This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft File: 7FAD2077691F807236683910594F23BA68280CD9.mft (raw, json) Hash identifier: Ztq5mk8xgI3H5GyDbt0Tb/YRnLAhRXQLLkF3K8Z3omg= Subject key identifier: 22:FD:BD:67:B0:5F:E0:31:2C:7A:33:2E:5F:04:4C:45:86:AD:04:0D Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 Certificate issuer: /CN=7FAD2077691F807236683910594F23BA68280CD9 Certificate serial: 0F91132AA4E4492809CDACBE933C8C11E86CA04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 23:41:58 +0000 Manifest this update: Fri 05 Dec 2025 23:36:58 +0000 Manifest next update: Tue 09 Dec 2025 06:59:58 +0000 Files and hashes: 1: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: +izo906qJR0//zszVUjaR0jf7ZrrEtZEmo5pUlJJNLQ=) 2: 7FAD2077691F807236683910594F23BA68280CD9.crl (hash: 9YPL8P/OIKG1DyTf1QAqbmJz61fN38deMUU6Kz4D8Bg=) 3: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: inn5/pTXe326JcI/eQLFFh0GJuSiHNACA3LyQlZzv0k=) 4: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: tl64BNKIeWPiWplSwphcJa2kjFiO8+8RBPcNGp3Fo5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:91:13:2a:a4:e4:49:28:09:cd:ac:be:93:3c:8c:11:e8:6c:a0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9 Validity Not Before: Dec 5 23:36:58 2025 GMT Not After : Dec 9 06:59:58 2025 GMT Subject: CN=22FDBD67B05FE0312C7A332E5F044C4586AD040D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:d2:dd:37:a4:1d:83:60:47:1e:a8:c3:ad: 8a:35:fb:ed:47:60:89:ba:18:c9:77:86:aa:73:ce: 7c:5a:a2:4a:06:7e:32:d1:62:5f:92:87:be:f4:30: 33:76:37:fa:8c:27:08:f3:43:ef:95:de:c4:04:4c: 6f:99:a3:eb:98:f0:b3:54:cd:08:6d:76:bc:68:5d: 2a:88:60:14:a7:85:01:0a:63:43:1c:fb:1e:02:3f: c4:ea:ff:c1:a3:58:e0:d3:c3:e5:55:fb:1f:03:30: 27:70:06:c0:42:74:0c:a5:47:e6:42:a5:16:c6:88: 4d:8c:78:47:08:d4:7a:8c:b5:ba:a2:22:88:e6:7d: 6c:16:1d:53:af:8f:bf:08:39:48:c5:31:75:c3:e2: 63:4b:0a:31:16:5b:71:4d:7b:34:46:1f:98:22:3b: 37:2e:05:ab:47:a3:5e:88:06:e0:be:47:0d:57:75: 88:e7:e3:97:a8:9a:66:75:8e:03:42:07:6b:ca:41: 99:0b:e4:89:a6:bc:63:49:12:be:66:a2:15:68:7c: 77:c1:58:f6:40:cb:3b:32:4c:dd:ad:2f:86:a7:de: b3:07:cd:eb:08:02:93:92:71:b9:f7:e2:3a:0a:74: 1b:17:86:1c:6d:bf:ac:1b:ae:8e:96:46:9d:a4:0f: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:BD:67:B0:5F:E0:31:2C:7A:33:2E:5F:04:4C:45:86:AD:04:0D X509v3 Authority Key Identifier: keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:32:b4:af:7a:bc:ff:d9:ef:bd:9d:32:eb:89:cd:20:50:27: 7b:18:b3:e0:f7:57:70:34:15:bf:a4:b1:c9:e2:b5:3d:5d:b8: 52:5b:ac:0b:4e:06:94:d8:33:e5:07:2c:e8:b0:b4:f3:f3:86: 2e:06:6e:8e:94:69:4f:29:1a:3a:b3:7a:ce:6e:14:75:ec:71: ce:d4:6f:4e:73:b1:87:0c:fa:42:70:6c:eb:e3:9c:01:6e:90: 48:e4:f2:3a:39:69:ac:65:a3:7a:cb:42:03:5b:2a:ac:47:f0: 5b:02:62:1a:4f:de:7a:a0:ce:0c:75:51:74:58:50:c6:76:80: a2:ea:51:a9:e1:21:fa:03:eb:1e:9e:32:89:10:b0:25:48:ee: 97:37:5a:2f:cb:2d:01:81:b0:68:7b:cb:95:de:a9:2a:92:eb: 71:7e:c0:c0:01:b6:ed:2b:e8:09:aa:55:bd:d7:cf:3a:66:88: 07:b2:68:f7:e9:dc:0f:bd:5f:fd:10:5a:d1:3f:e6:79:ed:f4: e9:f2:c7:3d:b6:bc:a4:66:1d:d5:5c:cb:e1:4e:a2:cc:74:8f: 58:d9:3d:4b:0e:3c:c4:dd:2e:56:b4:c8:2d:c8:88:70:ce:80: 6e:48:75:7f:de:93:25:ae:fc:fa:95:08:3c:a1:fb:49:57:39: 1c:99:c2:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5ETKqTkSSgJzay+kzyMEehsoE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2 ODI4MENEOTAeFw0yNTEyMDUyMzM2NThaFw0yNTEyMDkwNjU5NThaMDMxMTAvBgNV BAMTKDIyRkRCRDY3QjA1RkUwMzEyQzdBMzMyRTVGMDQ0QzQ1ODZBRDA0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVB9LdN6Qdg2BHHqjDrYo1++1H YIm6GMl3hqpzznxaokoGfjLRYl+Sh770MDN2N/qMJwjzQ++V3sQETG+Zo+uY8LNU zQhtdrxoXSqIYBSnhQEKY0Mc+x4CP8Tq/8GjWODTw+VV+x8DMCdwBsBCdAylR+ZC pRbGiE2MeEcI1HqMtbqiIojmfWwWHVOvj78IOUjFMXXD4mNLCjEWW3FNezRGH5gi OzcuBatHo16IBuC+Rw1XdYjn45eommZ1jgNCB2vKQZkL5ImmvGNJEr5mohVofHfB WPZAyzsyTN2tL4an3rMHzesIApOScbn34joKdBsXhhxtv6wbro6WRp2kD+WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIv29Z7Bf4DEsejMuXwRMRYatBA0wHwYDVR0j BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5 MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIz QkE2ODI4MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4ytK96vP/Z772dMuuJzSBQJ3sYs+D3V3A0 Fb+kscnitT1duFJbrAtOBpTYM+UHLOiwtPPzhi4Gbo6UaU8pGjqzes5uFHXscc7U b05zsYcM+kJwbOvjnAFukEjk8jo5aaxlo3rLQgNbKqxH8FsCYhpP3nqgzgx1UXRY UMZ2gKLqUanhIfoD6x6eMokQsCVI7pc3Wi/LLQGBsGh7y5XeqSqS63F+wMABtu0r 6AmqVb3XzzpmiAeyaPfp3A+9X/0QWtE/5nnt9Onyxz22vKRmHdVcy+FOosx0j1jZ PUsOPMTdLla0yC3IiHDOgG5IdX/ekyWu/PqVCDyh+0lXORyZwo0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:55 2025 by rpki-client