This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: UTOOZntYbp6s8d0h4Zd8wDEdq3XdQOmJqx68v98p7wo= Subject key identifier: 1E:1D:3E:C5:E5:E4:CE:C9:C3:71:B8:66:25:69:F2:FF:9E:B6:A0:4E Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 21FB2525650E54339751DC606DC76ABDFFF15075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01F5 Signing time: Sat 06 Dec 2025 15:21:33 +0000 Manifest this update: Sat 06 Dec 2025 15:16:33 +0000 Manifest next update: Wed 10 Dec 2025 00:08:33 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: wf3vYlAFfnQ7loqhyv2ztLVgXtDW+PasAJQ2VjxdpQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fb:25:25:65:0e:54:33:97:51:dc:60:6d:c7:6a:bd:ff:f1:50:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Dec 6 15:16:33 2025 GMT Not After : Dec 10 00:08:33 2025 GMT Subject: CN=1E1D3EC5E5E4CEC9C371B8662569F2FF9EB6A04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:84:52:f3:09:ac:f3:57:2c:03:ab:94:ac: 70:e3:1b:21:82:ba:a8:c1:57:c9:4b:aa:ae:f6:11: 4f:bf:14:4d:05:45:f9:a4:62:bb:ae:cb:68:e1:42: 69:43:79:b1:e6:fb:f7:67:d6:56:cd:98:51:f4:24: 8d:8d:b4:37:c7:aa:33:ad:34:eb:57:05:42:e0:11: cb:28:5f:e2:ff:82:85:6d:73:fd:42:39:11:85:3e: 46:5a:e1:c1:cc:5c:a9:e6:f4:f1:2b:1e:2e:e3:54: af:1f:e4:1c:66:b6:b2:f0:8d:3e:77:db:2d:09:76: eb:34:38:50:c7:d7:7d:95:27:35:2b:e9:69:9d:20: 10:65:ea:64:3e:fe:60:2a:9d:74:eb:7e:d3:6d:0b: 85:37:45:69:f5:12:46:04:53:f6:12:32:ec:8c:4b: 37:f0:e5:85:30:50:fa:6b:9b:04:61:ce:e6:e1:9b: 91:c4:5f:dc:e1:88:8f:d4:9c:3b:9f:64:4f:c8:61: 14:ac:c0:05:32:c2:4b:1d:08:66:18:94:29:b2:cc: f3:36:9f:7c:a3:e3:8c:52:3e:da:b1:e3:03:17:a9: 68:b1:e5:b2:71:e0:f2:eb:69:d5:f9:9e:58:3b:41: e3:63:2b:0a:9c:05:01:5e:6b:fe:77:75:8d:13:5c: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1D:3E:C5:E5:E4:CE:C9:C3:71:B8:66:25:69:F2:FF:9E:B6:A0:4E X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:dd:0f:dd:bd:cd:94:84:3d:7f:a8:1e:78:cb:7e:6a:33:23: 1d:6d:ec:50:d0:3b:10:30:1d:09:32:09:76:39:a3:a3:01:79: c7:ff:ba:f1:e8:ff:b6:53:2c:be:ca:b4:8e:40:bc:5f:9e:5a: 16:71:0d:b7:11:36:e6:ed:6b:2c:4d:fe:51:ec:5c:d6:19:0f: da:3e:31:cd:fd:7f:9e:04:36:d0:49:5b:06:a8:36:82:34:a2: 59:23:d9:31:4c:fb:55:de:46:9d:aa:a3:ea:19:eb:c6:2e:57: d6:a8:dd:3b:a0:6f:18:5f:ba:cd:9d:af:9f:63:b6:05:b0:62: e9:60:08:65:3d:53:78:23:46:aa:9b:4f:18:1f:65:ec:db:a5: ec:5b:f0:8a:e8:cb:9f:a5:64:b4:11:ae:3a:45:8d:2d:56:1c: 80:9f:2b:f0:60:08:0f:37:71:23:06:bd:8a:1b:ee:25:7e:28: 20:2a:7b:c0:c2:de:7a:92:37:14:71:0a:fd:ae:c9:ab:3e:9b: 38:fc:07:9e:60:85:b8:f5:8c:2f:b1:cd:86:c7:f7:87:e5:6c: 37:2e:03:cd:c5:d2:0c:35:13:20:9d:88:c2:74:75:7c:da:95: f1:e0:56:93:4e:e8:ef:d9:9c:d6:fc:83:66:94:b7:11:0d:3a: 5a:61:71:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfslJWUOVDOXUdxgbcdqvf/xUHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTEyMDYxNTE2MzNaFw0yNTEyMTAwMDA4MzNaMDMxMTAvBgNV BAMTKDFFMUQzRUM1RTVFNENFQzlDMzcxQjg2NjI1NjlGMkZGOUVCNkEwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxIRS8wms81csA6uUrHDjGyGC uqjBV8lLqq72EU+/FE0FRfmkYruuy2jhQmlDebHm+/dn1lbNmFH0JI2NtDfHqjOt NOtXBULgEcsoX+L/goVtc/1CORGFPkZa4cHMXKnm9PErHi7jVK8f5BxmtrLwjT53 2y0Jdus0OFDH132VJzUr6WmdIBBl6mQ+/mAqnXTrftNtC4U3RWn1EkYEU/YSMuyM Szfw5YUwUPprmwRhzubhm5HEX9zhiI/UnDufZE/IYRSswAUywksdCGYYlCmyzPM2 n3yj44xSPtqx4wMXqWix5bJx4PLradX5nlg7QeNjKwqcBQFea/53dY0TXO4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHh0+xeXkzsnDcbhmJWny/562oE4wHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTdD929zZSEPX+oHnjLfmozIx1t7FDQOxAw HQkyCXY5o6MBecf/uvHo/7ZTLL7KtI5AvF+eWhZxDbcRNubtayxN/lHsXNYZD9o+ Mc39f54ENtBJWwaoNoI0olkj2TFM+1XeRp2qo+oZ68YuV9ao3Tugbxhfus2dr59j tgWwYulgCGU9U3gjRqqbTxgfZezbpexb8Iroy5+lZLQRrjpFjS1WHICfK/BgCA83 cSMGvYob7iV+KCAqe8DC3nqSNxRxCv2uyas+mzj8B55ghbj1jC+xzYbH94flbDcu A83F0gw1EyCdiMJ0dXzalfHgVpNO6O/ZnNb8g2aUtxENOlphcew= -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:57 2025 by rpki-client