This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: Gj57W5s8RX+t/chbqlRjOvV7QHxqefuCpUqTa4QN2iM= Subject key identifier: 42:21:ED:45:B9:85:EF:1F:79:7F:23:4B:07:58:C8:10:5D:77:47:0C Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 7E577F0C72573699408D850EFFEFA4AF0668C5A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: D6 Signing time: Wed 17 Dec 2025 06:42:24 +0000 Manifest this update: Wed 17 Dec 2025 06:37:24 +0000 Manifest next update: Sat 20 Dec 2025 12:38:24 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: 0cLZTU5pc7ZnZVKk9mUvelykpQ4GB3hz1tT5HNx/Yks=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 3: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:57:7f:0c:72:57:36:99:40:8d:85:0e:ff:ef:a4:af:06:68:c5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Dec 17 06:37:24 2025 GMT Not After : Dec 20 12:38:24 2025 GMT Subject: CN=4221ED45B985EF1F797F234B0758C8105D77470C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:fe:a0:d0:ad:1f:84:ab:47:b9:b1:c4:28: aa:85:e1:77:7f:fd:39:fb:87:5e:fc:de:9a:ba:25: 38:05:1a:e8:54:8a:25:43:e1:43:00:9d:d4:e7:0c: 5e:7a:14:d7:b2:53:c8:6b:49:38:a2:5b:26:56:df: 78:cb:eb:3b:38:42:62:78:fc:22:4e:a2:5a:05:94: ec:e0:55:25:91:c1:f4:24:77:a3:3f:59:04:b9:7a: 51:6a:24:8d:ee:2c:e4:e3:b1:d5:15:d1:20:5c:2d: bf:6d:bc:54:7f:55:b3:b5:b6:f4:b4:d4:45:be:04: 13:02:1f:07:eb:d7:d0:a1:17:f9:b3:79:49:70:e8: 37:79:d1:20:4c:df:14:76:1e:b2:ef:e5:d8:98:11: 4a:ec:84:14:69:78:4d:b2:50:4a:f9:4d:6d:23:22: 3d:fa:26:5f:f9:65:b9:1d:62:ee:bb:ad:ce:77:3c: b6:00:67:4a:08:bd:1c:a1:cb:ce:c6:09:47:35:0f: b9:43:3b:50:8a:d7:86:56:7d:6a:1a:fc:92:5e:cb: af:76:9b:cf:fc:1d:4d:84:92:f1:c7:86:24:05:4f: 99:f9:c3:59:55:44:06:e7:63:f5:78:c8:03:c6:37: a0:a2:3b:4f:65:45:d2:18:d3:14:eb:2a:19:fb:6a: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:21:ED:45:B9:85:EF:1F:79:7F:23:4B:07:58:C8:10:5D:77:47:0C X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9b:29:4f:e7:d8:09:b4:c1:52:ff:29:11:07:bb:bf:4b:21: d7:79:05:1a:6a:ae:89:4d:d5:9c:12:03:5f:46:ee:f1:a0:c1: 1e:df:f2:08:a8:82:a5:d7:8a:4f:01:de:6e:e5:52:6b:2c:69: f7:55:9a:bf:78:93:0e:66:5e:3c:90:82:b4:fd:6a:45:29:f2: b1:fa:b2:da:fb:7e:42:de:c5:35:96:29:b3:52:11:7d:4f:cd: fb:84:84:90:d0:50:6f:98:7c:c9:07:fb:6b:04:a6:16:31:ef: 09:a8:36:41:e7:b9:ba:70:d3:25:97:f3:6e:3a:7b:8f:5d:a0: e3:ac:7f:a9:91:e9:88:08:91:62:17:88:8a:ba:24:a7:39:65: cd:15:08:cf:62:5d:b5:74:db:79:e5:55:ce:ce:09:4e:d2:b1: c2:60:87:c9:16:24:35:36:2d:3c:65:ed:2b:11:b4:ec:8f:3c: 4f:29:3b:38:bd:fb:fa:5e:b9:39:57:57:2f:f0:8a:54:51:9a: 03:65:5b:5b:cd:1b:a2:ed:2f:fc:09:85:42:10:49:22:a8:87: 60:da:23:24:d4:6a:c0:d1:21:f6:00:47:05:91:ed:b9:1b:f2: 2f:88:fd:06:d0:e7:6e:ef:f4:57:7e:6d:ed:f3:f0:f1:3a:ac: 26:65:6d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfld/DHJXNplAjYUO/++krwZoxaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTEyMTcwNjM3MjRaFw0yNTEyMjAxMjM4MjRaMDMxMTAvBgNV BAMTKDQyMjFFRDQ1Qjk4NUVGMUY3OTdGMjM0QjA3NThDODEwNUQ3NzQ3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLf6g0K0fhKtHubHEKKqF4Xd/ /Tn7h1783pq6JTgFGuhUiiVD4UMAndTnDF56FNeyU8hrSTiiWyZW33jL6zs4QmJ4 /CJOoloFlOzgVSWRwfQkd6M/WQS5elFqJI3uLOTjsdUV0SBcLb9tvFR/VbO1tvS0 1EW+BBMCHwfr19ChF/mzeUlw6Dd50SBM3xR2HrLv5diYEUrshBRpeE2yUEr5TW0j Ij36Jl/5ZbkdYu67rc53PLYAZ0oIvRyhy87GCUc1D7lDO1CK14ZWfWoa/JJey692 m8/8HU2EkvHHhiQFT5n5w1lVRAbnY/V4yAPGN6CiO09lRdIY0xTrKhn7arLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQiHtRbmF7x95fyNLB1jIEF13RwwwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABybKU/n2Am0wVL/KREHu79LIdd5BRpqrolN 1ZwSA19G7vGgwR7f8giogqXXik8B3m7lUmssafdVmr94kw5mXjyQgrT9akUp8rH6 str7fkLexTWWKbNSEX1PzfuEhJDQUG+YfMkH+2sEphYx7wmoNkHnubpw0yWX8246 e49doOOsf6mR6YgIkWIXiIq6JKc5Zc0VCM9iXbV023nlVc7OCU7SscJgh8kWJDU2 LTxl7SsRtOyPPE8pOzi9+/peuTlXVy/wilRRmgNlW1vNG6LtL/wJhUIQSSKoh2Da IyTUasDRIfYARwWR7bkb8i+I/QbQ527v9Fd+be3z8PE6rCZlbec= -----END CERTIFICATE-----Generated at Wed Dec 17 21:56:27 2025 by rpki-client