This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft File: 7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json) Hash identifier: 24EVY/zlQDIKhVtII8GQ/GVaMlUoXTEKAocB/qkdtfg= Subject key identifier: B1:FB:2C:0E:98:97:0D:D7:49:7F:61:C9:2C:97:50:99:F0:2A:CF:30 Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D Certificate issuer: /CN=7B04CE58A1370241E93EF01F597DD18A039D613D Certificate serial: 08E0AEA28414ADBFF242CF7350984D8A244A22BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft Manifest number: 01BB Signing time: Thu 04 Dec 2025 16:00:38 +0000 Manifest this update: Thu 04 Dec 2025 15:55:38 +0000 Manifest next update: Mon 08 Dec 2025 01:23:38 +0000 Files and hashes: 1: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: BVsk6AHIvUUfWZ+4++VqM/4m6oLrmg+QHEXYFO+Hiks=) 2: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: KpZGTHHITDkYOGDokkGhFBTqUppZ/cNFbsmbPmwF8Cg=) 3: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: k3gbitoF5Mo2gfFM3pN+e95AcRetG+39jXXTui7HqQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:ae:a2:84:14:ad:bf:f2:42:cf:73:50:98:4d:8a:24:4a:22:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D Validity Not Before: Dec 4 15:55:38 2025 GMT Not After : Dec 8 01:23:38 2025 GMT Subject: CN=B1FB2C0E98970DD7497F61C92C975099F02ACF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:f2:69:19:66:0e:bb:63:b2:e2:05:b8:3b: de:c1:99:61:9c:bf:45:86:d3:4b:84:a7:00:63:04: e1:8d:9d:a6:45:a0:20:f7:5a:4f:17:80:c9:97:e1: b5:95:e8:ed:d1:c9:90:cd:cc:b8:55:f0:cc:54:d3: ef:ea:d7:b7:85:ca:58:f1:34:85:7b:e9:1e:8f:ac: df:b4:0b:96:93:8a:c1:e8:91:5c:da:76:4d:60:b6: ed:bc:7b:5f:d5:ec:fb:b0:36:8b:da:4c:0b:48:71: 5d:87:67:02:22:83:16:16:26:a1:9b:3c:84:f4:c8: ed:8d:50:5d:6e:1c:21:78:b1:ee:e8:7e:15:ea:4f: 44:9e:04:7c:ef:c0:40:27:47:d9:6f:5d:42:32:3b: b3:05:e2:c7:2d:bc:16:ad:e6:15:18:28:b1:2f:f6: 3b:05:b4:94:9a:30:de:1d:fc:22:9b:37:9f:29:11: 8c:ab:79:48:e3:af:aa:01:db:42:89:ec:4a:a0:e9: b3:f3:8a:e4:6d:ee:50:b6:69:f8:b4:8d:52:2a:48: a4:5b:e5:24:09:bd:d8:4a:93:9a:f6:f4:e2:6a:e4: ff:dc:be:d4:be:ce:fe:dd:56:8a:e3:af:e7:45:78: a7:be:59:db:b8:d2:65:e4:fe:a0:ea:dc:f7:6a:58: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:2C:0E:98:97:0D:D7:49:7F:61:C9:2C:97:50:99:F0:2A:CF:30 X509v3 Authority Key Identifier: keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b4:6b:a8:1f:d1:f0:58:32:92:fd:8b:69:21:a7:e2:cd:4d: c5:66:ec:66:dc:33:cc:9b:d9:58:61:0f:fc:1d:d7:03:2d:98: b5:d3:65:04:d3:a0:cb:b2:ac:85:d7:f2:ad:31:9c:06:62:8d: d4:e9:49:58:92:fe:8f:74:4f:2f:3c:f1:99:1f:57:7b:c0:33: 2d:4d:db:e0:7c:68:af:ff:95:09:eb:5e:ab:d3:12:da:00:16: 1a:15:d9:37:f5:c5:db:27:3b:7e:3f:60:49:c7:a2:3f:f4:9e: 5b:6c:50:cc:e5:e6:3f:f8:29:ed:38:89:d9:bc:4d:1b:de:f2: e7:a3:f3:e2:10:a9:01:14:ae:0f:30:8f:ff:13:73:0e:0a:44: 5d:60:61:49:df:6e:e8:aa:da:bc:49:3e:e1:ec:15:3d:b6:75: fb:86:2f:0b:39:4d:3f:de:a5:22:d0:e9:e8:89:fc:b8:f3:aa: ae:28:23:10:00:8d:94:dc:75:97:8a:b8:62:08:9a:08:63:4c: c2:93:b2:60:dc:f6:5b:6f:cc:19:c1:7d:ff:ce:15:42:d0:93: 46:45:43:5b:70:3d:7f:cd:4e:a4:10:61:28:09:2a:ed:b7:cf: 00:c7:63:f8:bb:42:80:e6:e4:79:f4:7b:19:c4:36:c3:c8:4b: 09:08:2f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOCuooQUrb/yQs9zUJhNiiRKIr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw MzlENjEzRDAeFw0yNTEyMDQxNTU1MzhaFw0yNTEyMDgwMTIzMzhaMDMxMTAvBgNV BAMTKEIxRkIyQzBFOTg5NzBERDc0OTdGNjFDOTJDOTc1MDk5RjAyQUNGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk/JpGWYOu2Oy4gW4O97BmWGc v0WG00uEpwBjBOGNnaZFoCD3Wk8XgMmX4bWV6O3RyZDNzLhV8MxU0+/q17eFyljx NIV76R6PrN+0C5aTisHokVzadk1gtu28e1/V7PuwNovaTAtIcV2HZwIigxYWJqGb PIT0yO2NUF1uHCF4se7ofhXqT0SeBHzvwEAnR9lvXUIyO7MF4sctvBat5hUYKLEv 9jsFtJSaMN4d/CKbN58pEYyreUjjr6oB20KJ7Eqg6bPziuRt7lC2afi0jVIqSKRb 5SQJvdhKk5r29OJq5P/cvtS+zv7dVorjr+dFeKe+Wdu40mXk/qDq3PdqWEs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfssDpiXDddJf2HJLJdQmfAqzzAwHwYDVR0j BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE NjEzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx NjUtZDE5NGVlZDg5ZTZiLzAvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQx OEEwMzlENjEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu0a6gf0fBYMpL9i2khp+LNTcVm7GbcM8yb 2VhhD/wd1wMtmLXTZQTToMuyrIXX8q0xnAZijdTpSViS/o90Ty888ZkfV3vAMy1N 2+B8aK//lQnrXqvTEtoAFhoV2Tf1xdsnO34/YEnHoj/0nltsUMzl5j/4Ke04idm8 TRve8uej8+IQqQEUrg8wj/8Tcw4KRF1gYUnfbuiq2rxJPuHsFT22dfuGLws5TT/e pSLQ6eiJ/Ljzqq4oIxAAjZTcdZeKuGIImghjTMKTsmDc9ltvzBnBff/OFULQk0ZF Q1twPX/NTqQQYSgJKu23zwDHY/i7QoDm5Hn0exnENsPISwkILyY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:39 2025 by rpki-client