy2NpkVbCmnD1gjXgXA5frLj+ra mcoEm+FRZxdFqHaN3rIeSEc4DrUw5/mTcLVEj6sKmNnfbKYRxYC1sJvnnjEpa2Hv 1sr1HJ6RHTp3dvLcGNyfIJM7NvfWjQsc7WN14i+mF4lTIjgKqhS8mLJJIAOEX3Np I/tkTZf4ppoK5KMopvitACO46w9M16dU1wIHrWbePn+JlBj4b3c= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:39 2025 by rpki-client