This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: ug8b01pQAfrWzBgQbwoV05I8y2wfO/kS/LH21ye646Y= Subject key identifier: 70:71:11:8C:60:57:17:81:90:8C:D0:D0:12:0B:75:B8:CC:22:3B:56 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 02A76C18B5E97C47A7AFE4A028876B8896E675D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0339 Signing time: Fri 05 Dec 2025 12:12:10 +0000 Manifest this update: Fri 05 Dec 2025 12:07:10 +0000 Manifest next update: Mon 08 Dec 2025 16:36:10 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: HoqnIay2Ot1UypeakETgfJXp3TKV2e2ZUpOgaM2utxo=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a7:6c:18:b5:e9:7c:47:a7:af:e4:a0:28:87:6b:88:96:e6:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Dec 5 12:07:10 2025 GMT Not After : Dec 8 16:36:10 2025 GMT Subject: CN=7071118C60571781908CD0D0120B75B8CC223B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:8c:8b:57:23:e4:4c:66:6e:a5:8e:15:a7: 94:c3:59:2e:63:f0:5f:11:3a:b8:53:ae:49:7c:c6: b9:de:7e:ac:1c:c6:68:25:b9:59:80:7b:3d:16:b4: ca:08:40:92:f0:5f:e5:3c:87:f8:b8:5f:aa:52:9d: 1f:c0:bb:29:db:38:3c:a4:2e:87:c4:00:eb:10:66: 1e:92:51:d2:14:2c:1f:01:06:3e:d4:e3:da:36:e9: f9:4a:02:6c:b5:f2:2a:21:e0:64:5a:9e:9b:9b:ab: 17:78:b1:13:a0:66:36:cb:b7:b7:ea:06:1e:fc:a9: fc:fd:79:f9:02:1e:3e:6c:f0:50:04:56:bf:3d:f0: e9:00:fa:83:cc:1a:70:1d:67:db:4c:90:90:18:d0: 20:28:76:43:14:06:30:b3:22:3c:4d:ca:21:eb:11: 65:99:14:a4:9d:8f:98:61:dd:f9:32:08:03:f3:4a: 43:7b:0d:b8:15:c9:2f:37:a6:30:ad:c3:a0:57:7f: 9d:22:ea:7f:da:d2:34:da:ca:bc:df:6d:b7:26:0a: 35:66:c3:26:55:52:05:65:11:f0:a6:d9:74:d4:1f: 86:4b:cc:43:7b:05:2d:d3:81:02:77:87:c9:dd:7e: 1d:9b:59:30:e2:f5:c9:55:57:49:a9:ca:88:d2:14: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:11:8C:60:57:17:81:90:8C:D0:D0:12:0B:75:B8:CC:22:3B:56 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ec:3b:e6:47:96:d8:76:10:bd:19:b2:c8:c2:c4:c4:46:d1: 6a:97:26:45:e4:6a:48:81:5b:fd:63:0e:9e:df:93:8c:4d:e9: 5d:cc:6d:4a:5a:0d:4f:2e:37:60:f7:e8:20:2d:9a:fe:fd:4b: 88:34:fc:6e:95:df:6f:68:61:21:46:c5:dc:b2:e6:1f:60:f9: 13:0a:74:d1:17:c7:c2:b9:19:01:63:e3:e3:35:22:33:eb:c3: 34:34:57:3b:b7:de:81:95:72:07:bc:c9:2e:ca:bf:c6:d6:62: 20:a9:f6:00:e5:a0:31:01:c5:82:72:27:5a:99:03:57:42:8f: e9:b4:e6:bf:52:fc:02:59:b1:fc:ba:9e:92:5d:03:36:51:77: 01:92:0b:a7:7f:0c:41:b7:bd:3c:c4:5e:71:85:30:dc:f6:64: 50:9f:15:e6:c2:4a:2a:1e:26:48:4a:40:58:d5:6d:ec:60:16: e1:24:ba:d2:da:67:9e:3d:f0:f7:ac:fe:32:27:0e:e9:b3:46: 74:74:bc:a8:0f:93:4c:f1:3b:b7:16:bb:8a:a6:49:2c:89:48: f2:72:05:9e:99:4d:1c:5d:81:ad:97:85:d1:3d:9d:56:93:e6: 95:56:16:28:19:b6:12:ad:d6:7e:2f:8e:2e:16:af:54:73:6e: 58:5f:bd:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqdsGLXpfEenr+SgKIdriJbmddEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTEyMDUxMjA3MTBaFw0yNTEyMDgxNjM2MTBaMDMxMTAvBgNV BAMTKDcwNzExMThDNjA1NzE3ODE5MDhDRDBEMDEyMEI3NUI4Q0MyMjNCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dIyLVyPkTGZupY4Vp5TDWS5j 8F8ROrhTrkl8xrnefqwcxmgluVmAez0WtMoIQJLwX+U8h/i4X6pSnR/AuynbODyk LofEAOsQZh6SUdIULB8BBj7U49o26flKAmy18ioh4GRanpubqxd4sROgZjbLt7fq Bh78qfz9efkCHj5s8FAEVr898OkA+oPMGnAdZ9tMkJAY0CAodkMUBjCzIjxNyiHr EWWZFKSdj5hh3fkyCAPzSkN7DbgVyS83pjCtw6BXf50i6n/a0jTayrzfbbcmCjVm wyZVUgVlEfCm2XTUH4ZLzEN7BS3TgQJ3h8ndfh2bWTDi9clVV0mpyojSFD9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcHERjGBXF4GQjNDQEgt1uMwiO1YwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjsO+ZHlth2EL0ZssjCxMRG0WqXJkXkakiB W/1jDp7fk4xN6V3MbUpaDU8uN2D36CAtmv79S4g0/G6V329oYSFGxdyy5h9g+RMK dNEXx8K5GQFj4+M1IjPrwzQ0Vzu33oGVcge8yS7Kv8bWYiCp9gDloDEBxYJyJ1qZ A1dCj+m05r9S/AJZsfy6npJdAzZRdwGSC6d/DEG3vTzEXnGFMNz2ZFCfFebCSioe JkhKQFjVbexgFuEkutLaZ5498Pes/jInDumzRnR0vKgPk0zxO7cWu4qmSSyJSPJy BZ6ZTRxdga2XhdE9nVaT5pVWFigZthKt1n4vji4Wr1Rzblhfvdg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:14 2025 by rpki-client