This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft File: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json) Hash identifier: K+WT3K3SQrGd6jJgVgFYck2U8paN9DXVkb94CNjtzbY= Subject key identifier: E3:17:5C:73:7F:E9:9B:84:84:2E:29:CF:30:9B:2B:D8:D3:B2:D1:D7 Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 Certificate issuer: /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Certificate serial: 0BFA197C18BF2D0E415BEF36538F582EB9D6D892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft Manifest number: 03AD Signing time: Sat 06 Dec 2025 11:51:25 +0000 Manifest this update: Sat 06 Dec 2025 11:46:25 +0000 Manifest next update: Tue 09 Dec 2025 15:16:25 +0000 Files and hashes: 1: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: yXZc0Wwu+7Brt5Qz+OQII+QCoO99ccEBOn14We5IE88=) 2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: pfyWIoLnfhreu/uz7HLcqt4VfjgUWRecSpJkmtZIEHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fa:19:7c:18:bf:2d:0e:41:5b:ef:36:53:8f:58:2e:b9:d6:d8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Validity Not Before: Dec 6 11:46:25 2025 GMT Not After : Dec 9 15:16:25 2025 GMT Subject: CN=E3175C737FE99B84842E29CF309B2BD8D3B2D1D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:08:16:ed:0a:09:ae:be:ab:f5:b0:fe:9c:b7: e9:37:61:64:43:dd:bc:cd:4b:92:ba:56:7e:a4:4f: a8:e6:9f:ba:40:a4:31:84:51:7b:76:48:48:82:61: 4a:48:e6:f9:f1:08:e2:35:e8:20:f4:fd:67:73:0d: f0:d0:33:87:93:c9:da:5c:35:02:a1:bb:f6:1a:41: 5f:3d:76:b4:39:f6:b6:c0:25:0f:4a:b0:ad:89:86: 2b:66:71:85:c1:81:e6:0e:33:92:00:51:98:1f:e7: 53:4d:cd:40:b1:10:3a:3e:7a:31:a8:32:ce:b2:95: fd:93:1a:b9:b2:64:99:ce:f0:2e:8c:aa:7b:0a:a5: d1:fa:75:9a:38:d2:5f:f9:61:a2:15:ba:3e:ec:ac: 0c:57:65:85:f8:1d:56:15:27:41:5b:e1:20:8e:c3: 26:8f:64:50:f7:42:af:18:bd:9a:4d:ab:61:ee:f3: f6:15:a9:da:93:63:61:b6:f6:9e:0d:a6:1e:3e:d1: 3a:1d:85:75:11:f2:e9:f0:c3:2a:ee:0d:9b:8a:85: 86:3a:3f:bc:5b:8b:1d:4a:05:bd:b3:e9:5b:c5:c5: 92:a8:21:e3:4b:a1:94:1b:99:30:42:ea:74:fd:92: 9a:04:db:e7:50:92:d1:7f:1b:8a:e2:15:72:8a:90: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:5C:73:7F:E9:9B:84:84:2E:29:CF:30:9B:2B:D8:D3:B2:D1:D7 X509v3 Authority Key Identifier: keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:50:6c:67:2a:13:ad:07:fc:b0:10:2a:66:7f:cb:02:1f:be: 33:d6:37:9a:be:45:43:48:a6:aa:cf:92:4e:61:26:a3:88:23: e6:e3:9d:fc:7a:4d:08:cc:77:ec:2c:9e:d1:d0:46:b1:28:0b: 34:f8:d9:5b:d3:17:c5:7a:9b:76:c3:ae:de:d1:1b:bc:ea:61: b8:d3:e7:c5:93:31:30:f3:17:8f:82:e3:cd:3c:37:b1:46:d2: 78:a9:f9:99:28:78:ca:87:f1:88:f1:68:5d:6b:93:6a:a5:d3: 9f:c8:15:a6:44:34:b1:73:b1:68:99:84:02:68:fe:73:50:be: bf:a2:d1:b8:c2:e6:3e:f1:3b:6f:72:cf:4e:c8:11:2b:01:d6: 56:00:ce:f3:ee:11:73:97:05:9b:9c:30:93:9b:b2:5b:4d:d4: c8:92:10:f4:dc:1f:d6:4d:77:87:da:b8:4b:18:d9:2c:22:48: d5:4f:ca:54:39:01:94:8a:52:e8:8f:a6:45:b9:df:21:26:0f: 7e:3f:93:3d:cb:40:5f:eb:39:19:2d:10:5d:ad:88:9e:91:eb: 97:1b:65:b7:97:0f:98:5d:c5:0b:5c:6a:ff:04:49:51:c9:af: e1:32:06:52:8a:53:1a:0b:31:7a:58:12:d5:32:3f:c3:c5:2f: dd:79:5e:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/oZfBi/LQ5BW+82U49YLrnW2JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEy OTg3MUQ5MDAeFw0yNTEyMDYxMTQ2MjVaFw0yNTEyMDkxNTE2MjVaMDMxMTAvBgNV BAMTKEUzMTc1QzczN0ZFOTlCODQ4NDJFMjlDRjMwOUIyQkQ4RDNCMkQxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7CBbtCgmuvqv1sP6ct+k3YWRD 3bzNS5K6Vn6kT6jmn7pApDGEUXt2SEiCYUpI5vnxCOI16CD0/WdzDfDQM4eTydpc NQKhu/YaQV89drQ59rbAJQ9KsK2JhitmcYXBgeYOM5IAUZgf51NNzUCxEDo+ejGo Ms6ylf2TGrmyZJnO8C6MqnsKpdH6dZo40l/5YaIVuj7srAxXZYX4HVYVJ0Fb4SCO wyaPZFD3Qq8YvZpNq2Hu8/YVqdqTY2G29p4Nph4+0TodhXUR8unwwyruDZuKhYY6 P7xbix1KBb2z6VvFxZKoIeNLoZQbmTBC6nT9kpoE2+dQktF/G4riFXKKkM6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xdcc3/pm4SELinPMJsr2NOy0dcwHwYDVR0j BBgwFoAUf9P5LxMkG4AGLMMbDsij0SmHHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDRkNjQyNy0zZjAzLTRkMjEtYjhjYy1iYmZkMmEzZjhjMzMvMC83RkQzRjkyRjEz MjQxQjgwMDYyQ0MzMUIwRUM4QTNEMTI5ODcxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEyOTg3 MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEz RDEyOTg3MUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhQbGcqE60H/LAQKmZ/ywIfvjPWN5q+RUNI pqrPkk5hJqOII+bjnfx6TQjMd+wsntHQRrEoCzT42VvTF8V6m3bDrt7RG7zqYbjT 58WTMTDzF4+C4808N7FG0nip+ZkoeMqH8YjxaF1rk2ql05/IFaZENLFzsWiZhAJo /nNQvr+i0bjC5j7xO29yz07IESsB1lYAzvPuEXOXBZucMJObsltN1MiSEPTcH9ZN d4fauEsY2SwiSNVPylQ5AZSKUuiPpkW53yEmD34/kz3LQF/rORktEF2tiJ6R65cb ZbeXD5hdxQtcav8ESVHJr+EyBlKKUxoLMXpYEtUyP8PFL915Xgo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:18 2025 by rpki-client