This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: wePjaGsdS6WQobIdZ7SQF9SoJC37y8YEihlnQgN7x8U= Subject key identifier: 22:95:8B:76:2F:56:CD:C0:E9:99:CE:B6:1A:47:1D:2F:68:21:0F:72 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 5FDFA14834BC59F7EBD76B1BD664884AEB0E87FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: D9 Signing time: Sat 06 Dec 2025 14:10:00 +0000 Manifest this update: Sat 06 Dec 2025 14:05:00 +0000 Manifest next update: Tue 09 Dec 2025 21:43:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=) 3: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: BsAG45T8IEJrVJH0N79axWOjFPClueG/6kVj07A6Tv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:df:a1:48:34:bc:59:f7:eb:d7:6b:1b:d6:64:88:4a:eb:0e:87:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Dec 6 14:05:00 2025 GMT Not After : Dec 9 21:43:00 2025 GMT Subject: CN=22958B762F56CDC0E999CEB61A471D2F68210F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:c7:eb:88:0d:c5:cc:b1:98:3d:83:3e:d5: 4e:0f:00:44:ba:ec:5e:f9:c6:78:1e:47:dc:b5:0f: 41:12:4e:92:a6:32:95:b2:1f:fd:a8:18:9a:db:b0: 4e:14:89:35:c1:ba:9c:15:97:74:3d:40:de:24:c3: 70:d6:7f:90:96:f5:34:88:99:71:b6:20:ff:f8:86: 0f:9e:b3:d4:c8:cb:fd:5b:a8:ab:7d:53:32:cb:ff: c6:1a:31:51:db:23:26:80:66:5a:66:35:ef:0e:26: ab:ff:fe:e8:28:5a:f6:30:60:18:4c:1b:58:96:d3: 3a:b0:11:83:34:0f:67:20:2c:f6:4a:a4:ce:b9:d5: 33:79:aa:e8:03:6b:15:0d:b4:a4:80:2c:0c:18:6a: e3:17:75:ba:eb:85:25:49:10:b3:87:c1:d5:b4:d9: c4:17:09:b8:90:be:ae:3f:aa:7a:14:dd:16:05:1a: 22:ba:8b:17:81:e5:a6:b2:b2:95:fb:3d:dc:bf:5b: e2:5c:e2:88:82:23:f1:08:4d:a3:07:84:eb:ca:f3: 35:f1:36:e6:bc:49:dd:38:41:a3:b0:1f:2e:e6:06: aa:89:62:6a:2a:c6:f6:9e:5c:c0:1b:ed:e2:4b:03: 13:54:94:40:c9:69:4f:69:88:9b:0d:f0:aa:96:47: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:8B:76:2F:56:CD:C0:E9:99:CE:B6:1A:47:1D:2F:68:21:0F:72 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a2:5f:97:e0:80:98:27:b0:c7:07:ed:e9:a0:91:f7:f6:e5: 92:85:9f:02:78:b0:98:29:1b:57:09:5b:c1:96:ba:eb:5c:26: ce:cc:da:eb:49:5c:36:99:85:59:ac:0a:a8:ca:08:60:60:2c: da:d7:fc:85:53:d4:a8:7b:45:d3:ad:7f:4d:46:ee:43:ae:65: bc:03:50:d7:fb:e1:49:57:2b:0d:d5:d9:d1:66:87:12:26:d9: ca:4b:bc:09:c3:b7:df:24:53:a8:71:75:3d:50:ec:be:47:f5: 5e:0a:29:7d:90:b0:49:3c:57:9a:6e:9b:42:60:fa:c1:09:a4: 07:98:86:00:24:a3:12:a3:ea:bf:07:b8:85:8b:a0:92:bc:d1: c3:79:9e:bc:df:11:dd:e1:7a:84:90:73:19:67:2e:35:e7:6b: 9d:c8:5e:d7:cc:24:ec:09:79:3c:8a:e1:db:88:3f:7b:38:e6: 0f:78:13:3a:96:81:9c:a5:65:97:10:ca:64:2a:58:69:91:d2: 70:96:35:a7:74:9d:74:1f:42:cf:cd:c8:38:53:97:b5:1f:d6: 40:ca:bf:bf:fa:70:3e:8a:dc:0a:d3:31:d1:22:3f:e3:61:6b: 1d:95:25:1e:f0:e6:a4:2a:73:89:6b:79:4d:1a:1c:d9:ee:40: bc:ee:0c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9+hSDS8Wffr12sb1mSISusOh/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTEyMDYxNDA1MDBaFw0yNTEyMDkyMTQzMDBaMDMxMTAvBgNV BAMTKDIyOTU4Qjc2MkY1NkNEQzBFOTk5Q0VCNjFBNDcxRDJGNjgyMTBGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQMfriA3FzLGYPYM+1U4PAES6 7F75xngeR9y1D0ESTpKmMpWyH/2oGJrbsE4UiTXBupwVl3Q9QN4kw3DWf5CW9TSI mXG2IP/4hg+es9TIy/1bqKt9UzLL/8YaMVHbIyaAZlpmNe8OJqv//ugoWvYwYBhM G1iW0zqwEYM0D2cgLPZKpM651TN5qugDaxUNtKSALAwYauMXdbrrhSVJELOHwdW0 2cQXCbiQvq4/qnoU3RYFGiK6ixeB5aayspX7Pdy/W+Jc4oiCI/EITaMHhOvK8zXx Nua8Sd04QaOwHy7mBqqJYmoqxvaeXMAb7eJLAxNUlEDJaU9piJsN8KqWR70DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIpWLdi9WzcDpmc62GkcdL2ghD3IwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCiX5fggJgnsMcH7emgkff25ZKFnwJ4sJgp G1cJW8GWuutcJs7M2utJXDaZhVmsCqjKCGBgLNrX/IVT1Kh7RdOtf01G7kOuZbwD UNf74UlXKw3V2dFmhxIm2cpLvAnDt98kU6hxdT1Q7L5H9V4KKX2QsEk8V5pum0Jg +sEJpAeYhgAkoxKj6r8HuIWLoJK80cN5nrzfEd3heoSQcxlnLjXna53IXtfMJOwJ eTyK4duIP3s45g94EzqWgZylZZcQymQqWGmR0nCWNad0nXQfQs/NyDhTl7Uf1kDK v7/6cD6K3ArTMdEiP+Nhax2VJR7w5qQqc4lreU0aHNnuQLzuDLs= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:51 2025 by rpki-client