This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: WSbyawvXe+jSFsu2FzkZoCBui5lUr49/s0B72C8IlEY= Subject key identifier: 67:67:1B:02:BE:75:B0:94:A4:8D:94:DD:1E:E3:34:9C:96:D8:CA:4A Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 3713B923982F550D3080923A1A6C9CD0E7883913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0397 Signing time: Fri 05 Dec 2025 13:30:43 +0000 Manifest this update: Fri 05 Dec 2025 13:25:43 +0000 Manifest next update: Mon 08 Dec 2025 16:23:43 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: jozJfFsHnTd2/V+uSVC4w/w+FQoZFK8GL6II32p+Zo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:13:b9:23:98:2f:55:0d:30:80:92:3a:1a:6c:9c:d0:e7:88:39:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Dec 5 13:25:43 2025 GMT Not After : Dec 8 16:23:43 2025 GMT Subject: CN=67671B02BE75B094A48D94DD1EE3349C96D8CA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:d3:1f:53:d4:5e:4d:cb:be:29:09:62:49: b9:ab:31:d8:7a:5e:62:19:c8:bd:56:e5:c3:82:09: b5:f2:b3:7a:f2:53:2c:46:34:bb:9e:2f:a3:d8:16: 0d:a5:8b:f8:0b:c7:61:9c:20:78:25:0c:a6:d9:68: b9:96:9c:f3:8d:7b:2c:fb:f1:a7:4c:88:cb:9c:e6: 56:c5:d8:65:2b:ae:dc:25:26:eb:11:d1:c3:b0:0f: 0e:a9:7d:46:9e:a4:1f:e9:5a:a8:8e:47:34:b8:df: 2b:5f:fd:87:d1:8d:1b:c8:4a:5b:20:de:23:a9:13: 6b:02:11:c6:84:07:f9:ed:60:e5:1c:e1:fb:99:8b: 40:a7:27:1b:5d:53:e2:2d:d6:cd:0f:da:7f:ae:9c: c9:bd:c4:12:15:4e:e0:19:71:ae:4a:35:e9:25:40: 12:a4:e5:59:e7:c8:e9:8b:98:b6:0e:a9:ba:74:c0: 0e:ea:a8:2a:4c:70:75:f7:3c:d5:57:07:6f:33:d5: 9b:12:ab:01:79:30:4a:8d:18:42:b1:40:8d:86:29: 78:01:0a:a8:2d:6a:4c:96:5b:d4:8f:b7:13:60:b0: 80:12:3f:f3:e8:82:d1:b7:6a:50:fd:2d:13:3f:34: 8f:b2:1f:09:21:37:84:33:36:28:58:ec:67:59:92: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:1B:02:BE:75:B0:94:A4:8D:94:DD:1E:E3:34:9C:96:D8:CA:4A X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:43:5d:33:30:b6:c2:93:c3:e3:cf:b5:da:5a:c7:4c:b1:7d: 2e:29:98:74:0e:ae:3f:9f:3b:a9:d3:8d:ff:9f:79:b7:b0:3c: fc:fb:30:b0:1e:b0:98:7d:af:eb:f5:e1:f4:bb:c0:4c:ad:47: 63:b5:62:0d:36:85:a6:52:26:1c:5f:ec:a7:01:13:34:31:ae: 4a:f8:4d:fe:be:97:61:18:8d:a5:16:1d:e2:70:b0:32:40:ce: 76:ac:0b:ed:58:98:31:19:db:16:ad:eb:1e:c3:5c:8d:ab:bb: 87:3f:34:f3:08:4a:fe:f1:3a:e1:71:c4:28:8c:74:7b:54:34: 41:52:9d:f8:4f:76:1a:31:6d:3b:c2:1c:ae:a9:fa:af:5e:cb: 7e:a8:d6:d1:61:5d:7a:28:9d:7b:78:cd:0d:1f:24:e3:e2:7a: e5:e6:62:8e:05:2b:34:21:b7:e0:a3:ef:56:00:77:2e:42:a0: e4:a9:3f:85:8a:db:1a:da:c6:cb:c7:66:dc:ba:c4:0d:56:39: ad:e1:e5:fe:44:cb:40:59:0c:d2:d3:cb:66:a7:c6:1f:48:a9: a1:c7:e2:a1:81:e0:a5:eb:a8:a1:14:73:c2:d5:ba:8b:39:f3: 32:d2:2b:90:72:33:d8:58:04:16:2d:33:6d:f8:ec:52:c1:d9: 60:f4:b0:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxO5I5gvVQ0wgJI6Gmyc0OeIORMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTEyMDUxMzI1NDNaFw0yNTEyMDgxNjIzNDNaMDMxMTAvBgNV BAMTKDY3NjcxQjAyQkU3NUIwOTRBNDhEOTRERDFFRTMzNDlDOTZEOENBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4m9MfU9ReTcu+KQliSbmrMdh6 XmIZyL1W5cOCCbXys3ryUyxGNLueL6PYFg2li/gLx2GcIHglDKbZaLmWnPONeyz7 8adMiMuc5lbF2GUrrtwlJusR0cOwDw6pfUaepB/pWqiORzS43ytf/YfRjRvISlsg 3iOpE2sCEcaEB/ntYOUc4fuZi0CnJxtdU+It1s0P2n+unMm9xBIVTuAZca5KNekl QBKk5VnnyOmLmLYOqbp0wA7qqCpMcHX3PNVXB28z1ZsSqwF5MEqNGEKxQI2GKXgB CqgtakyWW9SPtxNgsIASP/PogtG3alD9LRM/NI+yHwkhN4QzNihY7GdZkgtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2cbAr51sJSkjZTdHuM0nJbYykowHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVDXTMwtsKTw+PPtdpax0yxfS4pmHQOrj+f O6nTjf+febewPPz7MLAesJh9r+v14fS7wEytR2O1Yg02haZSJhxf7KcBEzQxrkr4 Tf6+l2EYjaUWHeJwsDJAznasC+1YmDEZ2xat6x7DXI2ru4c/NPMISv7xOuFxxCiM dHtUNEFSnfhPdhoxbTvCHK6p+q9ey36o1tFhXXoonXt4zQ0fJOPieuXmYo4FKzQh t+Cj71YAdy5CoOSpP4WK2xraxsvHZty6xA1WOa3h5f5Ey0BZDNLTy2anxh9IqaHH 4qGB4KXrqKEUc8LVuos58zLSK5ByM9hYBBYtM2347FLB2WD0sPs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:29 2025 by rpki-client