This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: bployyJ4mmhJIEERhLRQwK3TjjA6/VxERshByIj9jPs= Subject key identifier: 3D:82:34:A1:CD:C7:56:6C:E2:D4:30:1A:94:FC:4A:00:9A:9A:8A:96 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 3BB0321B0BDB29FD750CAF473CED18411DBB9818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 0225 Signing time: Fri 05 Dec 2025 13:42:05 +0000 Manifest this update: Fri 05 Dec 2025 13:37:05 +0000 Manifest next update: Tue 09 Dec 2025 01:11:05 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: 3EM5ym0Rc4f3FOE2LYBV10sRAmLq56fStbN9yZ2kC5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b0:32:1b:0b:db:29:fd:75:0c:af:47:3c:ed:18:41:1d:bb:98:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Dec 5 13:37:05 2025 GMT Not After : Dec 9 01:11:05 2025 GMT Subject: CN=3D8234A1CDC7566CE2D4301A94FC4A009A9A8A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:37:53:5e:e4:29:a3:c7:f1:c0:50:93:36: c1:74:b4:ae:02:80:e5:3b:79:5c:90:ad:77:33:ed: 87:ef:85:00:49:31:4a:10:17:be:5b:6d:05:b2:bd: 0d:a5:08:a1:5e:49:92:bb:39:35:fe:f7:34:8e:88: cf:68:77:7c:f9:cb:01:be:4b:8f:1c:d6:95:db:98: 7a:3a:5c:cc:ba:95:b1:bc:f2:f5:b9:51:5b:98:f2: 82:fa:dd:42:2e:e4:9e:2d:5a:36:9f:2a:e6:0e:f4: 31:53:f9:63:8b:6d:cc:83:90:a0:51:27:d1:72:8d: fe:03:15:a8:a4:9b:df:c0:15:e5:a9:9f:6c:23:bc: 53:5d:1d:93:8d:a4:ca:53:a4:64:5d:32:44:7a:2b: f7:d0:28:02:7f:82:11:09:de:85:92:e7:68:a2:97: e7:86:ab:c2:5b:05:83:85:46:b0:86:51:46:f7:3d: 02:ff:6f:4d:74:3f:99:42:c0:ae:ad:0a:70:8d:f6: 49:5e:34:d0:b7:c3:86:eb:51:4d:d7:8c:6d:84:2f: a9:26:c4:6b:31:9b:da:0d:cc:f2:2d:cf:cd:4c:04: 38:25:87:0b:88:4c:27:e0:0b:53:87:c4:4c:e7:23: eb:0a:8c:4a:e9:d5:af:ec:8c:7f:0a:4e:e7:e7:ea: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:34:A1:CD:C7:56:6C:E2:D4:30:1A:94:FC:4A:00:9A:9A:8A:96 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8f:7f:4a:d0:54:08:dd:b8:72:21:b5:5d:1a:fb:26:c7:07: 04:a3:f3:d9:e8:e2:11:27:05:06:55:c6:0f:86:eb:a5:21:44: 51:44:31:bf:f6:03:c6:1f:79:3e:75:3d:08:c7:03:08:5e:b3: 1c:2d:b1:d6:2c:bf:f3:e0:44:a6:8d:e0:26:0b:ea:44:7f:3f: 90:94:e1:8d:b4:87:92:2e:b6:09:86:68:b6:78:81:4e:9d:42: 0f:f7:f5:36:57:27:d7:4a:97:35:e4:71:e0:e9:d4:29:3b:23: ac:e7:32:a2:35:fa:39:52:96:79:57:f2:d6:67:3b:21:3a:c1: 70:a8:f9:4f:95:20:4d:71:f6:d1:5e:45:98:bc:d7:5c:7e:99: 86:1c:24:02:70:1a:73:22:20:82:65:20:1c:54:6a:55:20:80: 24:17:fd:6b:62:6d:05:f1:46:09:e9:94:52:e4:55:95:3a:b4: 21:f7:c1:06:ad:58:f2:e3:7e:87:10:26:47:b0:7d:70:b9:de: eb:cf:86:22:40:79:89:54:ad:f1:f7:33:09:28:17:2c:8e:02: 85:4d:26:93:38:c8:18:a6:be:5c:79:2c:4d:fe:60:d2:ab:72: c8:a4:a8:04:e0:84:6f:24:21:a7:b7:8d:6f:71:87:dd:22:e7: c9:91:53:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7AyGwvbKf11DK9HPO0YQR27mBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTEyMDUxMzM3MDVaFw0yNTEyMDkwMTExMDVaMDMxMTAvBgNV BAMTKDNEODIzNEExQ0RDNzU2NkNFMkQ0MzAxQTk0RkM0QTAwOUE5QThBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGTdTXuQpo8fxwFCTNsF0tK4C gOU7eVyQrXcz7YfvhQBJMUoQF75bbQWyvQ2lCKFeSZK7OTX+9zSOiM9od3z5ywG+ S48c1pXbmHo6XMy6lbG88vW5UVuY8oL63UIu5J4tWjafKuYO9DFT+WOLbcyDkKBR J9Fyjf4DFaikm9/AFeWpn2wjvFNdHZONpMpTpGRdMkR6K/fQKAJ/ghEJ3oWS52ii l+eGq8JbBYOFRrCGUUb3PQL/b010P5lCwK6tCnCN9kleNNC3w4brUU3XjG2EL6km xGsxm9oNzPItz81MBDglhwuITCfgC1OHxEznI+sKjErp1a/sjH8KTufn6r6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYI0oc3HVmzi1DAalPxKAJqaipYwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaPf0rQVAjduHIhtV0a+ybHBwSj89no4hEn BQZVxg+G66UhRFFEMb/2A8YfeT51PQjHAwhesxwtsdYsv/PgRKaN4CYL6kR/P5CU 4Y20h5IutgmGaLZ4gU6dQg/39TZXJ9dKlzXkceDp1Ck7I6znMqI1+jlSlnlX8tZn OyE6wXCo+U+VIE1x9tFeRZi811x+mYYcJAJwGnMiIIJlIBxUalUggCQX/WtibQXx RgnplFLkVZU6tCH3wQatWPLjfocQJkewfXC53uvPhiJAeYlUrfH3MwkoFyyOAoVN JpM4yBimvlx5LE3+YNKrcsikqATghG8kIae3jW9xh90i58mRU2E= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:13 2025 by rpki-client