This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: jarrkCQuBLOJqU69ZFYWwsV5QHNsxkgNyOlz/dymu2o= Subject key identifier: DD:01:C2:5C:03:AA:63:9B:D6:45:E5:7F:AC:48:5E:34:F0:FF:A6:87 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 6F83FB1D35ACF2A9CBCE965E0046CC7C5F357D61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 022A Signing time: Fri 05 Dec 2025 08:31:33 +0000 Manifest this update: Fri 05 Dec 2025 08:26:33 +0000 Manifest next update: Mon 08 Dec 2025 17:32:33 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: iRR1KGk64h/71K7AM+LJWR+RgzwH4A5mUCNlt0zfRiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:83:fb:1d:35:ac:f2:a9:cb:ce:96:5e:00:46:cc:7c:5f:35:7d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Dec 5 08:26:33 2025 GMT Not After : Dec 8 17:32:33 2025 GMT Subject: CN=DD01C25C03AA639BD645E57FAC485E34F0FFA687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:2e:cf:4c:5c:e8:9c:6f:3e:2e:a6:f4:16: 10:aa:08:77:07:6c:d3:40:43:d2:07:d4:9a:5f:b2: 95:9e:33:3a:76:6c:df:20:02:ff:58:ef:60:19:69: 7c:08:ae:bc:1e:3a:fe:1e:c4:7e:1f:62:75:bf:0b: 8a:9b:4a:26:fd:79:f4:d8:15:d5:26:c2:ec:b2:7a: 33:cd:05:8a:7a:ef:0f:56:b1:51:a6:d4:cb:7b:71: c2:fe:44:a3:ef:fe:af:44:3c:07:53:8b:9a:65:8f: 25:aa:88:6f:2b:66:61:e5:be:5c:4e:b2:7c:6d:c3: cb:12:21:cb:a0:dc:06:6d:19:ed:69:7d:60:a3:c0: 82:c8:51:2d:0d:1e:73:c7:84:0b:60:d9:b5:6e:d0: 06:ca:12:18:2a:7a:e6:77:14:44:b6:a2:0f:73:ad: 6f:17:e9:3d:99:9e:fd:ce:b6:fe:f2:6f:57:7f:70: 0a:39:e8:b8:aa:07:f6:a1:ce:d1:a9:34:19:cd:40: fa:67:72:fc:1d:f5:60:f6:7a:56:b3:39:44:ef:da: 61:fa:3c:77:6c:01:60:23:c5:04:89:9b:d3:bd:29: 40:79:c2:81:7e:3a:63:83:8c:07:e0:9e:a1:34:84: cd:17:53:75:bc:75:48:d2:7a:3e:bd:84:80:6f:5c: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:01:C2:5C:03:AA:63:9B:D6:45:E5:7F:AC:48:5E:34:F0:FF:A6:87 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f3:97:3f:c7:6b:29:ee:b5:26:a8:5d:16:13:34:38:47:64: b4:55:8a:fa:dd:f8:64:db:a7:84:8e:c0:ca:e6:b0:05:dd:04: a5:6c:ec:40:98:66:a3:cf:26:4c:c1:08:94:df:40:d8:81:ec: 95:bd:b9:a9:5c:42:2e:1a:0a:d9:35:4b:fa:59:b5:f8:d2:51: 38:22:36:fa:8a:0e:bb:24:49:63:f8:f7:94:0f:83:e0:9d:d8: ec:7e:d5:06:fa:f0:e6:89:89:2c:f5:8f:fc:06:36:86:c8:d5: ca:e2:11:90:40:c9:9e:47:db:96:b4:f7:cf:8a:14:9a:11:b3: 56:ec:39:4b:dd:9e:87:c3:2a:f1:1a:c3:ee:7f:d4:c8:d7:36: ba:68:20:0a:f2:c1:52:b3:41:0d:d9:bd:6e:ed:cb:aa:93:08: 97:28:6d:c7:bf:47:c9:83:95:bc:f9:b1:55:72:60:30:64:88: b2:38:06:b8:83:6d:68:bd:e1:12:42:3d:c3:34:44:6f:1f:6e: 49:a0:3e:78:a3:66:8f:15:bb:0c:39:09:f0:2c:53:72:18:20: 3b:f1:46:24:a5:b3:62:de:77:8d:7d:f2:50:a7:a3:4c:f2:8a: 08:e4:f4:f3:8d:5b:56:c3:09:e5:4c:b6:ee:e9:20:6a:4f:4b: 3d:b5:cc:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4P7HTWs8qnLzpZeAEbMfF81fWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTEyMDUwODI2MzNaFw0yNTEyMDgxNzMyMzNaMDMxMTAvBgNV BAMTKEREMDFDMjVDMDNBQTYzOUJENjQ1RTU3RkFDNDg1RTM0RjBGRkE2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX7S7PTFzonG8+Lqb0FhCqCHcH bNNAQ9IH1JpfspWeMzp2bN8gAv9Y72AZaXwIrrweOv4exH4fYnW/C4qbSib9efTY FdUmwuyyejPNBYp67w9WsVGm1Mt7ccL+RKPv/q9EPAdTi5pljyWqiG8rZmHlvlxO snxtw8sSIcug3AZtGe1pfWCjwILIUS0NHnPHhAtg2bVu0AbKEhgqeuZ3FES2og9z rW8X6T2Znv3Otv7yb1d/cAo56LiqB/ahztGpNBnNQPpncvwd9WD2elazOUTv2mH6 PHdsAWAjxQSJm9O9KUB5woF+OmODjAfgnqE0hM0XU3W8dUjSej69hIBvXB/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QHCXAOqY5vWReV/rEheNPD/pocwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/zlz/HaynutSaoXRYTNDhHZLRVivrd+GTb p4SOwMrmsAXdBKVs7ECYZqPPJkzBCJTfQNiB7JW9ualcQi4aCtk1S/pZtfjSUTgi NvqKDrskSWP495QPg+Cd2Ox+1Qb68OaJiSz1j/wGNobI1criEZBAyZ5H25a098+K FJoRs1bsOUvdnofDKvEaw+5/1MjXNrpoIArywVKzQQ3ZvW7ty6qTCJcobce/R8mD lbz5sVVyYDBkiLI4BriDbWi94RJCPcM0RG8fbkmgPnijZo8Vuww5CfAsU3IYIDvx RiSls2Led4198lCno0zyigjk9PONW1bDCeVMtu7pIGpPSz21zNA= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:10 2025 by rpki-client