This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: HH5MgQCBVLNoESiffXkIdpvN7Hcp9VW8gbJfQ9NJVnw= Subject key identifier: 85:67:0F:0E:F5:23:D4:A5:72:EA:91:64:AD:F7:2A:72:AE:1B:5C:B3 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 71BE44E057DB514F544FF3F1292AD1BC675FAA1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: E1 Signing time: Fri 05 Dec 2025 10:02:04 +0000 Manifest this update: Fri 05 Dec 2025 09:57:04 +0000 Manifest next update: Mon 08 Dec 2025 14:17:04 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: VHuDzyK5R2PDKv5ZuUklx61uWM8kv8ZiSq2c+fIy8sI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:be:44:e0:57:db:51:4f:54:4f:f3:f1:29:2a:d1:bc:67:5f:aa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Dec 5 09:57:04 2025 GMT Not After : Dec 8 14:17:04 2025 GMT Subject: CN=85670F0EF523D4A572EA9164ADF72A72AE1B5CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:0c:fa:56:16:55:9e:37:96:7b:7a:a0:f0: 72:35:22:6c:d7:22:65:ee:94:31:b7:9d:63:9a:0e: a5:a0:76:ab:42:7c:8d:1f:52:f6:5f:60:4c:9d:46: 51:9d:44:29:18:61:8f:6e:50:b3:2b:90:de:1e:bb: 82:79:13:3b:5d:e9:29:f2:34:a4:21:64:c0:1a:6f: 38:f4:21:fe:45:08:aa:c5:c8:4d:c1:a6:25:81:42: 0c:20:65:91:1b:3b:4a:fb:9a:14:33:36:e8:c1:01: 8b:bd:cb:0e:0e:fe:86:ce:54:e5:53:7c:45:0d:fb: 93:61:bb:17:07:4d:ab:84:50:76:d9:93:bb:8b:16: b5:eb:50:38:e0:c9:a9:e2:18:c5:ec:c7:89:24:74: 1d:e4:8d:fa:dd:9b:a4:52:57:79:af:a2:ae:3c:30: 56:b4:01:4d:2d:ac:31:6c:8b:9d:3d:c0:a3:06:07: 35:46:70:4a:9f:3c:44:5c:fa:a7:58:93:6f:22:14: d5:42:f8:dc:24:2e:9d:74:9c:25:be:7b:f7:d4:cc: fd:a6:ce:42:e6:7b:d5:68:bd:3e:5a:02:08:9c:ad: 26:14:cd:ec:c9:f4:bd:10:c3:44:65:5a:42:40:10: 51:bc:51:2b:3e:bc:0a:90:a2:a5:3c:e1:44:c8:b7: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:0F:0E:F5:23:D4:A5:72:EA:91:64:AD:F7:2A:72:AE:1B:5C:B3 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:0c:76:7e:c7:d2:0e:e7:2c:23:a5:c2:1e:b8:73:c5:8a: 26:8d:ac:b9:67:bb:7f:a2:1d:6e:82:40:8b:f6:9a:7d:8d:b4: 76:7d:44:2b:14:03:79:46:9f:4f:72:3e:d2:e3:6e:12:df:8f: ca:3b:53:8b:a0:43:2d:b0:f7:1c:70:50:04:87:1a:bb:65:31: 48:38:7b:35:83:cb:de:c0:c2:2d:38:f6:cc:cf:44:af:b5:88: b0:31:37:92:7f:c8:03:08:29:15:ad:a6:65:62:98:e5:6c:15: ba:58:53:ee:0b:d1:b5:a3:e8:4b:10:ff:03:54:ac:4d:4b:7e: 12:00:6a:f7:8d:a5:20:14:a3:67:41:44:10:9b:b4:b4:c9:ea: 3b:27:af:2d:69:40:b3:85:11:b5:d0:43:07:70:f6:42:1c:71: 8b:66:0b:f5:80:e0:98:28:b7:d4:61:35:f3:de:2d:69:f3:47: 25:ac:a6:c7:b6:8e:4b:f5:7f:7c:03:31:35:6d:82:76:c3:70: 7b:a9:46:a0:b8:3e:ce:1c:bb:f6:12:04:cf:61:c2:4b:ac:0f: ba:12:e0:a6:d5:58:10:69:d8:39:b2:d5:d4:be:04:28:1b:91: 5c:88:ad:27:7d:ba:a7:42:64:51:a1:88:27:4c:37:6b:84:90: 3d:f0:1a:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcb5E4FfbUU9UT/PxKSrRvGdfqhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTEyMDUwOTU3MDRaFw0yNTEyMDgxNDE3MDRaMDMxMTAvBgNV BAMTKDg1NjcwRjBFRjUyM0Q0QTU3MkVBOTE2NEFERjcyQTcyQUUxQjVDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfygz6VhZVnjeWe3qg8HI1ImzX ImXulDG3nWOaDqWgdqtCfI0fUvZfYEydRlGdRCkYYY9uULMrkN4eu4J5Eztd6Sny NKQhZMAabzj0If5FCKrFyE3BpiWBQgwgZZEbO0r7mhQzNujBAYu9yw4O/obOVOVT fEUN+5NhuxcHTauEUHbZk7uLFrXrUDjgyaniGMXsx4kkdB3kjfrdm6RSV3mvoq48 MFa0AU0trDFsi509wKMGBzVGcEqfPERc+qdYk28iFNVC+NwkLp10nCW+e/fUzP2m zkLme9VovT5aAgicrSYUzezJ9L0Qw0RlWkJAEFG8USs+vAqQoqU84UTIt88HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWcPDvUj1KVy6pFkrfcqcq4bXLMwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT6DHZ+x9IO5ywjpcIeuHPFiiaNrLlnu3+i HW6CQIv2mn2NtHZ9RCsUA3lGn09yPtLjbhLfj8o7U4ugQy2w9xxwUASHGrtlMUg4 ezWDy97Awi049szPRK+1iLAxN5J/yAMIKRWtpmVimOVsFbpYU+4L0bWj6EsQ/wNU rE1LfhIAaveNpSAUo2dBRBCbtLTJ6jsnry1pQLOFEbXQQwdw9kIccYtmC/WA4Jgo t9RhNfPeLWnzRyWspse2jkv1f3wDMTVtgnbDcHupRqC4Ps4cu/YSBM9hwkusD7oS 4KbVWBBp2Dmy1dS+BCgbkVyIrSd9uqdCZFGhiCdMN2uEkD3wGs8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:24 2025 by rpki-client